configs: add options suggested by 'reason'

Signed-off-by: Robert Schwebel <r.schwebel@pengutronix.de>

4 files changed, 84 insertions, 21 deletions

diff --git a/configs/bsp.ref b/configs/bsp.ref
new file mode 100644
index 0000000..153313d
--- /dev/null
+++ b/configs/bsp.ref
@@ -0,0 +1,21 @@
+includes:
+  - file: ptxdist.ref
+ptxdist_toolchain_hardening:
+  history:
+    ptxdist.ref:
+      description: >
+        All toolchain hardening options should be enabled.
+      analyzer: >
+        kconfig.PTXPlatformConfig().enabled
+      present:
+      - TARGET_HARDEN_BINDNOW
+      - TARGET_HARDEN_FORTIFY
+      - TARGET_HARDEN_PIE
+      - TARGET_HARDEN_RELRO
+      optional:
+      - '*'
+      absent:
+      - TARGET_HARDEN_STACK_NONE
+  absent:
+  - TARGET_HARDEN_PIE
+# vim: syntax=yaml
diff --git a/configs/platform-v7a/kernelconfig b/configs/platform-v7a/kernelconfig
index f71eae7..ba03738 100644
--- a/configs/platform-v7a/kernelconfig
+++ b/configs/platform-v7a/kernelconfig
@@ -205,6 +205,7 @@ CONFIG_SLUB=y
 CONFIG_SLUB_CPU_PARTIAL=y
 # CONFIG_SYSTEM_DATA_VERIFICATION is not set
 # CONFIG_PROFILING is not set
+CONFIG_TRACEPOINTS=y
 CONFIG_HAVE_OPROFILE=y
 # CONFIG_KPROBES is not set
 # CONFIG_JUMP_LABEL is not set
@@ -714,9 +715,9 @@ CONFIG_NET_INGRESS=y
 # Networking options
 #
 CONFIG_PACKET=y
-# CONFIG_PACKET_DIAG is not set
+CONFIG_PACKET_DIAG=y
 CONFIG_UNIX=y
-# CONFIG_UNIX_DIAG is not set
+CONFIG_UNIX_DIAG=y
 CONFIG_XFRM=y
 CONFIG_XFRM_ALGO=y
 CONFIG_XFRM_USER=y
@@ -750,7 +751,7 @@ CONFIG_INET_XFRM_MODE_TUNNEL=y
 CONFIG_INET_XFRM_MODE_BEET=y
 CONFIG_INET_DIAG=y
 CONFIG_INET_TCP_DIAG=y
-# CONFIG_INET_UDP_DIAG is not set
+CONFIG_INET_UDP_DIAG=y
 # CONFIG_INET_DIAG_DESTROY is not set
 # CONFIG_TCP_CONG_ADVANCED is not set
 CONFIG_TCP_CONG_CUBIC=y
@@ -860,6 +861,7 @@ CONFIG_NET_FLOW_LIMIT=y
 # Network testing
 #
 # CONFIG_NET_PKTGEN is not set
+# CONFIG_NET_DROP_MONITOR is not set
 # CONFIG_HAMRADIO is not set
 # CONFIG_CAN is not set
 # CONFIG_IRDA is not set
@@ -2666,7 +2668,7 @@ CONFIG_NLS_ISO8859_1=y
 CONFIG_PRINTK_TIME=y
 CONFIG_MESSAGE_LOGLEVEL_DEFAULT=4
 # CONFIG_BOOT_PRINTK_DELAY is not set
-# CONFIG_DYNAMIC_DEBUG is not set
+CONFIG_DYNAMIC_DEBUG=y
 
