Piecuu/pmaports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

linux-postmarketos-stable: Upgrade to 7.0.10

Browse source 
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8618>
This commit is contained in:
Aelin 2026-05-23 14:06:57 +02:00 • committed by The Friendly Meow (merge) Bot
parent 6ff32835f4
commit f90b57106f
No known key found for this signature in database
16 changed files with 61 additions and 46 deletions
Download patch file Download diff file Expand all files Collapse all files

18
device/main/linux-postmarketos-stable/APKBUILD
View file

@ -1,7 +1,7 @@
# Co-Maintainer: Achill Gilgenast <achill@achill.org>
maintainer="Aelin <aelin@postmarketos.org>"
pkgname=linux-postmarketos-stable
pkgver=7.0.9
pkgver=7.0.10
pkgrel=0
_kver=${pkgver%.*}
pkgdesc="Stable Kernel"
@ -122,16 +122,16 @@ package() {
}
sha512sums="
1a161507d59c389e945dbb7cfb1456df2edf14c8376290584a905e0b602ed79e717f8fe154402f56a8d64a20243772129976884effa140fb25151856a7e3630f patch-7.0.9.patch.xz
076c369ec654ff69b701a5f7123d4d4309c48781407a23012e629b7fe7c1dd16d7cf6cc0f069534902eef2e27d394516ed36cb103716bf0bdeca5a4345e4b805 patch-7.0.10.patch.xz
8c85b708342f8f09ca25b2234b22e93b62b144a9ef919fbb21827f52fa47498e778c79db1559524dd7fb360f95b2ce174171443c1859656c281be41d2b6c5a0b linux-7.0.tar.xz
1f11df2480e9f691573283597160b4c806e492cdca4825f3acb3afb70bde43abfab487bcde1f5553b431a702a0039479d041b0ce7859970e706b5a51d2ad8fb0 0001-WIP-arch-powerpc-boot-Support-LLVM-1-in-wrapper-scri.patch
26521a9c9ea769534095dc4e306babadc8bcbaf03d7faa523c377e41ba0f742ecd0490fa27791d895f729c3ae8845297dca59b4db2475e7f078e689c447430bc 0002-WIP-arch-powerpc-boot-Use-z-notext-for-pseries-image.patch
302c20c85559fc9b3b2420ed25be1bfbb76c87f2a470e4141c32e9542cf1f5c6b3b5a7847231a3eaa0f6bc0e5942d0c1599e807175dcf5e63469704c3d6adde3 0003-WIP-arch-powerpc-boot-Add-z-norelro.patch
24348ddf811d1a5da3e30d4be8fce9994384bbc241469e5a95c783a737ce0c46671e1848e5c0b579ac3ba44e3b31eee297d9d61d18780f28c6a9935373131fc1 config-stable.aarch64
70b1193155d0c26aaafc8371c941eebc2ed0e4440bfa96c6a1da87ecd53eaa2ccaade35f7821d7dc3a9537c27ce0b94cd254755603bf85bb6c88736279c510ce config-stable.armv7
362754c8fc619fb3176d2a7060da2d113cc9a576ea1a6a99cd64768b8632421a64c4d582498089edd5e8255b927985e777155f1bcce794f933596515c70b8366 config-stable.loongarch64
79e2b4dda2db54d9636052bdd8d55a9fd6cdc10deddc18a6a98ad09c4cb906aa14e452b8544c90053f58d1dbfa811fc75ab172256307373b0580097a8cbb638b config-stable.ppc64le
e561057ab34ef8bf90b6ce395c199a588d044d9e7a1876ce38b66058d201441ab7bdf23174a79c83e13f2bca9dfd4772665df4e94cad9316dd987b42c3f4855a config-stable.riscv64
993bdf85a8a366eaea96f14024256df4cb47c9193ccbef0a60706f63d350459eb92b52713eda6678ebc161e08dec83cc830693afc682da8ff009b399c425dfe0 config-stable.x86
42d8a7b1ded55091f415ff227933aa371a21eda3cbbb2e08fd94f78154576304c29608b581828dacfb7bd6864f1b2c06682913fdb2227be044d0f39a9f25448d config-stable.x86_64
17497ec370ee5566610e3c298f8656fe92613597ad85e7cb5c2844d6231375278fe20a67d29d2b02a12a94eee23c4f1e9f3c60782f95a258415ce644fa24dcc6 config-stable.aarch64
7be282b25811a35a3c6e5ef62c082904322467b11bc6215fb08e19910096f264d39cdcec31ab493a8eda19e2ee2aa975794a8603e6c0bfc653b2e8bf465724a0 config-stable.armv7
ca4aa0f645face7de9ffa26393cfe13b64bc9aa80c903dba16e9aa5f3870f23e55c9ee0aef5171ebe3e9bdcd58f9a23246c2323800682b1a9e1ea2aaa5fb94a9 config-stable.loongarch64
279e4353c19757aebd04888048d5a1af543c85f7c445b3c3933d3e0dd8a6a364969bc24e8b23c35919c032ee6d762ad62f912f7f2d79d3cd7142bfcf1b47d3be config-stable.ppc64le
2d2dd2b07f9d9b492b4759db828a0533d848aa121b8bb28d4f0bbb79cc4f81c3aff28f66006ed0d097c9c0225227d07eef1eb70822a84e5c21e5e0ede7b7a1ad config-stable.riscv64
2ffc5a79804466ca3cc1151fceef5e52b373d90fb11ea08e53a3b29f5e0a2498177653970c952503de9222e455d7f450491a133e7be08d0bf2d28e34ce0e740f config-stable.x86
ecd9e4460557a81dbb91439f98e4ec0fb84c09a0f06543a9eb0460f91bb0817c287506d190a5598b8606ebcd6e16d74fc636185f94f7c133735b8bd924f14bec config-stable.x86_64
"

