diff --git a/device/main/linux-postmarketos-stable/0004-libbpf-Fix-UAF-in-strset__add_str.patch b/device/main/linux-postmarketos-stable/0004-libbpf-Fix-UAF-in-strset__add_str.patch new file mode 100644 index 000000000..1fc18c672 --- /dev/null +++ b/device/main/linux-postmarketos-stable/0004-libbpf-Fix-UAF-in-strset__add_str.patch @@ -0,0 +1,161 @@ +From b23705e6afb6ac4ae6d220dcb35975698667dd76 Mon Sep 17 00:00:00 2001 +From: Carlos Llamas +Date: Sat, 23 May 2026 16:27:21 +0000 +Subject: [PATCH] libbpf: Fix UAF in strset__add_str() + +strset_add_str_mem() might reallocate the strset data buffer in order to +accommodate the provided string 's'. However, if 's' points to a string +already present in the buffer, it becomes dangling after the realloc. +This leads to a use-after-free when attempting to memcpy() the string +into the new buffer. + +One scenario that triggers this problematic path is when resolve_btfids +attempts to patch kfunc prototypes using existing BTF parameter names: + + | resolve_btfids: function bpf_list_push_back_impl already exists in BTF + | Segmentation fault (core dumped) + +Compiling resolve_btfids with fsanitize=address generates a detailed +report of the UAF: + + | ================================================================= + | ERROR: AddressSanitizer: heap-use-after-free on address 0x7f4c4a500bd4 + | ==1507892==ERROR: AddressSanitizer: heap-use-after-free on address 0x7f4c4a500bd4 at pc 0x55d25155a2a8 bp 0x7ffcef879060 sp 0x7ffcef878818 + | READ of size 5 at 0x7f4c4a500bd4 thread T0 + | #0 0x55d25155a2a7 in memcpy (tools/bpf/resolve_btfids/resolve_btfids+0xcf2a7) + | #1 0x55d2515d708e in strset__add_str tools/lib/bpf/strset.c:162:2 + | #2 0x55d2515c730b in btf__add_str tools/lib/bpf/btf.c:2109:8 + | #3 0x55d2515c9020 in btf__add_func_param tools/lib/bpf/btf.c:3108:14 + | #4 0x55d25159f0b5 in process_kfunc_with_implicit_args tools/bpf/resolve_btfids/main.c:1196:9 + | #5 0x55d25159e004 in btf2btf tools/bpf/resolve_btfids/main.c:1229:9 + | #6 0x55d25159cee7 in main tools/bpf/resolve_btfids/main.c:1535:6 + | #7 0x7f4c78e29f76 in __libc_start_call_main csu/../sysdeps/nptl/libc_start_call_main.h:58:16 + | #8 0x7f4c78e2a026 in __libc_start_main csu/../csu/libc-start.c:360:3 + | #9 0x55d2514bb860 in _start (tools/bpf/resolve_btfids/resolve_btfids+0x30860) + | + | 0x7f4c4a500bd4 is located 13268 bytes inside of 2829000-byte region [0x7f4c4a4fd800,0x7f4c4a7b02c8) + | freed by thread T0 here: + | #0 0x55d25155b700 in realloc (tools/bpf/resolve_btfids/resolve_btfids+0xd0700) + | #1 0x55d2515c426c in libbpf_reallocarray tools/lib/bpf/./libbpf_internal.h:220:9 + | #2 0x55d2515c426c in libbpf_add_mem tools/lib/bpf/btf.c:224:13 + | + | previously allocated by thread T0 here: + | #0 0x55d25155b2e3 in malloc (tools/bpf/resolve_btfids/resolve_btfids+0xd02e3) + | #1 0x55d2515d6e7d in strset__new tools/lib/bpf/strset.c:58:20 + +While resolve_btfids could be refactored to avoid this call path, let's +instead fix this issue at the source in strset__add_str() and avoid +similar scenarios. + +Let's check if set->strs_data was reallocated and whether 's' points to +an internal string within the old strset buffer. In such case, 's' is +reconstructed to point to the new buffer. + +While already here, also fix strset__find_str() which suffers from the +same problem by factoring out the common operations into a new helper +function strset_str_append(). + +Fixes: 90d76d3ececc ("libbpf: Extract internal set-of-strings datastructure APIs") +Suggested-by: Andrii Nakryiko +Suggested-by: Mykyta Yatsenko +Signed-off-by: Carlos Llamas +Signed-off-by: Andrii Nakryiko +Link: https://lore.kernel.org/bpf/20260523162722.2718940-1-cmllamas@google.com +--- + tools/lib/bpf/strset.c | 62 ++++++++++++++++++++++++++++-------------- + 1 file changed, 41 insertions(+), 21 deletions(-) + +diff --git a/tools/lib/bpf/strset.c b/tools/lib/bpf/strset.c +index 2464bcbd04e037..ace73c6b3d62b4 100644 +--- a/tools/lib/bpf/strset.c ++++ b/tools/lib/bpf/strset.c +@@ -107,6 +107,41 @@ static void *strset_add_str_mem(struct strset *set, size_t add_sz) + set->strs_data_len, set->strs_data_max_len, add_sz); + } + ++static long strset_str_append(struct strset *set, const char *s) ++{ ++ uintptr_t old_data = (uintptr_t)set->strs_data; ++ size_t old_data_len = set->strs_data_len; ++ uintptr_t old_s = (uintptr_t)s; ++ long len = strlen(s) + 1; ++ void *p; ++ ++ /* ++ * Hashmap keys are always offsets within set->strs_data, so to even ++ * look up some string from the "outside", we need to first append it ++ * at the end, so that it can be addressed with an offset. Luckily, ++ * until set->strs_data_len is incremented, that string is just a piece ++ * of garbage for the rest of the code, so no harm, no foul. On the ++ * other hand, if the string is unique, it's already appended and ++ * ready to be used, only a simple set->strs_data_len increment away. ++ */ ++ p = strset_add_str_mem(set, len); ++ if (!p) ++ return -ENOMEM; ++ ++ /* ++ * The set->strs_data might have reallocated and if 's' pointed ++ * to an internal string within the old buffer, then it became ++ * dangling and needs to be reconstructed before the copy. ++ */ ++ if (old_data && old_data != (uintptr_t)set->strs_data && ++ old_s >= old_data && old_s < old_data + old_data_len) ++ s = set->strs_data + (old_s - old_data); ++ ++ memcpy(p, s, len); ++ ++ return len; ++} ++ + /* Find string offset that corresponds to a given string *s*. + * Returns: + * - >0 offset into string data, if string is found; +@@ -116,16 +151,12 @@ static void *strset_add_str_mem(struct strset *set, size_t add_sz) + int strset__find_str(struct strset *set, const char *s) + { + long old_off, new_off, len; +- void *p; + +- /* see strset__add_str() for why we do this */ +- len = strlen(s) + 1; +- p = strset_add_str_mem(set, len); +- if (!p) +- return -ENOMEM; ++ len = strset_str_append(set, s); ++ if (len < 0) ++ return len; + + new_off = set->strs_data_len; +- memcpy(p, s, len); + + if (hashmap__find(set->strs_hash, new_off, &old_off)) + return old_off; +@@ -142,24 +173,13 @@ int strset__find_str(struct strset *set, const char *s) + int strset__add_str(struct strset *set, const char *s) + { + long old_off, new_off, len; +- void *p; + int err; + +- /* Hashmap keys are always offsets within set->strs_data, so to even +- * look up some string from the "outside", we need to first append it +- * at the end, so that it can be addressed with an offset. Luckily, +- * until set->strs_data_len is incremented, that string is just a piece +- * of garbage for the rest of the code, so no harm, no foul. On the +- * other hand, if the string is unique, it's already appended and +- * ready to be used, only a simple set->strs_data_len increment away. +- */ +- len = strlen(s) + 1; +- p = strset_add_str_mem(set, len); +- if (!p) +- return -ENOMEM; ++ len = strset_str_append(set, s); ++ if (len < 0) ++ return len; + + new_off = set->strs_data_len; +- memcpy(p, s, len); + + /* Now attempt to add the string, but only if the string with the same + * contents doesn't exist already (HASHMAP_ADD strategy). If such diff --git a/device/main/linux-postmarketos-stable/0004-resolve_btfids-preserve-tag-and-parameter-names-when.patch b/device/main/linux-postmarketos-stable/0004-resolve_btfids-preserve-tag-and-parameter-names-when.patch deleted file mode 120000 index 809bd24b6..000000000 --- a/device/main/linux-postmarketos-stable/0004-resolve_btfids-preserve-tag-and-parameter-names-when.patch +++ /dev/null @@ -1 +0,0 @@ -../../.shared-patches/linux/linux7.0-resolve_btfids-preserve-tag-and-parameter-names-when.patch \ No newline at end of file diff --git a/device/main/linux-postmarketos-stable/APKBUILD b/device/main/linux-postmarketos-stable/APKBUILD index 592c6b3ca..38f136cf0 100644 --- a/device/main/linux-postmarketos-stable/APKBUILD +++ b/device/main/linux-postmarketos-stable/APKBUILD @@ -1,7 +1,7 @@ # Co-Maintainer: Achill Gilgenast maintainer="Aelin " pkgname=linux-postmarketos-stable -pkgver=7.1.3 +pkgver=7.1.4 pkgrel=0 _kver=${pkgver%.*} pkgdesc="Stable Kernel" @@ -19,6 +19,7 @@ options=" pmb:generic-kernel pmb:kconfigcheck-community pmb:kconfigcheck-immutable + pmb:kconfigcheck-lockdown pmb:kconfigcheck-rust pmb:kconfigcheck-selinux pmb:kconfigcheck-uefi @@ -63,7 +64,7 @@ source=" 0002-WIP-arch-powerpc-boot-Use-z-notext-for-pseries-image.patch 0003-WIP-arch-powerpc-boot-Add-z-norelro.patch - 0004-resolve_btfids-preserve-tag-and-parameter-names-when.patch + 0004-libbpf-Fix-UAF-in-strset__add_str.patch config-stable.aarch64 config-stable.armv7 @@ -98,7 +99,7 @@ prepare() { build() { unset LDFLAGS - make ARCH="$_carch" LLVM=1 \ + make ARCH="$_carch" LLVM=1 HOSTLDFLAGS="-fuse-ld=lld" \ KBUILD_BUILD_VERSION="$((pkgrel + 1 ))-$_flavor" } @@ -120,21 +121,21 @@ package() { rm -f "$pkgdir"/usr/lib/modules/*/build "$pkgdir"/usr/lib/modules/*/source install -D "$builddir"/include/config/kernel.release \ - "$pkgdir"/usr/share/kernel/$_flavor/kernel.release + "$pkgdir"/usr/share/kernel/"$_flavor"/kernel.release } sha512sums=" -0dc615d978425ae4a5cc57d61b81a6b648a30b3d7cde0a3efb1244660ef572bb2f3d2292642346194fcb549a22cde2d2b9af6fe237b22b8eefc1ca905f6e14cb patch-7.1.3.patch.xz +43d6d33de8834ed65fedb0cc2a19d18faf94f60f1ef5774d7433a2a4d35dcf565762fd38814179f14d0fa639e902021246a32cbc34af3124470ef28f1fc4f048 patch-7.1.4.patch.xz d4d9c45261813559341c67ea53d4a47f5a04d1ad15e3c2b8222a09b5483380d2bfd31b8c675e144db2eb91f560d6cb28f66187a5ea4f24f6dfb82a4ad48064cc linux-7.1.tar.xz 1f11df2480e9f691573283597160b4c806e492cdca4825f3acb3afb70bde43abfab487bcde1f5553b431a702a0039479d041b0ce7859970e706b5a51d2ad8fb0 0001-WIP-arch-powerpc-boot-Support-LLVM-1-in-wrapper-scri.patch 26521a9c9ea769534095dc4e306babadc8bcbaf03d7faa523c377e41ba0f742ecd0490fa27791d895f729c3ae8845297dca59b4db2475e7f078e689c447430bc 0002-WIP-arch-powerpc-boot-Use-z-notext-for-pseries-image.patch 302c20c85559fc9b3b2420ed25be1bfbb76c87f2a470e4141c32e9542cf1f5c6b3b5a7847231a3eaa0f6bc0e5942d0c1599e807175dcf5e63469704c3d6adde3 0003-WIP-arch-powerpc-boot-Add-z-norelro.patch -4e705e038a91466a86fc5317b0028c2220aa1e7a4807e5d86db2f9ac815a927c59666a8f21ed50c4632147d3ce183d8042378a76f95341dbcd3db1047faf39e3 0004-resolve_btfids-preserve-tag-and-parameter-names-when.patch -1e7ce8a8182d4bbf62608a82e2a24732c4721a4542c2b0e3f171fd9dc190234c9601ec7c872512a09acd56d5e118eb6a99c7ba1b848b45df3aaec537ab21da0f config-stable.aarch64 -5452624a2926d83e1d8e9444d040a034889fd9a77c3af55572747a61ebeed9167b84f9d7519d5f7f2698a2760d1bddc6269d807638734e624b9d5a219e10f73b config-stable.armv7 -5b1b4931d815987f4172904bfeb8b4ad6422656ebad68037886e3521316c1b746bef7596ce78e4bc741b6a7fa440941e039f633267d9c22f242f2f0b57ebfd19 config-stable.loongarch64 -79e2db3c81145cf65e7c76f737a9067f63f295f99591d9faac2c25fab8245d49ffdc062a5e4c1f505837b3615e21dfefb27f4bfce5a825a3efbd7a400c33f1dd config-stable.ppc64le -9ef899be02514fe570ffa11300220453f39f7da36a9af34ed7d9bf6ba24a8782ce0f36cf59014d7f90a3885abee8b24955624a8e1ff87b717836346253759712 config-stable.riscv64 -1168b580ecc28f3f46d36b7046efde92e1e808c0f2caf0056c0b757b7d16c7c0721b20ffa7b11e15191fe07fb30b0f6bc9e62c1763b032df130b035e86094138 config-stable.x86 -48b8c89cd57dad20e08f1c15a9d1c490a538a9a1d74949dd374a7802e1596ec89e132c2358b13d9717be2966b764f86aa8c12e56b2007387db3e8025d82b1f8a config-stable.x86_64 +e2555390d48cbbdc32a7d3f0c27599ff88f2fe3e786d1d0086caaa5b092cc3edcb6e95e2fb07034edb3793f6dc954da0662c723202eb7e2c4956c99b50919b12 0004-libbpf-Fix-UAF-in-strset__add_str.patch +870000662162589dad0bf45a035bc40896df47f2f288542d3a7ea9424b9a656c8c062bcce40ebb3b21ebb230095dc2e46149a535ed4d59a1364c1c81426b5b13 config-stable.aarch64 +c0c1a19a4656f796bb9ad51b8e213d38d4b45a44369e0c813d24b6ca4d7401b1fb2eb5d736b9892fb0cf171bb43aee06b06542a375dd5888313cae3351c32698 config-stable.armv7 +c9258bd10b07c5612a98887f0c9b53bbb78d1aa4a597e78c6ca9e99bd627a8b3a26d46785a8fdf6721f27b6c0232f295b8abdfd8c174395adcf5b95011cc7603 config-stable.loongarch64 +2788bcbf5dfdfc318d1bd0b7172e3a3c47eb05cbe462864beb9078310657e8edc8a151bd41591ab0596fc8fda7a24a2ecad8781181664c15cda67c9cbd63fe3a config-stable.ppc64le +2603d4daa784b7c9b92707b691ea1f2560837c9b627d149aeaa254cc984df969dae4f5dbe38f93742038e2a568531f2f9cdbad42eed8104b5ee6cc800d2f0739 config-stable.riscv64 +81d70bca22bf836650c106d89a643c7e4f7bb8f9b5ebcaef60cb5963bf26f3c41c7b43aa932c06205d1bc72a4ff46a5243b9710a0d72d09f071aa0652764b02e config-stable.x86 +45619a6d8c0ba5b42d5b9dcb8a248357fabd1f294a52d430f47b3809be75bdd75af651d61c31e5306152f3eefe56813ec9e00528ee7d65dcf0c54c1041a52e5d config-stable.x86_64 " diff --git a/device/main/linux-postmarketos-stable/config-stable.aarch64 b/device/main/linux-postmarketos-stable/config-stable.aarch64 index 6f1b081ac..41201b1ab 100644 --- a/device/main/linux-postmarketos-stable/config-stable.aarch64 +++ b/device/main/linux-postmarketos-stable/config-stable.aarch64 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/arm64 7.1.3 Kernel Configuration +# Linux/arm64 7.1.4 Kernel Configuration # CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.8" CONFIG_GCC_VERSION=0 @@ -11,7 +11,7 @@ CONFIG_AS_VERSION=220108 CONFIG_LD_VERSION=0 CONFIG_LD_IS_LLD=y CONFIG_LLD_VERSION=220108 -CONFIG_RUSTC_VERSION=109601 +CONFIG_RUSTC_VERSION=109700 CONFIG_RUST_IS_AVAILABLE=y CONFIG_RUSTC_LLVM_VERSION=220108 CONFIG_RUSTC_LLVM_MAJOR_VERSION=22 @@ -297,7 +297,7 @@ CONFIG_PERF_EVENTS=y CONFIG_SYSTEM_DATA_VERIFICATION=y CONFIG_PROFILING=y CONFIG_RUST=y -CONFIG_RUSTC_VERSION_TEXT="rustc 1.96.1 (31fca3adb 2026-06-26) (Alpine Linux Rust 1.96.1-r0)" +CONFIG_RUSTC_VERSION_TEXT="rustc 1.97.0 (2d8144b78 2026-07-07) (Alpine Linux Rust 1.97.0-r0)" CONFIG_BINDGEN_VERSION_TEXT="bindgen 0.72.1" CONFIG_TRACEPOINTS=y @@ -967,6 +967,7 @@ CONFIG_HAVE_ARCH_GET_SECUREBOOT=y # end of General architecture-dependent options CONFIG_RT_MUTEXES=y +CONFIG_MODULE_SIG_FORMAT=y CONFIG_MODULES=y # CONFIG_MODULE_DEBUG is not set # CONFIG_MODULE_FORCE_LOAD is not set @@ -975,7 +976,16 @@ CONFIG_MODULE_UNLOAD=y # CONFIG_MODULE_UNLOAD_TAINT_TRACKING is not set # CONFIG_MODVERSIONS is not set # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set +CONFIG_MODULE_SIG=y +# CONFIG_MODULE_SIG_FORCE is not set +CONFIG_MODULE_SIG_ALL=y +# CONFIG_MODULE_SIG_SHA256 is not set +# CONFIG_MODULE_SIG_SHA384 is not set +CONFIG_MODULE_SIG_SHA512=y +# CONFIG_MODULE_SIG_SHA3_256 is not set +# CONFIG_MODULE_SIG_SHA3_384 is not set +# CONFIG_MODULE_SIG_SHA3_512 is not set +CONFIG_MODULE_SIG_HASH="sha512" CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_GZIP is not set # CONFIG_MODULE_COMPRESS_XZ is not set @@ -1748,8 +1758,11 @@ CONFIG_CAN_GW=m # CONFIG_CAN_ISOTP is not set CONFIG_BT=m CONFIG_BT_BREDR=y -# CONFIG_BT_RFCOMM is not set -# CONFIG_BT_BNEP is not set +CONFIG_BT_RFCOMM=m +# CONFIG_BT_RFCOMM_TTY is not set +CONFIG_BT_BNEP=m +# CONFIG_BT_BNEP_MC_FILTER is not set +# CONFIG_BT_BNEP_PROTO_FILTER is not set CONFIG_BT_HIDP=m # CONFIG_BT_LE is not set CONFIG_BT_LEDS=y @@ -3087,7 +3100,7 @@ CONFIG_NET_VENDOR_INTEL=y # CONFIG_E100 is not set CONFIG_E1000=y CONFIG_E1000E=y -CONFIG_IGB=y +CONFIG_IGB=m CONFIG_IGB_HWMON=y CONFIG_IGBVF=y # CONFIG_IXGBE is not set @@ -4223,7 +4236,7 @@ CONFIG_I2C_MUX_PINCTRL=m CONFIG_I2C_HELPER_AUTO=y CONFIG_I2C_SMBUS=y -CONFIG_I2C_ALGOBIT=y +CONFIG_I2C_ALGOBIT=m # # I2C Hardware Bus support @@ -11125,7 +11138,10 @@ CONFIG_PHY_TI_GMII_SEL=y CONFIG_PHY_XILINX_ZYNQMP=m # end of PHY Subsystem -# CONFIG_POWERCAP is not set +CONFIG_POWERCAP=y +# CONFIG_IDLE_INJECT is not set +# CONFIG_ARM_SCMI_POWERCAP is not set +# CONFIG_DTPM is not set # CONFIG_MCB is not set # @@ -11385,14 +11401,14 @@ CONFIG_XFS_ONLINE_REPAIR=y # CONFIG_XFS_DEBUG is not set # CONFIG_GFS2_FS is not set # CONFIG_OCFS2_FS is not set -CONFIG_BTRFS_FS=y +CONFIG_BTRFS_FS=m CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set # CONFIG_BTRFS_DEBUG is not set # CONFIG_BTRFS_ASSERT is not set # CONFIG_BTRFS_EXPERIMENTAL is not set # CONFIG_NILFS2_FS is not set -CONFIG_F2FS_FS=y +CONFIG_F2FS_FS=m CONFIG_F2FS_STAT_FS=y CONFIG_F2FS_FS_XATTR=y CONFIG_F2FS_FS_POSIX_ACL=y @@ -11726,7 +11742,11 @@ CONFIG_SECURITY_SELINUX_AVC_HASH_BITS=9 # CONFIG_SECURITY_LOADPIN is not set CONFIG_SECURITY_YAMA=y # CONFIG_SECURITY_SAFESETID is not set -# CONFIG_SECURITY_LOCKDOWN_LSM is not set +CONFIG_SECURITY_LOCKDOWN_LSM=y +CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y +# CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE is not set +CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y +# CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set # CONFIG_SECURITY_LANDLOCK is not set # CONFIG_SECURITY_IPE is not set CONFIG_INTEGRITY=y @@ -11814,7 +11834,7 @@ CONFIG_CRYPTO_USER=y # CONFIG_CRYPTO_PCRYPT is not set # CONFIG_CRYPTO_CRYPTD is not set CONFIG_CRYPTO_AUTHENC=y -# CONFIG_CRYPTO_KRB5ENC is not set +CONFIG_CRYPTO_KRB5ENC=m CONFIG_CRYPTO_BENCHMARK=m CONFIG_CRYPTO_ENGINE=m # end of Crypto core or helper @@ -12048,6 +12068,12 @@ CONFIG_PKCS7_MESSAGE_PARSER=y # # Certificates for signature checking # +CONFIG_MODULE_SIG_KEY="certs/signing_key.pem" +CONFIG_MODULE_SIG_KEY_TYPE_RSA=y +# CONFIG_MODULE_SIG_KEY_TYPE_ECDSA is not set +# CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_44 is not set +# CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_65 is not set +# CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_87 is not set CONFIG_SYSTEM_TRUSTED_KEYRING=y CONFIG_SYSTEM_TRUSTED_KEYS="" # CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set @@ -12056,13 +12082,14 @@ CONFIG_SYSTEM_TRUSTED_KEYS="" CONFIG_OPENSSL_SUPPORTS_ML_DSA=y # end of Certificates for signature checking -# CONFIG_CRYPTO_KRB5 is not set +CONFIG_CRYPTO_KRB5=m +# CONFIG_CRYPTO_KRB5_SELFTESTS is not set CONFIG_BINARY_PRINTF=y # # Library routines # -CONFIG_RAID6_PQ=y +CONFIG_RAID6_PQ=m CONFIG_RAID6_PQ_BENCHMARK=y CONFIG_LINEAR_RANGES=y CONFIG_PACKING=y @@ -12099,7 +12126,7 @@ CONFIG_CRYPTO_LIB_AES_ARCH=y CONFIG_CRYPTO_LIB_AES_CBC_MACS=y CONFIG_CRYPTO_LIB_ARC4=m CONFIG_CRYPTO_LIB_GF128MUL=y -CONFIG_CRYPTO_LIB_BLAKE2B=y +CONFIG_CRYPTO_LIB_BLAKE2B=m CONFIG_CRYPTO_LIB_CHACHA=m CONFIG_CRYPTO_LIB_CHACHA_ARCH=y CONFIG_CRYPTO_LIB_CURVE25519=m @@ -12122,7 +12149,7 @@ CONFIG_CRYPTO_LIB_SHA3=m CONFIG_CRYPTO_LIB_SHA3_ARCH=y CONFIG_CRYPTO_LIB_SM3=m CONFIG_CRYPTO_LIB_SM3_ARCH=y -CONFIG_XOR_BLOCKS=y +CONFIG_XOR_BLOCKS=m CONFIG_XOR_BLOCKS_ARCH=y CONFIG_XXHASH=y CONFIG_AUDIT_GENERIC=y diff --git a/device/main/linux-postmarketos-stable/config-stable.armv7 b/device/main/linux-postmarketos-stable/config-stable.armv7 index 177f85946..e39d7f844 100644 --- a/device/main/linux-postmarketos-stable/config-stable.armv7 +++ b/device/main/linux-postmarketos-stable/config-stable.armv7 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/arm 7.1.3 Kernel Configuration +# Linux/arm 7.1.4 Kernel Configuration # CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.8" CONFIG_GCC_VERSION=0 @@ -11,7 +11,7 @@ CONFIG_AS_VERSION=220108 CONFIG_LD_VERSION=0 CONFIG_LD_IS_LLD=y CONFIG_LLD_VERSION=220108 -CONFIG_RUSTC_VERSION=109601 +CONFIG_RUSTC_VERSION=109700 CONFIG_RUST_IS_AVAILABLE=y CONFIG_RUSTC_LLVM_VERSION=220108 CONFIG_RUSTC_LLVM_MAJOR_VERSION=22 @@ -987,6 +987,7 @@ CONFIG_HAVE_ARCH_GET_SECUREBOOT=y # end of General architecture-dependent options CONFIG_RT_MUTEXES=y +CONFIG_MODULE_SIG_FORMAT=y CONFIG_MODULES=y # CONFIG_MODULE_DEBUG is not set # CONFIG_MODULE_FORCE_LOAD is not set @@ -995,7 +996,16 @@ CONFIG_MODULE_UNLOAD=y # CONFIG_MODULE_UNLOAD_TAINT_TRACKING is not set # CONFIG_MODVERSIONS is not set # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set +CONFIG_MODULE_SIG=y +# CONFIG_MODULE_SIG_FORCE is not set +CONFIG_MODULE_SIG_ALL=y +# CONFIG_MODULE_SIG_SHA256 is not set +# CONFIG_MODULE_SIG_SHA384 is not set +CONFIG_MODULE_SIG_SHA512=y +# CONFIG_MODULE_SIG_SHA3_256 is not set +# CONFIG_MODULE_SIG_SHA3_384 is not set +# CONFIG_MODULE_SIG_SHA3_512 is not set +CONFIG_MODULE_SIG_HASH="sha512" CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_GZIP is not set # CONFIG_MODULE_COMPRESS_XZ is not set @@ -1711,8 +1721,11 @@ CONFIG_CAN_GW=y # CONFIG_CAN_ISOTP is not set CONFIG_BT=m CONFIG_BT_BREDR=y -# CONFIG_BT_RFCOMM is not set -# CONFIG_BT_BNEP is not set +CONFIG_BT_RFCOMM=m +# CONFIG_BT_RFCOMM_TTY is not set +CONFIG_BT_BNEP=m +# CONFIG_BT_BNEP_MC_FILTER is not set +# CONFIG_BT_BNEP_PROTO_FILTER is not set CONFIG_BT_HIDP=m CONFIG_BT_LE=y CONFIG_BT_LE_L2CAP_ECRED=y @@ -1725,9 +1738,16 @@ CONFIG_BT_DEBUGFS=y # # Bluetooth device drivers # +CONFIG_BT_INTEL=m CONFIG_BT_BCM=m +CONFIG_BT_RTL=m CONFIG_BT_QCA=m -# CONFIG_BT_HCIBTUSB is not set +CONFIG_BT_HCIBTUSB=m +# CONFIG_BT_HCIBTUSB_AUTOSUSPEND is not set +CONFIG_BT_HCIBTUSB_POLL_SYNC=y +CONFIG_BT_HCIBTUSB_BCM=y +# CONFIG_BT_HCIBTUSB_MTK is not set +CONFIG_BT_HCIBTUSB_RTL=y # CONFIG_BT_HCIBTSDIO is not set CONFIG_BT_HCIUART=m CONFIG_BT_HCIUART_SERDEV=y @@ -1751,6 +1771,7 @@ CONFIG_BT_HCIUART_BCM=y # CONFIG_BT_HCIVHCI is not set CONFIG_BT_MRVL=m CONFIG_BT_MRVL_SDIO=m +# CONFIG_BT_ATH3K is not set # CONFIG_BT_MTKSDIO is not set # CONFIG_BT_MTKUART is not set CONFIG_BT_QCOMSMD=m @@ -1779,7 +1800,7 @@ CONFIG_MAC80211_RC_MINSTREL=y CONFIG_MAC80211_RC_DEFAULT_MINSTREL=y CONFIG_MAC80211_RC_DEFAULT="minstrel_ht" # CONFIG_MAC80211_MESH is not set -# CONFIG_MAC80211_LEDS is not set +CONFIG_MAC80211_LEDS=y # CONFIG_MAC80211_MESSAGE_TRACING is not set # CONFIG_MAC80211_DEBUG_MENU is not set CONFIG_MAC80211_STA_HASH_MAX_SIZE=0 @@ -2912,7 +2933,7 @@ CONFIG_NET_VENDOR_INTEL=y # CONFIG_E100 is not set # CONFIG_E1000 is not set CONFIG_E1000E=y -CONFIG_IGB=y +CONFIG_IGB=m CONFIG_IGB_HWMON=y # CONFIG_IGBVF is not set # CONFIG_IXGBE is not set @@ -3347,7 +3368,20 @@ CONFIG_WLAN_VENDOR_INTEL=y # CONFIG_IPW2200 is not set # CONFIG_IWL4965 is not set # CONFIG_IWL3945 is not set -# CONFIG_IWLWIFI is not set +CONFIG_IWLWIFI=m +CONFIG_IWLWIFI_LEDS=y +CONFIG_IWLDVM=m +CONFIG_IWLMVM=m +# CONFIG_IWLMLD is not set +CONFIG_IWLWIFI_OPMODE_MODULAR=y + +# +# Debugging Options +# +# CONFIG_IWLWIFI_DEBUG is not set +CONFIG_IWLWIFI_DEVICE_TRACING=y +# end of Debugging Options + CONFIG_WLAN_VENDOR_INTERSIL=y # CONFIG_P54_COMMON is not set CONFIG_WLAN_VENDOR_MARVELL=y @@ -3412,6 +3446,7 @@ CONFIG_RT2X00_LIB_LEDS=y CONFIG_WLAN_VENDOR_REALTEK=y # CONFIG_RTL8180 is not set CONFIG_RTL8187=m +CONFIG_RTL8187_LEDS=y CONFIG_RTL_CARDS=m # CONFIG_RTL8192CE is not set # CONFIG_RTL8192SE is not set @@ -3932,11 +3967,11 @@ CONFIG_HW_RANDOM_ROCKCHIP=y # CONFIG_APPLICOM is not set CONFIG_DEVMEM=y CONFIG_DEVPORT=y -CONFIG_TCG_TPM=m +CONFIG_TCG_TPM=y # CONFIG_TCG_TPM2_HMAC is not set CONFIG_HW_RANDOM_TPM=y CONFIG_TCG_TIS_CORE=m -# CONFIG_TCG_TIS is not set +CONFIG_TCG_TIS=m # CONFIG_TCG_TIS_SPI is not set CONFIG_TCG_TIS_I2C=m # CONFIG_TCG_TIS_I2C_CR50 is not set @@ -3976,7 +4011,7 @@ CONFIG_I2C_DEMUX_PINCTRL=y CONFIG_I2C_HELPER_AUTO=y CONFIG_I2C_SMBUS=y -CONFIG_I2C_ALGOBIT=y +CONFIG_I2C_ALGOBIT=m # # I2C Hardware Bus support @@ -10587,7 +10622,10 @@ CONFIG_TWL4030_USB=m CONFIG_PHY_TI_GMII_SEL=y # end of PHY Subsystem -# CONFIG_POWERCAP is not set +CONFIG_POWERCAP=y +# CONFIG_IDLE_INJECT is not set +# CONFIG_ARM_SCMI_POWERCAP is not set +# CONFIG_DTPM is not set # CONFIG_MCB is not set # @@ -10785,14 +10823,14 @@ CONFIG_XFS_ONLINE_REPAIR=y # CONFIG_XFS_DEBUG is not set # CONFIG_GFS2_FS is not set # CONFIG_OCFS2_FS is not set -CONFIG_BTRFS_FS=y +CONFIG_BTRFS_FS=m CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set # CONFIG_BTRFS_DEBUG is not set # CONFIG_BTRFS_ASSERT is not set # CONFIG_BTRFS_EXPERIMENTAL is not set # CONFIG_NILFS2_FS is not set -CONFIG_F2FS_FS=y +CONFIG_F2FS_FS=m CONFIG_F2FS_STAT_FS=y CONFIG_F2FS_FS_XATTR=y CONFIG_F2FS_FS_POSIX_ACL=y @@ -11110,7 +11148,11 @@ CONFIG_SECURITY_SELINUX_AVC_HASH_BITS=9 # CONFIG_SECURITY_LOADPIN is not set CONFIG_SECURITY_YAMA=y # CONFIG_SECURITY_SAFESETID is not set -# CONFIG_SECURITY_LOCKDOWN_LSM is not set +CONFIG_SECURITY_LOCKDOWN_LSM=y +CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y +# CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE is not set +CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y +# CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set # CONFIG_SECURITY_LANDLOCK is not set # CONFIG_SECURITY_IPE is not set CONFIG_INTEGRITY=y @@ -11192,7 +11234,7 @@ CONFIG_CRYPTO_USER=m # CONFIG_CRYPTO_PCRYPT is not set # CONFIG_CRYPTO_CRYPTD is not set CONFIG_CRYPTO_AUTHENC=y -# CONFIG_CRYPTO_KRB5ENC is not set +CONFIG_CRYPTO_KRB5ENC=m # CONFIG_CRYPTO_BENCHMARK is not set CONFIG_CRYPTO_ENGINE=m # end of Crypto core or helper @@ -11403,6 +11445,12 @@ CONFIG_PKCS7_MESSAGE_PARSER=y # # Certificates for signature checking # +CONFIG_MODULE_SIG_KEY="certs/signing_key.pem" +CONFIG_MODULE_SIG_KEY_TYPE_RSA=y +# CONFIG_MODULE_SIG_KEY_TYPE_ECDSA is not set +# CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_44 is not set +# CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_65 is not set +# CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_87 is not set CONFIG_SYSTEM_TRUSTED_KEYRING=y CONFIG_SYSTEM_TRUSTED_KEYS="" # CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set @@ -11411,13 +11459,14 @@ CONFIG_SYSTEM_TRUSTED_KEYS="" CONFIG_OPENSSL_SUPPORTS_ML_DSA=y # end of Certificates for signature checking -# CONFIG_CRYPTO_KRB5 is not set +CONFIG_CRYPTO_KRB5=m +# CONFIG_CRYPTO_KRB5_SELFTESTS is not set CONFIG_BINARY_PRINTF=y # # Library routines # -CONFIG_RAID6_PQ=y +CONFIG_RAID6_PQ=m CONFIG_RAID6_PQ_BENCHMARK=y CONFIG_LINEAR_RANGES=y # CONFIG_PACKING is not set @@ -11451,7 +11500,7 @@ CONFIG_CRYPTO_LIB_AES_ARCH=y CONFIG_CRYPTO_LIB_AES_CBC_MACS=m CONFIG_CRYPTO_LIB_ARC4=m CONFIG_CRYPTO_LIB_GF128MUL=m -CONFIG_CRYPTO_LIB_BLAKE2B=y +CONFIG_CRYPTO_LIB_BLAKE2B=m CONFIG_CRYPTO_LIB_BLAKE2B_ARCH=y CONFIG_CRYPTO_LIB_BLAKE2S_ARCH=y CONFIG_CRYPTO_LIB_CHACHA=m @@ -11474,7 +11523,7 @@ CONFIG_CRYPTO_LIB_SHA256_ARCH=y CONFIG_CRYPTO_LIB_SHA512=y CONFIG_CRYPTO_LIB_SHA512_ARCH=y CONFIG_CRYPTO_LIB_SHA3=m -CONFIG_XOR_BLOCKS=y +CONFIG_XOR_BLOCKS=m CONFIG_XOR_BLOCKS_ARCH=y CONFIG_XXHASH=y CONFIG_AUDIT_GENERIC=y diff --git a/device/main/linux-postmarketos-stable/config-stable.loongarch64 b/device/main/linux-postmarketos-stable/config-stable.loongarch64 index 82d3cb70c..063e8320b 100644 --- a/device/main/linux-postmarketos-stable/config-stable.loongarch64 +++ b/device/main/linux-postmarketos-stable/config-stable.loongarch64 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/loongarch 7.1.3 Kernel Configuration +# Linux/loongarch 7.1.4 Kernel Configuration # CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.8" CONFIG_GCC_VERSION=0 @@ -11,7 +11,7 @@ CONFIG_AS_VERSION=220108 CONFIG_LD_VERSION=0 CONFIG_LD_IS_LLD=y CONFIG_LLD_VERSION=220108 -CONFIG_RUSTC_VERSION=109601 +CONFIG_RUSTC_VERSION=109700 CONFIG_RUST_IS_AVAILABLE=y CONFIG_RUSTC_LLVM_VERSION=220108 CONFIG_RUSTC_LLVM_MAJOR_VERSION=22 @@ -295,7 +295,7 @@ CONFIG_PERF_EVENTS=y CONFIG_SYSTEM_DATA_VERIFICATION=y # CONFIG_PROFILING is not set CONFIG_RUST=y -CONFIG_RUSTC_VERSION_TEXT="rustc 1.96.1 (31fca3adb 2026-06-26) (Alpine Linux Rust 1.96.1-r0)" +CONFIG_RUSTC_VERSION_TEXT="rustc 1.97.0 (2d8144b78 2026-07-07) (Alpine Linux Rust 1.97.0-r0)" CONFIG_BINDGEN_VERSION_TEXT="bindgen 0.72.1" CONFIG_TRACEPOINTS=y @@ -638,6 +638,7 @@ CONFIG_HAVE_ARCH_GET_SECUREBOOT=y # end of General architecture-dependent options CONFIG_RT_MUTEXES=y +CONFIG_MODULE_SIG_FORMAT=y CONFIG_MODULES=y # CONFIG_MODULE_DEBUG is not set CONFIG_MODULE_FORCE_LOAD=y @@ -646,7 +647,16 @@ CONFIG_MODULE_FORCE_UNLOAD=y # CONFIG_MODULE_UNLOAD_TAINT_TRACKING is not set # CONFIG_MODVERSIONS is not set # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set +CONFIG_MODULE_SIG=y +# CONFIG_MODULE_SIG_FORCE is not set +CONFIG_MODULE_SIG_ALL=y +# CONFIG_MODULE_SIG_SHA256 is not set +# CONFIG_MODULE_SIG_SHA384 is not set +CONFIG_MODULE_SIG_SHA512=y +# CONFIG_MODULE_SIG_SHA3_256 is not set +# CONFIG_MODULE_SIG_SHA3_384 is not set +# CONFIG_MODULE_SIG_SHA3_512 is not set +CONFIG_MODULE_SIG_HASH="sha512" CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_GZIP is not set # CONFIG_MODULE_COMPRESS_XZ is not set @@ -2558,7 +2568,7 @@ CONFIG_LIBIE_FWLOG=y # CONFIG_E100 is not set CONFIG_E1000=y CONFIG_E1000E=y -CONFIG_IGB=y +CONFIG_IGB=m CONFIG_IGB_HWMON=y # CONFIG_IGBVF is not set CONFIG_IXGBE=y @@ -3403,10 +3413,11 @@ CONFIG_HW_RANDOM_VIRTIO=m # CONFIG_APPLICOM is not set CONFIG_DEVMEM=y CONFIG_DEVPORT=y -CONFIG_TCG_TPM=m +CONFIG_TCG_TPM=y # CONFIG_TCG_TPM2_HMAC is not set CONFIG_HW_RANDOM_TPM=y -# CONFIG_TCG_TIS is not set +CONFIG_TCG_TIS_CORE=m +CONFIG_TCG_TIS=m # CONFIG_TCG_TIS_SPI is not set # CONFIG_TCG_TIS_I2C is not set # CONFIG_TCG_TIS_I2C_CR50 is not set @@ -7803,7 +7814,8 @@ CONFIG_GENERIC_PHY=y # CONFIG_PHY_SAMSUNG_USB2 is not set # end of PHY Subsystem -# CONFIG_POWERCAP is not set +CONFIG_POWERCAP=y +# CONFIG_DTPM is not set # CONFIG_MCB is not set # @@ -7910,14 +7922,14 @@ CONFIG_OCFS2_FS_USERSPACE_CLUSTER=m CONFIG_OCFS2_FS_STATS=y CONFIG_OCFS2_DEBUG_MASKLOG=y # CONFIG_OCFS2_DEBUG_FS is not set -CONFIG_BTRFS_FS=y +CONFIG_BTRFS_FS=m CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set # CONFIG_BTRFS_DEBUG is not set # CONFIG_BTRFS_ASSERT is not set # CONFIG_BTRFS_EXPERIMENTAL is not set # CONFIG_NILFS2_FS is not set -CONFIG_F2FS_FS=y +CONFIG_F2FS_FS=m CONFIG_F2FS_STAT_FS=y CONFIG_F2FS_FS_XATTR=y CONFIG_F2FS_FS_POSIX_ACL=y @@ -8285,7 +8297,11 @@ CONFIG_SECURITY_APPARMOR_PARANOID_LOAD=y # CONFIG_SECURITY_LOADPIN is not set CONFIG_SECURITY_YAMA=y # CONFIG_SECURITY_SAFESETID is not set -# CONFIG_SECURITY_LOCKDOWN_LSM is not set +CONFIG_SECURITY_LOCKDOWN_LSM=y +CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y +# CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE is not set +CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y +# CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set # CONFIG_SECURITY_LANDLOCK is not set # CONFIG_SECURITY_IPE is not set CONFIG_INTEGRITY=y @@ -8523,7 +8539,6 @@ CONFIG_CRYPTO_HW=y CONFIG_CRYPTO_DEV_VIRTIO=m # CONFIG_CRYPTO_DEV_SAFEXCEL is not set # CONFIG_CRYPTO_DEV_CCREE is not set -CONFIG_CRYPTO_DEV_LOONGSON_RNG=m # CONFIG_CRYPTO_DEV_AMLOGIC_GXL is not set CONFIG_ASYMMETRIC_KEY_TYPE=y CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y @@ -8537,6 +8552,12 @@ CONFIG_PKCS7_MESSAGE_PARSER=y # # Certificates for signature checking # +CONFIG_MODULE_SIG_KEY="certs/signing_key.pem" +CONFIG_MODULE_SIG_KEY_TYPE_RSA=y +# CONFIG_MODULE_SIG_KEY_TYPE_ECDSA is not set +# CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_44 is not set +# CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_65 is not set +# CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_87 is not set CONFIG_SYSTEM_TRUSTED_KEYRING=y CONFIG_SYSTEM_TRUSTED_KEYS="" # CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set @@ -8552,7 +8573,7 @@ CONFIG_BINARY_PRINTF=y # # Library routines # -CONFIG_RAID6_PQ=y +CONFIG_RAID6_PQ=m CONFIG_RAID6_PQ_BENCHMARK=y CONFIG_LINEAR_RANGES=y CONFIG_PACKING=y @@ -8580,7 +8601,7 @@ CONFIG_CRYPTO_LIB_UTILS=y CONFIG_CRYPTO_LIB_AES=y CONFIG_CRYPTO_LIB_AES_CBC_MACS=m CONFIG_CRYPTO_LIB_ARC4=m -CONFIG_CRYPTO_LIB_BLAKE2B=y +CONFIG_CRYPTO_LIB_BLAKE2B=m CONFIG_CRYPTO_LIB_CHACHA=m CONFIG_CRYPTO_LIB_CURVE25519=m CONFIG_CRYPTO_LIB_CURVE25519_GENERIC=y @@ -8595,7 +8616,7 @@ CONFIG_CRYPTO_LIB_SHA1=y CONFIG_CRYPTO_LIB_SHA256=y CONFIG_CRYPTO_LIB_SHA512=y CONFIG_CRYPTO_LIB_SM3=m -CONFIG_XOR_BLOCKS=y +CONFIG_XOR_BLOCKS=m CONFIG_XOR_BLOCKS_ARCH=y CONFIG_XXHASH=y CONFIG_AUDIT_GENERIC=y diff --git a/device/main/linux-postmarketos-stable/config-stable.ppc64le b/device/main/linux-postmarketos-stable/config-stable.ppc64le index a87347055..32bc1b342 100644 --- a/device/main/linux-postmarketos-stable/config-stable.ppc64le +++ b/device/main/linux-postmarketos-stable/config-stable.ppc64le @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/powerpc 7.1.3 Kernel Configuration +# Linux/powerpc 7.1.4 Kernel Configuration # CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.8" CONFIG_GCC_VERSION=0 @@ -11,7 +11,7 @@ CONFIG_AS_VERSION=220108 CONFIG_LD_VERSION=0 CONFIG_LD_IS_LLD=y CONFIG_LLD_VERSION=220108 -CONFIG_RUSTC_VERSION=109601 +CONFIG_RUSTC_VERSION=109700 CONFIG_RUST_IS_AVAILABLE=y CONFIG_RUSTC_LLVM_VERSION=220108 CONFIG_RUSTC_LLVM_MAJOR_VERSION=22 @@ -1523,8 +1523,11 @@ CONFIG_NET_FLOW_LIMIT=y # CONFIG_CAN is not set CONFIG_BT=m CONFIG_BT_BREDR=y -# CONFIG_BT_RFCOMM is not set -# CONFIG_BT_BNEP is not set +CONFIG_BT_RFCOMM=m +# CONFIG_BT_RFCOMM_TTY is not set +CONFIG_BT_BNEP=m +# CONFIG_BT_BNEP_MC_FILTER is not set +# CONFIG_BT_BNEP_PROTO_FILTER is not set CONFIG_BT_HIDP=m CONFIG_BT_LE=y CONFIG_BT_LE_L2CAP_ECRED=y @@ -1537,7 +1540,15 @@ CONFIG_BT_DEBUGFS=y # # Bluetooth device drivers # -# CONFIG_BT_HCIBTUSB is not set +CONFIG_BT_INTEL=m +CONFIG_BT_BCM=m +CONFIG_BT_RTL=m +CONFIG_BT_HCIBTUSB=m +# CONFIG_BT_HCIBTUSB_AUTOSUSPEND is not set +CONFIG_BT_HCIBTUSB_POLL_SYNC=y +CONFIG_BT_HCIBTUSB_BCM=y +# CONFIG_BT_HCIBTUSB_MTK is not set +CONFIG_BT_HCIBTUSB_RTL=y # CONFIG_BT_HCIUART is not set # CONFIG_BT_HCIBCM203X is not set # CONFIG_BT_HCIBCM4377 is not set @@ -1547,6 +1558,7 @@ CONFIG_BT_DEBUGFS=y # CONFIG_BT_HCIBLUECARD is not set # CONFIG_BT_HCIVHCI is not set # CONFIG_BT_MRVL is not set +# CONFIG_BT_ATH3K is not set # CONFIG_BT_VIRTIO is not set # CONFIG_BT_INTEL_PCIE is not set # end of Bluetooth device drivers @@ -1556,11 +1568,26 @@ CONFIG_BT_DEBUGFS=y # CONFIG_MCTP is not set CONFIG_FIB_RULES=y CONFIG_WIRELESS=y -# CONFIG_CFG80211 is not set - -# -# CFG80211 needs to be enabled for MAC80211 -# +CONFIG_CFG80211=m +# CONFIG_NL80211_TESTMODE is not set +# CONFIG_CFG80211_DEVELOPER_WARNINGS is not set +CONFIG_CFG80211_REQUIRE_SIGNED_REGDB=y +CONFIG_CFG80211_USE_KERNEL_REGDB_KEYS=y +CONFIG_CFG80211_DEFAULT_PS=y +# CONFIG_CFG80211_DEBUGFS is not set +CONFIG_CFG80211_CRDA_SUPPORT=y +# CONFIG_CFG80211_WEXT is not set +CONFIG_CFG80211_KUNIT_TEST=m +CONFIG_MAC80211=m +CONFIG_MAC80211_HAS_RC=y +CONFIG_MAC80211_RC_MINSTREL=y +CONFIG_MAC80211_RC_DEFAULT_MINSTREL=y +CONFIG_MAC80211_RC_DEFAULT="minstrel_ht" +CONFIG_MAC80211_KUNIT_TEST=m +# CONFIG_MAC80211_MESH is not set +CONFIG_MAC80211_LEDS=y +# CONFIG_MAC80211_MESSAGE_TRACING is not set +# CONFIG_MAC80211_DEBUG_MENU is not set CONFIG_MAC80211_STA_HASH_MAX_SIZE=0 CONFIG_RFKILL=m CONFIG_RFKILL_LEDS=y @@ -2320,7 +2347,8 @@ CONFIG_LIBIE_FWLOG=m CONFIG_E100=y CONFIG_E1000=y CONFIG_E1000E=y -# CONFIG_IGB is not set +CONFIG_IGB=m +CONFIG_IGB_HWMON=y # CONFIG_IGBVF is not set CONFIG_IXGBE=m CONFIG_IXGBE_HWMON=y @@ -2609,25 +2637,110 @@ CONFIG_USB_NET_ZAURUS=m CONFIG_USB_RTL8153_ECM=m CONFIG_WLAN=y CONFIG_WLAN_VENDOR_ADMTEK=y +# CONFIG_ADM8211 is not set CONFIG_WLAN_VENDOR_ATH=y # CONFIG_ATH_DEBUG is not set +# CONFIG_ATH5K is not set # CONFIG_ATH5K_PCI is not set +# CONFIG_ATH9K is not set +# CONFIG_ATH9K_HTC is not set +# CONFIG_CARL9170 is not set +# CONFIG_ATH6KL is not set +# CONFIG_AR5523 is not set +# CONFIG_WIL6210 is not set +# CONFIG_ATH10K is not set +# CONFIG_WCN36XX is not set +# CONFIG_ATH11K is not set +# CONFIG_ATH12K is not set CONFIG_WLAN_VENDOR_ATMEL=y +# CONFIG_AT76C50X_USB is not set CONFIG_WLAN_VENDOR_BROADCOM=y +# CONFIG_B43 is not set +# CONFIG_B43LEGACY is not set +# CONFIG_BRCMSMAC is not set +# CONFIG_BRCMFMAC is not set CONFIG_WLAN_VENDOR_INTEL=y +# CONFIG_IPW2100 is not set +# CONFIG_IPW2200 is not set +# CONFIG_IWL4965 is not set +# CONFIG_IWL3945 is not set +CONFIG_IWLWIFI=m +CONFIG_IWLWIFI_KUNIT_TESTS=m +CONFIG_IWLWIFI_LEDS=y +CONFIG_IWLDVM=m +CONFIG_IWLMVM=m +# CONFIG_IWLMLD is not set +CONFIG_IWLWIFI_OPMODE_MODULAR=y + +# +# Debugging Options +# +# CONFIG_IWLWIFI_DEBUG is not