diff --git a/device/main/linux-postmarketos-mainline/0004-hid-core-fix-size-t-specifier-in-hid-report-raw-event.patch b/device/main/linux-postmarketos-mainline/0004-hid-core-fix-size-t-specifier-in-hid-report-raw-event.patch deleted file mode 100644 index 9cff05337..000000000 --- a/device/main/linux-postmarketos-mainline/0004-hid-core-fix-size-t-specifier-in-hid-report-raw-event.patch +++ /dev/null @@ -1,70 +0,0 @@ -From git@z Thu Jan 1 00:00:00 1970 -Subject: [PATCH] HID: core: Fix size_t specifier in hid_report_raw_event() -From: Nathan Chancellor -Date: Sun, 17 May 2026 13:51:01 +0900 -Message-Id: <20260517-hid-core-fix-size_t-specifier-v1-1-bfdd959ec383@kernel.org> -MIME-Version: 1.0 -Content-Type: text/plain; charset="utf-8" -Content-Transfer-Encoding: 7bit - -When building for 32-bit platforms, for which 'size_t' is -'unsigned int', there are warnings around using the incorrect format -specifier to print bsize in hid_report_raw_event(): - - drivers/hid/hid-core.c:2054:29: error: format specifies type 'long' but the argument has type 'size_t' (aka 'unsigned int') [-Werror,-Wformat] - 2053 | hid_warn_ratelimited(hid, "Event data for report %d is incorrect (%d vs %ld)\n", - | ~~~ - | %zu - 2054 | report->id, csize, bsize); - | ^~~~~ - drivers/hid/hid-core.c:2076:29: error: format specifies type 'long' but the argument has type 'size_t' (aka 'unsigned int') [-Werror,-Wformat] - 2075 | hid_warn_ratelimited(hid, "Event data for report %d was too short (%d vs %ld)\n", - | ~~~ - | %zu - 2076 | report->id, rsize, bsize); - | ^~~~~ - -Use the proper 'size_t' format specifier, '%zu', to clear up the -warnings. - -Cc: stable@vger.kernel.org -Fixes: 2c85c61d1332 ("HID: pass the buffer size to hid_report_raw_event") -Reported-by: Miguel Ojeda -Closes: https://lore.kernel.org/20260516020430.110135-1-ojeda@kernel.org/ -Signed-off-by: Nathan Chancellor ---- - drivers/hid/hid-core.c | 4 ++-- - 1 file changed, 2 insertions(+), 2 deletions(-) - -diff --git a/drivers/hid/hid-core.c b/drivers/hid/hid-core.c -index b3596851c719..41a79e43c82b 100644 ---- a/drivers/hid/hid-core.c -+++ b/drivers/hid/hid-core.c -@@ -2050,7 +2050,7 @@ int hid_report_raw_event(struct hid_device *hid, enum hid_report_type type, u8 * - return 0; - - if (unlikely(bsize < csize)) { -- hid_warn_ratelimited(hid, "Event data for report %d is incorrect (%d vs %ld)\n", -+ hid_warn_ratelimited(hid, "Event data for report %d is incorrect (%d vs %zu)\n", - report->id, csize, bsize); - return -EINVAL; - } -@@ -2072,7 +2072,7 @@ int hid_report_raw_event(struct hid_device *hid, enum hid_report_type type, u8 * - rsize = max_buffer_size; - - if (bsize < rsize) { -- hid_warn_ratelimited(hid, "Event data for report %d was too short (%d vs %ld)\n", -+ hid_warn_ratelimited(hid, "Event data for report %d was too short (%d vs %zu)\n", - report->id, rsize, bsize); - return -EINVAL; - } - ---- -base-commit: 64ffa2e5e02ff54b23221d0282155f37283fabea -change-id: 20260517-hid-core-fix-size_t-specifier-14daf3b496b6 - -Best regards, --- -Cheers, -Nathan - diff --git a/device/main/linux-postmarketos-mainline/APKBUILD b/device/main/linux-postmarketos-mainline/APKBUILD index fbd537fe1..b6c7f6a4d 100644 --- a/device/main/linux-postmarketos-mainline/APKBUILD +++ b/device/main/linux-postmarketos-mainline/APKBUILD @@ -1,7 +1,7 @@ # Co-Maintainer: Achill Gilgenast maintainer="Aelin " pkgname=linux-postmarketos-mainline -pkgver=7.1_rc4 +pkgver=7.1_rc5 pkgrel=0 _rel=${pkgver#*_p} _kver=${pkgver%_p*} @@ -65,7 +65,6 @@ source=" 0001-WIP-arch-powerpc-boot-Support-LLVM-1-in-wrapper-scri.patch 0002-WIP-arch-powerpc-boot-Use-z-notext-for-pseries-image.patch 0003-WIP-arch-powerpc-boot-Add-z-norelro.patch - 0004-hid-core-fix-size-t-specifier-in-hid-report-raw-event.patch config-mainline.aarch64 config-mainline.armv7 @@ -122,16 +121,15 @@ package() { } sha512sums=" -2f14db8091a6100a19c63e9d1f0baa0f58864c40b9b259d929fc3ad5ec3aa824048ca7d1313ce81e3a9ba08ea6357e6a4837804ba51711d7bfb212a2665dc113 linux-postmarketos-mainline-7.1_rc4.tar.gz +fc738e2efbc2b5b355a3d0ef97f1b0e3aa4b7d9429b0ac4816839e39724ac9100fa6c819fd9484ed04072a29a6bdda8306bb11261d27fcebdc11605bf7e530f3 linux-postmarketos-mainline-7.1_rc5.tar.gz 1f11df2480e9f691573283597160b4c806e492cdca4825f3acb3afb70bde43abfab487bcde1f5553b431a702a0039479d041b0ce7859970e706b5a51d2ad8fb0 0001-WIP-arch-powerpc-boot-Support-LLVM-1-in-wrapper-scri.patch 26521a9c9ea769534095dc4e306babadc8bcbaf03d7faa523c377e41ba0f742ecd0490fa27791d895f729c3ae8845297dca59b4db2475e7f078e689c447430bc 0002-WIP-arch-powerpc-boot-Use-z-notext-for-pseries-image.patch 302c20c85559fc9b3b2420ed25be1bfbb76c87f2a470e4141c32e9542cf1f5c6b3b5a7847231a3eaa0f6bc0e5942d0c1599e807175dcf5e63469704c3d6adde3 0003-WIP-arch-powerpc-boot-Add-z-norelro.patch -eb164ade3497f60ed8b433c7efb42f3a9afc92b93c3d487e81094f00584b6ed47c92fe9168320db9f897143ad8fa3158c5d9d387ee60c8ea9035dbe1c554cf0e 0004-hid-core-fix-size-t-specifier-in-hid-report-raw-event.patch -7489a7a134d380ba70bebe916fdc64881a709aa5f779d8a1c1f53c0a36a9859183115cd79cdf3d29fe4018f99c0c5a0ba272c53359439a170f51cfd95a7f1883 config-mainline.aarch64 -53d3ed0acdd01b1e56294403be9fd8692c8269fa5c6a8ae83e7da15f1ab24409981bbb35f919ee532f2e4c060b6081f37762699f9e9bad923ab2d9c7057b0963 config-mainline.armv7 -a87d68c8f00b06851f30350ffa9e6bc8a6ce27d4c323f10ad0f2c0f994d4e173f2a5906fbb89ad993537abada584512114e663bf3ba016d1cc86039de24f3caf config-mainline.loongarch64 -52cf6ea028a99d9f8429aeea9af2c7825e62d3f42225e6ef65b65efe48c257c1d6b38b0f1a681b771e4292be085de36d16ac09a51956bff83573424d12b5131c