27
device/main/linux-postmarketos-stable/config-stable.aarch64
View file

@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
# Linux/arm64 7.0.9 Kernel Configuration
# Linux/arm64 7.0.10 Kernel Configuration
#
CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.3"
CONFIG_GCC_VERSION=0
@ -4954,6 +4954,8 @@ CONFIG_CHARGER_CROS_CONTROL=y
# CONFIG_FUEL_GAUGE_STC3117 is not set
# CONFIG_CHARGER_UCS1002 is not set
# CONFIG_CHARGER_BD99954 is not set
CONFIG_BATTERY_SURFACE=m
CONFIG_CHARGER_SURFACE=m
# CONFIG_BATTERY_UG3105 is not set
CONFIG_CHARGER_QCOM_SMB2=m
# CONFIG_FUEL_GAUGE_MM8013 is not set
@ -5110,6 +5112,8 @@ CONFIG_SENSORS_SL28CPLD=m
# CONFIG_SENSORS_SCH5636 is not set
# CONFIG_SENSORS_STTS751 is not set
# CONFIG_SENSORS_SG2042_MCU is not set
CONFIG_SENSORS_SURFACE_FAN=m
CONFIG_SENSORS_SURFACE_TEMP=m
# CONFIG_SENSORS_ADC128D818 is not set
# CONFIG_SENSORS_ADS7828 is not set
# CONFIG_SENSORS_ADS7871 is not set
@ -7868,6 +7872,15 @@ CONFIG_I2C_HID_OF_ELAN=m
# CONFIG_I2C_HID_OF_GOODIX is not set
CONFIG_I2C_HID_CORE=m
#
# Surface System Aggregator Module HID support
#
CONFIG_SURFACE_HID=m
CONFIG_SURFACE_KBD=m
# end of Surface System Aggregator Module HID support
CONFIG_SURFACE_HID_CORE=m
#
# USB HID support
#
@ -8994,10 +9007,18 @@ CONFIG_CROS_TYPEC_SWITCH=m
# CONFIG_MELLANOX_PLATFORM is not set
CONFIG_SURFACE_PLATFORMS=y
# CONFIG_SURFACE_3_POWER_OPREGION is not set
# CONFIG_SURFACE_ACPI_NOTIFY is not set
# CONFIG_SURFACE_AGGREGATOR_CDEV is not set
# CONFIG_SURFACE_AGGREGATOR_HUB is not set
CONFIG_SURFACE_AGGREGATOR_REGISTRY=m
# CONFIG_SURFACE_AGGREGATOR_TABLET_SWITCH is not set
# CONFIG_SURFACE_DTX is not set
# CONFIG_SURFACE_GPE is not set
# CONFIG_SURFACE_HOTPLUG is not set
# CONFIG_SURFACE_PLATFORM_PROFILE is not set
# CONFIG_SURFACE_PRO3_BUTTON is not set
# CONFIG_SURFACE_AGGREGATOR is not set
CONFIG_SURFACE_AGGREGATOR=m
CONFIG_SURFACE_AGGREGATOR_BUS=y
CONFIG_ARM64_PLATFORM_DEVICES=y
CONFIG_EC_ACER_ASPIRE1=m
CONFIG_EC_HUAWEI_GAOKUN=m
@ -11613,7 +11634,7 @@ CONFIG_SECURITY_SELINUX_AVC_HASH_BITS=9
# CONFIG_SECURITY_TOMOYO is not set
# CONFIG_SECURITY_APPARMOR is not set
# CONFIG_SECURITY_LOADPIN is not set
# CONFIG_SECURITY_YAMA is not set
CONFIG_SECURITY_YAMA=y
# CONFIG_SECURITY_SAFESETID is not set
# CONFIG_SECURITY_LOCKDOWN_LSM is not set
# CONFIG_SECURITY_LANDLOCK is not set