set +CONFIG_IWLWIFI_DEVICE_TRACING=y +# end of Debugging Options + CONFIG_WLAN_VENDOR_INTERSIL=y +# CONFIG_P54_COMMON is not set CONFIG_WLAN_VENDOR_MARVELL=y +# CONFIG_LIBERTAS is not set +# CONFIG_LIBERTAS_THINFIRM is not set +# CONFIG_MWIFIEX is not set +# CONFIG_MWL8K is not set CONFIG_WLAN_VENDOR_MEDIATEK=y +# CONFIG_MT7601U is not set +# CONFIG_MT76x0U is not set +# CONFIG_MT76x0E is not set +# CONFIG_MT76x2E is not set +# CONFIG_MT76x2U is not set +# CONFIG_MT7603E is not set +# CONFIG_MT7615E is not set +# CONFIG_MT7663U is not set +# CONFIG_MT7915E is not set +# CONFIG_MT7921E is not set +# CONFIG_MT7921U is not set +# CONFIG_MT7996E is not set +# CONFIG_MT7925E is not set +# CONFIG_MT7925U is not set CONFIG_WLAN_VENDOR_MICROCHIP=y +# CONFIG_WILC1000_SPI is not set CONFIG_WLAN_VENDOR_PURELIFI=y +# CONFIG_PLFXLC is not set CONFIG_WLAN_VENDOR_RALINK=y +# CONFIG_RT2X00 is not set CONFIG_WLAN_VENDOR_REALTEK=y +# CONFIG_RTL8180 is not set +# CONFIG_RTL8187 is not set +CONFIG_RTL_CARDS=m +# CONFIG_RTL8192CE is not set +# CONFIG_RTL8192SE is not set +# CONFIG_RTL8192DE is not set +# CONFIG_RTL8723AE is not set +# CONFIG_RTL8723BE is not set +# CONFIG_RTL8188EE is not set +# CONFIG_RTL8192EE is not set +# CONFIG_RTL8821AE is not set +# CONFIG_RTL8192CU is not set +# CONFIG_RTL8192DU is not set +# CONFIG_RTL8XXXU is not set +# CONFIG_RTW88 is not set +# CONFIG_RTW89 is not set CONFIG_WLAN_VENDOR_RSI=y +# CONFIG_RSI_91X is not set CONFIG_WLAN_VENDOR_SILABS=y +# CONFIG_WFX is not set CONFIG_WLAN_VENDOR_ST=y +# CONFIG_CW1200 is not set CONFIG_WLAN_VENDOR_TI=y +# CONFIG_WL1251 is not set +# CONFIG_WL12XX is not set +# CONFIG_WL18XX is not set +# CONFIG_WLCORE is not set CONFIG_WLAN_VENDOR_ZYDAS=y +# CONFIG_ZD1211RW is not set CONFIG_WLAN_VENDOR_QUANTENNA=y +# CONFIG_QTNFMAC_PCIE is not set +# CONFIG_MAC80211_HWSIM is not set +# CONFIG_VIRT_WIFI is not set # CONFIG_WAN is not set # @@ -2992,7 +3105,8 @@ CONFIG_DEVPORT=y # CONFIG_HANGCHECK_TIMER is not set CONFIG_TCG_TPM=y # CONFIG_TCG_TPM2_HMAC is not set -# CONFIG_TCG_TIS is not set +CONFIG_TCG_TIS_CORE=m +CONFIG_TCG_TIS=m # CONFIG_TCG_TIS_SPI is not set # CONFIG_TCG_TIS_I2C is not set # CONFIG_TCG_TIS_I2C_CR50 is not set @@ -6815,7 +6929,9 @@ CONFIG_GENERIC_PHY=y # CONFIG_PHY_MAPPHONE_MDM6600 is not set # end of PHY Subsystem -# CONFIG_POWERCAP is not set +CONFIG_POWERCAP=y +# CONFIG_IDLE_INJECT is not set +# CONFIG_DTPM is not set # CONFIG_MCB is not set # @@ -6919,14 +7035,14 @@ CONFIG_XFS_ONLINE_REPAIR=y # CONFIG_XFS_DEBUG is not set # CONFIG_GFS2_FS is not set # CONFIG_OCFS2_FS is not set -CONFIG_BTRFS_FS=y +CONFIG_BTRFS_FS=m CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set # CONFIG_BTRFS_DEBUG is not set # CONFIG_BTRFS_ASSERT is not set # CONFIG_BTRFS_EXPERIMENTAL is not set CONFIG_NILFS2_FS=m -CONFIG_F2FS_FS=y +CONFIG_F2FS_FS=m CONFIG_F2FS_STAT_FS=y CONFIG_F2FS_FS_XATTR=y CONFIG_F2FS_FS_POSIX_ACL=y @@ -7256,8 +7372,8 @@ CONFIG_SECURITY_YAMA=y # CONFIG_SECURITY_SAFESETID is not set CONFIG_SECURITY_LOCKDOWN_LSM=y CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y -CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y -# CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set +# CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE is not set +CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y # CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set CONFIG_SECURITY_LANDLOCK=y # CONFIG_SECURITY_IPE is not set @@ -7368,7 +7484,7 @@ CONFIG_CRYPTO_MANAGER2=y # CONFIG_CRYPTO_PCRYPT is not set CONFIG_CRYPTO_CRYPTD=m CONFIG_CRYPTO_AUTHENC=y -# CONFIG_CRYPTO_KRB5ENC is not set +CONFIG_CRYPTO_KRB5ENC=m CONFIG_CRYPTO_BENCHMARK=m CONFIG_CRYPTO_SIMD=m CONFIG_CRYPTO_ENGINE=m @@ -7554,13 +7670,14 @@ CONFIG_SYSTEM_BLACKLIST_HASH_LIST="" CONFIG_OPENSSL_SUPPORTS_ML_DSA=y # end of Certificates for signature checking -# CONFIG_CRYPTO_KRB5 is not set +CONFIG_CRYPTO_KRB5=m +# CONFIG_CRYPTO_KRB5_SELFTESTS is not set CONFIG_BINARY_PRINTF=y # # Library routines # -CONFIG_RAID6_PQ=y +CONFIG_RAID6_PQ=m CONFIG_RAID6_PQ_BENCHMARK=y CONFIG_LINEAR_RANGES=y # CONFIG_PACKING is not set @@ -7593,7 +7710,7 @@ CONFIG_CRYPTO_LIB_AES=y CONFIG_CRYPTO_LIB_AES_ARCH=y CONFIG_CRYPTO_LIB_AES_CBC_MACS=m CONFIG_CRYPTO_LIB_ARC4=m -CONFIG_CRYPTO_LIB_BLAKE2B=y +CONFIG_CRYPTO_LIB_BLAKE2B=m CONFIG_CRYPTO_LIB_CHACHA=m CONFIG_CRYPTO_LIB_CHACHA_ARCH=y CONFIG_CRYPTO_LIB_CURVE25519=m @@ -7611,7 +7728,7 @@ CONFIG_CRYPTO_LIB_SHA1=y CONFIG_CRYPTO_LIB_SHA1_ARCH=y CONFIG_CRYPTO_LIB_SHA256=y CONFIG_CRYPTO_LIB_SHA512=y -CONFIG_XOR_BLOCKS=y +CONFIG_XOR_BLOCKS=m CONFIG_XOR_BLOCKS_ARCH=y CONFIG_XOR_KUNIT_TEST=m CONFIG_XXHASH=y diff --git a/device/main/linux-postmarketos-stable/config-stable.riscv64 b/device/main/linux-postmarketos-stable/config-stable.riscv64 index 051b3f6dd..cc1426cf6 100644 --- a/device/main/linux-postmarketos-stable/config-stable.riscv64 +++ b/device/main/linux-postmarketos-stable/config-stable.riscv64 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/riscv 7.1.3 Kernel Configuration +# Linux/riscv 7.1.4 Kernel Configuration # CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.8" CONFIG_GCC_VERSION=0 @@ -11,7 +11,7 @@ CONFIG_AS_VERSION=220108 CONFIG_LD_VERSION=0 CONFIG_LD_IS_LLD=y CONFIG_LLD_VERSION=220108 -CONFIG_RUSTC_VERSION=109601 +CONFIG_RUSTC_VERSION=109700 CONFIG_RUST_IS_AVAILABLE=y CONFIG_RUSTC_LLVM_VERSION=220108 CONFIG_RUSTC_LLVM_MAJOR_VERSION=22 @@ -279,6 +279,7 @@ CONFIG_PERF_EVENTS=y # CONFIG_DEBUG_PERF_USE_VMALLOC is not set # end of Kernel Performance Events And Counters +CONFIG_SYSTEM_DATA_VERIFICATION=y CONFIG_PROFILING=y CONFIG_TRACEPOINTS=y @@ -750,6 +751,7 @@ CONFIG_HAVE_ARCH_GET_SECUREBOOT=y # end of General architecture-dependent options CONFIG_RT_MUTEXES=y +CONFIG_MODULE_SIG_FORMAT=y CONFIG_MODULES=y # CONFIG_MODULE_DEBUG is not set # CONFIG_MODULE_FORCE_LOAD is not set @@ -758,7 +760,16 @@ CONFIG_MODULE_UNLOAD=y # CONFIG_MODULE_UNLOAD_TAINT_TRACKING is not set # CONFIG_MODVERSIONS is not set # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set +CONFIG_MODULE_SIG=y +# CONFIG_MODULE_SIG_FORCE is not set +CONFIG_MODULE_SIG_ALL=y +# CONFIG_MODULE_SIG_SHA256 is not set +# CONFIG_MODULE_SIG_SHA384 is not set +CONFIG_MODULE_SIG_SHA512=y +# CONFIG_MODULE_SIG_SHA3_256 is not set +# CONFIG_MODULE_SIG_SHA3_384 is not set +# CONFIG_MODULE_SIG_SHA3_512 is not set +CONFIG_MODULE_SIG_HASH="sha512" CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_GZIP is not set # CONFIG_MODULE_COMPRESS_XZ is not set @@ -1446,8 +1457,11 @@ CONFIG_CAN_GW=m # CONFIG_CAN_ISOTP is not set CONFIG_BT=m CONFIG_BT_BREDR=y -# CONFIG_BT_RFCOMM is not set -# CONFIG_BT_BNEP is not set +CONFIG_BT_RFCOMM=m +# CONFIG_BT_RFCOMM_TTY is not set +CONFIG_BT_BNEP=m +# CONFIG_BT_BNEP_MC_FILTER is not set +# CONFIG_BT_BNEP_PROTO_FILTER is not set CONFIG_BT_HIDP=m CONFIG_BT_LE=y CONFIG_BT_LE_L2CAP_ECRED=y @@ -1460,7 +1474,15 @@ CONFIG_BT_DEBUGFS=y # # Bluetooth device drivers # -# CONFIG_BT_HCIBTUSB is not set +CONFIG_BT_INTEL=m +CONFIG_BT_BCM=m +CONFIG_BT_RTL=m +CONFIG_BT_HCIBTUSB=m +# CONFIG_BT_HCIBTUSB_AUTOSUSPEND is not set +CONFIG_BT_HCIBTUSB_POLL_SYNC=y +CONFIG_BT_HCIBTUSB_BCM=y +# CONFIG_BT_HCIBTUSB_MTK is not set +CONFIG_BT_HCIBTUSB_RTL=y # CONFIG_BT_HCIBTSDIO is not set # CONFIG_BT_HCIUART is not set # CONFIG_BT_HCIBCM203X is not set @@ -1468,6 +1490,7 @@ CONFIG_BT_DEBUGFS=y # CONFIG_BT_HCIBFUSB is not set # CONFIG_BT_HCIVHCI is not set # CONFIG_BT_MRVL is not set +# CONFIG_BT_ATH3K is not set # CONFIG_BT_MTKSDIO is not set # CONFIG_BT_VIRTIO is not set # CONFIG_BT_INTEL_PCIE is not set @@ -1478,11 +1501,24 @@ CONFIG_BT_DEBUGFS=y # CONFIG_MCTP is not set CONFIG_FIB_RULES=y CONFIG_WIRELESS=y -# CONFIG_CFG80211 is not set - -# -# CFG80211 needs to be enabled for MAC80211 -# +CONFIG_CFG80211=m +# CONFIG_NL80211_TESTMODE is not set +# CONFIG_CFG80211_DEVELOPER_WARNINGS is not set +CONFIG_CFG80211_REQUIRE_SIGNED_REGDB=y +CONFIG_CFG80211_USE_KERNEL_REGDB_KEYS=y +CONFIG_CFG80211_DEFAULT_PS=y +# CONFIG_CFG80211_DEBUGFS is not set +CONFIG_CFG80211_CRDA_SUPPORT=y +# CONFIG_CFG80211_WEXT is not set +CONFIG_MAC80211=m +CONFIG_MAC80211_HAS_RC=y +CONFIG_MAC80211_RC_MINSTREL=y +CONFIG_MAC80211_RC_DEFAULT_MINSTREL=y +CONFIG_MAC80211_RC_DEFAULT="minstrel_ht" +# CONFIG_MAC80211_MESH is not set +CONFIG_MAC80211_LEDS=y +# CONFIG_MAC80211_MESSAGE_TRACING is not set +# CONFIG_MAC80211_DEBUG_MENU is not set CONFIG_MAC80211_STA_HASH_MAX_SIZE=0 CONFIG_RFKILL=m CONFIG_RFKILL_LEDS=y @@ -2318,7 +2354,8 @@ CONFIG_NET_VENDOR_INTEL=y # CONFIG_E100 is not set # CONFIG_E1000 is not set CONFIG_E1000E=y -# CONFIG_IGB is not set +CONFIG_IGB=m +CONFIG_IGB_HWMON=y # CONFIG_IGBVF is not set # CONFIG_IXGBE is not set # CONFIG_IXGBEVF is not set @@ -2657,25 +2694,112 @@ CONFIG_USB_NET_ZAURUS=m CONFIG_USB_RTL8153_ECM=m CONFIG_WLAN=y CONFIG_WLAN_VENDOR_ADMTEK=y +# CONFIG_ADM8211 is not set CONFIG_WLAN_VENDOR_ATH=y # CONFIG_ATH_DEBUG is not set +# CONFIG_ATH5K is not set # CONFIG_ATH5K_PCI is not set +# CONFIG_ATH9K is not set +# CONFIG_ATH9K_HTC is not set +# CONFIG_CARL9170 is not set +# CONFIG_ATH6KL is not set +# CONFIG_AR5523 is not set +# CONFIG_WIL6210 is not set +# CONFIG_ATH10K is not set +# CONFIG_WCN36XX is not set +# CONFIG_ATH11K is not set +# CONFIG_ATH12K is not set CONFIG_WLAN_VENDOR_ATMEL=y +# CONFIG_AT76C50X_USB is not set CONFIG_WLAN_VENDOR_BROADCOM=y +# CONFIG_B43 is not set +# CONFIG_B43LEGACY is not set +# CONFIG_BRCMSMAC is not set +# CONFIG_BRCMFMAC is not set CONFIG_WLAN_VENDOR_INTEL=y +# CONFIG_IPW2100 is not set +# CONFIG_IPW2200 is not set +# CONFIG_IWL4965 is not set +# CONFIG_IWL3945 is not set +CONFIG_IWLWIFI=m +CONFIG_IWLWIFI_LEDS=y +CONFIG_IWLDVM=m +CONFIG_IWLMVM=m +# CONFIG_IWLMLD is not set +CONFIG_IWLWIFI_OPMODE_MODULAR=y + +# +# Debugging Options +# +# CONFIG_IWLWIFI_DEBUG is not set +CONFIG_IWLWIFI_DEVICE_TRACING=y +# end of Debugging Options + CONFIG_WLAN_VENDOR_INTERSIL=y +# CONFIG_P54_COMMON is not set CONFIG_WLAN_VENDOR_MARVELL=y +# CONFIG_LIBERTAS is not set +# CONFIG_LIBERTAS_THINFIRM is not set +# CONFIG_MWIFIEX is not set +# CONFIG_MWL8K is not set CONFIG_WLAN_VENDOR_MEDIATEK=y +# CONFIG_MT7601U is not set +# CONFIG_MT76x0U is not set +# CONFIG_MT76x0E is not set +# CONFIG_MT76x2E is not set +# CONFIG_MT76x2U is not set +# CONFIG_MT7603E is not set +# CONFIG_MT7615E is not set +# CONFIG_MT7663U is not set +# CONFIG_MT7663S is not set +# CONFIG_MT7915E is not set +# CONFIG_MT7921E is not set +# CONFIG_MT7921S is not set +# CONFIG_MT7921U is not set +# CONFIG_MT7996E is not set +# CONFIG_MT7925E is not set +# CONFIG_MT7925U is not set CONFIG_WLAN_VENDOR_MICROCHIP=y +# CONFIG_WILC1000_SDIO is not set +# CONFIG_WILC1000_SPI is not set CONFIG_WLAN_VENDOR_PURELIFI=y +# CONFIG_PLFXLC is not set CONFIG_WLAN_VENDOR_RALINK=y +# CONFIG_RT2X00 is not set CONFIG_WLAN_VENDOR_REALTEK=y +# CONFIG_RTL8180 is not set +# CONFIG_RTL8187 is not set +CONFIG_RTL_CARDS=m +# CONFIG_RTL8192CE is not set +# CONFIG_RTL8192SE is not set +# CONFIG_RTL8192DE is not set +# CONFIG_RTL8723AE is not set +# CONFIG_RTL8723BE is not set +# CONFIG_RTL8188EE is not set +# CONFIG_RTL8192EE is not set +# CONFIG_RTL8821AE is not set +# CONFIG_RTL8192CU is not set +# CONFIG_RTL8192DU is not set +# CONFIG_RTL8XXXU is not set +# CONFIG_RTW88 is not set +# CONFIG_RTW89 is not set CONFIG_WLAN_VENDOR_RSI=y +# CONFIG_RSI_91X is not set CONFIG_WLAN_VENDOR_SILABS=y +# CONFIG_WFX is not set CONFIG_WLAN_VENDOR_ST=y +# CONFIG_CW1200 is not set CONFIG_WLAN_VENDOR_TI=y +# CONFIG_WL1251 is not set +# CONFIG_WL12XX is not set +# CONFIG_WL18XX is not set +# CONFIG_WLCORE is not set CONFIG_WLAN_VENDOR_ZYDAS=y +# CONFIG_ZD1211RW is not set CONFIG_WLAN_VENDOR_QUANTENNA=y +# CONFIG_QTNFMAC_PCIE is not set +# CONFIG_MAC80211_HWSIM is not set +# CONFIG_VIRT_WIFI is not set # CONFIG_WAN is not set # @@ -3039,7 +3163,23 @@ CONFIG_HW_RANDOM_JH7110=m # CONFIG_APPLICOM