aboutsummaryrefslogtreecommitdiffstats
path: root/cgl/features
AgeCommit message (Collapse)Author
13 dayscgl: drop SELINUX_DISABLE optionPaul Gortmaker
It was removed from mainline in v6.4 in commit f22f9aaf6c3d ("selinux: remove the runtime disable functionality"). Signed-off-by: Paul Gortmaker <paulg@kernel.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-05-23cgl: checkreqprot is deprecated, drop CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUEXiangyu Chen
checkreqprot has been dropped, if turn on this config, kernel would report an error message[1]. the meta-selinux also dropped it [2]. [1] https://www.spinics.net/lists/selinux/msg39308.html [2] https://git.yoctoproject.org/meta-selinux/commit/?id=47858343ed2cdc8e39d9e1f916c27db738513dd3 Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-03global: replace is not set with =nBruce Ashfield
Upstream is dropping support for is not set, so we adjust our configs accordingly. Commit: https://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild.git/commit/?h=for-next&id=55de8686df7ed2b5237867b130e30c728bbd9db4 kconfig: change .config format to use =n instead of "is not set" The .config file uses "# CONFIG_FOO is not set" form to represent disabled options. In the old days, it was useful because the .config was directly included from Makefiles. For example, you can use "ifdef CONFIG_FOO" in Makefiles to check if the option is enabled. Commit c955ccafc38e ("kconfig: fix .config dependencies") introduced include/config/auto.conf, which mirrors the .config, but trims down all disabled options. Since then, include/config/auto.conf defines CONFIG options during the build. The .config is used just for storing the user's configuration. I do not see a strong reason to use a particular pattern of comment for disabled options. With this commit, Kconfig will output disable options in a more natural form, "CONFIG_FOO=n". Kconfig accepts both "# CONFIG_FOO is not set" and "CONFIG_FOO=n" as a valid input. You do not need to update arch/*/configs/*_defconfig files for now. "git bisect" should be able to cross the commit in both ways without any issue. A problem may occur if you parse the .config for the "# ... is not set" patterns. I adjusted streamline_config.pl, merge_config.sh, scripts/kconfig/tests/. Signed-off-by: Masahiro Yamada <masahiroy@kernel.org> Reviewed-by: Boris Kolpackov <boris@codesynthesis.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-10-24cgl: Remove non-existing kernel optionsHe Zhe
Thess options have been remove from mainline kernel. CONFIG_INET6_XFRM_MODE_ROUTEOPTIMIZATION removed by 4c145dce2601 ("xfrm: make xfrm modes builtin") CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE removed by be6ec88f41ba ("selinux: Remove SECURITY_SELINUX_BOOTPARAM_VALUE") Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-10-07meta: add SPDX License Identifier and updates 00-README with License policyYann CARDAILLAC
Signed-off-by: Yann CARDAILLAC <ycnakajsph@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-28cgl: audit: Remove CONFIG_AUDIT_WATCH and CONFIG_AUDIT_WATCHHe Zhe
In the following commits, these two options have been replaced by CONFIG_AUDITSYSCALL which is in audit.cfg. c8fc5d49c341 ("audit: remove WATCH and TREE config options") cb74ed278f80 ("audit: always enable syscall auditing when supported and audit is enabled") Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2017-10-02selinux: Fix audit.scc pathHe Zhe
Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2017-09-25cgl: Add cgl featuresHe Zhe
Add features for Carrier Grade Linux https://wiki.linuxfoundation.org/cgl/start Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>