5
device/main/linux-postmarketos-stable/config-stable.armv7
View file

@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
# Linux/arm 7.0.9 Kernel Configuration
# Linux/arm 7.0.10 Kernel Configuration
#
CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.3"
CONFIG_GCC_VERSION=0
@ -2883,7 +2883,6 @@ CONFIG_FEC=y
CONFIG_FSL_PQ_MDIO=y
# CONFIG_FSL_XGMAC_MDIO is not set
CONFIG_GIANFAR=y
# CONFIG_FSL_DPAA2_SWITCH is not set
# CONFIG_FSL_ENETC is not set
# CONFIG_NXP_ENETC4 is not set
# CONFIG_FSL_ENETC_VF is not set
@ -11064,7 +11063,7 @@ CONFIG_SECURITY_SELINUX_AVC_HASH_BITS=9
# CONFIG_SECURITY_TOMOYO is not set
# CONFIG_SECURITY_APPARMOR is not set
# CONFIG_SECURITY_LOADPIN is not set
# CONFIG_SECURITY_YAMA is not set
CONFIG_SECURITY_YAMA=y
# CONFIG_SECURITY_SAFESETID is not set
# CONFIG_SECURITY_LOCKDOWN_LSM is not set
# CONFIG_SECURITY_LANDLOCK is not set

2
device/main/linux-postmarketos-stable/config-stable.loongarch64
View file

@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
# Linux/loongarch 7.0.9 Kernel Configuration
# Linux/loongarch 7.0.10 Kernel Configuration
#
CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.3"
CONFIG_GCC_VERSION=0