is not set CONFIG_DEVMEM=y CONFIG_DEVPORT=y -# CONFIG_TCG_TPM is not set +CONFIG_TCG_TPM=y +# CONFIG_TCG_TPM2_HMAC is not set +CONFIG_HW_RANDOM_TPM=y +CONFIG_TCG_TIS_CORE=m +CONFIG_TCG_TIS=m +# CONFIG_TCG_TIS_SPI is not set +# CONFIG_TCG_TIS_I2C is not set +# CONFIG_TCG_TIS_I2C_CR50 is not set +# CONFIG_TCG_TIS_I2C_ATMEL is not set +# CONFIG_TCG_TIS_I2C_INFINEON is not set +# CONFIG_TCG_TIS_I2C_NUVOTON is not set +# CONFIG_TCG_ATMEL is not set +# CONFIG_TCG_INFINEON is not set +# CONFIG_TCG_CRB is not set +# CONFIG_TCG_VTPM_PROXY is not set +# CONFIG_TCG_TIS_ST33ZP24_I2C is not set +# CONFIG_TCG_TIS_ST33ZP24_SPI is not set # CONFIG_XILLYBUS is not set # CONFIG_XILLYUSB is not set # end of Character devices @@ -5647,7 +5787,19 @@ CONFIG_USB_MUSB_SUNXI=m # MUSB DMA mode # # CONFIG_MUSB_PIO_ONLY is not set -# CONFIG_USB_DWC3 is not set +CONFIG_USB_DWC3=y +# CONFIG_USB_DWC3_HOST is not set +# CONFIG_USB_DWC3_GADGET is not set +CONFIG_USB_DWC3_DUAL_ROLE=y + +# +# Platform Glue Driver Support +# +CONFIG_USB_DWC3_PCI=y +CONFIG_USB_DWC3_HAPS=y +CONFIG_USB_DWC3_OF_SIMPLE=y +CONFIG_USB_DWC3_GENERIC_PLAT=y +# CONFIG_USB_DWC3_GOOGLE is not set # CONFIG_USB_DWC2 is not set # CONFIG_USB_CHIPIDEA is not set # CONFIG_USB_ISP1760 is not set @@ -5835,7 +5987,7 @@ CONFIG_USB_CONFIGFS_F_FS=y # end of USB Gadget precomposed configurations # CONFIG_TYPEC is not set -CONFIG_USB_ROLE_SWITCH=m +CONFIG_USB_ROLE_SWITCH=y CONFIG_MMC=y CONFIG_PWRSEQ_EMMC=y CONFIG_PWRSEQ_SIMPLE=y @@ -7206,14 +7358,16 @@ CONFIG_PHY_SUN6I_MIPI_DPHY=m # CONFIG_PHY_OCELOT_SERDES is not set # CONFIG_PHY_SOPHGO_CV1800_USB2 is not set CONFIG_PHY_SPACEMIT_K1_PCIE=y -# CONFIG_PHY_SPACEMIT_K1_USB2 is not set +CONFIG_PHY_SPACEMIT_K1_USB2=y CONFIG_PHY_STARFIVE_JH7110_DPHY_RX=m # CONFIG_PHY_STARFIVE_JH7110_DPHY_TX is not set CONFIG_PHY_STARFIVE_JH7110_PCIE=m CONFIG_PHY_STARFIVE_JH7110_USB=m # end of PHY Subsystem -# CONFIG_POWERCAP is not set +CONFIG_POWERCAP=y +# CONFIG_IDLE_INJECT is not set +# CONFIG_DTPM is not set # CONFIG_MCB is not set # @@ -7317,14 +7471,14 @@ CONFIG_XFS_ONLINE_REPAIR=y # CONFIG_XFS_DEBUG is not set # CONFIG_GFS2_FS is not set # CONFIG_OCFS2_FS is not set -CONFIG_BTRFS_FS=y +CONFIG_BTRFS_FS=m CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set # CONFIG_BTRFS_DEBUG is not set # CONFIG_BTRFS_ASSERT is not set # CONFIG_BTRFS_EXPERIMENTAL is not set # CONFIG_NILFS2_FS is not set -CONFIG_F2FS_FS=y +CONFIG_F2FS_FS=m CONFIG_F2FS_STAT_FS=y CONFIG_F2FS_FS_XATTR=y CONFIG_F2FS_FS_POSIX_ACL=y @@ -7650,7 +7804,11 @@ CONFIG_SECURITY_APPARMOR_PARANOID_LOAD=y # CONFIG_SECURITY_LOADPIN is not set CONFIG_SECURITY_YAMA=y # CONFIG_SECURITY_SAFESETID is not set -# CONFIG_SECURITY_LOCKDOWN_LSM is not set +CONFIG_SECURITY_LOCKDOWN_LSM=y +CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y +# CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE is not set +CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y +# CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set # CONFIG_SECURITY_LANDLOCK is not set # CONFIG_SECURITY_IPE is not set CONFIG_INTEGRITY=y @@ -7730,7 +7888,7 @@ CONFIG_CRYPTO_MANAGER2=y # CONFIG_CRYPTO_PCRYPT is not set # CONFIG_CRYPTO_CRYPTD is not set CONFIG_CRYPTO_AUTHENC=y -# CONFIG_CRYPTO_KRB5ENC is not set +CONFIG_CRYPTO_KRB5ENC=m # CONFIG_CRYPTO_BENCHMARK is not set CONFIG_CRYPTO_ENGINE=m # end of Crypto core or helper @@ -7738,7 +7896,7 @@ CONFIG_CRYPTO_ENGINE=m # # Public-key cryptography # -CONFIG_CRYPTO_RSA=m +CONFIG_CRYPTO_RSA=y CONFIG_CRYPTO_DH=y # CONFIG_CRYPTO_DH_RFC7919_GROUPS is not set CONFIG_CRYPTO_ECC=m @@ -7885,23 +8043,35 @@ CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y CONFIG_X509_CERTIFICATE_PARSER=y CONFIG_PKCS8_PRIVATE_KEY_PARSER=m CONFIG_PKCS7_MESSAGE_PARSER=y +# CONFIG_PKCS7_TEST_KEY is not set +# CONFIG_SIGNED_PE_FILE_VERIFICATION is not set # CONFIG_FIPS_SIGNATURE_SELFTEST is not set # # Certificates for signature checking # -# CONFIG_SYSTEM_TRUSTED_KEYRING is not set +CONFIG_MODULE_SIG_KEY="certs/signing_key.pem" +CONFIG_MODULE_SIG_KEY_TYPE_RSA=y +# CONFIG_MODULE_SIG_KEY_TYPE_ECDSA is not set +# CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_44 is not set +# CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_65 is not set +# CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_87 is not set +CONFIG_SYSTEM_TRUSTED_KEYRING=y +CONFIG_SYSTEM_TRUSTED_KEYS="" +# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set +# CONFIG_SECONDARY_TRUSTED_KEYRING is not set # CONFIG_SYSTEM_BLACKLIST_KEYRING is not set CONFIG_OPENSSL_SUPPORTS_ML_DSA=y # end of Certificates for signature checking -# CONFIG_CRYPTO_KRB5 is not set +CONFIG_CRYPTO_KRB5=m +# CONFIG_CRYPTO_KRB5_SELFTESTS is not set CONFIG_BINARY_PRINTF=y # # Library routines # -CONFIG_RAID6_PQ=y +CONFIG_RAID6_PQ=m CONFIG_RAID6_PQ_BENCHMARK=y CONFIG_LINEAR_RANGES=y # CONFIG_PACKING is not set @@ -7932,7 +8102,7 @@ CONFIG_CRYPTO_LIB_UTILS=y CONFIG_CRYPTO_LIB_AES=y CONFIG_CRYPTO_LIB_AES_CBC_MACS=m CONFIG_CRYPTO_LIB_ARC4=m -CONFIG_CRYPTO_LIB_BLAKE2B=y +CONFIG_CRYPTO_LIB_BLAKE2B=m CONFIG_CRYPTO_LIB_CHACHA=m CONFIG_CRYPTO_LIB_CURVE25519=m CONFIG_CRYPTO_LIB_CURVE25519_GENERIC=y @@ -7946,7 +8116,7 @@ CONFIG_CRYPTO_LIB_CHACHA20POLY1305=m CONFIG_CRYPTO_LIB_SHA1=y CONFIG_CRYPTO_LIB_SHA256=y CONFIG_CRYPTO_LIB_SHA512=y -CONFIG_XOR_BLOCKS=y +CONFIG_XOR_BLOCKS=m CONFIG_XOR_BLOCKS_ARCH=y CONFIG_XXHASH=y CONFIG_AUDIT_GENERIC=y diff --git a/device/main/linux-postmarketos-stable/config-stable.x86 b/device/main/linux-postmarketos-stable/config-stable.x86 index efdc72ec9..4883bf67c 100644 --- a/device/main/linux-postmarketos-stable/config-stable.x86 +++ b/device/main/linux-postmarketos-stable/config-stable.x86 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/i386 7.1.3 Kernel Configuration +# Linux/i386 7.1.4 Kernel Configuration # CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.8" CONFIG_GCC_VERSION=0 @@ -11,7 +11,7 @@ CONFIG_AS_VERSION=220108 CONFIG_LD_VERSION=0 CONFIG_LD_IS_LLD=y CONFIG_LLD_VERSION=220108 -CONFIG_RUSTC_VERSION=109601 +CONFIG_RUSTC_VERSION=109700 CONFIG_RUST_IS_AVAILABLE=y CONFIG_RUSTC_LLVM_VERSION=220108 CONFIG_RUSTC_LLVM_MAJOR_VERSION=22 @@ -871,6 +871,7 @@ CONFIG_HAVE_ARCH_GET_SECUREBOOT=y # end of General architecture-dependent options CONFIG_RT_MUTEXES=y +CONFIG_MODULE_SIG_FORMAT=y CONFIG_MODULES=y # CONFIG_MODULE_DEBUG is not set # CONFIG_MODULE_FORCE_LOAD is not set @@ -879,7 +880,16 @@ CONFIG_MODULE_FORCE_UNLOAD=y # CONFIG_MODULE_UNLOAD_TAINT_TRACKING is not set # CONFIG_MODVERSIONS is not set # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set +CONFIG_MODULE_SIG=y +# CONFIG_MODULE_SIG_FORCE is not set +CONFIG_MODULE_SIG_ALL=y +# CONFIG_MODULE_SIG_SHA256 is not set +# CONFIG_MODULE_SIG_SHA384 is not set +CONFIG_MODULE_SIG_SHA512=y +# CONFIG_MODULE_SIG_SHA3_256 is not set +# CONFIG_MODULE_SIG_SHA3_384 is not set +# CONFIG_MODULE_SIG_SHA3_512 is not set +CONFIG_MODULE_SIG_HASH="sha512" CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_GZIP is not set # CONFIG_MODULE_COMPRESS_XZ is not set @@ -1594,8 +1604,11 @@ CONFIG_NET_FLOW_LIMIT=y # CONFIG_CAN is not set CONFIG_BT=m CONFIG_BT_BREDR=y -# CONFIG_BT_RFCOMM is not set -# CONFIG_BT_BNEP is not set +CONFIG_BT_RFCOMM=m +# CONFIG_BT_RFCOMM_TTY is not set +CONFIG_BT_BNEP=m +# CONFIG_BT_BNEP_MC_FILTER is not set +# CONFIG_BT_BNEP_PROTO_FILTER is not set CONFIG_BT_HIDP=m CONFIG_BT_LE=y CONFIG_BT_LE_L2CAP_ECRED=y @@ -1608,7 +1621,15 @@ CONFIG_BT_DEBUGFS=y # # Bluetooth device drivers # -# CONFIG_BT_HCIBTUSB is not set +CONFIG_BT_INTEL=m +CONFIG_BT_BCM=m +CONFIG_BT_RTL=m +CONFIG_BT_HCIBTUSB=m +# CONFIG_BT_HCIBTUSB_AUTOSUSPEND is not set +CONFIG_BT_HCIBTUSB_POLL_SYNC=y +CONFIG_BT_HCIBTUSB_BCM=y +# CONFIG_BT_HCIBTUSB_MTK is not set +CONFIG_BT_HCIBTUSB_RTL=y # CONFIG_BT_HCIUART is not set # CONFIG_BT_HCIBCM203X is not set # CONFIG_BT_HCIBCM4377 is not set @@ -1618,6 +1639,7 @@ CONFIG_BT_DEBUGFS=y # CONFIG_BT_HCIBLUECARD is not set # CONFIG_BT_HCIVHCI is not set # CONFIG_BT_MRVL is not set +# CONFIG_BT_ATH3K is not set # CONFIG_BT_VIRTIO is not set # CONFIG_BT_INTEL_PCIE is not set # end of Bluetooth device drivers @@ -2379,7 +2401,8 @@ CONFIG_E100=y CONFIG_E1000=y CONFIG_E1000E=y CONFIG_E1000E_HWTS=y -# CONFIG_IGB is not set +CONFIG_IGB=m +CONFIG_IGB_HWMON=y # CONFIG_IGBVF is not set # CONFIG_IXGBE is not set # CONFIG_IXGBEVF is not set @@ -2671,7 +2694,20 @@ CONFIG_WLAN_VENDOR_INTEL=y # CONFIG_IPW2200 is not set # CONFIG_IWL4965 is not set # CONFIG_IWL3945 is not set -# CONFIG_IWLWIFI is not set +CONFIG_IWLWIFI=m +CONFIG_IWLWIFI_LEDS=y +CONFIG_IWLDVM=m +CONFIG_IWLMVM=m +# CONFIG_IWLMLD is not set +CONFIG_IWLWIFI_OPMODE_MODULAR=y + +# +# Debugging Options +# +# CONFIG_IWLWIFI_DEBUG is not set +CONFIG_IWLWIFI_DEVICE_TRACING=y +# end of Debugging Options + CONFIG_WLAN_VENDOR_INTERSIL=y # CONFIG_P54_COMMON is not set CONFIG_WLAN_VENDOR_MARVELL=y @@ -2937,7 +2973,7 @@ CONFIG_INPUT_MISC=y # CONFIG_INPUT_AW86927 is not set # CONFIG_INPUT_BMA150 is not set # CONFIG_INPUT_E3X0_BUTTON is not set -# CONFIG_INPUT_PCSPKR is not set +CONFIG_INPUT_PCSPKR=m # CONFIG_INPUT_MAX77693_HAPTIC is not set # CONFIG_INPUT_MMA8450 is not set # CONFIG_INPUT_APANEL is not set @@ -3105,7 +3141,24 @@ CONFIG_DEVPORT=y CONFIG_HPET=y # CONFIG_HPET_MMAP is not set # CONFIG_HANGCHECK_TIMER is not set -# CONFIG_TCG_TPM is not set +CONFIG_TCG_TPM=y +# CONFIG_TCG_TPM2_HMAC is not set +CONFIG_HW_RANDOM_TPM=y +CONFIG_TCG_TIS_CORE=m +CONFIG_TCG_TIS=m +# CONFIG_TCG_TIS_SPI is not set +# CONFIG_TCG_TIS_I2C is not set +# CONFIG_TCG_TIS_I2C_CR50 is not set +# CONFIG_TCG_TIS_I2C_ATMEL is not set +# CONFIG_TCG_TIS_I2C_INFINEON is not set +# CONFIG_TCG_TIS_I2C_NUVOTON is not set +# CONFIG_TCG_NSC is not set +# CONFIG_TCG_ATMEL is not set +# CONFIG_TCG_INFINEON is not set +# CONFIG_TCG_CRB is not set +# CONFIG_TCG_VTPM_PROXY is not set +# CONFIG_TCG_TIS_ST33ZP24_I2C is not set +# CONFIG_TCG_TIS_ST33ZP24_SPI is not set # CONFIG_TELCLOCK is not set # CONFIG_XILLYBUS is not set # CONFIG_XILLYUSB is not set @@ -3136,10 +3189,11 @@ CONFIG_I2C_ALGOBIT=m # CONFIG_I2C_AMD756 is not set # CONFIG_I2C_AMD8111 is not set # CONFIG_I2C_AMD_MP2 is not set +# CONFIG_I2C_AMD_ASF is not set CONFIG_I2C_I801=y # CONFIG_I2C_ISCH is not set # CONFIG_I2C_ISMT is not set -# CONFIG_I2C_PIIX4 is not set +CONFIG_I2C_PIIX4=m # CONFIG_I2C_NFORCE2 is not set # CONFIG_I2C_NVIDIA_GPU is not set # CONFIG_I2C_SIS5595 is not set @@ -3458,7 +3512,7 @@ CONFIG_HWMON=y # CONFIG_SENSORS_ASUS_ROG_RYUJIN is not set # CONFIG_SENSORS_AXI_FAN_CONTROL is not set # CONFIG_SENSORS_K8TEMP is not set -# CONFIG_SENSORS_K10TEMP is not set +CONFIG_SENSORS_K10TEMP=m # CONFIG_SENSORS_FAM15H_POWER is not set # CONFIG_SENSORS_APPLESMC is not set # CONFIG_SENSORS_ASB100 is not set @@ -3666,7 +3720,7 @@ CONFIG_X86_PKG_TEMP_THERMAL=m # CONFIG_GENERIC_ADC_THERMAL is not set CONFIG_WATCHDOG=y -# CONFIG_WATCHDOG_CORE is not set +CONFIG_WATCHDOG_CORE=m # CONFIG_WATCHDOG_NOWAYOUT is not set CONFIG_WATCHDOG_HANDLE_BOOT_ENABLED=y CONFIG_WATCHDOG_OPEN_TIMEOUT=0 @@ -3676,6 +3730,7 @@ CONFIG_WATCHDOG_OPEN_TIMEOUT=0 # # Watchdog Pretimeout Governors # +# CONFIG_WATCHDOG_PRETIMEOUT_GOV is not set # # Watchdog Device Drivers @@ -3697,7 +3752,7 @@ CONFIG_WATCHDOG_OPEN_TIMEOUT=0 # CONFIG_EBC_C384_WDT is not set # CONFIG_EXAR_WDT is not set # CONFIG_F71808E_WDT is not set -# CONFIG_SP5100_TCO is not set +CONFIG_SP5100_TCO=m # CONFIG_SBC_FITPC2_WATCHDOG is not set # CONFIG_EUROTECH_WDT is not set # CONFIG_IB700_WDT is not set @@ -6199,7 +6254,7 @@ CONFIG_MXM_WMI=m # CONFIG_NVIDIA_WMI_EC_BACKLIGHT is not set # CONFIG_XIAOMI_WMI is not set # CONFIG_REDMI_WMI is not set -# CONFIG_GIGABYTE_WMI is not set +CONFIG_GIGABYTE_WMI=m # CONFIG_BITLAND_MIFS_WMI is not set # CONFIG_ACERHDF is not set # CONFIG_ACER_WIRELESS is not set @@ -7105,7 +7160,10 @@ CONFIG_PWM_CLK=m # CONFIG_PHY_CPCAP_USB is not set # end of PHY