[PATCH 5/6] UBUNTU: [Config] Common security and kernel hacking options.
Brad Figg
brad.figg at canonical.com
Mon Aug 24 15:21:47 UTC 2009
Signed-off-by: Brad Figg <brad.figg at canonical.com>
---
debian.mvl-dove/config/config.common.ubuntu | 78 ++++++--------------------
1 files changed, 18 insertions(+), 60 deletions(-)
diff --git a/debian.mvl-dove/config/config.common.ubuntu b/debian.mvl-dove/config/config.common.ubuntu
index c8fab63..b638708 100644
--- a/debian.mvl-dove/config/config.common.ubuntu
+++ b/debian.mvl-dove/config/config.common.ubuntu
@@ -97,7 +97,7 @@ CONFIG_ARM=y
# CONFIG_ARM_ERRATA_460075 is not set
CONFIG_ARM_THUMB=y
# CONFIG_ARM_THUMBEE is not set
-CONFIG_ARM_UNWIND=y
+# CONFIG_ARM_UNWIND is not set
# CONFIG_ARPD is not set
CONFIG_ASK_IP_FIB_HASH=y
# CONFIG_ASYNC_TX_DMA is not set
@@ -166,7 +166,6 @@ CONFIG_BACKLIGHT_CLASS_DEVICE=y
CONFIG_BACKLIGHT_DOVE=y
CONFIG_BACKLIGHT_GENERIC=y
CONFIG_BACKLIGHT_LCD_SUPPORT=y
-# CONFIG_BACKTRACE_SELF_TEST is not set
CONFIG_BASE_FULL=y
CONFIG_BASE_SMALL=0
CONFIG_BATTERY_BQ2084=y
@@ -190,8 +189,6 @@ CONFIG_BLK_DEV=y
# CONFIG_BLK_DEV_3W_XXXX_RAID is not set
# CONFIG_BLK_DEV_BSG is not set
# CONFIG_BLK_DEV_COMPCACHE is not set
-# CONFIG_BLK_DEV_COMPCACHE_DEBUG is not set
-# CONFIG_BLK_DEV_COMPCACHE_STATS is not set
# CONFIG_BLK_DEV_COW_COMMON is not set
# CONFIG_BLK_DEV_DAC960 is not set
# CONFIG_BLK_DEV_INITRD is not set
@@ -212,11 +209,6 @@ CONFIG_BLK_DEV_SR=m
CONFIG_BLOCK=y
# CONFIG_BNX2 is not set
# CONFIG_BONDING is not set
-# CONFIG_BOOTPARAM_HUNG_TASK_PANIC is not set
-CONFIG_BOOTPARAM_HUNG_TASK_PANIC_VALUE=0
-# CONFIG_BOOTPARAM_SOFTLOCKUP_PANIC is not set
-CONFIG_BOOTPARAM_SOFTLOCKUP_PANIC_VALUE=0
-# CONFIG_BOOT_PRINTK_DELAY is not set
# CONFIG_BOOT_TRACER is not set
CONFIG_BPQETHER=m
CONFIG_BRANCH_PROFILE_NONE=y
@@ -437,35 +429,11 @@ CONFIG_CRYPTO_ZLIB=m
CONFIG_CUSE=m
# CONFIG_DAVICOM_PHY is not set
CONFIG_DCB=y
-# CONFIG_DEBUG_BLOCK_EXT_DEVT is not set
# CONFIG_DEBUG_BUGVERBOSE is not set
-# CONFIG_DEBUG_DEVRES is not set
-# CONFIG_DEBUG_DRIVER is not set
-CONFIG_DEBUG_ERRORS=y
CONFIG_DEBUG_FS=y
-# CONFIG_DEBUG_GPIO is not set
-CONFIG_DEBUG_INFO=y
-CONFIG_DEBUG_KERNEL=y
-# CONFIG_DEBUG_KMEMLEAK is not set
-# CONFIG_DEBUG_KOBJECT is not set
-# CONFIG_DEBUG_LIST is not set
-# CONFIG_DEBUG_LL is not set
-# CONFIG_DEBUG_LOCKING_API_SELFTESTS is not set
-# CONFIG_DEBUG_LOCK_ALLOC is not set