26
device/main/linux-postmarketos-stable/config-stable.ppc64le
View file

@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
# Linux/powerpc 7.0.9 Kernel Configuration
# Linux/powerpc 7.0.10 Kernel Configuration
#
CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.3"
CONFIG_GCC_VERSION=0
@ -238,7 +238,6 @@ CONFIG_CMDLINE_LOG_WRAP_IDEAL_LEN=1021
CONFIG_INITRAMFS_PRESERVE_MTIME=y
CONFIG_CC_OPTIMIZE_FOR_PERFORMANCE=y
# CONFIG_CC_OPTIMIZE_FOR_SIZE is not set
CONFIG_HAVE_LD_DEAD_CODE_DATA_ELIMINATION=y
CONFIG_LD_ORPHAN_WARN=y
CONFIG_LD_ORPHAN_WARN_LEVEL="warn"
CONFIG_SYSCTL=y
@ -499,9 +498,6 @@ CONFIG_HZ_1000=y
CONFIG_HZ=1000
CONFIG_SCHED_HRTICK=y
CONFIG_PPC_TRANSACTIONAL_MEM=y
CONFIG_ARCH_USING_PATCHABLE_FUNCTION_ENTRY=y
CONFIG_PPC_FTRACE_OUT_OF_LINE=y
CONFIG_PPC_FTRACE_OUT_OF_LINE_NUM_RESERVE=32768
CONFIG_HOTPLUG_CPU=y
CONFIG_INTERRUPT_SANITIZE_REGISTERS=y
CONFIG_PPC_QUEUED_SPINLOCKS=y
@ -591,8 +587,6 @@ CONFIG_KVM_BOOK3S_HV_NESTED_PMU_WORKAROUND=y
CONFIG_KVM_BOOK3S_HV_PMU=m
CONFIG_KVM_XICS=y
CONFIG_KVM_XIVE=y
CONFIG_HAVE_LIVEPATCH=y
# CONFIG_LIVEPATCH is not set
CONFIG_CPU_MITIGATIONS=y
CONFIG_ARCH_HAS_DMA_OPS=y
@ -609,7 +603,6 @@ CONFIG_KPROBES=y
CONFIG_JUMP_LABEL=y
# CONFIG_STATIC_KEYS_SELFTEST is not set
CONFIG_OPTPROBES=y
CONFIG_KPROBES_ON_FTRACE=y
CONFIG_UPROBES=y
CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS=y
CONFIG_ARCH_USE_BUILTIN_BSWAP=y
@ -684,7 +677,6 @@ CONFIG_PAGE_SIZE_64KB=y
CONFIG_PAGE_SIZE_LESS_THAN_256KB=y
CONFIG_PAGE_SHIFT=16
CONFIG_ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT=y
CONFIG_HAVE_OBJTOOL=y
CONFIG_HAVE_RELIABLE_STACKTRACE=y
CONFIG_HAVE_ARCH_NVRAM_OPS=y
CONFIG_CLONE_BACKWARDS=y
@ -721,7 +713,6 @@ CONFIG_HAVE_GCC_PLUGINS=y
CONFIG_FUNCTION_ALIGNMENT_4B=y
CONFIG_FUNCTION_ALIGNMENT=4
CONFIG_CC_HAS_SANE_FUNCTION_ALIGNMENT=y
CONFIG_ARCH_WANTS_PRE_LINK_VMLINUX=y
# end of General architecture-dependent options
CONFIG_RT_MUTEXES=y
@ -5343,7 +5334,6 @@ CONFIG_HID_KUNIT_TEST=m
#
# HID-BPF support
#
# CONFIG_HID_BPF is not set
# end of HID-BPF support
CONFIG_I2C_HID=y
@ -7942,13 +7932,8 @@ CONFIG_HAVE_FUNCTION_GRAPH_TRACER=y
CONFIG_HAVE_FUNCTION_GRAPH_FREGS=y
CONFIG_HAVE_FTRACE_GRAPH_FUNC=y
CONFIG_HAVE_DYNAMIC_FTRACE=y
CONFIG_HAVE_DYNAMIC_FTRACE_WITH_REGS=y
CONFIG_HAVE_DYNAMIC_FTRACE_WITH_DIRECT_CALLS=y
CONFIG_HAVE_DYNAMIC_FTRACE_WITH_CALL_OPS=y
CONFIG_HAVE_DYNAMIC_FTRACE_WITH_ARGS=y
CONFIG_HAVE_FTRACE_REGS_HAVING_PT_REGS=y
CONFIG_HAVE_SYSCALL_TRACEPOINTS=y
CONFIG_HAVE_OBJTOOL_MCOUNT=y
CONFIG_HAVE_C_RECORDMCOUNT=y
CONFIG_TRACER_MAX_TRACE=y
CONFIG_TRACE_CLOCK=y
@ -7966,12 +7951,7 @@ CONFIG_FUNCTION_GRAPH_TRACER=y
# CONFIG_FUNCTION_GRAPH_RETVAL is not set
# CONFIG_FUNCTION_GRAPH_RETADDR is not set
CONFIG_DYNAMIC_FTRACE=y
CONFIG_DYNAMIC_FTRACE_WITH_REGS=y
CONFIG_DYNAMIC_FTRACE_WITH_DIRECT_CALLS=y
CONFIG_DYNAMIC_FTRACE_WITH_CALL_OPS=y
CONFIG_DYNAMIC_FTRACE_WITH_ARGS=y
# CONFIG_FUNCTION_SELF_TRACING is not set
# CONFIG_FPROBE is not set
# CONFIG_FUNCTION_PROFILER is not set
CONFIG_STACK_TRACER=y
# CONFIG_IRQSOFF_TRACER is not set
@ -7995,7 +7975,7 @@ CONFIG_EPROBE_EVENTS=y
CONFIG_BPF_EVENTS=y
CONFIG_DYNAMIC_EVENTS=y
CONFIG_PROBE_EVENTS=y
CONFIG_FTRACE_MCOUNT_USE_PATCHABLE_FUNCTION_ENTRY=y
CONFIG_FTRACE_MCOUNT_USE_RECORDMCOUNT=y
# CONFIG_SYNTH_EVENTS is not set
# CONFIG_USER_EVENTS is not set
# CONFIG_HIST_TRIGGERS is not set
@ -8011,8 +7991,6 @@ CONFIG_FTRACE_MCOUNT_USE_PATCHABLE_FUNCTION_ENTRY=y
# CONFIG_KPROBE_EVENT_GEN_TEST is not set
# CONFIG_RV is not set
# CONFIG_SAMPLES is not set
CONFIG_HAVE_SAMPLE_FTRACE_DIRECT=y
CONFIG_HAVE_SAMPLE_FTRACE_DIRECT_MULTI=y
CONFIG_ARCH_HAS_DEVMEM_IS_ALLOWED=y
CONFIG_STRICT_DEVMEM=y
CONFIG_IO_STRICT_DEVMEM=y