Subsystem -# CONFIG_POWERCAP is not set +CONFIG_POWERCAP=y +CONFIG_INTEL_RAPL_CORE=m +CONFIG_INTEL_RAPL=m +# CONFIG_IDLE_INJECT is not set # CONFIG_MCB is not set # @@ -7187,14 +7245,14 @@ CONFIG_XFS_ONLINE_REPAIR=y # CONFIG_XFS_DEBUG is not set # CONFIG_GFS2_FS is not set # CONFIG_OCFS2_FS is not set -CONFIG_BTRFS_FS=y +CONFIG_BTRFS_FS=m CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set # CONFIG_BTRFS_DEBUG is not set # CONFIG_BTRFS_ASSERT is not set # CONFIG_BTRFS_EXPERIMENTAL is not set # CONFIG_NILFS2_FS is not set -CONFIG_F2FS_FS=y +CONFIG_F2FS_FS=m CONFIG_F2FS_STAT_FS=y CONFIG_F2FS_FS_XATTR=y CONFIG_F2FS_FS_POSIX_ACL=y @@ -7514,7 +7572,11 @@ CONFIG_SECURITY_SELINUX_AVC_HASH_BITS=9 # CONFIG_SECURITY_LOADPIN is not set CONFIG_SECURITY_YAMA=y # CONFIG_SECURITY_SAFESETID is not set -# CONFIG_SECURITY_LOCKDOWN_LSM is not set +CONFIG_SECURITY_LOCKDOWN_LSM=y +CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y +# CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE is not set +CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y +# CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set # CONFIG_SECURITY_LANDLOCK is not set # CONFIG_SECURITY_IPE is not set CONFIG_INTEGRITY=y @@ -7597,7 +7659,7 @@ CONFIG_CRYPTO_MANAGER2=y # CONFIG_CRYPTO_PCRYPT is not set # CONFIG_CRYPTO_CRYPTD is not set CONFIG_CRYPTO_AUTHENC=y -# CONFIG_CRYPTO_KRB5ENC is not set +CONFIG_CRYPTO_KRB5ENC=m # CONFIG_CRYPTO_BENCHMARK is not set CONFIG_CRYPTO_ENGINE=m # end of Crypto core or helper @@ -7724,7 +7786,7 @@ CONFIG_CRYPTO_USER_API_ENABLE_OBSOLETE=y # # Accelerated Cryptographic Algorithms for CPU (x86) # -# CONFIG_CRYPTO_AES_NI_INTEL is not set +CONFIG_CRYPTO_AES_NI_INTEL=m # CONFIG_CRYPTO_SERPENT_SSE2_586 is not set # CONFIG_CRYPTO_TWOFISH_586 is not set # end of Accelerated Cryptographic Algorithms for CPU (x86) @@ -7735,7 +7797,11 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_DEV_HIFN_795X is not set # CONFIG_CRYPTO_DEV_ATMEL_ECC is not set # CONFIG_CRYPTO_DEV_ATMEL_SHA204A is not set -# CONFIG_CRYPTO_DEV_CCP is not set +CONFIG_CRYPTO_DEV_CCP=y +CONFIG_CRYPTO_DEV_CCP_DD=m +CONFIG_CRYPTO_DEV_SP_CCP=y +CONFIG_CRYPTO_DEV_CCP_CRYPTO=m +# CONFIG_CRYPTO_DEV_CCP_DEBUGFS is not set # CONFIG_CRYPTO_DEV_QAT_DH895xCC is not set # CONFIG_CRYPTO_DEV_QAT_C3XXX is not set # CONFIG_CRYPTO_DEV_QAT_C62X is not set @@ -7760,6 +7826,12 @@ CONFIG_PKCS7_MESSAGE_PARSER=y # # Certificates for signature checking # +CONFIG_MODULE_SIG_KEY="certs/signing_key.pem" +CONFIG_MODULE_SIG_KEY_TYPE_RSA=y +# CONFIG_MODULE_SIG_KEY_TYPE_ECDSA is not set +# CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_44 is not set +# CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_65 is not set +# CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_87 is not set CONFIG_SYSTEM_TRUSTED_KEYRING=y CONFIG_SYSTEM_TRUSTED_KEYS="" # CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set @@ -7768,13 +7840,14 @@ CONFIG_SYSTEM_TRUSTED_KEYS="" CONFIG_OPENSSL_SUPPORTS_ML_DSA=y # end of Certificates for signature checking -# CONFIG_CRYPTO_KRB5 is not set +CONFIG_CRYPTO_KRB5=m +# CONFIG_CRYPTO_KRB5_SELFTESTS is not set CONFIG_BINARY_PRINTF=y # # Library routines # -CONFIG_RAID6_PQ=y +CONFIG_RAID6_PQ=m CONFIG_RAID6_PQ_BENCHMARK=y CONFIG_LINEAR_RANGES=y # CONFIG_PACKING is not set @@ -7805,7 +7878,8 @@ CONFIG_CRYPTO_LIB_AES=y CONFIG_CRYPTO_LIB_AES_ARCH=y CONFIG_CRYPTO_LIB_AES_CBC_MACS=y CONFIG_CRYPTO_LIB_ARC4=m -CONFIG_CRYPTO_LIB_BLAKE2B=y +CONFIG_CRYPTO_LIB_GF128MUL=m +CONFIG_CRYPTO_LIB_BLAKE2B=m CONFIG_CRYPTO_LIB_CHACHA=m CONFIG_CRYPTO_LIB_CURVE25519=m CONFIG_CRYPTO_LIB_CURVE25519_GENERIC=y @@ -7819,7 +7893,7 @@ CONFIG_CRYPTO_LIB_CHACHA20POLY1305=m CONFIG_CRYPTO_LIB_SHA1=y CONFIG_CRYPTO_LIB_SHA256=y CONFIG_CRYPTO_LIB_SHA512=y -CONFIG_XOR_BLOCKS=y +CONFIG_XOR_BLOCKS=m CONFIG_XOR_BLOCKS_ARCH=y CONFIG_XXHASH=y CONFIG_AUDIT_GENERIC=y diff --git a/device/main/linux-postmarketos-stable/config-stable.x86_64 b/device/main/linux-postmarketos-stable/config-stable.x86_64 index 268d27b55..ddeb6fc4a 100644 --- a/device/main/linux-postmarketos-stable/config-stable.x86_64 +++ b/device/main/linux-postmarketos-stable/config-stable.x86_64 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86_64 7.1.3 Kernel Configuration +# Linux/x86_64 7.1.4 Kernel Configuration # CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.8" CONFIG_GCC_VERSION=0 @@ -11,7 +11,7 @@ CONFIG_AS_VERSION=220108 CONFIG_LD_VERSION=0 CONFIG_LD_IS_LLD=y CONFIG_LLD_VERSION=220108 -CONFIG_RUSTC_VERSION=109601 +CONFIG_RUSTC_VERSION=109700 CONFIG_RUST_IS_AVAILABLE=y CONFIG_RUSTC_LLVM_VERSION=220108 CONFIG_RUSTC_LLVM_MAJOR_VERSION=22 @@ -309,7 +309,7 @@ CONFIG_PERF_EVENTS=y CONFIG_SYSTEM_DATA_VERIFICATION=y CONFIG_PROFILING=y CONFIG_RUST=y -CONFIG_RUSTC_VERSION_TEXT="rustc 1.96.1 (31fca3adb 2026-06-26) (Alpine Linux Rust 1.96.1-r0)" +CONFIG_RUSTC_VERSION_TEXT="rustc 1.97.0 (2d8144b78 2026-07-07) (Alpine Linux Rust 1.97.0-r0)" CONFIG_BINDGEN_VERSION_TEXT="bindgen 0.72.1" CONFIG_TRACEPOINTS=y @@ -951,6 +951,7 @@ CONFIG_HAVE_ARCH_GET_SECUREBOOT=y # end of General architecture-dependent options CONFIG_RT_MUTEXES=y +CONFIG_MODULE_SIG_FORMAT=y CONFIG_MODULES=y # CONFIG_MODULE_DEBUG is not set # CONFIG_MODULE_FORCE_LOAD is not set @@ -959,7 +960,16 @@ CONFIG_MODULE_FORCE_UNLOAD=y # CONFIG_MODULE_UNLOAD_TAINT_TRACKING is not set # CONFIG_MODVERSIONS is not set # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set +CONFIG_MODULE_SIG=y +# CONFIG_MODULE_SIG_FORCE is not set +CONFIG_MODULE_SIG_ALL=y +# CONFIG_MODULE_SIG_SHA256 is not set +# CONFIG_MODULE_SIG_SHA384 is not set +CONFIG_MODULE_SIG_SHA512=y +# CONFIG_MODULE_SIG_SHA3_256 is not set +# CONFIG_MODULE_SIG_SHA3_384 is not set +# CONFIG_MODULE_SIG_SHA3_512 is not set +CONFIG_MODULE_SIG_HASH="sha512" CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_GZIP is not set # CONFIG_MODULE_COMPRESS_XZ is not set @@ -1701,8 +1711,11 @@ CONFIG_NET_FLOW_LIMIT=y # CONFIG_CAN is not set CONFIG_BT=m CONFIG_BT_BREDR=y -# CONFIG_BT_RFCOMM is not set -# CONFIG_BT_BNEP is not set +CONFIG_BT_RFCOMM=m +# CONFIG_BT_RFCOMM_TTY is not set +CONFIG_BT_BNEP=m +# CONFIG_BT_BNEP_MC_FILTER is not set +# CONFIG_BT_BNEP_PROTO_FILTER is not set CONFIG_BT_HIDP=m CONFIG_BT_LE=y CONFIG_BT_LE_L2CAP_ECRED=y @@ -1715,7 +1728,15 @@ CONFIG_BT_DEBUGFS=y # # Bluetooth device drivers # -# CONFIG_BT_HCIBTUSB is not set +CONFIG_BT_INTEL=m +CONFIG_BT_BCM=m +CONFIG_BT_RTL=m +CONFIG_BT_HCIBTUSB=m +# CONFIG_BT_HCIBTUSB_AUTOSUSPEND is not set +CONFIG_BT_HCIBTUSB_POLL_SYNC=y +CONFIG_BT_HCIBTUSB_BCM=y +# CONFIG_BT_HCIBTUSB_MTK is not set +CONFIG_BT_HCIBTUSB_RTL=y # CONFIG_BT_HCIUART is not set # CONFIG_BT_HCIBCM203X is not set # CONFIG_BT_HCIBCM4377 is not set @@ -1725,6 +1746,7 @@ CONFIG_BT_DEBUGFS=y # CONFIG_BT_HCIBLUECARD is not set # CONFIG_BT_HCIVHCI is not set # CONFIG_BT_MRVL is not set +# CONFIG_BT_ATH3K is not set # CONFIG_BT_VIRTIO is not set # CONFIG_BT_INTEL_PCIE is not set # end of Bluetooth device drivers @@ -1798,8 +1820,9 @@ CONFIG_PCI_QUIRKS=y # CONFIG_PCI_DEBUG is not set # CONFIG_PCI_STUB is not set CONFIG_PCI_ATS=y -# CONFIG_PCI_TSM is not set -# CONFIG_PCI_DOE is not set +CONFIG_PCI_IDE=y +CONFIG_PCI_TSM=y +CONFIG_PCI_DOE=y CONFIG_PCI_LOCKLESS_CONFIG=y # CONFIG_PCI_IOV is not set # CONFIG_PCI_NPEM is not set @@ -1818,7 +1841,7 @@ CONFIG_HOTPLUG_PCI=y # # PCI controller drivers # -# CONFIG_VMD is not set +CONFIG_VMD=y # # Cadence-based PCIe controllers @@ -2499,7 +2522,8 @@ CONFIG_E100=y CONFIG_E1000=y CONFIG_E1000E=y CONFIG_E1000E_HWTS=y -# CONFIG_IGB is not set +CONFIG_IGB=m +CONFIG_IGB_HWMON=y # CONFIG_IGBVF is not set # CONFIG_IXGBE is not set # CONFIG_IXGBEVF is not set @@ -2796,7 +2820,20 @@ CONFIG_WLAN_VENDOR_INTEL=y # CONFIG_IPW2200 is not set # CONFIG_IWL4965 is not set # CONFIG_IWL3945 is not set -# CONFIG_IWLWIFI is not set +CONFIG_IWLWIFI=m +CONFIG_IWLWIFI_LEDS=y +CONFIG_IWLDVM=m +CONFIG_IWLMVM=m +# CONFIG_IWLMLD is not set +CONFIG_IWLWIFI_OPMODE_MODULAR=y + +# +# Debugging Options +# +# CONFIG_IWLWIFI_DEBUG is not set +CONFIG_IWLWIFI_DEVICE_TRACING=y +# end of Debugging Options + CONFIG_WLAN_VENDOR_INTERSIL=y # CONFIG_P54_COMMON is not set CONFIG_WLAN_VENDOR_MARVELL=y @@ -3062,7 +3099,7 @@ CONFIG_INPUT_MISC=y # CONFIG_INPUT_AW86927 is not set # CONFIG_INPUT_BMA150 is not set # CONFIG_INPUT_E3X0_BUTTON is not set -# CONFIG_INPUT_PCSPKR is not set +CONFIG_INPUT_PCSPKR=m # CONFIG_INPUT_MAX77693_HAPTIC is not set # CONFIG_INPUT_MMA8450 is not set # CONFIG_INPUT_APANEL is not set @@ -3223,7 +3260,24 @@ CONFIG_DEVPORT=y CONFIG_HPET=y # CONFIG_HPET_MMAP is not set # CONFIG_HANGCHECK_TIMER is not set -# CONFIG_TCG_TPM is not set +CONFIG_TCG_TPM=y +# CONFIG_TCG_TPM2_HMAC is not set +CONFIG_HW_RANDOM_TPM=y +CONFIG_TCG_TIS_CORE=m +CONFIG_TCG_TIS=m +# CONFIG_TCG_TIS_SPI is not set +# CONFIG_TCG_TIS_I2C is not set +# CONFIG_TCG_TIS_I2C_CR50 is not set +# CONFIG_TCG_TIS_I2C_ATMEL is not set +# CONFIG_TCG_TIS_I2C_INFINEON is not set +# CONFIG_TCG_TIS_I2C_NUVOTON is not set +# CONFIG_TCG_NSC is not set +# CONFIG_TCG_ATMEL is not set +# CONFIG_TCG_INFINEON is not set +# CONFIG_TCG_CRB is not set +# CONFIG_TCG_VTPM_PROXY is not set +# CONFIG_TCG_TIS_ST33ZP24_I2C is not set +# CONFIG_TCG_TIS_ST33ZP24_SPI is not set # CONFIG_TELCLOCK is not set # CONFIG_XILLYBUS is not set # CONFIG_XILLYUSB is not set @@ -3254,10 +3308,11 @@ CONFIG_I2C_ALGOBIT=m # CONFIG_I2C_AMD756 is not set # CONFIG_I2C_AMD8111 is not set # CONFIG_I2C_AMD_MP2 is not set +# CONFIG_I2C_AMD_ASF is not set CONFIG_I2C_I801=y # CONFIG_I2C_ISCH is not set # CONFIG_I2C_ISMT is not set -# CONFIG_I2C_PIIX4 is not set +CONFIG_I2C_PIIX4=m # CONFIG_I2C_NFORCE2 is not set # CONFIG_I2C_NVIDIA_GPU is not set # CONFIG_I2C_SIS5595 is not set @@ -3573,7 +3628,7 @@ CONFIG_HWMON=y # CONFIG_SENSORS_ASUS_ROG_RYUJIN is not set # CONFIG_SENSORS_AXI_FAN_CONTROL is not set # CONFIG_SENSORS_K8TEMP is not set -# CONFIG_SENSORS_K10TEMP is not set +CONFIG_SENSORS_K10TEMP=m # CONFIG_SENSORS_FAM15H_POWER is not set # CONFIG_SENSORS_APPLESMC is not set # CONFIG_SENSORS_ASB100 is not set @@ -3784,7 +3839,7 @@ CONFIG_X86_PKG_TEMP_THERMAL=m # CONFIG_GENERIC_ADC_THERMAL is not set CONFIG_WATCHDOG=y -# CONFIG_WATCHDOG_CORE is not set +CONFIG_WATCHDOG_CORE=m # CONFIG_WATCHDOG_NOWAYOUT is not set CONFIG_WATCHDOG_HANDLE_BOOT_ENABLED=y CONFIG_WATCHDOG_OPEN_TIMEOUT=0 @@ -3794,6 +3849,7 @@ CONFIG_WATCHDOG_OPEN_TIMEOUT=0 # # Watchdog Pretimeout Governors # +# CONFIG_WATCHDOG_PRETIMEOUT_GOV is not set # # Watchdog Device Drivers @@ -3815,7 +3871,7 @@ CONFIG_WATCHDOG_OPEN_TIMEOUT=0 # CONFIG_EBC_C384_WDT is not set # CONFIG_EXAR_WDT is not set # CONFIG_F71808E_WDT is not set -# CONFIG_SP5100_TCO is not set +CONFIG_SP5100_TCO=m # CONFIG_SBC_FITPC2_WATCHDOG is not set # CONFIG_EUROTECH_WDT is not set # CONFIG_IB700_WDT is not set @@ -6280,6 +6336,7 @@ CONFIG_UDMABUF=y # CONFIG_UIO is not set # CONFIG_VFIO is not set # CONFIG_VIRT_DRIVERS is not set +CONFIG_TSM=y CONFIG_VIRTIO_ANCHOR=y CONFIG_VIRTIO=y CONFIG_VIRTIO_PCI_LIB=y @@ -6333,7 +6390,7 @@ CONFIG_MXM_WMI=m # CONFIG_NVIDIA_WMI_EC_BACKLIGHT is not set # CONFIG_XIAOMI_WMI is not set # CONFIG_REDMI_WMI is not set -# CONFIG_GIGABYTE_WMI is not set +CONFIG_GIGABYTE_WMI=m # CONFIG_BITLAND_MIFS_WMI is not set # CONFIG_ACERHDF is not set # CONFIG_ACER_WIRELESS is not set @@ -7278,7 +7335,10 @@ CONFIG_IRQ_MSI_LIB=y # CONFIG_PHY_CPCAP_USB is not set # end of PHY Subsystem -# CONFIG_POWERCAP is not set +CONFIG_POWERCAP=y +CONFIG_INTEL_RAPL_CORE=m +CONFIG_INTEL_RAPL=m +# CONFIG_IDLE_INJECT is not set # CONFIG_MCB is not set # @@ -7361,14 +7421,14 @@ CONFIG_XFS_ONLINE_REPAIR=y # CONFIG_XFS_DEBUG is not set # CONFIG_GFS2_FS is not set # CONFIG_OCFS2_FS is not set -CONFIG_BTRFS_FS=y +CONFIG_BTRFS_FS=m CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set # CONFIG_BTRFS_DEBUG is not set # CONFIG_BTRFS_ASSERT is not set # CONFIG_BTRFS_EXPERIMENTAL