diff options
| author | Anuj Mittal <anuj.mittal@intel.com> | 2018-08-02 13:59:37 +0800 |
|---|---|---|
| committer | Anuj Mittal <anuj.mittal@intel.com> | 2018-08-17 15:07:19 +0800 |
| commit | ce1763dba0161afe7ce61767686b531bb14d4542 (patch) | |
| tree | 56c3e597f56aea2aae51b4ad7df31838a35a3278 | |
| parent | 078141a4008a3595ff34e6de8b6e3b476271ce21 (diff) | |
| download | meta-intel-ce1763dba0161afe7ce61767686b531bb14d4542.tar.gz | |
linux-intel/4.14: harden kernel config
Include scc that enables stricter config options that reduce the attack
surface and/or perform additional checks and validation of commonly used
structures in kernel.
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
| -rw-r--r-- | recipes-kernel/linux/linux-intel_4.14.bb | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/recipes-kernel/linux/linux-intel_4.14.bb b/recipes-kernel/linux/linux-intel_4.14.bb index c5cde45a..f2d55519 100644 --- a/recipes-kernel/linux/linux-intel_4.14.bb +++ b/recipes-kernel/linux/linux-intel_4.14.bb | |||
| @@ -10,11 +10,11 @@ DEPENDS += "elfutils-native openssl-native util-linux-native" | |||
| 10 | 10 | ||
| 11 | LINUX_VERSION ?= "4.14.59" | 11 | LINUX_VERSION ?= "4.14.59" |
| 12 | SRCREV_machine ?= "a36b9969b6b2c9321d9c6e907b47211be0f4b99c" | 12 | SRCREV_machine ?= "a36b9969b6b2c9321d9c6e907b47211be0f4b99c" |
| 13 | SRCREV_meta ?= "d64aec9793d558ff49993ff6076be6d4daf101c2" | 13 | SRCREV_meta ?= "8a3be7d783a39b56796e1d5197cb9f757e38f22f" |
| 14 | 14 | ||
| 15 | # For Crystalforest and Romley | 15 | # For Crystalforest and Romley |
| 16 | KERNEL_MODULE_AUTOLOAD_append_core2-32-intel-common = " uio" | 16 | KERNEL_MODULE_AUTOLOAD_append_core2-32-intel-common = " uio" |
| 17 | KERNEL_MODULE_AUTOLOAD_append_corei7-64-intel-common = " uio" | 17 | KERNEL_MODULE_AUTOLOAD_append_corei7-64-intel-common = " uio" |
| 18 | 18 | ||
| 19 | # Functionality flags | 19 | # Functionality flags |
| 20 | KERNEL_EXTRA_FEATURES ?= "features/netfilter/netfilter.scc" | 20 | KERNEL_EXTRA_FEATURES ?= "features/netfilter/netfilter.scc features/security/security.scc" |