config-mainline.ppc64le -bc7a426ad48744cda94cee8f6967d5f1e540d79db06e15d6631f57b941db88389a36358933935bdaf491327b4e5697c337a059a51a636af970d7e315dad20982 config-mainline.riscv64 -b759f0d6542a222170f1d6aac129bffb9bf2299a6f6ff4cb95fd7cc3316e6975d2fdb5ecede8c72888c241f48902156d0689f04c51d37aa7db861578eedddb0b config-mainline.x86 -65aaa211a0366dce3cf279df0018751551e6f1b398c2b78d5792d792cfcb66822327494b5b7e855b7311ce17d4e314ac1c8bb33e010262912477ee40b7500d97 config-mainline.x86_64 +e2a2b28726a908b493021737a02ad28f49448d5aea4df8342f66533e3ecfcad0ebb27b2a8420c896961d1e0f9e7389438a665cab195cce8d211f6c6ff08eca7b config-mainline.aarch64 +ec8e1acf6bdbacdc59b7754455360ecd6e9efc864e709026ad1c4d0703aea0c62b12023805910154f1d3291439e70575ccfce8912b5e23c3ab90acf33322b7e6 config-mainline.armv7 +6c3bdb4cdb51c1ed4408139e1036d9f0eaa6af04dc761203d54f9be02efeb96c0594f1fe95436da084c30ac25f012170ed2c9a4965b108a209ea58c9f1258a0d config-mainline.loongarch64 +4d7a2033b8568a95cf7574ab640caefb5a2337a6ae2b4595409303bdea87cc431ed486208466c92e66cf8eba974b8516223079e3e43ab29714b137947f2a2054 config-mainline.ppc64le +260adfa83b368b57555447d0e7dc36bbd4985821e1897f9946e1e447f672bb92c921327575e857cf5d1b4d2c19ed93e533beb77d38386d56cc008095331b645b config-mainline.riscv64 +5301fba03574192c38ddd469c14c0fd1071816532aa4ee9edce31284173069a2a350ecfe57c49bcdab2df9159672b7920a66095ff038170052e1203c617fcc6d config-mainline.x86 +ac60a67dbe9efea40c0743fa60f86e52ab242f730ab6ba24ea085790fbe318190170bd5f76e13de323b993a5154b169a4c12b4f1751ec35732cc9f964c67a987 config-mainline.x86_64 " diff --git a/device/main/linux-postmarketos-mainline/config-mainline.aarch64 b/device/main/linux-postmarketos-mainline/config-mainline.aarch64 index a46811cfd..75453d901 100644 --- a/device/main/linux-postmarketos-mainline/config-mainline.aarch64 +++ b/device/main/linux-postmarketos-mainline/config-mainline.aarch64 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/arm64 7.1.0-rc4 Kernel Configuration +# Linux/arm64 7.1.0-rc5 Kernel Configuration # CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.3" CONFIG_GCC_VERSION=0 @@ -4969,6 +4969,8 @@ CONFIG_CHARGER_CROS_CONTROL=y # CONFIG_FUEL_GAUGE_STC3117 is not set # CONFIG_CHARGER_UCS1002 is not set # CONFIG_CHARGER_BD99954 is not set +CONFIG_BATTERY_SURFACE=m +CONFIG_CHARGER_SURFACE=m # CONFIG_BATTERY_UG3105 is not set CONFIG_CHARGER_QCOM_SMB2=m # CONFIG_FUEL_GAUGE_MM8013 is not set @@ -5127,6 +5129,8 @@ CONFIG_SENSORS_SL28CPLD=m # CONFIG_SENSORS_SCH5636 is not set # CONFIG_SENSORS_STTS751 is not set # CONFIG_SENSORS_SG2042_MCU is not set +CONFIG_SENSORS_SURFACE_FAN=m +CONFIG_SENSORS_SURFACE_TEMP=m # CONFIG_SENSORS_ADC128D818 is not set # CONFIG_SENSORS_ADS7828 is not set # CONFIG_SENSORS_ADS7871 is not set @@ -7906,6 +7910,15 @@ CONFIG_I2C_HID_OF_ELAN=m # CONFIG_I2C_HID_OF_GOODIX is not set CONFIG_I2C_HID_CORE=m +# +# Surface System Aggregator Module HID support +# +CONFIG_SURFACE_HID=m +CONFIG_SURFACE_KBD=m +# end of Surface System Aggregator Module HID support + +CONFIG_SURFACE_HID_CORE=m + # # USB HID support # @@ -9030,10 +9043,18 @@ CONFIG_CROS_TYPEC_SWITCH=m # CONFIG_MELLANOX_PLATFORM is not set CONFIG_SURFACE_PLATFORMS=y # CONFIG_SURFACE_3_POWER_OPREGION is not set +# CONFIG_SURFACE_ACPI_NOTIFY is not set +# CONFIG_SURFACE_AGGREGATOR_CDEV is not set +# CONFIG_SURFACE_AGGREGATOR_HUB is not set +CONFIG_SURFACE_AGGREGATOR_REGISTRY=m +# CONFIG_SURFACE_AGGREGATOR_TABLET_SWITCH is not set +# CONFIG_SURFACE_DTX is not set # CONFIG_SURFACE_GPE is not set # CONFIG_SURFACE_HOTPLUG is not set +# CONFIG_SURFACE_PLATFORM_PROFILE is not set # CONFIG_SURFACE_PRO3_BUTTON is not set -# CONFIG_SURFACE_AGGREGATOR is not set +CONFIG_SURFACE_AGGREGATOR=m +CONFIG_SURFACE_AGGREGATOR_BUS=y CONFIG_ARM64_PLATFORM_DEVICES=y CONFIG_EC_ACER_ASPIRE1=m CONFIG_EC_HUAWEI_GAOKUN=m @@ -11668,7 +11689,7 @@ CONFIG_SECURITY_SELINUX_AVC_HASH_BITS=9 # CONFIG_SECURITY_TOMOYO is not set # CONFIG_SECURITY_APPARMOR is not set # CONFIG_SECURITY_LOADPIN is not set -# CONFIG_SECURITY_YAMA is not set +CONFIG_SECURITY_YAMA=y # CONFIG_SECURITY_SAFESETID is not set # CONFIG_SECURITY_LOCKDOWN_LSM is not set # CONFIG_SECURITY_LANDLOCK is not set diff --git a/device/main/linux-postmarketos-mainline/config-mainline.armv7 b/device/main/linux-postmarketos-mainline/config-mainline.armv7 index 0bf7a63e0..7270782e2 100644 --- a/device/main/linux-postmarketos-mainline/config-mainline.armv7 +++ b/device/main/linux-postmarketos-mainline/config-mainline.armv7 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/arm 7.1.0-rc4 Kernel Configuration +# Linux/arm 7.1.0-rc5 Kernel Configuration # CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.3" CONFIG_GCC_VERSION=0 @@ -11096,7 +11096,7 @@ CONFIG_SECURITY_SELINUX_AVC_HASH_BITS=9 # CONFIG_SECURITY_TOMOYO is not set # CONFIG_SECURITY_APPARMOR is not set # CONFIG_SECURITY_LOADPIN is not set -# CONFIG_SECURITY_YAMA is not set +CONFIG_SECURITY_YAMA=y # CONFIG_SECURITY_SAFESETID is not set # CONFIG_SECURITY_LOCKDOWN_LSM is not set # CONFIG_SECURITY_LANDLOCK is not set diff --git a/device/main/linux-postmarketos-mainline/config-mainline.loongarch64 b/device/main/linux-postmarketos-mainline/config-mainline.loongarch64 index 652b801a5..8779778b7 100644 --- a/device/main/linux-postmarketos-mainline/config-mainline.loongarch64 +++ b/device/main/linux-postmarketos-mainline/config-mainline.loongarch64 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/loongarch 7.1.0-rc4 Kernel