is not set # CONFIG_NILFS2_FS is not set -CONFIG_F2FS_FS=y +CONFIG_F2FS_FS=m CONFIG_F2FS_STAT_FS=y CONFIG_F2FS_FS_XATTR=y CONFIG_F2FS_FS_POSIX_ACL=y @@ -7699,7 +7759,11 @@ CONFIG_SECURITY_SELINUX_AVC_HASH_BITS=9 # CONFIG_SECURITY_LOADPIN is not set CONFIG_SECURITY_YAMA=y # CONFIG_SECURITY_SAFESETID is not set -# CONFIG_SECURITY_LOCKDOWN_LSM is not set +CONFIG_SECURITY_LOCKDOWN_LSM=y +CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y +# CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE is not set +CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y +# CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set # CONFIG_SECURITY_LANDLOCK is not set # CONFIG_SECURITY_IPE is not set CONFIG_INTEGRITY=y @@ -7783,7 +7847,7 @@ CONFIG_CRYPTO_MANAGER2=y # CONFIG_CRYPTO_PCRYPT is not set # CONFIG_CRYPTO_CRYPTD is not set CONFIG_CRYPTO_AUTHENC=y -# CONFIG_CRYPTO_KRB5ENC is not set +CONFIG_CRYPTO_KRB5ENC=m # CONFIG_CRYPTO_BENCHMARK is not set CONFIG_CRYPTO_ENGINE=m # end of Crypto core or helper @@ -7910,7 +7974,7 @@ CONFIG_CRYPTO_USER_API_ENABLE_OBSOLETE=y # # Accelerated Cryptographic Algorithms for CPU (x86) # -# CONFIG_CRYPTO_AES_NI_INTEL is not set +CONFIG_CRYPTO_AES_NI_INTEL=m # CONFIG_CRYPTO_BLOWFISH_X86_64 is not set # CONFIG_CRYPTO_CAMELLIA_X86_64 is not set # CONFIG_CRYPTO_CAMELLIA_AESNI_AVX_X86_64 is not set @@ -7935,7 +7999,12 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_DEV_PADLOCK is not set # CONFIG_CRYPTO_DEV_ATMEL_ECC is not set # CONFIG_CRYPTO_DEV_ATMEL_SHA204A is not set -# CONFIG_CRYPTO_DEV_CCP is not set +CONFIG_CRYPTO_DEV_CCP=y +CONFIG_CRYPTO_DEV_CCP_DD=m +CONFIG_CRYPTO_DEV_SP_CCP=y +CONFIG_CRYPTO_DEV_CCP_CRYPTO=m +CONFIG_CRYPTO_DEV_SP_PSP=y +# CONFIG_CRYPTO_DEV_CCP_DEBUGFS is not set # CONFIG_CRYPTO_DEV_NITROX_CNN55XX is not set # CONFIG_CRYPTO_DEV_QAT_DH895xCC is not set # CONFIG_CRYPTO_DEV_QAT_C3XXX is not set @@ -7961,6 +8030,12 @@ CONFIG_PKCS7_MESSAGE_PARSER=y # # Certificates for signature checking # +CONFIG_MODULE_SIG_KEY="certs/signing_key.pem" +CONFIG_MODULE_SIG_KEY_TYPE_RSA=y +# CONFIG_MODULE_SIG_KEY_TYPE_ECDSA is not set +# CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_44 is not set +# CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_65 is not set +# CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_87 is not set CONFIG_SYSTEM_TRUSTED_KEYRING=y CONFIG_SYSTEM_TRUSTED_KEYS="" # CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set @@ -7969,13 +8044,14 @@ CONFIG_SYSTEM_TRUSTED_KEYS="" CONFIG_OPENSSL_SUPPORTS_ML_DSA=y # end of Certificates for signature checking -# CONFIG_CRYPTO_KRB5 is not set +CONFIG_CRYPTO_KRB5=m +# CONFIG_CRYPTO_KRB5_SELFTESTS is not set CONFIG_BINARY_PRINTF=y # # Library routines # -CONFIG_RAID6_PQ=y +CONFIG_RAID6_PQ=m CONFIG_RAID6_PQ_BENCHMARK=y CONFIG_LINEAR_RANGES=y # CONFIG_PACKING is not set @@ -8007,7 +8083,8 @@ CONFIG_CRYPTO_LIB_AES=y CONFIG_CRYPTO_LIB_AES_ARCH=y CONFIG_CRYPTO_LIB_AES_CBC_MACS=y CONFIG_CRYPTO_LIB_ARC4=m -CONFIG_CRYPTO_LIB_BLAKE2B=y +CONFIG_CRYPTO_LIB_GF128MUL=m +CONFIG_CRYPTO_LIB_BLAKE2B=m CONFIG_CRYPTO_LIB_BLAKE2S_ARCH=y CONFIG_CRYPTO_LIB_CHACHA=m CONFIG_CRYPTO_LIB_CHACHA_ARCH=y @@ -8028,7 +8105,7 @@ CONFIG_CRYPTO_LIB_SHA256=y CONFIG_CRYPTO_LIB_SHA256_ARCH=y CONFIG_CRYPTO_LIB_SHA512=y CONFIG_CRYPTO_LIB_SHA512_ARCH=y -CONFIG_XOR_BLOCKS=y +CONFIG_XOR_BLOCKS=m CONFIG_XOR_BLOCKS_ARCH=y CONFIG_XXHASH=y # CONFIG_RANDOM32_SELFTEST is not set diff --git a/device/main/linux-postmarketos-stable/generic.aarch64.config b/device/main/linux-postmarketos-stable/generic.aarch64.config index d4a6efba4..76fcc98e3 100644 --- a/device/main/linux-postmarketos-stable/generic.aarch64.config +++ b/device/main/linux-postmarketos-stable/generic.aarch64.config @@ -8,6 +8,10 @@ CONFIG_SND_SOC_CS35L41_SPI=m CONFIG_SND_SOC_TFA989X=m CONFIG_SND_SOC_WCD938X_SDW=m +# bluetooth +CONFIG_BT_HCIBTUSB=m +CONFIG_BT_RFCOMM=m + # clocks CONFIG_COMMON_CLK=y CONFIG_PWM=y @@ -20,6 +24,10 @@ CONFIG_SC_VIDEOCC_7180=m CONFIG_SM_VIDEOCC_8250=m CONFIG_SM_VIDEOCC_8350=m +# ethernet +CONFIG_BT_BNEP=m +CONFIG_IGB=m + # graphics CONFIG_BACKLIGHT_CLASS_DEVICE=y CONFIG_BACKLIGHT_GPIO=y @@ -94,11 +102,17 @@ CONFIG_RT61PCI=m CONFIG_RT73USB=m CONFIG_RTL8187=m CONFIG_RTL8723BS=m +CONFIG_CFG80211=m +CONFIG_IWLDVM=m +CONFIG_IWLMVM=m +CONFIG_IWLWIFI=m +CONFIG_MAC80211=m # power CONFIG_CHARGER_MAX77705=m CONFIG_MFD_MAX77693=m CONFIG_MFD_MAX77705=m +CONFIG_POWERCAP=y CONFIG_REGULATOR=y CONFIG_SPMI=y CONFIG_BATTERY_LENOVO_YOGA_C630=m @@ -121,6 +135,8 @@ CONFIG_BLK_DEV_NVME=m CONFIG_NVME_CORE=m # tpm +CONFIG_TCG_TIS=m +CONFIG_TCG_TPM=y CONFIG_TCG_TIS_I2C=m # uefi diff --git a/device/main/linux-postmarketos-stable/generic.armv7.config b/device/main/linux-postmarketos-stable/generic.armv7.config index 1f453fff5..ff5b0e155 100644 --- a/device/main/linux-postmarketos-stable/generic.armv7.config +++ b/device/main/linux-postmarketos-stable/generic.armv7.config @@ -7,11 +7,19 @@ CONFIG_SND_SOC_CS35L41_I2C=m CONFIG_SND_SOC_CS35L41_SPI=m CONFIG_SND_SOC_TFA989X=m +# bluetooth +CONFIG_BT_HCIBTUSB=m +CONFIG_BT_RFCOMM=m + # clocks CONFIG_COMMON_CLK=y CONFIG_PWM=y CONFIG_PWM_CLK=m +# ethernet +CONFIG_BT_BNEP=m +CONFIG_IGB=m + # graphics CONFIG_BACKLIGHT_CLASS_DEVICE=y CONFIG_BACKLIGHT_GPIO=y @@ -65,11 +73,17 @@ CONFIG_RT61PCI=m CONFIG_RT73USB=m CONFIG_RTL8187=m CONFIG_RTL8723BS=m +CONFIG_CFG80211=m +CONFIG_IWLDVM=m +CONFIG_IWLMVM=m +CONFIG_IWLWIFI=m +CONFIG_MAC80211=m # power CONFIG_CHARGER_MAX77705=m CONFIG_MFD_MAX77693=m CONFIG_MFD_MAX77705=m +CONFIG_POWERCAP=y CONFIG_REGULATOR=y CONFIG_SPMI=y @@ -82,6 +96,8 @@ CONFIG_BLK_DEV_NVME=m CONFIG_NVME_CORE=m # tpm +CONFIG_TCG_TIS=m +CONFIG_TCG_TPM=y CONFIG_TCG_TIS_I2C=m # uefi diff --git a/device/main/linux-postmarketos-stable/generic.loongarch64.config b/device/main/linux-postmarketos-stable/generic.loongarch64.config index bb78f3b28..6354e978d 100644 --- a/device/main/linux-postmarketos-stable/generic.loongarch64.config +++ b/device/main/linux-postmarketos-stable/generic.loongarch64.config @@ -7,12 +7,18 @@ CONFIG_SND_SOC_CS35L41_I2C=m CONFIG_SND_SOC_CS35L41_SPI=m CONFIG_SND_SOC_TFA989X=m +# bluetooth +CONFIG_BT_HCIBTUSB=m +CONFIG_BT_RFCOMM=m + # clocks CONFIG_COMMON_CLK=y CONFIG_PWM=y CONFIG_PWM_CLK=m # ethernet +CONFIG_BT_BNEP=m +CONFIG_IGB=m CONFIG_DWMAC_MOTORCOMM=y # graphics @@ -48,10 +54,18 @@ CONFIG_LEDS_MAX77705=m # misc CONFIG_CPU_HAS_LBT=y +# network +CONFIG_CFG80211=m +CONFIG_IWLDVM=m +CONFIG_IWLMVM=m +CONFIG_IWLWIFI=m +CONFIG_MAC80211=m + # power CONFIG_CHARGER_MAX77705=m CONFIG_MFD_MAX77693=m CONFIG_MFD_MAX77705=m +CONFIG_POWERCAP=y CONFIG_REGULATOR=y CONFIG_SPMI=y @@ -63,6 +77,10 @@ CONFIG_REMOTEPROC_CDEV=y CONFIG_BLK_DEV_NVME=m CONFIG_NVME_CORE=m +# tpm +CONFIG_TCG_TIS=m +CONFIG_TCG_TPM=y + # uefi CONFIG_FB_EFI=y diff --git a/device/main/linux-postmarketos-stable/generic.ppc64le.config b/device/main/linux-postmarketos-stable/generic.ppc64le.config index ce3ea4703..bc5332a05 100644 --- a/device/main/linux-postmarketos-stable/generic.ppc64le.config +++ b/device/main/linux-postmarketos-stable/generic.ppc64le.config @@ -7,11 +7,19 @@ CONFIG_SND_SOC_CS35L41_I2C=m CONFIG_SND_SOC_CS35L41_SPI=m CONFIG_SND_SOC_TFA989X=m +# bluetooth +CONFIG_BT_HCIBTUSB=m +CONFIG_BT_RFCOMM=m + # clocks CONFIG_COMMON_CLK=y CONFIG_PWM=y CONFIG_PWM_CLK=m +# ethernet +CONFIG_BT_BNEP=m +CONFIG_IGB=m + # graphics CONFIG_BACKLIGHT_CLASS_DEVICE=y CONFIG_BACKLIGHT_GPIO=y @@ -35,6 +43,7 @@ CONFIG_TOUCHSCREEN_MELFAS_MIP4=m CONFIG_TOUCHSCREEN_NOVATEK_NVT_TS=m CONFIG_TOUCHSCREEN_S6SY761=m CONFIG_TOUCHSCREEN_ZINITIX=m +CONFIG_INPUT_PCSPKR=m # led CONFIG_LEDS_MAX77705=m @@ -47,10 +56,18 @@ CONFIG_OPAL_PRD=y CONFIG_POWER8_CPU=y CONFIG_PPC_SUBPAGE_PROT=y +# network +CONFIG_CFG80211=m +CONFIG_IWLDVM=m +CONFIG_IWLMVM=m +CONFIG_IWLWIFI=m +CONFIG_MAC80211=m + # power CONFIG_CHARGER_MAX77705=m CONFIG_MFD_MAX77693=m CONFIG_MFD_MAX77705=m +CONFIG_POWERCAP=y CONFIG_REGULATOR=y CONFIG_SPMI=y @@ -62,6 +79,10 @@ CONFIG_REMOTEPROC_CDEV=y CONFIG_BLK_DEV_NVME=m CONFIG_NVME_CORE=m +# tpm +CONFIG_TCG_TIS=m +CONFIG_TCG_TPM=y + # usb CONFIG_USB_SERIAL_CH341=m diff --git a/device/main/linux-postmarketos-stable/generic.riscv64.config b/device/main/linux-postmarketos-stable/generic.riscv64.config index fee9bc9d9..95b4c6bba 100644 --- a/device/main/linux-postmarketos-stable/generic.riscv64.config +++ b/device/main/linux-postmarketos-stable/generic.riscv64.config @@ -7,11 +7,19 @@ CONFIG_SND_SOC_CS35L41_I2C=m CONFIG_SND_SOC_CS35L41_SPI=m CONFIG_SND_SOC_TFA989X=m +# bluetooth +CONFIG_BT_HCIBTUSB=m +CONFIG_BT_RFCOMM=m + # clocks CONFIG_COMMON_CLK=y CONFIG_PWM=y CONFIG_PWM_CLK=m +# ethernet +CONFIG_BT_BNEP=m +CONFIG_IGB=m + # graphics CONFIG_BACKLIGHT_CLASS_DEVICE=y CONFIG_BACKLIGHT_GPIO=y @@ -47,10 +55,18 @@ CONFIG_LEDS_MAX77705=m # localversion # CONFIG_LOCALVERSION_AUTO is not set +# network +CONFIG_CFG80211=m +CONFIG_IWLDVM=m +CONFIG_IWLMVM=m +CONFIG_IWLWIFI=m +CONFIG_MAC80211=m + # power CONFIG_CHARGER_MAX77705=m CONFIG_MFD_MAX77693=m CONFIG_MFD_MAX77705=m +CONFIG_POWERCAP=y CONFIG_REGULATOR=y CONFIG_SPMI=y @@ -62,11 +78,17 @@ CONFIG_REMOTEPROC_CDEV=y CONFIG_BLK_DEV_NVME=m CONFIG_NVME_CORE=m +# tpm +CONFIG_TCG_TIS=m +CONFIG_TCG_TPM=y + # uefi CONFIG_FB_EFI=y # usb CONFIG_USB_SERIAL_CH341=m +CONFIG_USB_DWC3=y +CONFIG_PHY_SPACEMIT_K1_USB2=y # vhost CONFIG_TARGET_CORE=m diff --git a/device/main/linux-postmarketos-stable/generic.x86.config b/device/main/linux-postmarketos-stable/generic.x86.config index 65aa47023..6b824e2ad 100644 --- a/device/main/linux-postmarketos-stable/generic.x86.config +++ b/device/main/linux-postmarketos-stable/generic.x86.config @@ -7,11 +7,24 @@ CONFIG_SND_SOC_CS35L41_I2C=m CONFIG_SND_SOC_CS35L41_SPI=m CONFIG_SND_SOC_TFA989X=m +# bluetooth +CONFIG_BT_HCIBTUSB=m +CONFIG_BT_RFCOMM=m + # clocks CONFIG_COMMON_CLK=y CONFIG_PWM=y CONFIG_PWM_CLK=m +# crypto +CONFIG_CRYPTO_AES_NI_INTEL=m +CONFIG_CRYPTO_DEV_CCP=y +CONFIG_CRYPTO_DEV_CCP_DD=m + +# ethernet +CONFIG_BT_BNEP=m +CONFIG_IGB=m + # graphics CONFIG_BACKLIGHT_CLASS_DEVICE=y CONFIG_BACKLIGHT_GPIO=y @@ -41,6 +54,7 @@ CONFIG_TOUCHSCREEN_MELFAS_MIP4=m CONFIG_TOUCHSCREEN_NOVATEK_NVT_TS=m CONFIG_TOUCHSCREEN_S6SY761=m CONFIG_TOUCHSCREEN_ZINITIX=m +CONFIG_INPUT_PCSPKR=m # led CONFIG_LEDS_MAX77705=m @@ -48,21 +62,39 @@ CONFIG_LEDS_MAX77705=m # localversion # CONFIG_LOCALVERSION_AUTO is not set +# network +CONFIG_CFG80211=m +CONFIG_IWLDVM=m +CONFIG_IWLMVM=m +CONFIG_IWLWIFI=m +CONFIG_MAC80211=m + # power CONFIG_CHARGER_MAX77705=m CONFIG_MFD_MAX77693=m CONFIG_MFD_MAX77705=m +CONFIG_POWERCAP=y CONFIG_REGULATOR=y CONFIG_SPMI=y +CONFIG_I2C_PIIX4=m +CONFIG_INTEL_RAPL=m # remoteproc CONFIG_REMOTEPROC=y CONFIG_REMOTEPROC_CDEV=y +# sensors +CONFIG_GIGABYTE_WMI=m +CONFIG_SENSORS_K10TEMP=m + # storage CONFIG_BLK_DEV_NVME=m CONFIG_NVME_CORE=m +# tpm +CONFIG_TCG_TIS=m +CONFIG_TCG_TPM=y + # uefi CONFIG_FB_EFI=y @@ -106,3 +138,6 @@ CONFIG_VIRTIO_NET=y CONFIG_VIRTIO_PCI=y CONFIG_VSOCKETS=m CONFIG_VIRTIO_IOMMU=m + +# watchdog +CONFIG_SP5100_TCO=m diff --git a/device/main/linux-postmarketos-stable/generic.x86_64.config b/device/main/linux-postmarketos-stable/generic.x86_64.config index 65aa47023..8309b1589 100644 --- a/device/main/linux-postmarketos-stable/generic.x86_64.config +++ b/device/main/linux-postmarketos-stable/generic.x86_64.config @@ -7,11 +7,24 @@ CONFIG_SND_SOC_CS35L41_I2C=m CONFIG_SND_SOC_CS35L41_SPI=m CONFIG_SND_SOC_TFA989X=m +# bluetooth +CONFIG_BT_HCIBTUSB=m +CONFIG_BT_RFCOMM=m + # clocks CONFIG_COMMON_CLK=y CONFIG_PWM=y CONFIG_PWM_CLK=m +# crypto +CONFIG_CRYPTO_AES_NI_INTEL=m +CONFIG_CRYPTO_DEV_CCP=y +CONFIG_CRYPTO_DEV_CCP_DD=m + +# ethernet +CONFIG_BT_BNEP=m +CONFIG_IGB=m + # graphics CONFIG_BACKLIGHT_CLASS_DEVICE=y CONFIG_BACKLIGHT_GPIO=y @@ -41,6 +54,7 @@ CONFIG_TOUCHSCREEN_MELFAS_MIP4=m CONFIG_TOUCHSCREEN_NOVATEK_NVT_TS=m CONFIG_TOUCHSCREEN_S6SY761=m CONFIG_TOUCHSCREEN_ZINITIX=m +CONFIG_INPUT_PCSPKR=m # led CONFIG_LEDS_MAX77705=m @@ -48,20 +62,39 @@ CONFIG_LEDS_MAX77705=m # localversion # CONFIG_LOCALVERSION_AUTO is not set +# network +CONFIG_CFG80211=m +CONFIG_IWLDVM=m +CONFIG_IWLMVM=m +CONFIG_IWLWIFI=m +CONFIG_MAC80211=m + # power CONFIG_CHARGER_MAX77705=m CONFIG_MFD_MAX77693=m CONFIG_MFD_MAX77705=m +CONFIG_POWERCAP=y CONFIG_REGULATOR=y CONFIG_SPMI=y +CONFIG_I2C_PIIX4=m +CONFIG_INTEL_RAPL=m # remoteproc CONFIG_REMOTEPROC=y CONFIG_REMOTEPROC_CDEV=y +# sensors +CONFIG_GIGABYTE_WMI=m +CONFIG_SENSORS_K10TEMP=m + # storage CONFIG_BLK_DEV_NVME=m CONFIG_NVME_CORE=m +CONFIG_VMD=y + +# tpm +CONFIG_TCG_TIS=m +CONFIG_TCG_TPM=y # uefi CONFIG_FB_EFI=y @@ -106,3 +139,6 @@ CONFIG_VIRTIO_NET=y CONFIG_VIRTIO_PCI=y CONFIG_VSOCKETS=m CONFIG_VIRTIO_IOMMU=m + +# watchdog +CONFIG_SP5100_TCO=m diff --git a/device/main/linux-postmarketos-stable/pmos.aarch64.config b/device/main/linux-postmarketos-stable/pmos.aarch64.config index b9dc08dc9..4c47e96bf 100644 --- a/device/main/linux-postmarketos-stable/pmos.aarch64.config +++ b/device/main/linux-postmarketos-stable/pmos.aarch64.config @@ -74,6 +74,7 @@ CONFIG_NFS_V4=m CONFIG_NFS_V4_2=y CONFIG_RPCSEC_GSS_KRB5=m CONFIG_CRYPTO_AES_ARM64_CE_BLK=y +CONFIG_CRYPTO_KRB5=m CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA1=y CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA2=y CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_CAMELLIA=y @@ -268,14 +269,14 @@ CONFIG_NF_TABLES_IPV6=y CONFIG_WIREGUARD=m # filesystems -CONFIG_BTRFS_FS=y +CONFIG_BTRFS_FS=m CONFIG_BTRFS_FS_POSIX_ACL=y CONFIG_EROFS_FS=m CONFIG_EROFS_FS_ZIP=y CONFIG_EROFS_FS_ZIP_LZMA=y CONFIG_EXFAT_FS=m CONFIG_EXT4_FS=y -CONFIG_F2FS_FS=y +CONFIG_F2FS_FS=m CONFIG_UDF_FS=m CONFIG_XFS_FS=m CONFIG_EROFS_FS_ZIP_DEFLATE=y @@ -500,7 +501,10 @@ CONFIG_EFIVAR_FS=m CONFIG_DM_VERITY=m # hardening +CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,ipe,bpf" CONFIG_SECURITY_DMESG_RESTRICT=y +CONFIG_SECURITY_LOCKDOWN_LSM=y +CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y CONFIG_SECURITY_YAMA=y CONFIG_SHADOW_CALL_STACK=y CONFIG_CFI=y @@ -514,10 +518,12 @@ CONFIG_RUST=y # selinux CONFIG_AUDIT=y CONFIG_DEFAULT_SECURITY_SELINUX=y -CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,ipe,bpf" CONFIG_SECURITY_NETWORK=y CONFIG_SECURITY_SELINUX=y CONFIG_SECURITY_SELINUX_BOOTPARAM=y +# lockdown +CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y + # wine CONFIG_NTSYNC=m diff --git a/device/main/linux-postmarketos-stable/pmos.armv7.config b/device/main/linux-postmarketos-stable/pmos.armv7.config index ed0d43013..94d21b73e 100644 --- a/device/main/linux-postmarketos-stable/pmos.armv7.config +++ b/device/main/linux-postmarketos-stable/pmos.armv7.config @@ -73,6 +73,7 @@ CONFIG_NFS_V3=m CONFIG_NFS_V4=m CONFIG_NFS_V4_2=y CONFIG_RPCSEC_GSS_KRB5=m +CONFIG_CRYPTO_KRB5=m CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA1=y CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA2=y CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_CAMELLIA=y @@ -267,14 +268,14 @@ CONFIG_NF_TABLES_IPV6=y CONFIG_WIREGUARD=m # filesystems -CONFIG_BTRFS_FS=y +CONFIG_BTRFS_FS=m CONFIG_BTRFS_FS_POSIX_ACL=y CONFIG_EROFS_FS=m CONFIG_EROFS_FS_ZIP=y CONFIG_EROFS_FS_ZIP_LZMA=y CONFIG_EXFAT_FS=m CONFIG_EXT4_FS=y -CONFIG_F2FS_FS=y +CONFIG_F2FS_FS=m CONFIG_UDF_FS=m CONFIG_XFS_FS=m CONFIG_EROFS_FS_ZIP_DEFLATE=y @@ -495,7 +496,10 @@ CONFIG_EFIVAR_FS=m CONFIG_DM_VERITY=m # hardening +CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,ipe,bpf" CONFIG_SECURITY_DMESG_RESTRICT=y +CONFIG_SECURITY_LOCKDOWN_LSM=y +CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y CONFIG_SECURITY_YAMA=y CONFIG_CFI=y # CONFIG_CFI_PERMISSIVE is not set @@ -504,10 +508,12 @@ CONFIG_CFI_ICALL_NORMALIZE_INTEGERS=y # selinux CONFIG_AUDIT=y CONFIG_DEFAULT_SECURITY_SELINUX=y -CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,ipe,bpf" CONFIG_SECURITY_NETWORK=y CONFIG_SECURITY_SELINUX=y CONFIG_SECURITY_SELINUX_BOOTPARAM=y +# lockdown +CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y + # wine CONFIG_NTSYNC=m diff --git a/device/main/linux-postmarketos-stable/pmos.loongarch64.config b/device/main/linux-postmarketos-stable/pmos.loongarch64.config index b011b72b0..79cac282b 100644 --- a/device/main/linux-postmarketos-stable/pmos.loongarch64.config +++ b/device/main/linux-postmarketos-stable/pmos.loongarch64.config @@ -74,6 +74,7 @@ CONFIG_NFS_V3=m CONFIG_NFS_V4=m CONFIG_NFS_V4_2=y CONFIG_RPCSEC_GSS_KRB5=m +CONFIG_CRYPTO_KRB5=m CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA1=y CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA2=y CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_CAMELLIA=y @@ -268,14 +269,14 @@ CONFIG_NF_TABLES_IPV6=y CONFIG_WIREGUARD=m # filesystems -CONFIG_BTRFS_FS=y +CONFIG_BTRFS_FS=m CONFIG_BTRFS_FS_POSIX_ACL=y CONFIG_EROFS_FS=m CONFIG_EROFS_FS_ZIP=y CONFIG_EROFS_FS_ZIP_LZMA=y CONFIG_EXFAT_FS=m CONFIG_EXT4_FS=y -CONFIG_F2FS_FS=y +CONFIG_F2FS_FS=m CONFIG_UDF_FS=m CONFIG_XFS_FS=m CONFIG_EROFS_FS_ZIP_DEFLATE=y @@ -496,7 +497,10 @@ CONFIG_EFIVAR_FS=m CONFIG_DM_VERITY=m # hardening +CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,ipe,bpf" CONFIG_SECURITY_DMESG_RESTRICT=y +CONFIG_SECURITY_LOCKDOWN_LSM=y +CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y CONFIG_SECURITY_YAMA=y # rust @@ -506,10 +510,12 @@ CONFIG_RUST=y # selinux CONFIG_AUDIT=y CONFIG_DEFAULT_SECURITY_SELINUX=y -CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,ipe,bpf" CONFIG_SECURITY_NETWORK=y CONFIG_SECURITY_SELINUX=y CONFIG_SECURITY_SELINUX_BOOTPARAM=y +# lockdown +CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y + # wine CONFIG_NTSYNC=m diff --git a/device/main/linux-postmarketos-stable/pmos.ppc64le.config b/device/main/linux-postmarketos-stable/pmos.ppc64le.config index 7c2bd2d4a..fc0196db3 100644 --- a/device/main/linux-postmarketos-stable/pmos.ppc64le.config +++ b/device/main/linux-postmarketos-stable/pmos.ppc64le.config @@ -74,6 +74,7 @@ CONFIG_NFS_V3=m CONFIG_NFS_V4=m CONFIG_NFS_V4_2=y CONFIG_RPCSEC_GSS_KRB5=m +CONFIG_CRYPTO_KRB5=m CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA1=y CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA2=y CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_CAMELLIA=y @@ -268,14 +269,14 @@ CONFIG_NF_TABLES_IPV6=y CONFIG_WIREGUARD=m # filesystems -CONFIG_BTRFS_FS=y +CONFIG_BTRFS_FS=m CONFIG_BTRFS_FS_POSIX_ACL=y CONFIG_EROFS_FS=m CONFIG_EROFS_FS_ZIP=y CONFIG_EROFS_FS_ZIP_LZMA=y CONFIG_EXFAT_FS=m CONFIG_EXT4_FS=y -CONFIG_F2FS_FS=y +CONFIG_F2FS_FS=m CONFIG_UDF_FS=m CONFIG_XFS_FS=m CONFIG_EROFS_FS_ZIP_DEFLATE=y @@ -486,16 +487,21 @@ CONFIG_FUNCTION_TRACER=y CONFIG_DM_VERITY=m # hardening +CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,ipe,bpf" CONFIG_SECURITY_DMESG_RESTRICT=y +CONFIG_SECURITY_LOCKDOWN_LSM=y +CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y CONFIG_SECURITY_YAMA=y # selinux CONFIG_AUDIT=y CONFIG_DEFAULT_SECURITY_SELINUX=y -CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,ipe,bpf" CONFIG_SECURITY_NETWORK=y CONFIG_SECURITY_SELINUX=y CONFIG_SECURITY_SELINUX_BOOTPARAM=y +# lockdown +CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y + # wine CONFIG_NTSYNC=m diff --git a/device/main/linux-postmarketos-stable/pmos.riscv64.config b/device/main/linux-postmarketos-stable/pmos.riscv64.config index faa34bbf6..79f5163c7 100644 --- a/device/main/linux-postmarketos-stable/pmos.riscv64.config +++ b/device/main/linux-postmarketos-stable/pmos.riscv64.config @@ -73,6 +73,7 @@ CONFIG_NFS_V3=m CONFIG_NFS_V4=m CONFIG_NFS_V4_2=y CONFIG_RPCSEC_GSS_KRB5=m +CONFIG_CRYPTO_KRB5=m CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA1=y CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA2=y CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_CAMELLIA=y @@ -267,14 +268,14 @@ CONFIG_NF_TABLES_IPV6=y CONFIG_WIREGUARD=m # filesystems -CONFIG_BTRFS_FS=y +CONFIG_BTRFS_FS=m CONFIG_BTRFS_FS_POSIX_ACL=y CONFIG_EROFS_FS=m CONFIG_EROFS_FS_ZIP=y CONFIG_EROFS_FS_ZIP_LZMA=y CONFIG_EXFAT_FS=m CONFIG_EXT4_FS=y -CONFIG_F2FS_FS=y +CONFIG_F2FS_FS=m CONFIG_UDF_FS=m CONFIG_XFS_FS=m CONFIG_EROFS_FS_ZIP_DEFLATE=y @@ -496,7 +497,10 @@ CONFIG_EFIVAR_FS=m CONFIG_DM_VERITY=m # hardening +CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,ipe,bpf" CONFIG_SECURITY_DMESG_RESTRICT=y +CONFIG_SECURITY_LOCKDOWN_LSM=y +CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y CONFIG_SECURITY_YAMA=y CONFIG_CFI=y # CONFIG_CFI_PERMISSIVE is not set @@ -506,10 +510,12 @@ CONFIG_SHADOW_CALL_STACK=y # selinux CONFIG_AUDIT=y CONFIG_DEFAULT_SECURITY_SELINUX=y -CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,ipe,bpf" CONFIG_SECURITY_NETWORK=y CONFIG_SECURITY_SELINUX=y CONFIG_SECURITY_SELINUX_BOOTPARAM=y +# lockdown +CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y + # wine CONFIG_NTSYNC=m diff --git a/device/main/linux-postmarketos-stable/pmos.x86.config b/device/main/linux-postmarketos-stable/pmos.x86.config index 39c9c0ff8..5194c2279 100644 --- a/device/main/linux-postmarketos-stable/pmos.x86.config +++ b/device/main/linux-postmarketos-stable/pmos.x86.config @@ -74,6 +74,7 @@ CONFIG_NFS_V3=m CONFIG_NFS_V4=m CONFIG_NFS_V4_2=y CONFIG_RPCSEC_GSS_KRB5=m +CONFIG_CRYPTO_KRB5=m CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA1=y CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA2=y CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_CAMELLIA=y @@ -270,14 +271,14 @@ CONFIG_NF_TABLES_IPV6=y CONFIG_WIREGUARD=m # filesystems -CONFIG_BTRFS_FS=y +CONFIG_BTRFS_FS=m CONFIG_BTRFS_FS_POSIX_ACL=y CONFIG_EROFS_FS=m CONFIG_EROFS_FS_ZIP=y CONFIG_EROFS_FS_ZIP_LZMA=y CONFIG_EXFAT_FS=m CONFIG_EXT4_FS=y -CONFIG_F2FS_FS=y +CONFIG_F2FS_FS=m CONFIG_UDF_FS=m CONFIG_XFS_FS=m CONFIG_EROFS_FS_ZIP_DEFLATE=y @@ -499,16 +500,21 @@ CONFIG_EFIVAR_FS=m CONFIG_DM_VERITY=m # hardening +CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,ipe,bpf" CONFIG_SECURITY_DMESG_RESTRICT=y +CONFIG_SECURITY_LOCKDOWN_LSM=y +CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y CONFIG_SECURITY_YAMA=y # selinux CONFIG_AUDIT=y CONFIG_DEFAULT_SECURITY_SELINUX=y -CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,ipe,bpf" CONFIG_SECURITY_NETWORK=y CONFIG_SECURITY_SELINUX=y CONFIG_SECURITY_SELINUX_BOOTPARAM=y +# lockdown +CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y + # wine CONFIG_NTSYNC=m diff --git a/device/main/linux-postmarketos-stable/pmos.x86_64.config b/device/main/linux-postmarketos-stable/pmos.x86_64.config index 6b644a5c9..c9ccb7886 100644 --- a/device/main/linux-postmarketos-stable/pmos.x86_64.config +++ b/device/main/linux-postmarketos-stable/pmos.x86_64.config @@ -74,6 +74,7 @@ CONFIG_NFS_V3=m CONFIG_NFS_V4=m CONFIG_NFS_V4_2=y CONFIG_RPCSEC_GSS_KRB5=m +CONFIG_CRYPTO_KRB5=m CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA1=y CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA2=y CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_CAMELLIA=y @@ -270,14 +271,14 @@ CONFIG_NF_TABLES_IPV6=y CONFIG_WIREGUARD=m # filesystems -CONFIG_BTRFS_FS=y +CONFIG_BTRFS_FS=m CONFIG_BTRFS_FS_POSIX_ACL=y CONFIG_EROFS_FS=m CONFIG_EROFS_FS_ZIP=y CONFIG_EROFS_FS_ZIP_LZMA=y CONFIG_EXFAT_FS=m CONFIG_EXT4_FS=y -CONFIG_F2FS_FS=y +CONFIG_F2FS_FS=m CONFIG_UDF_FS=m CONFIG_XFS_FS=m CONFIG_EROFS_FS_ZIP_DEFLATE=y @@ -501,7 +502,10 @@ CONFIG_EFIVAR_FS=m CONFIG_DM_VERITY=m # hardening +CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,ipe,bpf" CONFIG_SECURITY_DMESG_RESTRICT=y +CONFIG_SECURITY_LOCKDOWN_LSM=y +CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y CONFIG_SECURITY_YAMA=y CONFIG_CFI=y # CONFIG_CFI_PERMISSIVE is not set @@ -514,10 +518,12 @@ CONFIG_RUST=y # selinux CONFIG_AUDIT=y CONFIG_DEFAULT_SECURITY_SELINUX=y -CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,ipe,bpf" CONFIG_SECURITY_NETWORK=y CONFIG_SECURITY_SELINUX=y CONFIG_SECURITY_SELINUX_BOOTPARAM=y +# lockdown +CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y + # wine CONFIG_NTSYNC=m