 #
 # Compile-time checks and compiler options
@@ -2687,9 +2689,10 @@ CONFIG_DEBUG_FS=y
 # CONFIG_HEADERS_CHECK is not set
 # CONFIG_DEBUG_SECTION_MISMATCH is not set
 CONFIG_SECTION_MISMATCH_WARN_ONLY=y
+CONFIG_FRAME_POINTER=y
 # CONFIG_DEBUG_FORCE_WEAK_PER_CPU is not set
 CONFIG_MAGIC_SYSRQ=y
-CONFIG_MAGIC_SYSRQ_DEFAULT_ENABLE=0x1
+CONFIG_MAGIC_SYSRQ_DEFAULT_ENABLE=0x10
 CONFIG_DEBUG_KERNEL=y
 
 #
@@ -2700,6 +2703,7 @@ CONFIG_PAGE_EXTENSION=y
 CONFIG_PAGE_POISONING=y
 # CONFIG_PAGE_POISONING_NO_SANITY is not set
 # CONFIG_PAGE_POISONING_ZERO is not set
+# CONFIG_DEBUG_PAGE_REF is not set
 # CONFIG_DEBUG_OBJECTS is not set
 # CONFIG_SLUB_DEBUG_ON is not set
 # CONFIG_SLUB_STATS is not set
@@ -2767,14 +2771,44 @@ CONFIG_RCU_CPU_STALL_TIMEOUT=21
 # CONFIG_NOTIFIER_ERROR_INJECTION is not set
 # CONFIG_FAULT_INJECTION is not set
 # CONFIG_LATENCYTOP is not set
+CONFIG_NOP_TRACER=y
 CONFIG_HAVE_FUNCTION_TRACER=y
 CONFIG_HAVE_FUNCTION_GRAPH_TRACER=y
 CONFIG_HAVE_DYNAMIC_FTRACE=y
 CONFIG_HAVE_FTRACE_MCOUNT_RECORD=y
 CONFIG_HAVE_SYSCALL_TRACEPOINTS=y
 CONFIG_HAVE_C_RECORDMCOUNT=y
+CONFIG_TRACE_CLOCK=y
+CONFIG_RING_BUFFER=y
+CONFIG_EVENT_TRACING=y
+CONFIG_CONTEXT_SWITCH_TRACER=y
+CONFIG_TRACING=y
+CONFIG_GENERIC_TRACER=y
 CONFIG_TRACING_SUPPORT=y
-# CONFIG_FTRACE is not set
+CONFIG_FTRACE=y
+CONFIG_FUNCTION_TRACER=y
+CONFIG_FUNCTION_GRAPH_TRACER=y
+# CONFIG_IRQSOFF_TRACER is not set
+# CONFIG_SCHED_TRACER is not set
+# CONFIG_HWLAT_TRACER is not set
+# CONFIG_FTRACE_SYSCALLS is not set
+# CONFIG_TRACER_SNAPSHOT is not set
+CONFIG_BRANCH_PROFILE_NONE=y
+# CONFIG_PROFILE_ANNOTATED_BRANCHES is not set
+# CONFIG_PROFILE_ALL_BRANCHES is not set
+# CONFIG_STACK_TRACER is not set
+# CONFIG_BLK_DEV_IO_TRACE is not set
+# CONFIG_UPROBE_EVENT is not set
+# CONFIG_PROBE_EVENTS is not set
+CONFIG_DYNAMIC_FTRACE=y
+# CONFIG_FUNCTION_PROFILER is not set
+CONFIG_FTRACE_MCOUNT_RECORD=y
+# CONFIG_FTRACE_STARTUP_TEST is not set
+# CONFIG_TRACEPOINT_BENCHMARK is not set
+# CONFIG_RING_BUFFER_BENCHMARK is not set
+# CONFIG_RING_BUFFER_STARTUP_TEST is not set
+# CONFIG_TRACE_ENUM_MAP_FILE is not set
+# CONFIG_TRACING_EVENTS_GPIO is not set
 
