diff options
author | Robert Schwebel <r.schwebel@pengutronix.de> | 2017-01-06 19:14:06 +0100 |
---|---|---|
committer | Robert Schwebel <r.schwebel@pengutronix.de> | 2017-01-06 19:14:06 +0100 |
commit | 7ae73e53fad51292ad214fc922961a7a84764fdd (patch) | |
tree | be4b5da6be3fe3781d732f49bab0ba2beea0f9c9 /configs | |
parent | 57d5032556777aa90848e95a6369409d62a7cfe4 (diff) | |
download | DistroKit-7ae73e53fad51292ad214fc922961a7a84764fdd.tar.gz DistroKit-7ae73e53fad51292ad214fc922961a7a84764fdd.tar.xz |
configs: add options suggested by 'reason'
Signed-off-by: Robert Schwebel <r.schwebel@pengutronix.de>
Diffstat (limited to 'configs')
-rw-r--r-- | configs/bsp.ref | 21 | ||||
-rw-r--r-- | configs/platform-v7a/kernelconfig | 49 | ||||
-rw-r--r-- | configs/platform-v7a/platformconfig | 10 | ||||
-rw-r--r-- | configs/ptxconfig | 25 |
4 files changed, 84 insertions, 21 deletions
diff --git a/configs/bsp.ref b/configs/bsp.ref new file mode 100644 index 0000000..153313d --- /dev/null +++ b/configs/bsp.ref @@ -0,0 +1,21 @@ +includes: + - file: ptxdist.ref +ptxdist_toolchain_hardening: + history: + ptxdist.ref: + description: > + All toolchain hardening options should be enabled. + analyzer: > + kconfig.PTXPlatformConfig().enabled + present: + - TARGET_HARDEN_BINDNOW + - TARGET_HARDEN_FORTIFY + - TARGET_HARDEN_PIE + - TARGET_HARDEN_RELRO + optional: + - '*' + absent: + - TARGET_HARDEN_STACK_NONE + absent: + - TARGET_HARDEN_PIE +# vim: syntax=yaml diff --git a/configs/platform-v7a/kernelconfig b/configs/platform-v7a/kernelconfig index f71eae7..ba03738 100644 --- a/configs/platform-v7a/kernelconfig +++ b/configs/platform-v7a/kernelconfig @@ -205,6 +205,7 @@ CONFIG_SLUB=y CONFIG_SLUB_CPU_PARTIAL=y # CONFIG_SYSTEM_DATA_VERIFICATION is not set # CONFIG_PROFILING is not set +CONFIG_TRACEPOINTS=y CONFIG_HAVE_OPROFILE=y # CONFIG_KPROBES is not set # CONFIG_JUMP_LABEL is not set @@ -714,9 +715,9 @@ CONFIG_NET_INGRESS=y # Networking options # CONFIG_PACKET=y -# CONFIG_PACKET_DIAG is not set +CONFIG_PACKET_DIAG=y CONFIG_UNIX=y -# CONFIG_UNIX_DIAG is not set +CONFIG_UNIX_DIAG=y CONFIG_XFRM=y CONFIG_XFRM_ALGO=y CONFIG_XFRM_USER=y @@ -750,7 +751,7 @@ CONFIG_INET_XFRM_MODE_TUNNEL=y CONFIG_INET_XFRM_MODE_BEET=y CONFIG_INET_DIAG=y CONFIG_INET_TCP_DIAG=y -# CONFIG_INET_UDP_DIAG