+# CONFIG_DEBUG_KERNEL is not set
# CONFIG_DEBUG_MEMORY_INIT is not set
-# CONFIG_DEBUG_MUTEXES is not set
-# CONFIG_DEBUG_NOTIFIERS is not set
-# CONFIG_DEBUG_OBJECTS is not set
-# CONFIG_DEBUG_RT_MUTEXES is not set
-# CONFIG_DEBUG_SG is not set
-# CONFIG_DEBUG_SHIRQ is not set
-# CONFIG_DEBUG_SLAB is not set
-# CONFIG_DEBUG_SPINLOCK is not set
-# CONFIG_DEBUG_SPINLOCK_SLEEP is not set
-# CONFIG_DEBUG_STACK_USAGE is not set
-CONFIG_DEBUG_USER=y
-# CONFIG_DEBUG_VM is not set
-# CONFIG_DEBUG_WRITECOUNT is not set
+# CONFIG_DEBUG_USER is not set
CONFIG_DECNET=m
CONFIG_DECNET_NF_GRABULATOR=m
# CONFIG_DECNET_ROUTER is not set
@@ -483,8 +451,6 @@ CONFIG_DEFAULT_TCP_CONG="cubic"
# CONFIG_DEFAULT_VEGAS is not set
# CONFIG_DEFAULT_WESTWOOD is not set
CONFIG_DEFCONFIG_LIST="/lib/modules/$UNAME_RELEASE/.config"
-CONFIG_DETECT_HUNG_TASK=y
-CONFIG_DETECT_SOFTLOCKUP=y
# CONFIG_DEVKMEM is not set
CONFIG_DEVPORT=y
# CONFIG_DEVPTS_MULTIPLE_INSTANCES is not set
@@ -552,7 +518,6 @@ CONFIG_EXTRA_FIRMWARE=""
CONFIG_FAT_DEFAULT_CODEPAGE=437
CONFIG_FAT_DEFAULT_IOCHARSET="iso8859-1"
CONFIG_FAT_FS=y
-# CONFIG_FAULT_INJECTION is not set
CONFIG_FB=y
# CONFIG_FB_3DFX is not set
# CONFIG_FB_ARK is not set
@@ -638,6 +603,7 @@ CONFIG_FORCE_MAX_ZONEORDER=12
CONFIG_FRAMEBUFFER_CONSOLE=y
# CONFIG_FRAMEBUFFER_CONSOLE_DETECT_PRIMARY is not set
# CONFIG_FRAMEBUFFER_CONSOLE_ROTATION is not set
+CONFIG_FRAME_POINTER=y
CONFIG_FRAME_WARN=1024
CONFIG_FREEZER=y
# CONFIG_FSAM7400 is not set
@@ -864,6 +830,7 @@ CONFIG_IP6_NF_MATCH_OPTS=m
CONFIG_IP6_NF_MATCH_RT=m
CONFIG_IP6_NF_QUEUE=m
CONFIG_IP6_NF_RAW=m
+# CONFIG_IP6_NF_SECURITY is not set
CONFIG_IP6_NF_TARGET_HL=m
CONFIG_IP6_NF_TARGET_LOG=m
CONFIG_IP6_NF_TARGET_REJECT=m
@@ -892,7 +859,6 @@ CONFIG_IP_DCCP=m
CONFIG_IP_DCCP_CCID3=y
# CONFIG_IP_DCCP_CCID3_DEBUG is not set
CONFIG_IP_DCCP_CCID3_RTO=100
-# CONFIG_IP_DCCP_DEBUG is not set
CONFIG_IP_DCCP_TFRC_LIB=y
CONFIG_IP_FIB_HASH=y
# CONFIG_IP_FIB_TRIE is not set
@@ -911,6 +877,7 @@ CONFIG_IP_NF_MATCH_ECN=m
CONFIG_IP_NF_MATCH_TTL=m
CONFIG_IP_NF_QUEUE=m
CONFIG_IP_NF_RAW=m
+# CONFIG_IP_NF_SECURITY is not set
CONFIG_IP_NF_TARGET_CLUSTERIP=m
CONFIG_IP_NF_TARGET_ECN=m
CONFIG_IP_NF_TARGET_LOG=m
@@ -991,7 +958,6 @@ CONFIG_JFS_STATISTICS=y
# CONFIG_JME is not set
CONFIG_JOLIET=y
CONFIG_KALLSYMS=y
-# CONFIG_KALLSYMS_ALL is not set
# CONFIG_KALLSYMS_EXTRA_PASS is not set
CONFIG_KARMA_PARTITION=y
