diff --git a/device/community/linux-purism-librem5/APKBUILD b/device/community/linux-purism-librem5/APKBUILD index d3640b424..c5d5057a5 100644 --- a/device/community/linux-purism-librem5/APKBUILD +++ b/device/community/linux-purism-librem5/APKBUILD @@ -3,8 +3,7 @@ maintainer="Alistair Francis " pkgname=linux-purism-librem5 pkgver=6.12.94 -pkgrel=1 -# NOTE: Don't forget to rebase the config! See prepare() for instructions. +pkgrel=2 _purismrel=1 _purismver=${pkgver}pureos$_purismrel _commit=db350fb91e60d12fde6bc7b1ece03836b215e444 @@ -17,7 +16,6 @@ license="GPL-2.0-only" options="!strip !check !tracedeps pmb:cross-native pmb:kconfigcheck-community - pmb:kconfigcheck-librem5 " makedepends=" bison @@ -36,7 +34,7 @@ makedepends=" zstd " -# kconfig generated with: ARCH=arm64 make defconfig KBUILD_DEFCONFIG=librem5_defconfig +_defconfig="librem5_defconfig" _config="config-$_flavor.$arch" @@ -49,26 +47,6 @@ builddir="$srcdir/linux-pureos-$_purismver-$_commit" prepare() { default_prepare cp "$srcdir/config-$_flavor.$arch" .config - - ####### Rebase config - # The kernel config needs to be periodically rebased to enable new - # modules/features that Purism has enabled in their defconfig. This is done - # by: 1) generate .config using librem5_defconfig, 2) diff that .config - # with the config in this package, 3) carefully going over the diff and - # selecting new things enabled in their config. - # - # This can be uncommented to help generate the defconfig using "pmbootstrap - # build linux-purism-librem5". The build will fail (exit 1) to let you grab - # the config before it starts building the kernel: - # make ARCH="$_carch" LLVM=1 \ - # defconfig KBUILD_DEFCONFIG=librem5_defconfig - # exit 1 - # - # After that run the following - # cp \ - # device/community/linux-purism-librem5/config-purism-librem5.aarch64 - # pmbootstrap kconfig edit linux-purism-librem5 - # pmbootstrap kconfig check linux-purism-librem5 } build() { @@ -94,5 +72,5 @@ package() { sha512sums=" 94050892d45a94c9e518d380e16523ada1b4af6c321cfccd42255297b06ad891eb6b3fe30235b59cd7f45401b7d7d50a11eb93d130c2f4bba38af3bd85c92d7e linux-purism-librem5-6.12.94pureos1.tar.gz -29d63830ef8ff73f5d76615622580a019f48e8a3f4a8a404721020ae4ff3efd8b230f61b6e9ce124134164dfe28b93a85052f2b841466d244013d0d1e02e8a24 config-purism-librem5.aarch64 +1b0003a702872899a3a588806caa70eb3e1030a1d7daa3134c669ba0657e6c8c211c22f25f08d7f56eed4c2419782050b3ee4dbf9db6549d9c4b6b5b81ca2942 config-purism-librem5.aarch64 " diff --git a/device/community/linux-purism-librem5/config-purism-librem5.aarch64 b/device/community/linux-purism-librem5/config-purism-librem5.aarch64 index 013e85f6d..40cf1181f 100644 --- a/device/community/linux-purism-librem5/config-purism-librem5.aarch64 +++ b/device/community/linux-purism-librem5/config-purism-librem5.aarch64 @@ -13,8 +13,6 @@ CONFIG_LD_IS_LLD=y CONFIG_LLD_VERSION=220108 CONFIG_RUSTC_VERSION=0 CONFIG_RUSTC_LLVM_VERSION=0 -CONFIG_CC_CAN_LINK=y -CONFIG_CC_CAN_LINK_STATIC=y CONFIG_CC_HAS_ASM_GOTO_OUTPUT=y CONFIG_CC_HAS_ASM_GOTO_TIED_OUTPUT=y CONFIG_TOOLS_SUPPORT_RELR=y @@ -7916,7 +7914,7 @@ CONFIG_CRYPTO_ESSIV=y # # Hashes, digests, and MACs # -CONFIG_CRYPTO_BLAKE2B=y +CONFIG_CRYPTO_BLAKE2B=m CONFIG_CRYPTO_CMAC=m CONFIG_CRYPTO_GHASH=y CONFIG_CRYPTO_HMAC=y @@ -7935,7 +7933,7 @@ CONFIG_CRYPTO_STREEBOG=m # CONFIG_CRYPTO_VMAC is not set CONFIG_CRYPTO_WP512=m CONFIG_CRYPTO_XCBC=m -CONFIG_CRYPTO_XXHASH=y +CONFIG_CRYPTO_XXHASH=m # end of Hashes, digests, and MACs # @@ -8139,7 +8137,7 @@ CONFIG_CRC32_SLICEBY8=y CONFIG_CRC64=y # CONFIG_CRC4 is not set CONFIG_CRC7=y -CONFIG_LIBCRC32C=y +CONFIG_LIBCRC32C=m # CONFIG_CRC8 is not set CONFIG_XXHASH=y CONFIG_AUDIT_GENERIC=y diff --git a/device/community/linux-purism-librem5/librem5.config b/device/community/linux-purism-librem5/librem5.config new file mode 100644 index 000000000..1f95fa293 --- /dev/null +++ b/device/community/linux-purism-librem5/librem5.config @@ -0,0 +1,2 @@ +# Use packaged firmware for RS9116 +CONFIG_RS9116_FLASH_MODE=n diff --git a/device/community/linux-purism-librem5/pmos.config b/device/community/linux-purism-librem5/pmos.config new file mode 100644 index 000000000..05a7a8d04 --- /dev/null +++ b/device/community/linux-purism-librem5/pmos.config @@ -0,0 +1,493 @@ +# default +# CONFIG_ANDROID_PARANOID_NETWORK is not set +CONFIG_BINFMT_ELF=y +CONFIG_BLK_DEV_INITRD=y +CONFIG_CGROUPS=y +CONFIG_CRYPTO_AES=y +CONFIG_CRYPTO_CBC=y +CONFIG_CRYPTO_XTS=y +CONFIG_DEVTMPFS=y +CONFIG_DM_CRYPT=y +CONFIG_FB=y +CONFIG_INPUT_EVDEV=m +# CONFIG_KINETO_GAN is not set +CONFIG_NLS_ASCII=y +# CONFIG_PFT is not set +# CONFIG_SEC_RESTRICT_ROOTING is not set +CONFIG_SYN_COOKIES=y +CONFIG_SYSVIPC=y +CONFIG_TMPFS_POSIX_ACL=y +# CONFIG_USE_VFB is not set +CONFIG_VFAT_FS=y +CONFIG_VT=y +CONFIG_DRM_FBDEV_EMULATION=y +CONFIG_BINFMT_SCRIPT=y +CONFIG_UEVENT_HELPER=y +CONFIG_USER_NS=y +CONFIG_NULL_TTY=m +CONFIG_MODULE_COMPRESS=y +CONFIG_MODULE_COMPRESS_ZSTD=y +CONFIG_MODULE_DECOMPRESS=y +CONFIG_FW_LOADER_COMPRESS=y +CONFIG_FW_LOADER_COMPRESS_ZSTD=y +CONFIG_PSI=y +# CONFIG_PSI_DEFAULT_DISABLED is not set +CONFIG_UDMABUF=y +CONFIG_BPF=y +CONFIG_BPF_JIT=y +CONFIG_BPF_LSM=y +CONFIG_DEBUG_INFO_BTF=y +CONFIG_DEBUG_INFO_BTF_MODULES=y +CONFIG_DEBUG_INFO_DWARF5=y +# CONFIG_DEBUG_INFO_REDUCED is not set +CONFIG_IPC_NS=y +CONFIG_KPROBES=y +CONFIG_KPROBE_EVENTS=y +CONFIG_NET_NS=y +CONFIG_PID_NS=y +CONFIG_SECURITY=y +CONFIG_SECURITYFS=y +CONFIG_SECURITY_PATH=y +CONFIG_USER_NS=y +CONFIG_UTS_NS=y + +# netmount +CONFIG_CACHEFILES=m +CONFIG_CRYPTO_CAMELLIA=m +CONFIG_CRYPTO_CMAC=m +CONFIG_CRYPTO_CTS=y +CONFIG_CRYPTO_HMAC=y +CONFIG_CRYPTO_SHA256=y +CONFIG_CRYPTO_SHA512=y +CONFIG_FSCACHE=y +CONFIG_NFSD=m +CONFIG_NFSD_BLOCKLAYOUT=y +CONFIG_NFSD_PNFS=y +CONFIG_NFSD_SCSILAYOUT=y +CONFIG_NFSD_V3_ACL=y +CONFIG_NFSD_V4=y +CONFIG_NFSD_V4_2_INTER_SSC=y +CONFIG_NFS_FS=m +CONFIG_NFS_FSCACHE=y +CONFIG_NFS_V3=m +CONFIG_NFS_V4=m +CONFIG_NFS_V4_2=y +CONFIG_RPCSEC_GSS_KRB5=m +CONFIG_CRYPTO_AES_ARM64_CE_BLK=y +CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA1=y +CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA2=y +CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_CAMELLIA=y +CONFIG_CRYPTO_AES_TI=m +CONFIG_NFS_V4_1=y + +# accessibility +CONFIG_A11Y_BRAILLE_CONSOLE=y +CONFIG_ACCESSIBILITY=y +CONFIG_SPEAKUP=m +CONFIG_SPEAKUP_SYNTH_ACNTSA=m +CONFIG_SPEAKUP_SYNTH_APOLLO=m +CONFIG_SPEAKUP_SYNTH_AUDPTR=m +CONFIG_SPEAKUP_SYNTH_BNS=m +CONFIG_SPEAKUP_SYNTH_DECEXT=m +CONFIG_SPEAKUP_SYNTH_DECTLK=m +CONFIG_SPEAKUP_SYNTH_LTLK=m +CONFIG_SPEAKUP_SYNTH_SOFT=m +CONFIG_SPEAKUP_SYNTH_SPKOUT=m +CONFIG_SPEAKUP_SYNTH_TXPRT=m + +# waydroid +# CONFIG_ANDROID_BINDERFS is not set +CONFIG_ANDROID_BINDER_DEVICES="binder,hwbinder,vndbinder" +CONFIG_ANDROID_BINDER_IPC=y +# CONFIG_ANDROID_BINDER_IPC_SELFTEST is not set +CONFIG_BLK_DEV_LOOP=y +CONFIG_BPF_SYSCALL=y +CONFIG_BRIDGE=m +CONFIG_BRIDGE_VLAN_FILTERING=y +CONFIG_CGROUP_BPF=y +CONFIG_CROSS_MEMORY_ATTACH=y +CONFIG_FUSE_FS=m +CONFIG_IP_NF_MANGLE=m +CONFIG_NETFILTER_XTABLES=m +CONFIG_NETFILTER_XT_MATCH_COMMENT=m +CONFIG_SQUASHFS=m +CONFIG_SQUASHFS_XATTR=y +CONFIG_SQUASHFS_XZ=y +CONFIG_TMPFS_XATTR=y +CONFIG_TUN=m +CONFIG_VETH=m +CONFIG_VLAN_8021Q=m +CONFIG_IP_NF_IPTABLES_LEGACY=m + +# iwd +CONFIG_ASYMMETRIC_KEY_TYPE=y +CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y +CONFIG_CRYPTO_CMAC=m +CONFIG_CRYPTO_DES=m +CONFIG_CRYPTO_ECB=y +CONFIG_CRYPTO_HMAC=y +CONFIG_CRYPTO_MD4=m +CONFIG_CRYPTO_MD5=y +CONFIG_CRYPTO_SHA1=y +CONFIG_CRYPTO_SHA256=y +CONFIG_CRYPTO_SHA512=y +CONFIG_CRYPTO_USER_API_HASH=m +CONFIG_CRYPTO_USER_API_SKCIPHER=m +CONFIG_KEYS=y +CONFIG_KEY_DH_OPERATIONS=y +CONFIG_PKCS7_MESSAGE_PARSER=y +CONFIG_PKCS8_PRIVATE_KEY_PARSER=m +CONFIG_RFKILL=m +CONFIG_X509_CERTIFICATE_PARSER=y + +# nftables +CONFIG_IP6_NF_FILTER=m +CONFIG_IP6_NF_IPTABLES=m +CONFIG_IP6_NF_NAT=m +CONFIG_IP6_NF_TARGET_REJECT=m +CONFIG_IP_NF_FILTER=m +CONFIG_IP_NF_IPTABLES=m +CONFIG_IP_NF_NAT=m +CONFIG_IP_NF_TARGET_REJECT=m +CONFIG_NETFILTER=y +CONFIG_NFT_CT=m +CONFIG_NFT_LIMIT=m +CONFIG_NFT_LOG=m +CONFIG_NFT_MASQ=m +CONFIG_NFT_NAT=m +CONFIG_NFT_REJECT=m +CONFIG_NF_CONNTRACK=m +CONFIG_NF_REJECT_IPV4=m +CONFIG_NF_REJECT_IPV6=m +CONFIG_NF_TABLES=m +CONFIG_NF_TABLES_INET=y +CONFIG_NF_TABLES_IPV4=y +CONFIG_NF_TABLES_IPV6=y +CONFIG_IP6_NF_IPTABLES_LEGACY=m +CONFIG_IP_NF_IPTABLES_LEGACY=m + +# containers +CONFIG_BLK_CGROUP=y +CONFIG_BLK_DEV_DM=y +CONFIG_BLK_DEV_THROTTLING=y +CONFIG_BRIDGE=m +CONFIG_BRIDGE_NETFILTER=m +CONFIG_BRIDGE_VLAN_FILTERING=y +CONFIG_CFS_BANDWIDTH=y +CONFIG_CGROUP_BPF=y +CONFIG_CGROUP_CPUACCT=y +CONFIG_CGROUP_DEVICE=y +CONFIG_CGROUP_FREEZER=y +CONFIG_CGROUP_NET_PRIO=y +CONFIG_CGROUP_PERF=y +CONFIG_CGROUP_PIDS=y +CONFIG_CGROUP_SCHED=y +CONFIG_CHECKPOINT_RESTORE=y +CONFIG_CPUSETS=y +CONFIG_DM_THIN_PROVISIONING=m +CONFIG_DUMMY=m +CONFIG_EXT4_FS_POSIX_ACL=y +CONFIG_EXT4_FS_SECURITY=y +CONFIG_FAIR_GROUP_SCHED=y +CONFIG_IP6_NF_MANGLE=m +CONFIG_IP6_NF_NAT=m +CONFIG_IP6_NF_RAW=m +CONFIG_IP6_NF_TARGET_MASQUERADE=m +CONFIG_IPC_NS=y +CONFIG_IPVLAN=m +CONFIG_IP_NF_FILTER=m +CONFIG_IP_NF_MANGLE=m +CONFIG_IP_NF_NAT=m +CONFIG_IP_NF_RAW=m +CONFIG_IP_NF_TARGET_MASQUERADE=m +CONFIG_IP_NF_TARGET_REDIRECT=m +CONFIG_IP_VS=m +CONFIG_IP_VS_NFCT=y +CONFIG_IP_VS_PROTO_TCP=y +CONFIG_IP_VS_PROTO_UDP=y +CONFIG_IP_VS_RR=m +CONFIG_KEYS=y +CONFIG_MACVLAN=m +CONFIG_MD=y +CONFIG_MEMCG=y +CONFIG_NAMESPACES=y +CONFIG_NETFILTER_XT_MARK=m +CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=m +CONFIG_NETFILTER_XT_MATCH_CONNTRACK=m +CONFIG_NETFILTER_XT_MATCH_IPVS=m +CONFIG_NETFILTER_XT_TARGET_CHECKSUM=m +CONFIG_NET_CLS_CGROUP=m +CONFIG_NET_NS=y +CONFIG_NET_SCHED=y +CONFIG_NFT_COMPAT=m +CONFIG_NFT_CT=m +CONFIG_NFT_FIB=m +CONFIG_NFT_FIB_IPV4=m +CONFIG_NFT_FIB_IPV6=m +CONFIG_NFT_MASQ=m +CONFIG_NFT_NAT=m +CONFIG_NF_NAT=m +CONFIG_NF_TABLES=m +CONFIG_OVERLAY_FS=m +CONFIG_PID_NS=y +CONFIG_POSIX_MQUEUE=y +CONFIG_SECCOMP=y +CONFIG_SWAP=y +CONFIG_UTS_NS=y +CONFIG_VETH=m +CONFIG_VXLAN=m +CONFIG_IP6_NF_FILTER=m + +# zram +CONFIG_SWAP=y +CONFIG_ZRAM=y +CONFIG_ZSMALLOC=y +CONFIG_ZRAM_BACKEND_842=y +CONFIG_ZRAM_BACKEND_DEFLATE=y +CONFIG_ZRAM_BACKEND_LZ4=y +CONFIG_ZRAM_BACKEND_LZ4HC=y +CONFIG_ZRAM_BACKEND_LZO=y +CONFIG_ZRAM_BACKEND_ZSTD=y + +# netboot +CONFIG_BLK_DEV_NBD=m +CONFIG_BLK_DEV_UBLK=m + +# wireguard +CONFIG_IPV6_MULTIPLE_TABLES=y +CONFIG_IP_ADVANCED_ROUTER=y +CONFIG_IP_MULTIPLE_TABLES=y +CONFIG_NFT_CT=m +CONFIG_NFT_FIB=m +CONFIG_NFT_FIB_IPV4=m +CONFIG_NFT_FIB_IPV6=m +CONFIG_NF_CONNTRACK_MARK=y +CONFIG_NF_TABLES=m +CONFIG_NF_TABLES_IPV4=y +CONFIG_NF_TABLES_IPV6=y +CONFIG_WIREGUARD=m + +# filesystems +CONFIG_BTRFS_FS=m +CONFIG_BTRFS_FS_POSIX_ACL=y +CONFIG_EROFS_FS=m +CONFIG_EROFS_FS_ZIP=y +CONFIG_EROFS_FS_ZIP_LZMA=y +CONFIG_EXFAT_FS=m +CONFIG_EXT4_FS=y +CONFIG_F2FS_FS=m +CONFIG_UDF_FS=m +CONFIG_XFS_FS=m +CONFIG_EROFS_FS_ZIP_DEFLATE=y +CONFIG_EROFS_FS_ZIP_ZSTD=y + +# usb_gadgets +CONFIG_USB_CONFIGFS=m +CONFIG_USB_CONFIGFS_ACM=y +CONFIG_USB_CONFIGFS_F_FS=y +CONFIG_USB_CONFIGFS_MASS_STORAGE=y +CONFIG_USB_CONFIGFS_NCM=y +CONFIG_USB_CONFIGFS_RNDIS=y +# CONFIG_USB_ETH is not set +# CONFIG_USB_FUNCTIONFS is not set +CONFIG_USB_F_FS=m +CONFIG_USB_GADGET=y +# CONFIG_USB_G_SERIAL is not set +# CONFIG_USB_MASS_STORAGE is not set + +# community_various +CONFIG_BINFMT_MISC=m +CONFIG_CIFS=m +CONFIG_CPU_FREQ=y +CONFIG_CPU_FREQ_GOV_SCHEDUTIL=y +CONFIG_DM_INTEGRITY=m +CONFIG_LEDS_TRIGGER_PATTERN=m +CONFIG_LEDS_TRIGGER_TIMER=m +CONFIG_NETFILTER_ADVANCED=y +CONFIG_NETFILTER_XT_MATCH_MARK=m +CONFIG_NETFILTER_XT_MATCH_MULTIPORT=m +CONFIG_NETFILTER_XT_MATCH_STATISTIC=m +CONFIG_NETFILTER_XT_MATCH_TCPMSS=m +CONFIG_NETFILTER_XT_TARGET_TCPMSS=m +CONFIG_NETWORK_FILESYSTEMS=y +# CONFIG_RT_GROUP_SCHED is not set +CONFIG_UCLAMP_TASK=y +CONFIG_UCLAMP_TASK_GROUP=y + +# input +CONFIG_BT=m +CONFIG_BT_HIDP=m +CONFIG_GPIOLIB=y +CONFIG_HIDRAW=y +CONFIG_HID_A4TECH=m +CONFIG_HID_ACCUTOUCH=m +CONFIG_HID_ACRUX=m +CONFIG_HID_ACRUX_FF=y +CONFIG_HID_ALPS=m +CONFIG_HID_APPLE=m +CONFIG_HID_APPLEIR=m +CONFIG_HID_AUREAL=m +CONFIG_HID_BATTERY_STRENGTH=y +CONFIG_HID_BELKIN=m +CONFIG_HID_BETOP_FF=m +CONFIG_HID_BIGBEN_FF=m +CONFIG_HID_CHERRY=m +CONFIG_HID_CHICONY=m +CONFIG_HID_CMEDIA=m +CONFIG_HID_CORSAIR=m +CONFIG_HID_COUGAR=m +CONFIG_HID_CP2112=m +CONFIG_HID_CREATIVE_SB0540=m +CONFIG_HID_CYPRESS=m +CONFIG_HID_DRAGONRISE=m +CONFIG_HID_ELAN=m +CONFIG_HID_ELECOM=m +CONFIG_HID_ELO=m +CONFIG_HID_EMS_FF=m +CONFIG_HID_EZKEY=m +CONFIG_HID_FT260=m +CONFIG_HID_GEMBIRD=m +CONFIG_HID_GENERIC=m +CONFIG_HID_GFRM=m +CONFIG_HID_GLORIOUS=m +CONFIG_HID_GREENASIA=m +CONFIG_HID_GT683R=m +CONFIG_HID_GYRATION=m +CONFIG_HID_HOLTEK=m +CONFIG_HID_ICADE=m +CONFIG_HID_ITE=m +CONFIG_HID_JABRA=m +CONFIG_HID_KENSINGTON=m +CONFIG_HID_KEYTOUCH=m +CONFIG_HID_KYE=m +CONFIG_HID_LCPOWER=m +CONFIG_HID_LED=m +CONFIG_HID_LETSKETCH=m +CONFIG_HID_LOGITECH=m +CONFIG_HID_LOGITECH_DJ=m +CONFIG_HID_LOGITECH_HIDPP=m +CONFIG_HID_MACALLY=m +CONFIG_HID_MAGICMOUSE=m +CONFIG_HID_MALTRON=m +CONFIG_HID_MAYFLASH=m +CONFIG_HID_MCP2221=m +CONFIG_HID_MEGAWORLD_FF=m +CONFIG_HID_MICROSOFT=m +CONFIG_HID_MONTEREY=m +CONFIG_HID_MULTITOUCH=m +CONFIG_HID_NINTENDO=m +CONFIG_HID_NTI=m +CONFIG_HID_NTRIG=m +CONFIG_HID_ORTEK=m +CONFIG_HID_PANTHERLORD=m +CONFIG_HID_PENMOUNT=m +CONFIG_HID_PETALYNX=m +CONFIG_HID_PICOLCD=m +CONFIG_HID_PICOLCD_BACKLIGHT=y +CONFIG_HID_PICOLCD_LCD=y +CONFIG_HID_PICOLCD_LEDS=y +CONFIG_HID_PID=y +CONFIG_HID_PLANTRONICS=m +CONFIG_HID_PLAYSTATION=m +CONFIG_HID_PRIMAX=m +CONFIG_HID_PRODIKEYS=m +CONFIG_HID_PXRC=m +CONFIG_HID_RAZER=m +CONFIG_HID_RETRODE=m +CONFIG_HID_RMI=m +CONFIG_HID_ROCCAT=m +CONFIG_HID_SAITEK=m +CONFIG_HID_SAMSUNG=m +CONFIG_HID_SEMITEK=m +CONFIG_HID_SENSOR_ACCEL_3D=m +CONFIG_HID_SENSOR_ALS=m +CONFIG_HID_SENSOR_CUSTOM_INTEL_HINGE=m +CONFIG_HID_SENSOR_DEVICE_ROTATION=m +CONFIG_HID_SENSOR_GYRO_3D=m +CONFIG_HID_SENSOR_HUB=m +CONFIG_HID_SENSOR_HUMIDITY=m +CONFIG_HID_SENSOR_IIO_COMMON=m +CONFIG_HID_SENSOR_IIO_TRIGGER=m +CONFIG_HID_SENSOR_INCLINOMETER_3D=m +CONFIG_HID_SENSOR_MAGNETOMETER_3D=m +CONFIG_HID_SENSOR_TEMP=m +CONFIG_HID_SIGMAMICRO=m +CONFIG_HID_SMARTJOYPLUS=m +CONFIG_HID_SONY=m +CONFIG_HID_SPEEDLINK=m +CONFIG_HID_STEAM=m +CONFIG_HID_STEELSERIES=m +CONFIG_HID_SUNPLUS=m +CONFIG_HID_THINGM=m +CONFIG_HID_THRUSTMASTER=m +CONFIG_HID_TIVO=m +CONFIG_HID_TOPRE=m +CONFIG_HID_TOPSEED=m +CONFIG_HID_TWINHAN=m +CONFIG_HID_U2FZERO=m +CONFIG_HID_UCLOGIC=m +CONFIG_HID_UDRAW_PS3=m +CONFIG_HID_VIEWSONIC=m +CONFIG_HID_VIVALDI=m +CONFIG_HID_WACOM=m +CONFIG_HID_WALTOP=m +CONFIG_HID_WIIMOTE=m +CONFIG_HID_XIAOMI=m +CONFIG_HID_XINMO=m +CONFIG_HID_ZEROPLUS=m +CONFIG_HID_ZYDACRON=m +CONFIG_IIO=y +CONFIG_INPUT_JOYSTICK=y +CONFIG_INPUT_MISC=y +CONFIG_INPUT_UINPUT=y +CONFIG_JOYSTICK_XPAD=m +CONFIG_JOYSTICK_XPAD_FF=y +CONFIG_JOYSTICK_XPAD_LEDS=y +CONFIG_LCD_CLASS_DEVICE=m +CONFIG_LEDS_CLASS_MULTICOLOR=m +CONFIG_UHID=m +CONFIG_USB_ANNOUNCE_NEW_DEVICES=y +CONFIG_USB_HIDDEV=y +CONFIG_USB_PRINTER=m +CONFIG_HID_EVISION=m +CONFIG_HID_SUPPORT=y +CONFIG_HID_NVIDIA_SHIELD=m +CONFIG_HID_GOOGLE_STADIA_FF=m +CONFIG_HID_WINWING=m +CONFIG_HID_GOODIX_SPI=m +CONFIG_SPI=y + +# usb +CONFIG_DRM=y +CONFIG_DRM_UDL=m +CONFIG_SND_USB_AUDIO=m +CONFIG_SND_USB_AUDIO_MIDI_V2=y +CONFIG_USB_NET_RNDIS_HOST=m +CONFIG_USB_RTL8152=m +CONFIG_USB_SERIAL=m +CONFIG_USB_SERIAL_CP210X=m +CONFIG_USB_SERIAL_SIMPLE=m +CONFIG_USB_STORAGE=m +CONFIG_USB_UAS=m +CONFIG_USB_USBNET=m + +# debug +CONFIG_DYNAMIC_DEBUG=y +CONFIG_DYNAMIC_FTRACE=y +CONFIG_FTRACE=y +CONFIG_FUNCTION_TRACER=y + +# immutable +CONFIG_EFIVAR_FS=m +CONFIG_DM_VERITY=m + +# hardening +CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,ipe,bpf" +CONFIG_SECURITY_DMESG_RESTRICT=y +CONFIG_SECURITY_LOCKDOWN_LSM=y +CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y +CONFIG_SECURITY_YAMA=y +CONFIG_SHADOW_CALL_STACK=y +CONFIG_CFI_CLANG=y +# CONFIG_CFI_PERMISSIVE is not set +CONFIG_CFI_ICALL_NORMALIZE_INTEGERS=y diff --git a/kconfigcheck.toml b/kconfigcheck.toml index 4da4588b4..1b3c3ee08 100644 --- a/kconfigcheck.toml +++ b/kconfigcheck.toml @@ -645,8 +645,6 @@ DYNAMIC_DEBUG = "y" # Enable debug dynamically DYNAMIC_FTRACE = "y" # Enable function tracing dynamically # Device specific settings to prevent regressions -["category:librem5".">=0.0.0"."aarch64"] -RS9116_FLASH_MODE = "n" # pma!2059 ["category:pinephonepro".">=0.0.0"."aarch64"] LEDS_GROUP_MULTICOLOR = "y" # pma!5991