diff options
author | Naveen Saini <naveen.kumar.saini@intel.com> | 2019-05-16 13:04:30 +0800 |
---|---|---|
committer | Anuj Mittal <anuj.mittal@intel.com> | 2019-05-17 11:24:08 +0800 |
commit | ec27f5a1c66464f8c20b0b0079ae66a52e86f6f2 (patch) | |
tree | a5a9afa8e3a5fe3627acdd1d1e03f2c175a6fde0 | |
parent | e160f52a45935463d5138b9fa6cd52fb6de17e19 (diff) | |
download | meta-intel-ec27f5a1c66464f8c20b0b0079ae66a52e86f6f2.tar.gz |
linux-intel-dev: add recipe
Builds base from mainline-tracking production kernel.
In addition to intel-common kernel configs from yocto-kernel-cache, this
also includes security.scc feature which enables a set of configs with
the aim of reducing the kernel attack surface and/or of performing
additional checks and validation of commonly used structures in kernel.
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
-rw-r--r-- | recipes-kernel/linux/linux-intel-dev.bb | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/recipes-kernel/linux/linux-intel-dev.bb b/recipes-kernel/linux/linux-intel-dev.bb new file mode 100644 index 00000000..316baa50 --- /dev/null +++ b/recipes-kernel/linux/linux-intel-dev.bb | |||
@@ -0,0 +1,35 @@ | |||
1 | require recipes-kernel/linux/linux-yocto.inc | ||
2 | require recipes-kernel/linux/meta-intel-compat-kernel.inc | ||
3 | |||
4 | FILESEXTRAPATHS_prepend := "${THISDIR}/linux-intel:" | ||
5 | |||
6 | SRC_URI = " \ | ||
7 | git://github.com/intel/mainline-tracking.git;protocol=https;name=machine;branch=${KBRANCH}; \ | ||
8 | git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=${KMETA_BRANCH};destsuffix=${KMETA} \ | ||
9 | file://0001-menuconfig-mconf-cfg-Allow-specification-of-ncurses-.patch \ | ||
10 | " | ||
11 | SRC_URI_append_core2-32-intel-common = " file://disable_skylake_sound.cfg" | ||
12 | |||
13 | KMETA = "kernel-meta" | ||
14 | KCONF_BSP_AUDIT_LEVEL = "2" | ||
15 | |||
16 | KBRANCH = "base" | ||
17 | KMETA_BRANCH = "master" | ||
18 | |||
19 | LIC_FILES_CHKSUM = "file://COPYING;md5=bbea815ee2795b2f4230826c0c6b8814" | ||
20 | |||
21 | DEPENDS += "elfutils-native openssl-native util-linux-native" | ||
22 | |||
23 | LINUX_VERSION ?= "5.1.0" | ||
24 | SRCREV_machine ?= "abcfe412cc5140d20a592965744c050fd3cc3d19" | ||
25 | SRCREV_meta ?= "b8bce20786a4063e5f053036e5236d82c8fc3d91" | ||
26 | |||
27 | LINUX_VERSION_EXTENSION ?= "-mainline-tracking-${LINUX_KERNEL_TYPE}" | ||
28 | PV = "${LINUX_VERSION}+git${SRCPV}" | ||
29 | |||
30 | COMPATIBLE_MACHINE ?= "(intel-corei7-64|intel-core2-32)" | ||
31 | |||
32 | # Functionality flags | ||
33 | KERNEL_FEATURES_append = " ${KERNEL_EXTRA_FEATURES}" | ||
34 | KERNEL_FEATURES_append = " ${@bb.utils.contains("TUNE_FEATURES", "mx32", " cfg/x32.scc", "" ,d)}" | ||
35 | KERNEL_EXTRA_FEATURES ?= "features/netfilter/netfilter.scc features/security/security.scc" | ||