Configuration +# Linux/loongarch 7.1.0-rc5 Kernel Configuration # CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.3" CONFIG_GCC_VERSION=0 diff --git a/device/main/linux-postmarketos-mainline/config-mainline.ppc64le b/device/main/linux-postmarketos-mainline/config-mainline.ppc64le index 3cdba0a14..41a24c6ae 100644 --- a/device/main/linux-postmarketos-mainline/config-mainline.ppc64le +++ b/device/main/linux-postmarketos-mainline/config-mainline.ppc64le @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/powerpc 7.1.0-rc4 Kernel Configuration +# Linux/powerpc 7.1.0-rc5 Kernel Configuration # CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.3" CONFIG_GCC_VERSION=0 diff --git a/device/main/linux-postmarketos-mainline/config-mainline.riscv64 b/device/main/linux-postmarketos-mainline/config-mainline.riscv64 index 767980f63..cf902a2a5 100644 --- a/device/main/linux-postmarketos-mainline/config-mainline.riscv64 +++ b/device/main/linux-postmarketos-mainline/config-mainline.riscv64 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/riscv 7.1.0-rc4 Kernel Configuration +# Linux/riscv 7.1.0-rc5 Kernel Configuration # CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.3" CONFIG_GCC_VERSION=0 @@ -7646,7 +7646,7 @@ CONFIG_SECURITY_APPARMOR_HASH_DEFAULT=y CONFIG_SECURITY_APPARMOR_EXPORT_BINARY=y CONFIG_SECURITY_APPARMOR_PARANOID_LOAD=y # CONFIG_SECURITY_LOADPIN is not set -# CONFIG_SECURITY_YAMA is not set +CONFIG_SECURITY_YAMA=y # CONFIG_SECURITY_SAFESETID is not set # CONFIG_SECURITY_LOCKDOWN_LSM is not set # CONFIG_SECURITY_LANDLOCK is not set diff --git a/device/main/linux-postmarketos-mainline/config-mainline.x86 b/device/main/linux-postmarketos-mainline/config-mainline.x86 index 71890281f..f9fdcd194 100644 --- a/device/main/linux-postmarketos-mainline/config-mainline.x86 +++ b/device/main/linux-postmarketos-mainline/config-mainline.x86 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/i386 7.1.0-rc4 Kernel Configuration +# Linux/i386 7.1.0-rc5 Kernel Configuration # CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.3" CONFIG_GCC_VERSION=0 @@ -622,7 +622,6 @@ CONFIG_X86_INTEL_PSTATE=y # CONFIG_X86_PCC_CPUFREQ is not set CONFIG_X86_AMD_PSTATE=y CONFIG_X86_AMD_PSTATE_DEFAULT_MODE=3 -# CONFIG_X86_AMD_PSTATE_DYNAMIC_EPP is not set # CONFIG_X86_AMD_PSTATE_UT is not set CONFIG_X86_ACPI_CPUFREQ=y CONFIG_X86_ACPI_CPUFREQ_CPB=y @@ -7511,7 +7510,7 @@ CONFIG_SECURITY_SELINUX_AVC_HASH_BITS=9 # CONFIG_SECURITY_TOMOYO is not set # CONFIG_SECURITY_APPARMOR is not set # CONFIG_SECURITY_LOADPIN is not set -# CONFIG_SECURITY_YAMA is not set +CONFIG_SECURITY_YAMA=y # CONFIG_SECURITY_SAFESETID is not set # CONFIG_SECURITY_LOCKDOWN_LSM is not set # CONFIG_SECURITY_LANDLOCK is not set diff --git