From 3871249fbd8d3a9fb2d7d3f4ee38049a0fef0045 Mon Sep 17 00:00:00 2001 From: Robert Eckelmann Date: Sat, 25 Jul 2026 10:39:22 +0900 Subject: [PATCH] linux-postmarketos-marvell: apply latest kconfig checks Signed-off-by: Robert Eckelmann Part-of: --- .../linux-postmarketos-marvell/APKBUILD | 2 +- .../config-postmarketos-marvell.armv7 | 37 ++++++++++++++----- 2 files changed, 29 insertions(+), 10 deletions(-) diff --git a/device/testing/linux-postmarketos-marvell/APKBUILD b/device/testing/linux-postmarketos-marvell/APKBUILD index f8191dd77..9eccfe8e9 100644 --- a/device/testing/linux-postmarketos-marvell/APKBUILD +++ b/device/testing/linux-postmarketos-marvell/APKBUILD @@ -89,5 +89,5 @@ bece6f2dc2ca6c775224084d9a3bf282141751cdd1dcddea98427f2aab8f8b0be89b9e5c8577c33b 25eca1ce39c8986323f127d09e4028861a11e3272c900d0f41ca620782191aadba731c9d7b3ea45389f99631ab160be13a1e71954401636ec19c7d6a12a41cd6 0014.patch 6b5298ffabacbdfa454187114a2854b5e5873e718b3282115eda68fd151d37c064e574ac1d082cbbde96a6675f5a32ce8de9ed3f8daa9f8dac3038e288bd97bb wd-glacier.patch c79b74b450c00c3da75da59bee5659687f06d3814ebc1c9e6304a89ec756c02caedcb6067897842ea2444c794dbfb83b2feaa6a22c463fe51323ce730554f9a1 linux-postmarketos-marvell-6.18.40.tar.xz -63c081c520ddc4cfaca301e8b1097493e3aa460034dc162b2134edfeeb1f9f0e6644e80608151b8f772d243f22b8994b620622d73b990288f5da8ead312b14ee config-postmarketos-marvell.armv7 +1648082c694ebcaab1582f4ffbfe87c144e04c2a109cc1943e6e8d10866bec9ebe2a4eb42e6e681c82a8f62945b5e1a8cfc19522bc8ef0bdbfaf91db6713151d config-postmarketos-marvell.armv7 " diff --git a/device/testing/linux-postmarketos-marvell/config-postmarketos-marvell.armv7 b/device/testing/linux-postmarketos-marvell/config-postmarketos-marvell.armv7 index e5fca78c4..19d350f56 100644 --- a/device/testing/linux-postmarketos-marvell/config-postmarketos-marvell.armv7 +++ b/device/testing/linux-postmarketos-marvell/config-postmarketos-marvell.armv7 @@ -778,6 +778,7 @@ CONFIG_CC_HAS_SANE_FUNCTION_ALIGNMENT=y # end of General architecture-dependent options CONFIG_RT_MUTEXES=y +CONFIG_MODULE_SIG_FORMAT=y CONFIG_MODULES=y # CONFIG_MODULE_DEBUG is not set CONFIG_MODULE_FORCE_LOAD=y @@ -786,7 +787,17 @@ CONFIG_MODULE_FORCE_UNLOAD=y # CONFIG_MODULE_UNLOAD_TAINT_TRACKING is not set # CONFIG_MODVERSIONS is not set # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set +CONFIG_MODULE_SIG=y +# CONFIG_MODULE_SIG_FORCE is not set +CONFIG_MODULE_SIG_ALL=y +# CONFIG_MODULE_SIG_SHA1 is not set +# CONFIG_MODULE_SIG_SHA256 is not set +# CONFIG_MODULE_SIG_SHA384 is not set +CONFIG_MODULE_SIG_SHA512=y +# CONFIG_MODULE_SIG_SHA3_256 is not set +# CONFIG_MODULE_SIG_SHA3_384 is not set +# CONFIG_MODULE_SIG_SHA3_512 is not set +CONFIG_MODULE_SIG_HASH="sha512" CONFIG_MODULE_COMPRESS=y # CONFIG_MODULE_COMPRESS_GZIP is not set # CONFIG_MODULE_COMPRESS_XZ is not set @@ -7591,14 +7602,14 @@ CONFIG_XFS_RT=y # CONFIG_XFS_DEBUG is not set # CONFIG_GFS2_FS is not set # CONFIG_OCFS2_FS is not set -CONFIG_BTRFS_FS=y +CONFIG_BTRFS_FS=m CONFIG_BTRFS_FS_POSIX_ACL=y # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set # CONFIG_BTRFS_DEBUG is not set # CONFIG_BTRFS_ASSERT is not set CONFIG_BTRFS_EXPERIMENTAL=y CONFIG_NILFS2_FS=m -CONFIG_F2FS_FS=y +CONFIG_F2FS_FS=m CONFIG_F2FS_STAT_FS=y CONFIG_F2FS_FS_XATTR=y CONFIG_F2FS_FS_POSIX_ACL=y @@ -7942,7 +7953,11 @@ CONFIG_SECURITY_SMACK_BRINGUP=y # CONFIG_SECURITY_LOADPIN is not set CONFIG_SECURITY_YAMA=y # CONFIG_SECURITY_SAFESETID is not set -# CONFIG_SECURITY_LOCKDOWN_LSM is not set +CONFIG_SECURITY_LOCKDOWN_LSM=y +CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y +CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y +# CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set +# CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set # CONFIG_SECURITY_LANDLOCK is not set # CONFIG_SECURITY_IPE is not set CONFIG_INTEGRITY=y @@ -7952,7 +7967,7 @@ CONFIG_INTEGRITY_AUDIT=y # CONFIG_EVM is not set CONFIG_DEFAULT_SECURITY_SMACK=y # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="yama,loadpin,safesetid,integrity,selinux,smack,tomoyo,apparmor" +CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,ipe,bpf" # # Kernel hardening options @@ -7994,7 +8009,7 @@ CONFIG_RANDSTRUCT_NONE=y # end of Kernel hardening options # end of Security options -CONFIG_XOR_BLOCKS=y +CONFIG_XOR_BLOCKS=m CONFIG_ASYNC_CORE=m CONFIG_ASYNC_XOR=m CONFIG_CRYPTO=y @@ -8028,7 +8043,7 @@ CONFIG_CRYPTO_NULL=y CONFIG_CRYPTO_PCRYPT=m CONFIG_CRYPTO_CRYPTD=m CONFIG_CRYPTO_AUTHENC=y -# CONFIG_CRYPTO_KRB5ENC is not set +CONFIG_CRYPTO_KRB5ENC=m # CONFIG_CRYPTO_BENCHMARK is not set CONFIG_CRYPTO_ENGINE=m # end of Crypto core or helper @@ -8209,6 +8224,9 @@ CONFIG_PKCS7_MESSAGE_PARSER=y # # Certificates for signature checking # +CONFIG_MODULE_SIG_KEY="certs/signing_key.pem" +CONFIG_MODULE_SIG_KEY_TYPE_RSA=y +# CONFIG_MODULE_SIG_KEY_TYPE_ECDSA is not set CONFIG_SYSTEM_TRUSTED_KEYRING=y CONFIG_SYSTEM_TRUSTED_KEYS="" # CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set @@ -8216,13 +8234,14 @@ CONFIG_SYSTEM_TRUSTED_KEYS="" # CONFIG_SYSTEM_BLACKLIST_KEYRING is not set # end of Certificates for signature checking -# CONFIG_CRYPTO_KRB5 is not set +CONFIG_CRYPTO_KRB5=m +# CONFIG_CRYPTO_KRB5_SELFTESTS is not set CONFIG_BINARY_PRINTF=y # # Library routines # -CONFIG_RAID6_PQ=y +CONFIG_RAID6_PQ=m CONFIG_RAID6_PQ_BENCHMARK=y CONFIG_LINEAR_RANGES=y # CONFIG_PACKING is not set