forked from rpms/raspberrypi2
73 lines
2.2 KiB
Diff
73 lines
2.2 KiB
Diff
From c79f1902314f6aca86f4df9bec6f203f6bdb1231 Mon Sep 17 00:00:00 2001
|
|
From: Koichiro Iwao <meta@almalinux.org>
|
|
Date: Tue, 31 Mar 2026 17:53:02 +0900
|
|
Subject: [PATCH 2/2] Apply config patch for Raspberry Pi (BCM2712)
|
|
|
|
The patch is originally provided by Pablo Greco <pgreco@centosproject.org>.
|
|
|
|
Signed-off-by: Koichiro Iwao <meta@almalinux.org>
|
|
---
|
|
arch/arm64/configs/bcm2712_defconfig | 42 ++++++++++++++++++++++++++--
|
|
1 file changed, 40 insertions(+), 2 deletions(-)
|
|
|
|
diff --git a/arch/arm64/configs/bcm2712_defconfig b/arch/arm64/configs/bcm2712_defconfig
|
|
index 65e4f476536a..5530ed8c9dda 100644
|
|
--- a/arch/arm64/configs/bcm2712_defconfig
|
|
+++ b/arch/arm64/configs/bcm2712_defconfig
|
|
@@ -1716,8 +1716,6 @@ CONFIG_DLM=m
|
|
CONFIG_UNICODE=m
|
|
CONFIG_KEY_DH_OPERATIONS=y
|
|
CONFIG_SECURITY=y
|
|
-CONFIG_SECURITY_APPARMOR=y
|
|
-CONFIG_LSM=""
|
|
CONFIG_CRYPTO_USER=m
|
|
CONFIG_CRYPTO_NULL=m
|
|
CONFIG_CRYPTO_CRYPTD=m
|
|
@@ -1764,3 +1762,43 @@ CONFIG_FTRACE_SYSCALLS=y
|
|
CONFIG_BLK_DEV_IO_TRACE=y
|
|
# CONFIG_UPROBE_EVENTS is not set
|
|
# CONFIG_STRICT_DEVMEM is not set
|
|
+
|
|
+# CentOS/AlmaLinux added
|
|
+CONFIG_AUDIT=y
|
|
+CONFIG_NETLABEL=y
|
|
+CONFIG_NETFILTER_XT_TARGET_AUDIT=m
|
|
+CONFIG_IP_NF_SECURITY=m
|
|
+CONFIG_IP6_NF_SECURITY=m
|
|
+CONFIG_FANOTIFY_ACCESS_PERMISSIONS=y
|
|
+CONFIG_NFSD_V4_SECURITY_LABEL=y
|
|
+CONFIG_SECURITY_NETWORK=y
|
|
+CONFIG_SECURITY_PATH=y
|
|
+CONFIG_SECURITY_SELINUX=y
|
|
+CONFIG_SECURITY_SELINUX_BOOTPARAM=y
|
|
+CONFIG_SECURITY_SELINUX_DISABLE=y
|
|
+CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1
|
|
+CONFIG_NET_TEAM=m
|
|
+CONFIG_NET_TEAM_MODE_ACTIVEBACKUP=m
|
|
+CONFIG_NET_TEAM_MODE_BROADCAST=m
|
|
+CONFIG_NET_TEAM_MODE_LOADBALANCE=m
|
|
+CONFIG_NET_TEAM_MODE_RANDOM=m
|
|
+CONFIG_NET_TEAM_MODE_ROUNDROBIN=m
|
|
+CONFIG_CRYPTO_BLAKE2S=m
|
|
+CONFIG_CRYPTO_CURVE25519=m
|
|
+CONFIG_CRYPTO_LIB_BLAKE2S=m
|
|
+CONFIG_CRYPTO_LIB_CHACHA20POLY1305=m
|
|
+CONFIG_CRYPTO_LIB_CHACHA=m
|
|
+CONFIG_CRYPTO_LIB_CURVE25519=m
|
|
+CONFIG_CRYPTO_LIB_POLY1305=m
|
|
+CONFIG_CRYPTO_POLY1305_NEON=m
|
|
+# CONFIG_EFI_CUSTOM_SSDT_OVERLAYS is not set
|
|
+# CONFIG_WIREGUARD_DEBUG is not set
|
|
+CONFIG_WIREGUARD=m
|
|
+CONFIG_BLK_DEV_RBD=m
|
|
+CONFIG_FW_LOADER_COMPRESS=y
|
|
+CONFIG_FW_LOADER_COMPRESS_XZ=y
|
|
+CONFIG_FW_LOADER_COMPRESS_ZSTD=y
|
|
+CONFIG_EROFS_FS=m
|
|
+CONFIG_EROFS_FS_XATTR=y
|
|
+CONFIG_EROFS_POSIX_ACL=y
|
|
+CONFIG_EROFS_FS_SECURITY=y
|
|
--
|
|
2.53.0
|
|
|