a/device/main/linux-postmarketos-mainline/config-mainline.x86_64 b/device/main/linux-postmarketos-mainline/config-mainline.x86_64 index 450bcf535..a2a758f38 100644 --- a/device/main/linux-postmarketos-mainline/config-mainline.x86_64 +++ b/device/main/linux-postmarketos-mainline/config-mainline.x86_64 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86_64 7.1.0-rc4 Kernel Configuration +# Linux/x86_64 7.1.0-rc5 Kernel Configuration # CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.3" CONFIG_GCC_VERSION=0 @@ -672,7 +672,6 @@ CONFIG_X86_INTEL_PSTATE=y # CONFIG_X86_PCC_CPUFREQ is not set CONFIG_X86_AMD_PSTATE=y CONFIG_X86_AMD_PSTATE_DEFAULT_MODE=3 -# CONFIG_X86_AMD_PSTATE_DYNAMIC_EPP is not set # CONFIG_X86_AMD_PSTATE_UT is not set CONFIG_X86_ACPI_CPUFREQ=y CONFIG_X86_ACPI_CPUFREQ_CPB=y @@ -7696,7 +7695,7 @@ CONFIG_SECURITY_SELINUX_AVC_HASH_BITS=9 # CONFIG_SECURITY_TOMOYO is not set # CONFIG_SECURITY_APPARMOR is not set # CONFIG_SECURITY_LOADPIN is not set -# CONFIG_SECURITY_YAMA is not set +CONFIG_SECURITY_YAMA=y # CONFIG_SECURITY_SAFESETID is not set # CONFIG_SECURITY_LOCKDOWN_LSM is not set # CONFIG_SECURITY_LANDLOCK is not set diff --git a/device/main/linux-postmarketos-mainline/generic.aarch64.config b/device/main/linux-postmarketos-mainline/generic.aarch64.config index d9f533840..1254af754 100644 --- a/device/main/linux-postmarketos-mainline/generic.aarch64.config +++ b/device/main/linux-postmarketos-mainline/generic.aarch64.config @@ -53,6 +53,8 @@ CONFIG_TOUCHSCREEN_NOVATEK_NVT_TS=m CONFIG_TOUCHSCREEN_S6SY761=m CONFIG_TOUCHSCREEN_ZINITIX=m CONFIG_INPUT_MAX77693_HAPTIC=m +CONFIG_SURFACE_HID=m +CONFIG_SURFACE_KBD=m # led CONFIG_LEDS_MAX77705=m @@ -60,6 +62,12 @@ CONFIG_LEDS_MAX77705=m # localversion # CONFIG_LOCALVERSION_AUTO is not set +# misc +CONFIG_SENSORS_SURFACE_FAN=m +CONFIG_SENSORS_SURFACE_TEMP=m +CONFIG_SURFACE_AGGREGATOR=m +CONFIG_SURFACE_AGGREGATOR_REGISTRY=m + # power CONFIG_CHARGER_MAX77705=m CONFIG_MFD_MAX77693=m @@ -67,8 +75,10 @@ CONFIG_MFD_MAX77705=m CONFIG_REGULATOR=y CONFIG_SPMI=y CONFIG_BATTERY_LENOVO_YOGA_C630=m +CONFIG_BATTERY_SURFACE=m CONFIG_CHARGER_BQ25980=m CONFIG_CHARGER_QCOM_SMB2=m +CONFIG_CHARGER_SURFACE=m CONFIG_MFD_QCOM_RPM=m CONFIG_MFD_SL28CPLD=m CONFIG_QCOM_SPMI_RRADC=m diff --git a/device/main/linux-postmarketos-mainline/pmos.aarch64.config b/device/main/linux-postmarketos-mainline/pmos.aarch64.config index e99dcc761..99a8d5a5e 100644 --- a/device/main/linux-postmarketos-mainline/pmos.aarch64.config +++ b/device/main/linux-postmarketos-mainline/pmos.aarch64.config @@ -496,6 +496,7 @@ CONFIG_DM_VERITY=m # hardening CONFIG_SECURITY_DMESG_RESTRICT=y +CONFIG_SECURITY_YAMA=y CONFIG_SHADOW_CALL_STACK=y CONFIG_CFI=y # CONFIG_CFI_PERMISSIVE is not set diff --git