Piecuu/pmaports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

linux-postmarketos-qcom-sdm845: enable lockdown integrity

Browse source 
Signed-off-by: Aster Boese <asterboese@mailbox.org>
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8986>
This commit is contained in:
Aster Boese 2026-07-10 17:56:29 +02:00 • committed by The Friendly Meow (merge) Bot
parent e2b8338e09
commit 535fba79ee
No known key found for this signature in database
3 changed files with 8 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

5
device/community/linux-postmarketos-qcom-sdm845/APKBUILD
View file

@ -5,7 +5,7 @@ maintainer="Casey Connolly <kcxt@postmarketos.org>"
_flavor="postmarketos-qcom-sdm845"
pkgname=linux-$_flavor
pkgver=7.1_rc1
pkgrel=3
pkgrel=4
pkgdesc="Mainline Kernel fork for SDM845 devices"
arch="aarch64"
_carch="arm64"
@ -17,6 +17,7 @@ options="
!tracedeps
pmb:cross-native
pmb:kconfigcheck-community
pmb:kconfigcheck-lockdown
"
makedepends="
bison
@ -92,7 +93,7 @@ package() {
sha512sums="
94da173aaf74dd33ef8ff9015e92759481cd0da5bd8a1e52c8664fd372d48a1155655001ad2e9d26557733c71ae8bc448e4ebdf1372b8f32159907a35f0306a9 linux-sdm845-7.1-rc1-r0.tar.gz
d330554e6e9827c15200b4e9196fbe06a117ba01cc1e8683dc8e9d2403898a4412925e92fa8c47638c184f19d968093f5c3804eca2b5fab41af0e95c495daa6e config-postmarketos-qcom-sdm845.aarch64
0da9864ae972e81db443b58e990f62bb84bcd721f073c0b947725a7d7c1e630bde1395fa9108ce8264e6b88a6c92f3f52b551b0cd373e6bde54ea56a13a48e9b config-postmarketos-qcom-sdm845.aarch64
e2555390d48cbbdc32a7d3f0c27599ff88f2fe3e786d1d0086caaa5b092cc3edcb6e95e2fb07034edb3793f6dc954da0662c723202eb7e2c4956c99b50919b12 libbpf-Fix-UAF-in-strset__add_str.patch
e8b595f3e076896dc38f249c8908d58e2e6a858eaa77fe1e680f27db0e76d3d74c0b5dfebb7a4c57d546fee0b0f6eb81a38b20dfd72f985c9d02f28d79a5eceb enable-dynamic-ftrace.patch
"

4
device/community/linux-postmarketos-qcom-sdm845/config-postmarketos-qcom-sdm845.aarch64
View file

@ -8833,8 +8833,8 @@ CONFIG_SECURITY_YAMA=y
# CONFIG_SECURITY_SAFESETID is not set
CONFIG_SECURITY_LOCKDOWN_LSM=y
CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y
CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y
# CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set
# CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE is not set
CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y
# CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set
# CONFIG_SECURITY_LANDLOCK is not set
# CONFIG_SECURITY_IPE is not set

3
device/community/linux-postmarketos-qcom-sdm845/pmos.config
View file

@ -493,5 +493,8 @@ CONFIG_CFI=y
# CONFIG_CFI_PERMISSIVE is not set
CONFIG_CFI_ICALL_NORMALIZE_INTEGERS=y
# lockdown
CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y
# wine
CONFIG_NTSYNC=m