is not set +CONFIG_INET_UDP_DIAG=y # CONFIG_INET_DIAG_DESTROY is not set # CONFIG_TCP_CONG_ADVANCED is not set CONFIG_TCP_CONG_CUBIC=y @@ -860,6 +861,7 @@ CONFIG_NET_FLOW_LIMIT=y # Network testing # # CONFIG_NET_PKTGEN is not set +# CONFIG_NET_DROP_MONITOR is not set # CONFIG_HAMRADIO is not set # CONFIG_CAN is not set # CONFIG_IRDA is not set @@ -2666,7 +2668,7 @@ CONFIG_NLS_ISO8859_1=y CONFIG_PRINTK_TIME=y CONFIG_MESSAGE_LOGLEVEL_DEFAULT=4 # CONFIG_BOOT_PRINTK_DELAY is not set -# CONFIG_DYNAMIC_DEBUG is not set +CONFIG_DYNAMIC_DEBUG=y # # Compile-time checks and compiler options @@ -2687,9 +2689,10 @@ CONFIG_DEBUG_FS=y # CONFIG_HEADERS_CHECK is not set # CONFIG_DEBUG_SECTION_MISMATCH is not set CONFIG_SECTION_MISMATCH_WARN_ONLY=y +CONFIG_FRAME_POINTER=y # CONFIG_DEBUG_FORCE_WEAK_PER_CPU is not set CONFIG_MAGIC_SYSRQ=y -CONFIG_MAGIC_SYSRQ_DEFAULT_ENABLE=0x1 +CONFIG_MAGIC_SYSRQ_DEFAULT_ENABLE=0x10 CONFIG_DEBUG_KERNEL=y # @@ -2700,6 +2703,7 @@ CONFIG_PAGE_EXTENSION=y CONFIG_PAGE_POISONING=y # CONFIG_PAGE_POISONING_NO_SANITY is not set # CONFIG_PAGE_POISONING_ZERO is not set +# CONFIG_DEBUG_PAGE_REF is not set # CONFIG_DEBUG_OBJECTS is not set # CONFIG_SLUB_DEBUG_ON is not set # CONFIG_SLUB_STATS is not set @@ -2767,14 +2771,44 @@ CONFIG_RCU_CPU_STALL_TIMEOUT=21 # CONFIG_NOTIFIER_ERROR_INJECTION is not set # CONFIG_FAULT_INJECTION is not set # CONFIG_LATENCYTOP is not set +CONFIG_NOP_TRACER=y CONFIG_HAVE_FUNCTION_TRACER=y CONFIG_HAVE_FUNCTION_GRAPH_TRACER=y CONFIG_HAVE_DYNAMIC_FTRACE=y CONFIG_HAVE_FTRACE_MCOUNT_RECORD=y CONFIG_HAVE_SYSCALL_TRACEPOINTS=y CONFIG_HAVE_C_RECORDMCOUNT=y +CONFIG_TRACE_CLOCK=y +CONFIG_RING_BUFFER=y +CONFIG_EVENT_TRACING=y +CONFIG_CONTEXT_SWITCH_TRACER=y +CONFIG_TRACING=y +CONFIG_GENERIC_TRACER=y CONFIG_TRACING_SUPPORT=y -# CONFIG_FTRACE is not set +CONFIG_FTRACE=y +CONFIG_FUNCTION_TRACER=y +CONFIG_FUNCTION_GRAPH_TRACER=y +# CONFIG_IRQSOFF_TRACER is not set +# CONFIG_SCHED_TRACER is not set +# CONFIG_HWLAT_TRACER is not set +# CONFIG_FTRACE_SYSCALLS is not set +# CONFIG_TRACER_SNAPSHOT is not set +CONFIG_BRANCH_PROFILE_NONE=y +# CONFIG_PROFILE_ANNOTATED_BRANCHES is not set +# CONFIG_PROFILE_ALL_BRANCHES is not set +# CONFIG_STACK_TRACER is not set +# CONFIG_BLK_DEV_IO_TRACE is not set +# CONFIG_UPROBE_EVENT is not