a/device/main/linux-postmarketos-mainline/pmos.armv7.config b/device/main/linux-postmarketos-mainline/pmos.armv7.config index 9ae55a647..0fbe76b54 100644 --- a/device/main/linux-postmarketos-mainline/pmos.armv7.config +++ b/device/main/linux-postmarketos-mainline/pmos.armv7.config @@ -491,6 +491,7 @@ CONFIG_DM_VERITY=m # hardening CONFIG_SECURITY_DMESG_RESTRICT=y +CONFIG_SECURITY_YAMA=y CONFIG_CFI=y # CONFIG_CFI_PERMISSIVE is not set CONFIG_CFI_ICALL_NORMALIZE_INTEGERS=y diff --git a/device/main/linux-postmarketos-mainline/pmos.loongarch64.config b/device/main/linux-postmarketos-mainline/pmos.loongarch64.config index dfacb62df..42a330d3b 100644 --- a/device/main/linux-postmarketos-mainline/pmos.loongarch64.config +++ b/device/main/linux-postmarketos-mainline/pmos.loongarch64.config @@ -491,6 +491,7 @@ CONFIG_DM_VERITY=m # hardening CONFIG_SECURITY_DMESG_RESTRICT=y +CONFIG_SECURITY_YAMA=y # rust CONFIG_RUST=y diff --git a/device/main/linux-postmarketos-mainline/pmos.ppc64le.config b/device/main/linux-postmarketos-mainline/pmos.ppc64le.config index 96f13ea8f..67ec36f0a 100644 --- a/device/main/linux-postmarketos-mainline/pmos.ppc64le.config +++ b/device/main/linux-postmarketos-mainline/pmos.ppc64le.config @@ -479,6 +479,7 @@ CONFIG_DM_VERITY=m # hardening CONFIG_SECURITY_DMESG_RESTRICT=y +CONFIG_SECURITY_YAMA=y # selinux CONFIG_AUDIT=y diff --git a/device/main/linux-postmarketos-mainline/pmos.riscv64.config b/device/main/linux-postmarketos-mainline/pmos.riscv64.config index f55a4a565..4b00954b4 100644 --- a/device/main/linux-postmarketos-mainline/pmos.riscv64.config +++ b/device/main/linux-postmarketos-mainline/pmos.riscv64.config @@ -492,6 +492,7 @@ CONFIG_DM_VERITY=m # hardening CONFIG_SECURITY_DMESG_RESTRICT=y +CONFIG_SECURITY_YAMA=y CONFIG_CFI=y # CONFIG_CFI_PERMISSIVE is not set CONFIG_CFI_ICALL_NORMALIZE_INTEGERS=y diff --git a/device/main/linux-postmarketos-mainline/pmos.x86.config b/device/main/linux-postmarketos-mainline/pmos.x86.config index fb090570d..ad3b047b1 100644 --- a/device/main/linux-postmarketos-mainline/pmos.x86.config +++ b/device/main/linux-postmarketos-mainline/pmos.x86.config @@ -494,6 +494,7 @@ CONFIG_DM_VERITY=m # hardening CONFIG_SECURITY_DMESG_RESTRICT=y +CONFIG_SECURITY_YAMA=y # selinux CONFIG_AUDIT=y diff --git a/device/main/linux-postmarketos-mainline/pmos.x86_64.config b/device/main/linux-postmarketos-mainline/pmos.x86_64.config index 5ede63fbc..92f6711b4 100644 --- a/device/main/linux-postmarketos-mainline/pmos.x86_64.config +++ b/device/main/linux-postmarketos-mainline/pmos.x86_64.config @@ -496,6 +496,7 @@ CONFIG_DM_VERITY=m # hardening CONFIG_SECURITY_DMESG_RESTRICT=y +CONFIG_SECURITY_YAMA=y CONFIG_CFI=y # CONFIG_CFI_PERMISSIVE is not set CONFIG_CFI_ICALL_NORMALIZE_INTEGERS=y