projects
/
kconfig-hardened-check.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
|
inline
| side by side (parent:
42f18eb
)
Update UEK config
author
Alexander Popov
<alex.popov@linux.com>
Wed, 8 Aug 2018 12:00:13 +0000
(15:00 +0300)
committer
Alexander Popov
<alex.popov@linux.com>
Wed, 8 Aug 2018 12:00:13 +0000
(15:00 +0300)
config_files/oracle-uek5.config
patch
|
blob
|
history
diff --git
a/config_files/oracle-uek5.config
b/config_files/oracle-uek5.config
index ae161a1021e70e8d0f420ea724b5f9e571b47d42..e76c512eb0a3c40c2d4eb1c8b956764741283264 100644
(file)
--- a/
config_files/oracle-uek5.config
+++ b/
config_files/oracle-uek5.config
@@
-1,6
+1,6
@@
#
# Automatically generated file; DO NOT EDIT.
#
# Automatically generated file; DO NOT EDIT.
-# Linux/x86 4.14.35
-1818.0.9.el7uek.x86_64
Kernel Configuration
+# Linux/x86 4.14.35 Kernel Configuration
#
CONFIG_64BIT=y
CONFIG_X86_64=y
#
CONFIG_64BIT=y
CONFIG_X86_64=y
@@
-6279,7
+6279,7
@@
CONFIG_AMD_IOMMU_V2=m
CONFIG_DMAR_TABLE=y
CONFIG_INTEL_IOMMU=y
# CONFIG_INTEL_IOMMU_SVM is not set
CONFIG_DMAR_TABLE=y
CONFIG_INTEL_IOMMU=y
# CONFIG_INTEL_IOMMU_SVM is not set
-# CONFIG_INTEL_IOMMU_DEFAULT_ON is not set
+CONFIG_INTEL_IOMMU_DEFAULT_ON=y
CONFIG_INTEL_IOMMU_FLOPPY_WA=y
CONFIG_IRQ_REMAP=y
CONFIG_INTEL_IOMMU_FLOPPY_WA=y
CONFIG_IRQ_REMAP=y
@@
-7292,7
+7292,7
@@
CONFIG_BIG_KEYS=y
CONFIG_TRUSTED_KEYS=y
CONFIG_ENCRYPTED_KEYS=y
# CONFIG_KEY_DH_OPERATIONS is not set
CONFIG_TRUSTED_KEYS=y
CONFIG_ENCRYPTED_KEYS=y
# CONFIG_KEY_DH_OPERATIONS is not set
-CONFIG_SECURITY_DMESG_RESTRICT=y
+# CONFIG_SECURITY_DMESG_RESTRICT is not set
CONFIG_SECURITY=y
CONFIG_SECURITY_WRITABLE_HOOKS=y
CONFIG_SECURITYFS=y
CONFIG_SECURITY=y
CONFIG_SECURITY_WRITABLE_HOOKS=y
CONFIG_SECURITYFS=y
@@
-7308,6
+7308,7
@@
CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
CONFIG_FORTIFY_SOURCE=y
# CONFIG_STATIC_USERMODEHELPER is not set
CONFIG_LOCK_DOWN_KERNEL=y
CONFIG_FORTIFY_SOURCE=y
# CONFIG_STATIC_USERMODEHELPER is not set
CONFIG_LOCK_DOWN_KERNEL=y
+# CONFIG_ALLOW_LOCKDOWN_LIFT_BY_SYSRQ is not set
CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT=y
CONFIG_SECURITY_SELINUX=y
CONFIG_SECURITY_SELINUX_BOOTPARAM=y
CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT=y
CONFIG_SECURITY_SELINUX=y
CONFIG_SECURITY_SELINUX_BOOTPARAM=y
@@
-7700,3
+7701,4
@@
CONFIG_ARCH_HAS_UACCESS_FLUSHCACHE=y
CONFIG_STACKDEPOT=y
CONFIG_SBITMAP=y
# CONFIG_STRING_SELFTEST is not set
CONFIG_STACKDEPOT=y
CONFIG_SBITMAP=y
# CONFIG_STRING_SELFTEST is not set
+