set +# CONFIG_PROBE_EVENTS is not set +CONFIG_DYNAMIC_FTRACE=y +# CONFIG_FUNCTION_PROFILER is not set +CONFIG_FTRACE_MCOUNT_RECORD=y +# CONFIG_FTRACE_STARTUP_TEST is not set +# CONFIG_TRACEPOINT_BENCHMARK is not set +# CONFIG_RING_BUFFER_BENCHMARK is not set +# CONFIG_RING_BUFFER_STARTUP_TEST is not set +# CONFIG_TRACE_ENUM_MAP_FILE is not set +# CONFIG_TRACING_EVENTS_GPIO is not set # # Runtime Testing @@ -2811,6 +2845,7 @@ CONFIG_ARCH_HAS_DEVMEM_IS_ALLOWED=y # CONFIG_STRICT_DEVMEM is not set # CONFIG_ARM_PTDUMP is not set CONFIG_ARM_UNWIND=y +CONFIG_OLD_MCOUNT=y # CONFIG_DEBUG_USER is not set # CONFIG_DEBUG_LL is not set CONFIG_DEBUG_LL_INCLUDE="mach/debug-macro.S" @@ -2955,7 +2990,7 @@ CONFIG_CRYPTO_AES=y # Certificates for signature checking # # CONFIG_ARM_CRYPTO is not set -# CONFIG_BINARY_PRINTF is not set +CONFIG_BINARY_PRINTF=y # # Library routines diff --git a/configs/platform-v7a/platformconfig b/configs/platform-v7a/platformconfig index 66cf135..f4e9ee8 100644 --- a/configs/platform-v7a/platformconfig +++ b/configs/platform-v7a/platformconfig @@ -75,8 +75,8 @@ PTXCONF_COMPILER_PREFIX_BOOTLOADER="${PTXCONF_COMPILER_PREFIX}" # # hardening options # -PTXCONF_TARGET_HARDEN_STACK_NONE=y -# PTXCONF_TARGET_HARDEN_STACK is not set +# PTXCONF_TARGET_HARDEN_STACK_NONE is not set +PTXCONF_TARGET_HARDEN_STACK=y # PTXCONF_TARGET_HARDEN_STACK_STRONG is not set # PTXCONF_TARGET_HARDEN_STACK_ALL is not set PTXCONF_TARGET_HARDEN_FORTIFY=y @@ -91,7 +91,7 @@ PTXCONF_TARGET_HARDEN_BINDNOW=y # PTXCONF_TARGET_LINKER_HASH_SYSV is not set PTXCONF_TARGET_LINKER_HASH_GNU=y # PTXCONF_TARGET_LINKER_HASH_BOTH is not set -# PTXCONF_TARGET_LINKER_AS_NEEDED is not set +PTXCONF_TARGET_LINKER_AS_NEEDED=y # PTXCONF_TARGET_DEBUG_OFF is not set PTXCONF_TARGET_DEBUG_KEEP=y # PTXCONF_TARGET_DEBUG_ENABLE is not set @@ -121,7 +121,7 @@ PTXCONF_KERNEL_IMAGE_Z=y PTXCONF_KERNEL_IMAGE="zImage" PTXCONF_KERNEL_DTC=y PTXCONF_KERNEL_XZ=y -PTXCONF_KERNEL_LZOP=y +# PTXCONF_KERNEL_LZOP is not set # # patching & configuration @@ -132,7 +132,7 @@ PTXCONF_KERNEL_CONFIG="kernelconfig" # # Development features # -PTXCONF_KERNEL_EXTRA_MAKEVARS="CONFIG_DEBUG_SECTION_MISMATCH=y" +PTXCONF_KERNEL_EXTRA_MAKEVARS="" PTXCONF_DTC=y PTXCONF_DTC_INSTALL_OFTREE=y