summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAnuj Mittal <anuj.mittal@intel.com>2018-08-02 05:59:37 (GMT)
committerAnuj Mittal <anuj.mittal@intel.com>2018-08-17 07:07:19 (GMT)
commitce1763dba0161afe7ce61767686b531bb14d4542 (patch)
tree56c3e597f56aea2aae51b4ad7df31838a35a3278
parent078141a4008a3595ff34e6de8b6e3b476271ce21 (diff)
downloadmeta-intel-ce1763dba0161afe7ce61767686b531bb14d4542.tar.gz
linux-intel/4.14: harden kernel config
Include scc that enables stricter config options that reduce the attack surface and/or perform additional checks and validation of commonly used structures in kernel. Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
-rw-r--r--recipes-kernel/linux/linux-intel_4.14.bb4
1 files changed, 2 insertions, 2 deletions
diff --git a/recipes-kernel/linux/linux-intel_4.14.bb b/recipes-kernel/linux/linux-intel_4.14.bb
index c5cde45..f2d5551 100644
--- a/recipes-kernel/linux/linux-intel_4.14.bb
+++ b/recipes-kernel/linux/linux-intel_4.14.bb
@@ -10,11 +10,11 @@ DEPENDS += "elfutils-native openssl-native util-linux-native"
10 10
11LINUX_VERSION ?= "4.14.59" 11LINUX_VERSION ?= "4.14.59"
12SRCREV_machine ?= "a36b9969b6b2c9321d9c6e907b47211be0f4b99c" 12SRCREV_machine ?= "a36b9969b6b2c9321d9c6e907b47211be0f4b99c"
13SRCREV_meta ?= "d64aec9793d558ff49993ff6076be6d4daf101c2" 13SRCREV_meta ?= "8a3be7d783a39b56796e1d5197cb9f757e38f22f"
14 14
15# For Crystalforest and Romley 15# For Crystalforest and Romley
16KERNEL_MODULE_AUTOLOAD_append_core2-32-intel-common = " uio" 16KERNEL_MODULE_AUTOLOAD_append_core2-32-intel-common = " uio"
17KERNEL_MODULE_AUTOLOAD_append_corei7-64-intel-common = " uio" 17KERNEL_MODULE_AUTOLOAD_append_corei7-64-intel-common = " uio"
18 18
19# Functionality flags 19# Functionality flags
20KERNEL_EXTRA_FEATURES ?= "features/netfilter/netfilter.scc" 20KERNEL_EXTRA_FEATURES ?= "features/netfilter/netfilter.scc features/security/security.scc"