From: Alexander Popov <alex.popov@linux.com>
Date: Wed, 8 Aug 2018 12:00:13 +0000 (+0300)
Subject: Update UEK config
X-Git-Tag: v0.5.2~72^2~3
X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=d77c7a55762f8af19049bf9bfae69e8d4f7038b0;p=kconfig-hardened-check.git

Update UEK config
---

diff --git a/config_files/oracle-uek5.config b/config_files/oracle-uek5.config
index ae161a1..e76c512 100644
--- a/config_files/oracle-uek5.config
+++ b/config_files/oracle-uek5.config
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86 4.14.35-1818.0.9.el7uek.x86_64 Kernel Configuration
+# Linux/x86 4.14.35 Kernel Configuration
 #
 CONFIG_64BIT=y
 CONFIG_X86_64=y
@@ -6279,7 +6279,7 @@ CONFIG_AMD_IOMMU_V2=m
 CONFIG_DMAR_TABLE=y
 CONFIG_INTEL_IOMMU=y
 # CONFIG_INTEL_IOMMU_SVM is not set
-# CONFIG_INTEL_IOMMU_DEFAULT_ON is not set
+CONFIG_INTEL_IOMMU_DEFAULT_ON=y
 CONFIG_INTEL_IOMMU_FLOPPY_WA=y
 CONFIG_IRQ_REMAP=y
 
@@ -7292,7 +7292,7 @@ CONFIG_BIG_KEYS=y
 CONFIG_TRUSTED_KEYS=y
 CONFIG_ENCRYPTED_KEYS=y
 # CONFIG_KEY_DH_OPERATIONS is not set
-CONFIG_SECURITY_DMESG_RESTRICT=y
+# CONFIG_SECURITY_DMESG_RESTRICT is not set
 CONFIG_SECURITY=y
 CONFIG_SECURITY_WRITABLE_HOOKS=y
 CONFIG_SECURITYFS=y
@@ -7308,6 +7308,7 @@ CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
 CONFIG_FORTIFY_SOURCE=y
 # CONFIG_STATIC_USERMODEHELPER is not set
 CONFIG_LOCK_DOWN_KERNEL=y
+# CONFIG_ALLOW_LOCKDOWN_LIFT_BY_SYSRQ is not set
 CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT=y
 CONFIG_SECURITY_SELINUX=y
 CONFIG_SECURITY_SELINUX_BOOTPARAM=y
@@ -7700,3 +7701,4 @@ CONFIG_ARCH_HAS_UACCESS_FLUSHCACHE=y
 CONFIG_STACKDEPOT=y
 CONFIG_SBITMAP=y
 # CONFIG_STRING_SELFTEST is not set
+