PTXCONF_DTC_OFTREE_DTS_PATH="${KERNEL_DIR}/arch/${PTXCONF_KERNEL_ARCH_STRING}/boot/dts" diff --git a/configs/ptxconfig b/configs/ptxconfig index ffeddc7..23ab7b5 100644 --- a/configs/ptxconfig +++ b/configs/ptxconfig @@ -246,8 +246,8 @@ PTXCONF_CROSS_PKG_CONFIG_WRAPPER=y # # gdb # -PTXCONF_GDB_VERSION="7.6.1" -PTXCONF_GDB_MD5="d42841167fd061d90fddf9a7212a1f9f" +PTXCONF_GDB_VERSION="7.11" +PTXCONF_GDB_MD5="f585059252836a981ea5db9a5f8ce97f" # PTXCONF_GDB is not set PTXCONF_GDBSERVER=y PTXCONF_GDBSERVER_SHARED=y @@ -313,7 +313,7 @@ PTXCONF_ROOTFS_VAR_LOG=y PTXCONF_ROOTFS_VAR_LOCK=y PTXCONF_ROOTFS_VAR_LIB=y PTXCONF_ROOTFS_VAR_CACHE=y -# PTXCONF_ROOTFS_VAR_SPOOL is not set +PTXCONF_ROOTFS_VAR_SPOOL=y # PTXCONF_ROOTFS_VAR_SPOOL_CRON is not set PTXCONF_ROOTFS_VAR_TMP=y @@ -1260,7 +1260,7 @@ PTXCONF_BUSYBOX_LOGGER=y # PTXCONF_HTOP=y # PTXCONF_HUB_CTRL is not set -# PTXCONF_I2C_TOOLS is not set +PTXCONF_I2C_TOOLS=y # PTXCONF_INITNG is not set # PTXCONF_KBD is not set # PTXCONF_KEXEC_TOOLS is not set @@ -1360,15 +1360,15 @@ PTXCONF_PROCPS_TOP=y PTXCONF_SYSTEMD=y PTXCONF_SYSTEMD_DBUS=y # PTXCONF_SYSTEMD_LOCALES is not set -PTXCONF_SYSTEMD_VCONSOLE=y +# PTXCONF_SYSTEMD_VCONSOLE is not set PTXCONF_SYSTEMD_XZ=y # PTXCONF_SYSTEMD_LZ4 is not set PTXCONF_SYSTEMD_DISABLE_RANDOM_SEED=y # PTXCONF_SYSTEMD_LOGIND is not set # PTXCONF_SYSTEMD_NETWORK is not set PTXCONF_SYSTEMD_TIMEDATE=y -# PTXCONF_SYSTEMD_COREDUMP is not set -# PTXCONF_SYSTEMD_SECCOMP is not set +PTXCONF_SYSTEMD_COREDUMP=y +PTXCONF_SYSTEMD_SECCOMP=y # # BusyBox' tar is selected! @@ -1718,7 +1718,14 @@ PTXCONF_OPENSSL=y # PTXCONF_ATTR is not set # PTXCONF_CIFS_UTILS is not set # PTXCONF_DDRESCUE is not set -# PTXCONF_DOSFSTOOLS is not set +PTXCONF_DOSFSTOOLS=y +# PTXCONF_DOSFSTOOLS_MKDOSFS is not set +# PTXCONF_DOSFSTOOLS_MKDOSFS_MSDOS is not set +# PTXCONF_DOSFSTOOLS_MKDOSFS_VFAT is not set +PTXCONF_DOSFSTOOLS_DOSFSCK=y +# PTXCONF_DOSFSTOOLS_DOSFSCK_MSDOS is not set +PTXCONF_DOSFSTOOLS_DOSFSCK_VFAT=y +# PTXCONF_DOSFSTOOLS_DOSFSLABEL is not set PTXCONF_E2FSPROGS=y # @@ -1921,7 +1928,7 @@ PTXCONF_LIBPCRE_ENABLE_UTF8=y PTXCONF_LIBPOPT=y # PTXCONF_LIBPOPT_NLS is not set # PTXCONF_LIBRN is not set -# PTXCONF_LIBSECCOMP is not set +PTXCONF_LIBSECCOMP=y # PTXCONF_LIBSIGCPP is not set # PTXCONF_LIBSODIUM is not set # PTXCONF_LIBSYSFS is not set |