 #
 # Runtime Testing
@@ -2811,6 +2845,7 @@ CONFIG_ARCH_HAS_DEVMEM_IS_ALLOWED=y
 # CONFIG_STRICT_DEVMEM is not set
 # CONFIG_ARM_PTDUMP is not set
 CONFIG_ARM_UNWIND=y
+CONFIG_OLD_MCOUNT=y
 # CONFIG_DEBUG_USER is not set
 # CONFIG_DEBUG_LL is not set
 CONFIG_DEBUG_LL_INCLUDE="mach/debug-macro.S"
@@ -2955,7 +2990,7 @@ CONFIG_CRYPTO_AES=y
 # Certificates for signature checking
 #
 # CONFIG_ARM_CRYPTO is not set
-# CONFIG_BINARY_PRINTF is not set
+CONFIG_BINARY_PRINTF=y
 
 #
 # Library routines
diff --git a/configs/platform-v7a/platformconfig b/configs/platform-v7a/platformconfig
index 66cf135..f4e9ee8 100644
--- a/configs/platform-v7a/platformconfig
+++ b/configs/platform-v7a/platformconfig
@@ -75,8 +75,8 @@ PTXCONF_COMPILER_PREFIX_BOOTLOADER="${PTXCONF_COMPILER_PREFIX}"
 #
 # hardening options             
 #
-PTXCONF_TARGET_HARDEN_STACK_NONE=y
-# PTXCONF_TARGET_HARDEN_STACK is not set
+# PTXCONF_TARGET_HARDEN_STACK_NONE is not set
+PTXCONF_TARGET_HARDEN_STACK=y
 # PTXCONF_TARGET_HARDEN_STACK_STRONG is not set
 # PTXCONF_TARGET_HARDEN_STACK_ALL is not set
 PTXCONF_TARGET_HARDEN_FORTIFY=y
@@ -91,7 +91,7 @@ PTXCONF_TARGET_HARDEN_BINDNOW=y
 # PTXCONF_TARGET_LINKER_HASH_SYSV is not set
 PTXCONF_TARGET_LINKER_HASH_GNU=y
 # PTXCONF_TARGET_LINKER_HASH_BOTH is not set
-# PTXCONF_TARGET_LINKER_AS_NEEDED is not set
+PTXCONF_TARGET_LINKER_AS_NEEDED=y
 # PTXCONF_TARGET_DEBUG_OFF is not set
 PTXCONF_TARGET_DEBUG_KEEP=y
 # PTXCONF_TARGET_DEBUG_ENABLE is not set
@@ -121,7 +121,7 @@ PTXCONF_KERNEL_IMAGE_Z=y
 PTXCONF_KERNEL_IMAGE="zImage"
 PTXCONF_KERNEL_DTC=y
 PTXCONF_KERNEL_XZ=y
-PTXCONF_KERNEL_LZOP=y
+# PTXCONF_KERNEL_LZOP is not set
 
 #
 # patching & configuration      
@@ -132,7 +132,7 @@ PTXCONF_KERNEL_CONFIG="kernelconfig"
 #
 # Development features
 #
-PTXCONF_KERNEL_EXTRA_MAKEVARS="CONFIG_DEBUG_SECTION_MISMATCH=y"
+PTXCONF_KERNEL_EXTRA_MAKEVARS=""
 PTXCONF_DTC=y
 PTXCONF_DTC_INSTALL_OFTREE=y
 PTXCONF_DTC_OFTREE_DTS_PATH="${KERNEL_DIR}/arch/${PTXCONF_KERNEL_ARCH_STRING}/boot/dts"
diff --git a/configs/ptxconfig b/configs/ptxconfig
index ffeddc7..23ab7b5 100644
--- a/configs/ptxconfig
+++ b/configs/ptxconfig
@@ -246,8 +246,8 @@ PTXCONF_CROSS_PKG_CONFIG_WRAPPER=y
 #
 # gdb                           
 #
-PTXCONF_GDB_VERSION="7.6.1"
-PTXCONF_GDB_MD5="d42841167fd061d90fddf9a7212a1f9f"
+PTXCONF_GDB_VERSION="7.11"
+PTXCONF_GDB_MD5="f585059252836a981ea5db9a5f8ce97f"
 # PTXCONF_GDB is not set
 PTXCONF_GDBSERVER=y
 PTXCONF_GDBSERVER_SHARED=y
@@ -313,7 +313,7 @@ PTXCONF_ROOTFS_VAR_LOG=y
 PTXCONF_ROOTFS_VAR_LOCK=y
 PTXCONF_ROOTFS_VAR_LIB=y
 PTXCONF_ROOTFS_VAR_CACHE=y
-# PTXCONF_ROOTFS_VAR_SPOOL is not set
+PTXCONF_ROOTFS_VAR_SPOOL=y
 # PTXCONF_ROOTFS_VAR_SPOOL_CRON is not set
 PTXCONF_ROOTFS_VAR_TMP=y
 
