Change 'decision' to 'kspp' for non-default options recommended by KSPP

[kconfig-hardened-check.git] / config_files / oracle-uek5.config

diff --git a/config_files/oracle-uek5.config b/config_files/oracle-uek5.config
index ae161a1021e70e8d0f420ea724b5f9e571b47d42..e76c512eb0a3c40c2d4eb1c8b956764741283264 100644 (file)
--- a/config_files/oracle-uek5.config
+++ b/config_files/oracle-uek5.config
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86 4.14.35-1818.0.9.el7uek.x86_64 Kernel Configuration
+# Linux/x86 4.14.35 Kernel Configuration
 #
 CONFIG_64BIT=y
 CONFIG_X86_64=y
@@ -6279,7 +6279,7 @@ CONFIG_AMD_IOMMU_V2=m
 CONFIG_DMAR_TABLE=y
 CONFIG_INTEL_IOMMU=y
 # CONFIG_INTEL_IOMMU_SVM is not set
-# CONFIG_INTEL_IOMMU_DEFAULT_ON is not set
+CONFIG_INTEL_IOMMU_DEFAULT_ON=y
 CONFIG_INTEL_IOMMU_FLOPPY_WA=y
 CONFIG_IRQ_REMAP=y
 
@@ -7292,7 +7292,7 @@ CONFIG_BIG_KEYS=y
 CONFIG_TRUSTED_KEYS=y
 CONFIG_ENCRYPTED_KEYS=y
 # CONFIG_KEY_DH_OPERATIONS is not set
-CONFIG_SECURITY_DMESG_RESTRICT=y
+# CONFIG_SECURITY_DMESG_RESTRICT is not set
 CONFIG_SECURITY=y
 CONFIG_SECURITY_WRITABLE_HOOKS=y
 CONFIG_SECURITYFS=y
@@ -7308,6 +7308,7 @@ CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
 CONFIG_FORTIFY_SOURCE=y
 # CONFIG_STATIC_USERMODEHELPER is not set
 CONFIG_LOCK_DOWN_KERNEL=y
+# CONFIG_ALLOW_LOCKDOWN_LIFT_BY_SYSRQ is not set
 CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT=y
 CONFIG_SECURITY_SELINUX=y
 CONFIG_SECURITY_SELINUX_BOOTPARAM=y
@@ -7700,3 +7701,4 @@ CONFIG_ARCH_HAS_UACCESS_FLUSHCACHE=y
 CONFIG_STACKDEPOT=y
 CONFIG_SBITMAP=y
 # CONFIG_STRING_SELFTEST is not set
+