4
device/main/linux-postmarketos-stable/config-stable.riscv64
View file

@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
# Linux/riscv 7.0.9 Kernel Configuration
# Linux/riscv 7.0.10 Kernel Configuration
#
CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.3"
CONFIG_GCC_VERSION=0
@ -7613,7 +7613,7 @@ CONFIG_SECURITY_APPARMOR_HASH_DEFAULT=y
CONFIG_SECURITY_APPARMOR_EXPORT_BINARY=y
CONFIG_SECURITY_APPARMOR_PARANOID_LOAD=y
# CONFIG_SECURITY_LOADPIN is not set
# CONFIG_SECURITY_YAMA is not set
CONFIG_SECURITY_YAMA=y
# CONFIG_SECURITY_SAFESETID is not set
# CONFIG_SECURITY_LOCKDOWN_LSM is not set
# CONFIG_SECURITY_LANDLOCK is not set

4
device/main/linux-postmarketos-stable/config-stable.x86
View file

@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
# Linux/i386 7.0.9 Kernel Configuration
# Linux/i386 7.0.10 Kernel Configuration
#
CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.3"
CONFIG_GCC_VERSION=0
@ -7509,7 +7509,7 @@ CONFIG_SECURITY_SELINUX_AVC_HASH_BITS=9
# CONFIG_SECURITY_TOMOYO is not set
# CONFIG_SECURITY_APPARMOR is not set
# CONFIG_SECURITY_LOADPIN is not set
# CONFIG_SECURITY_YAMA is not set
CONFIG_SECURITY_YAMA=y
# CONFIG_SECURITY_SAFESETID is not set
# CONFIG_SECURITY_LOCKDOWN_LSM is not set
# CONFIG_SECURITY_LANDLOCK is not set

4
device/main/linux-postmarketos-stable/config-stable.x86_64
View file

@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
# Linux/x86_64 7.0.9 Kernel Configuration
# Linux/x86_64 7.0.10 Kernel Configuration
#
CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.3"
CONFIG_GCC_VERSION=0
@ -7685,7 +7685,7 @@ CONFIG_SECURITY_SELINUX_AVC_HASH_BITS=9
# CONFIG_SECURITY_TOMOYO is not set
# CONFIG_SECURITY_APPARMOR is not set
# CONFIG_SECURITY_LOADPIN is not set
# CONFIG_SECURITY_YAMA is not set
CONFIG_SECURITY_YAMA=y
# CONFIG_SECURITY_SAFESETID is not set
# CONFIG_SECURITY_LOCKDOWN_LSM is not set
# CONFIG_SECURITY_LANDLOCK is not set