# CONFIG_KEXEC is not set
@@ -1005,11 +971,9 @@ CONFIG_KEYBOARD_GPIO=y
# CONFIG_KEYBOARD_XTKBD is not set
CONFIG_KEYS=y
# CONFIG_KEYS_DEBUG_PROC_KEYS is not set
-# CONFIG_KGDB is not set
CONFIG_KINGSUN_DONGLE=m
# CONFIG_KMEMTRACE is not set
CONFIG_KPROBES=y
-# CONFIG_KPROBES_SANITY_TEST is not set
CONFIG_KRETPROBES=y
# CONFIG_KS8842 is not set
# CONFIG_KS8851 is not set
@@ -1062,7 +1026,6 @@ CONFIG_LIRC_SIR=m
CONFIG_LIRC_STREAMZAP=m
CONFIG_LIRC_TTUSBIR=m
CONFIG_LITELINK_DONGLE=m
-# CONFIG_LKDTM is not set
CONFIG_LLC=m
CONFIG_LLC2=m
CONFIG_LMPCM_USB=m
@@ -1071,7 +1034,6 @@ CONFIG_LOCALVERSION=""
CONFIG_LOCKD=y
CONFIG_LOCKDEP_SUPPORT=y
CONFIG_LOCKD_V4=y
-# CONFIG_LOCK_STAT is not set
CONFIG_LOGO=y
CONFIG_LOGO_LINUX_CLUT224=y
# CONFIG_LOGO_LINUX_MONO is not set
@@ -1102,7 +1064,7 @@ CONFIG_MACH_DOVE_DB_Z0=y
# CONFIG_MACH_DOVE_RD_AVNG_Z0 is not set
# CONFIG_MACVLAN is not set
CONFIG_MAC_PARTITION=y
-CONFIG_MAGIC_SYSRQ=y
+# CONFIG_MAGIC_SYSRQ is not set
CONFIG_MARKERS=y
# CONFIG_MARVELL_PHY is not set
CONFIG_MAX1535=y
@@ -1362,6 +1324,7 @@ CONFIG_NETFILTER_XT_TARGET_SECMARK=m
CONFIG_NETFILTER_XT_TARGET_TCPMSS=m
# CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set
# CONFIG_NETFILTER_XT_TARGET_TRACE is not set
+# CONFIG_NETLABEL is not set
# CONFIG_NETPOLL is not set
CONFIG_NETROM=m
CONFIG_NETWORK_FILESYSTEMS=y
@@ -1388,7 +1351,6 @@ CONFIG_NET_CLS_RSVP=m
CONFIG_NET_CLS_RSVP6=m
CONFIG_NET_CLS_TCINDEX=m
# CONFIG_NET_CLS_U32 is not set
-# CONFIG_NET_DCCPPROBE is not set
# CONFIG_NET_DMA is not set
# CONFIG_NET_DROP_MONITOR is not set
CONFIG_NET_DSA=y
@@ -1553,7 +1515,6 @@ CONFIG_OCF_EP80579=m
CONFIG_OCF_HIFN=m
# CONFIG_OCF_HIFNHIPP is not set
# CONFIG_OCF_IXP4XX is not set
-# CONFIG_OCF_IXP4XX_SHA1_MD5 is not set
CONFIG_OCF_OCF=y
CONFIG_OCF_OCFNULL=m
# CONFIG_OCF_RANDOMHARVEST is not set
@@ -1573,7 +1534,6 @@ CONFIG_PACKET=y
CONFIG_PACKET_MMAP=y
CONFIG_PAGEFLAGS_EXTENDED=y
CONFIG_PAGE_OFFSET=0xC0000000
-# CONFIG_PAGE_POISONING is not set
# CONFIG_PARPORT is not set
CONFIG_PARTITION_ADVANCED=y
# CONFIG_PATA_ALI is not set
@@ -1618,7 +1578,6 @@ CONFIG_PARTITION_ADVANCED=y
# CONFIG_PCCARD is not set
# CONFIG_PCF8575 is not set
CONFIG_PCI=y
-# CONFIG_PCI_DEBUG is not set
# CONFIG_PCI_IOV is not set
CONFIG_PCI_LEGACY=y
CONFIG_PCI_QUIRKS=y
@@ -1654,7 +1613,6 @@ CONFIG_PROC_SYSCTL=y
# CONFIG_PROFILE_ALL_BRANCHES is not set
# CONFIG_PROFILE_ANNOTATED_BRANCHES is not set
CONFIG_PROFILING=y
