diff options
| author | Armin Kuster <akuster808@gmail.com> | 2017-04-01 06:28:30 -0700 |
|---|---|---|
| committer | Armin Kuster <akuster808@gmail.com> | 2017-04-06 10:39:42 -0700 |
| commit | aa9fa90288c16f27e28e1ad8d9c45cf21f29f49e (patch) | |
| tree | e130a382a8291f8027f27f0aeacdcb1f02f8268a /recipes-kernel/linux/linux-yocto-4.9 | |
| parent | 794d8e89ac7016b1de5d5bb0e213c9d2d032e13f (diff) | |
| download | meta-security-aa9fa90288c16f27e28e1ad8d9c45cf21f29f49e.tar.gz | |
kernel: mv 4.8 kernel to 4.9
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat (limited to 'recipes-kernel/linux/linux-yocto-4.9')
5 files changed, 36 insertions, 0 deletions
diff --git a/recipes-kernel/linux/linux-yocto-4.9/apparmor.cfg b/recipes-kernel/linux/linux-yocto-4.9/apparmor.cfg new file mode 100644 index 0000000..1dc4168 --- /dev/null +++ b/recipes-kernel/linux/linux-yocto-4.9/apparmor.cfg | |||
| @@ -0,0 +1,13 @@ | |||
| 1 | CONFIG_AUDIT=y | ||
| 2 | CONFIG_AUDITSYSCALL=y | ||
| 3 | CONFIG_AUDIT_WATCH=y | ||
| 4 | CONFIG_AUDIT_TREE=y | ||
| 5 | # CONFIG_NETFILTER_XT_TARGET_AUDIT is not set | ||
| 6 | CONFIG_SECURITY_PATH=y | ||
| 7 | # CONFIG_SECURITY_SELINUX is not set | ||
| 8 | CONFIG_SECURITY_APPARMOR=y | ||
| 9 | CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE=1 | ||
| 10 | CONFIG_SECURITY_APPARMOR_HASH=y | ||
| 11 | CONFIG_SECURITY_APPARMOR_HASH_DEFAULT=y | ||
| 12 | CONFIG_INTEGRITY_AUDIT=y | ||
| 13 | # CONFIG_DEFAULT_SECURITY_APPARMOR is not set | ||
diff --git a/recipes-kernel/linux/linux-yocto-4.9/smack-default-lsm.cfg b/recipes-kernel/linux/linux-yocto-4.9/smack-default-lsm.cfg new file mode 100644 index 0000000..b5c4845 --- /dev/null +++ b/recipes-kernel/linux/linux-yocto-4.9/smack-default-lsm.cfg | |||
| @@ -0,0 +1,2 @@ | |||
| 1 | CONFIG_DEFAULT_SECURITY="smack" | ||
| 2 | CONFIG_DEFAULT_SECURITY_SMACK=y | ||
diff --git a/recipes-kernel/linux/linux-yocto-4.9/smack.cfg b/recipes-kernel/linux/linux-yocto-4.9/smack.cfg new file mode 100644 index 0000000..62f465a --- /dev/null +++ b/recipes-kernel/linux/linux-yocto-4.9/smack.cfg | |||
| @@ -0,0 +1,8 @@ | |||
| 1 | CONFIG_IP_NF_SECURITY=m | ||
| 2 | CONFIG_IP6_NF_SECURITY=m | ||
| 3 | CONFIG_EXT2_FS_SECURITY=y | ||
| 4 | CONFIG_EXT3_FS_SECURITY=y | ||
| 5 | CONFIG_EXT4_FS_SECURITY=y | ||
| 6 | CONFIG_SECURITY=y | ||
| 7 | CONFIG_SECURITY_SMACK=y | ||
| 8 | CONFIG_TMPFS_XATTR=y | ||
diff --git a/recipes-kernel/linux/linux-yocto-4.9/tpm.cfg b/recipes-kernel/linux/linux-yocto-4.9/tpm.cfg new file mode 100644 index 0000000..fe1bb3f --- /dev/null +++ b/recipes-kernel/linux/linux-yocto-4.9/tpm.cfg | |||
| @@ -0,0 +1,9 @@ | |||
| 1 | CONFIG_HW_RANDOM_TPM=y | ||
| 2 | CONFIG_TCG_TPM=y | ||
| 3 | CONFIG_TCG_TIS_CORE=y | ||
| 4 | CONFIG_TCG_TIS=y | ||
| 5 | CONFIG_TCG_CRB=y | ||
| 6 | CONFIG_TCG_VTPM_PROXY=y | ||
| 7 | CONFIG_DEVPORT=y | ||
| 8 | CONFIG_FUSE_FS=y | ||
| 9 | CONFIG_CUSE=y | ||
diff --git a/recipes-kernel/linux/linux-yocto-4.9/tpm.scc b/recipes-kernel/linux/linux-yocto-4.9/tpm.scc new file mode 100644 index 0000000..7c7ec2d --- /dev/null +++ b/recipes-kernel/linux/linux-yocto-4.9/tpm.scc | |||
| @@ -0,0 +1,4 @@ | |||
| 1 | define KFEATURE_DESCRIPTION "TPM Kernel Support" | ||
| 2 | define KFEATURE_COMPATIBILITY arch | ||
| 3 | |||
| 4 | kconf non-hardware tpm.cfg | ||