@@ -1260,7 +1260,7 @@ PTXCONF_BUSYBOX_LOGGER=y
 #
 PTXCONF_HTOP=y
 # PTXCONF_HUB_CTRL is not set
-# PTXCONF_I2C_TOOLS is not set
+PTXCONF_I2C_TOOLS=y
 # PTXCONF_INITNG is not set
 # PTXCONF_KBD is not set
 # PTXCONF_KEXEC_TOOLS is not set
@@ -1360,15 +1360,15 @@ PTXCONF_PROCPS_TOP=y
 PTXCONF_SYSTEMD=y
 PTXCONF_SYSTEMD_DBUS=y
 # PTXCONF_SYSTEMD_LOCALES is not set
-PTXCONF_SYSTEMD_VCONSOLE=y
+# PTXCONF_SYSTEMD_VCONSOLE is not set
 PTXCONF_SYSTEMD_XZ=y
 # PTXCONF_SYSTEMD_LZ4 is not set
 PTXCONF_SYSTEMD_DISABLE_RANDOM_SEED=y
 # PTXCONF_SYSTEMD_LOGIND is not set
 # PTXCONF_SYSTEMD_NETWORK is not set
 PTXCONF_SYSTEMD_TIMEDATE=y
-# PTXCONF_SYSTEMD_COREDUMP is not set
-# PTXCONF_SYSTEMD_SECCOMP is not set
+PTXCONF_SYSTEMD_COREDUMP=y
+PTXCONF_SYSTEMD_SECCOMP=y
 
 #
 # BusyBox' tar is selected!
@@ -1718,7 +1718,14 @@ PTXCONF_OPENSSL=y
 # PTXCONF_ATTR is not set
 # PTXCONF_CIFS_UTILS is not set
 # PTXCONF_DDRESCUE is not set
-# PTXCONF_DOSFSTOOLS is not set
+PTXCONF_DOSFSTOOLS=y
+# PTXCONF_DOSFSTOOLS_MKDOSFS is not set
+# PTXCONF_DOSFSTOOLS_MKDOSFS_MSDOS is not set
+# PTXCONF_DOSFSTOOLS_MKDOSFS_VFAT is not set
+PTXCONF_DOSFSTOOLS_DOSFSCK=y
+# PTXCONF_DOSFSTOOLS_DOSFSCK_MSDOS is not set
+PTXCONF_DOSFSTOOLS_DOSFSCK_VFAT=y
+# PTXCONF_DOSFSTOOLS_DOSFSLABEL is not set
 PTXCONF_E2FSPROGS=y
 
 #
@@ -1921,7 +1928,7 @@ PTXCONF_LIBPCRE_ENABLE_UTF8=y
 PTXCONF_LIBPOPT=y
 # PTXCONF_LIBPOPT_NLS is not set
 # PTXCONF_LIBRN is not set
-# PTXCONF_LIBSECCOMP is not set
+PTXCONF_LIBSECCOMP=y
 # PTXCONF_LIBSIGCPP is not set
 # PTXCONF_LIBSODIUM is not set
 # PTXCONF_LIBSYSFS is not set