10
device/main/linux-postmarketos-stable/generic.aarch64.config
View file

@ -53,6 +53,8 @@ CONFIG_TOUCHSCREEN_NOVATEK_NVT_TS=m
CONFIG_TOUCHSCREEN_S6SY761=m
CONFIG_TOUCHSCREEN_ZINITIX=m
CONFIG_INPUT_MAX77693_HAPTIC=m
CONFIG_SURFACE_HID=m
CONFIG_SURFACE_KBD=m
# led
CONFIG_LEDS_MAX77705=m
@ -60,6 +62,12 @@ CONFIG_LEDS_MAX77705=m
# localversion
# CONFIG_LOCALVERSION_AUTO is not set
# misc
CONFIG_SENSORS_SURFACE_FAN=m
CONFIG_SENSORS_SURFACE_TEMP=m
CONFIG_SURFACE_AGGREGATOR=m
CONFIG_SURFACE_AGGREGATOR_REGISTRY=m
# power
CONFIG_CHARGER_MAX77705=m
CONFIG_MFD_MAX77693=m
@ -67,8 +75,10 @@ CONFIG_MFD_MAX77705=m
CONFIG_REGULATOR=y
CONFIG_SPMI=y
CONFIG_BATTERY_LENOVO_YOGA_C630=m
CONFIG_BATTERY_SURFACE=m
CONFIG_CHARGER_BQ25980=m
CONFIG_CHARGER_QCOM_SMB2=m
CONFIG_CHARGER_SURFACE=m
CONFIG_MFD_QCOM_RPM=m
CONFIG_MFD_SL28CPLD=m
CONFIG_QCOM_SPMI_RRADC=m

1
device/main/linux-postmarketos-stable/pmos.aarch64.config
View file

@ -496,6 +496,7 @@ CONFIG_DM_VERITY=m
# hardening
CONFIG_SECURITY_DMESG_RESTRICT=y
CONFIG_SECURITY_YAMA=y
CONFIG_SHADOW_CALL_STACK=y
CONFIG_CFI=y
# CONFIG_CFI_PERMISSIVE is not set

1
device/main/linux-postmarketos-stable/pmos.armv7.config
View file

@ -491,6 +491,7 @@ CONFIG_DM_VERITY=m
# hardening
CONFIG_SECURITY_DMESG_RESTRICT=y
CONFIG_SECURITY_YAMA=y
CONFIG_CFI=y
# CONFIG_CFI_PERMISSIVE is not set
CONFIG_CFI_ICALL_NORMALIZE_INTEGERS=y

1
device/main/linux-postmarketos-stable/pmos.loongarch64.config
View file

@ -491,6 +491,7 @@ CONFIG_DM_VERITY=m
# hardening
CONFIG_SECURITY_DMESG_RESTRICT=y
CONFIG_SECURITY_YAMA=y
# rust
CONFIG_RUST=y

1
device/main/linux-postmarketos-stable/pmos.ppc64le.config
View file

@ -479,6 +479,7 @@ CONFIG_DM_VERITY=m
# hardening
CONFIG_SECURITY_DMESG_RESTRICT=y
CONFIG_SECURITY_YAMA=y
# selinux
CONFIG_AUDIT=y

1
device/main/linux-postmarketos-stable/pmos.riscv64.config
View file

@ -492,6 +492,7 @@ CONFIG_DM_VERITY=m
# hardening
CONFIG_SECURITY_DMESG_RESTRICT=y
CONFIG_SECURITY_YAMA=y
CONFIG_CFI=y
# CONFIG_CFI_PERMISSIVE is not set
CONFIG_CFI_ICALL_NORMALIZE_INTEGERS=y

1
device/main/linux-postmarketos-stable/pmos.x86.config
View file

@ -494,6 +494,7 @@ CONFIG_DM_VERITY=m
# hardening
CONFIG_SECURITY_DMESG_RESTRICT=y
CONFIG_SECURITY_YAMA=y
# selinux
CONFIG_AUDIT=y

1
device/main/linux-postmarketos-stable/pmos.x86_64.config
View file

@ -496,6 +496,7 @@ CONFIG_DM_VERITY=m
# hardening
CONFIG_SECURITY_DMESG_RESTRICT=y
CONFIG_SECURITY_YAMA=y
CONFIG_CFI=y
# CONFIG_CFI_PERMISSIVE is not set
CONFIG_CFI_ICALL_NORMALIZE_INTEGERS=y