-# CONFIG_PROVE_LOCKING is not set
CONFIG_QFMT_V1=m
CONFIG_QFMT_V2=m
# CONFIG_QLA3XXX is not set
@@ -1670,7 +1628,6 @@ CONFIG_QUOTA_TREE=m
# CONFIG_RAID_ATTRS is not set
# CONFIG_RAW_DRIVER is not set
# CONFIG_RCU_CPU_STALL_DETECTOR is not set
-# CONFIG_RCU_TORTURE_TEST is not set
# CONFIG_REALTEK_PHY is not set
# CONFIG_REGULATOR is not set
# CONFIG_REISERFS_CHECK is not set
@@ -1742,7 +1699,6 @@ CONFIG_RTC_LIB=y
# CONFIG_RTL8180 is not set
# CONFIG_RTL8187 is not set
CONFIG_RT_MUTEXES=y
-# CONFIG_RT_MUTEX_TESTER is not set
CONFIG_RWSEM_GENERIC_SPINLOCK=y
CONFIG_RXKAD=m
# CONFIG_SAMPLES is not set
@@ -1765,8 +1721,6 @@ CONFIG_SATA_PMP=y
# CONFIG_SATA_VIA is not set
# CONFIG_SATA_VITESSE is not set
# CONFIG_SC92031 is not set
-# CONFIG_SCHEDSTATS is not set
-# CONFIG_SCHED_DEBUG is not set
# CONFIG_SCHED_TRACER is not set
CONFIG_SCSI=y
# CONFIG_SCSI_3W_9XXX is not set
@@ -1825,9 +1779,16 @@ CONFIG_SCTP_HMAC_MD5=y
# CONFIG_SCTP_HMAC_NONE is not set
# CONFIG_SCTP_HMAC_SHA1 is not set
# CONFIG_SDIO_UART is not set
-# CONFIG_SECURITY is not set
-# CONFIG_SECURITYFS is not set
-# CONFIG_SECURITY_FILE_CAPABILITIES is not set
+CONFIG_SECURITY=y
+CONFIG_SECURITYFS=y
+# CONFIG_SECURITY_APPARMOR is not set
+CONFIG_SECURITY_DEFAULT="apparmor"
+CONFIG_SECURITY_FILE_CAPABILITIES=y
+CONFIG_SECURITY_NETWORK=y
+# CONFIG_SECURITY_NETWORK_XFRM is not set
+CONFIG_SECURITY_PATH=y
+# CONFIG_SECURITY_ROOTPLUG is not set
+CONFIG_SECURITY_TOMOYO=y
CONFIG_SELECT_MEMORY_MODEL=y
# CONFIG_SENSORS_AD7414 is not set
# CONFIG_SENSORS_AD7418 is not set
@@ -2056,7 +2017,6 @@ CONFIG_SOUND_PRIME=y
# CONFIG_SPARSEMEM_MANUAL is not set
CONFIG_SPI=y
# CONFIG_SPI_BITBANG is not set
-# CONFIG_SPI_DEBUG is not set
# CONFIG_SPI_GPIO is not set
CONFIG_SPI_MASTER=y
CONFIG_SPI_MV=y
@@ -2124,7 +2084,6 @@ CONFIG_TEXTSEARCH_KMP=m
CONFIG_TICK_ONESHOT=y
# CONFIG_TIGON3 is not set
CONFIG_TIMERFD=y
-CONFIG_TIMER_STATS=y
CONFIG_TIPC=m
# CONFIG_TIPC_ADVANCED is not set
# CONFIG_TIPC_DEBUG is not set
@@ -2230,7 +2189,6 @@ CONFIG_USB_GADGET=y
# CONFIG_USB_GADGET_AT91 is not set
# CONFIG_USB_GADGET_ATMEL_USBA is not set
# CONFIG_USB_GADGET_CI13XXX is not set
-# CONFIG_USB_GADGET_DEBUG is not set
# CONFIG_USB_GADGET_DEBUG_FILES is not set
# CONFIG_USB_GADGET_DEBUG_FS is not set
CONFIG_USB_GADGET_DUALSPEED=y
--
1.6.0.4
More information about the kernel-team
mailing list