@@ -55,7 +55,6 @@ CONFIG_SWAP=y
5555# CONFIG_SYSVIPC is not set
5656# CONFIG_POSIX_MQUEUE is not set
5757CONFIG_CROSS_MEMORY_ATTACH=y
58- # CONFIG_FHANDLE is not set
5958# CONFIG_USELIB is not set
6059# CONFIG_AUDIT is not set
6160CONFIG_HAVE_ARCH_AUDITSYSCALL=y
@@ -114,6 +113,7 @@ CONFIG_PREEMPT_RCU=y
114113CONFIG_SRCU=y
115114CONFIG_TREE_SRCU=y
116115CONFIG_TASKS_RCU=y
116+ CONFIG_TASKS_TRACE_RCU=y
117117CONFIG_RCU_STALL_COMMON=y
118118CONFIG_RCU_NEED_SEGCBLIST=y
119119CONFIG_BUILD_BIN2C=y
@@ -160,7 +160,6 @@ CONFIG_CGROUP_CPUACCT=y
160160CONFIG_CGROUP_BPF=y
161161CONFIG_SOCK_CGROUP_DATA=y
162162# CONFIG_SCHED_CORE_CTL is not set
163- # CONFIG_CHECKPOINT_RESTORE is not set
164163CONFIG_NAMESPACES=y
165164CONFIG_UTS_NS=y
166165# CONFIG_USER_NS is not set
@@ -193,10 +192,8 @@ CONFIG_MULTIUSER=y
193192# CONFIG_SGETMASK_SYSCALL is not set
194193CONFIG_SYSFS_SYSCALL=y
195194CONFIG_SYSCTL_SYSCALL=y
195+ # CONFIG_FHANDLE is not set
196196CONFIG_POSIX_TIMERS=y
197- CONFIG_KALLSYMS=y
198- # CONFIG_KALLSYMS_ABSOLUTE_PERCPU is not set
199- # CONFIG_KALLSYMS_BASE_RELATIVE is not set
200197CONFIG_PRINTK=y
201198CONFIG_BUG=y
202199CONFIG_ELF_CORE=y
@@ -207,15 +204,24 @@ CONFIG_EPOLL=y
207204CONFIG_SIGNALFD=y
208205CONFIG_TIMERFD=y
209206CONFIG_EVENTFD=y
210- CONFIG_BPF_SYSCALL=y
211- CONFIG_BPF_JIT_ALWAYS_ON=y
212207CONFIG_SHMEM=y
213208CONFIG_AIO=y
214209CONFIG_ADVISE_SYSCALLS=y
215- # CONFIG_BPF_UNPRIV_DEFAULT_OFF is not set
216- CONFIG_USERFAULTFD=y
217210CONFIG_HAVE_ARCH_USERFAULTFD_MINOR=y
218211CONFIG_MEMBARRIER=y
212+ # CONFIG_CHECKPOINT_RESTORE is not set
213+ CONFIG_KALLSYMS=y
214+ # CONFIG_KALLSYMS_ABSOLUTE_PERCPU is not set
215+ CONFIG_KALLSYMS_BASE_RELATIVE=y
216+ # CONFIG_BPF_LSM is not set
217+ CONFIG_BPF_SYSCALL=y
218+ CONFIG_ARCH_WANT_DEFAULT_BPF_JIT=y
219+ CONFIG_BPF_JIT_ALWAYS_ON=y
220+ # CONFIG_BPF_UNPRIV_DEFAULT_OFF is not set
221+ CONFIG_BPF_JIT_DEFAULT_ON=y
222+ # CONFIG_USERMODE_DRIVER is not set
223+ # CONFIG_BPF_PRELOAD is not set
224+ CONFIG_USERFAULTFD=y
219225CONFIG_EMBEDDED=y
220226CONFIG_HAVE_PERF_EVENTS=y
221227# CONFIG_PC104 is not set
@@ -427,6 +433,7 @@ CONFIG_ARCH_SUPPORTS_ATOMIC_RMW=y
427433CONFIG_MUTEX_SPIN_ON_OWNER=y
428434CONFIG_RWSEM_SPIN_ON_OWNER=y
429435CONFIG_LOCK_SPIN_ON_OWNER=y
436+ CONFIG_ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE=y
430437CONFIG_FREEZER=y
431438
432439#
@@ -5146,13 +5153,15 @@ CONFIG_SECURITY_SELINUX_SIDTAB_HASH_BITS=9
51465153# CONFIG_SECURITY_APPARMOR is not set
51475154# CONFIG_SECURITY_LOADPIN is not set
51485155# CONFIG_SECURITY_YAMA is not set
5156+ # CONFIG_SECURITY_SAFESETID is not set
5157+ # CONFIG_SECURITY_LOCKDOWN_LSM is not set
51495158CONFIG_INTEGRITY=y
51505159# CONFIG_INTEGRITY_SIGNATURE is not set
51515160# CONFIG_IMA is not set
51525161# CONFIG_EVM is not set
51535162CONFIG_DEFAULT_SECURITY_SELINUX=y
51545163# CONFIG_DEFAULT_SECURITY_DAC is not set
5155- CONFIG_DEFAULT_SECURITY=" selinux"
5164+ CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity, selinux,smack,tomoyo,apparmor,bpf "
51565165
51575166#
51585167# Kernel hardening options
0 commit comments