From 0657f76455e3d517b27b07bec5fe89af9b4b95f9 Mon Sep 17 00:00:00 2001 From: Dennis Cagle Date: Mon, 28 Nov 2022 10:49:33 -0800 Subject: [PATCH] defconfig: pineapple_tuivm: SELinux configs Enable SELinux related defconfig options. Change-Id: Icf4818ab3b1f004a30faa2fd9726004430db8bda Signed-off-by: Dennis Cagle --- .../configs/vendor/pineapple_tuivm.config | 56 +++++++++++++++++++ .../vendor/pineapple_tuivm_debug.config | 1 + 2 files changed, 57 insertions(+) diff --git a/arch/arm64/configs/vendor/pineapple_tuivm.config b/arch/arm64/configs/vendor/pineapple_tuivm.config index bac879c8103f..7d9186173943 100644 --- a/arch/arm64/configs/vendor/pineapple_tuivm.config +++ b/arch/arm64/configs/vendor/pineapple_tuivm.config @@ -1,13 +1,21 @@ +# CONFIG_AF_KCM is not set +# CONFIG_AF_RXRPC is not set CONFIG_ARCH_PINEAPPLE=y CONFIG_ARCH_QCOM=y CONFIG_ARCH_QTI_VM=y CONFIG_ARM_SMMU=y CONFIG_ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT=y CONFIG_ARM_SMMU_QCOM=y +# CONFIG_BLK_DEV_DRBD is not set +# CONFIG_BLK_DEV_RBD is not set +# CONFIG_BPFILTER is not set CONFIG_CC_OPTIMIZE_FOR_SIZE=y +# CONFIG_CEPH_LIB is not set CONFIG_CMA_SIZE_MBYTES=0 CONFIG_COMMON_CLK_QCOM=y CONFIG_CRYPTO_LZO=y +CONFIG_DEFAULT_SECURITY_SELINUX=y +CONFIG_DEFAULT_TCP_CONG="cubic" CONFIG_GENERIC_PINCONF=y CONFIG_GH_ARM64_DRV=y CONFIG_GH_CTRL=y @@ -21,15 +29,45 @@ CONFIG_GPIOLIB_IRQCHIP=y CONFIG_GUNYAH_DRIVERS=y CONFIG_HVC_GUNYAH=y CONFIG_HVC_GUNYAH_CONSOLE=y +CONFIG_INET=y +# CONFIG_INET_AH is not set +# CONFIG_INET_DIAG is not set +# CONFIG_INET_ESP is not set +# CONFIG_INET_IPCOMP is not set +# CONFIG_INFINIBAND is not set CONFIG_IOMMU_IO_PGTABLE=y CONFIG_IOMMU_IO_PGTABLE_LPAE=y +# CONFIG_IPV6 is not set +# CONFIG_IP_ADVANCED_ROUTER is not set +# CONFIG_IP_DCCP is not set +# CONFIG_IP_MULTICAST is not set +# CONFIG_IP_PNP is not set +# CONFIG_IP_SCTP is not set +# CONFIG_L2TP is not set CONFIG_LOCALVERSION="-perf" +CONFIG_LSM_MMAP_MIN_ADDR=32768 CONFIG_LZO_COMPRESS=y CONFIG_LZO_DECOMPRESS=y CONFIG_MAGIC_SYSRQ=y CONFIG_MAGIC_SYSRQ_DEFAULT_ENABLE=0x1 CONFIG_MAGIC_SYSRQ_SERIAL=y CONFIG_MAGIC_SYSRQ_SERIAL_SEQUENCE="" +# CONFIG_MPTCP is not set +# CONFIG_NETDEVSIM is not set +# CONFIG_NETLABEL is not set +# CONFIG_NET_DROP_MONITOR is not set +# CONFIG_NET_DSA is not set +# CONFIG_NET_FOU is not set +# CONFIG_NET_IPGRE_DEMUX is not set +# CONFIG_NET_IPIP is not set +# CONFIG_NET_IPVTI is not set +# CONFIG_NET_KEY is not set +# CONFIG_NET_L3_MASTER_DEV is not set +# CONFIG_NET_NCSI is not set +# CONFIG_NET_PKTGEN is not set +# CONFIG_NET_SWITCHDEV is not set +# CONFIG_NVME_TCP is not set +# CONFIG_OPENVSWITCH is not set CONFIG_PID_NS=y CONFIG_PINCONF=y CONFIG_PINCTRL_MSM=y @@ -45,8 +83,26 @@ CONFIG_QCOM_MEM_BUF_GH=y CONFIG_QCOM_MEM_BUF_MSGQ=y CONFIG_QCOM_SCM=y CONFIG_QCOM_TLMM_VM_IRQCHIP=y +# CONFIG_RDS is not set +CONFIG_SECURITY_NETWORK=y +CONFIG_SECURITY_SELINUX=y +# CONFIG_SECURITY_SELINUX_AVC_STATS is not set +# CONFIG_SECURITY_SELINUX_BOOTPARAM is not set +CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=0 +# CONFIG_SECURITY_SELINUX_DEVELOP is not set +# CONFIG_SECURITY_SELINUX_DISABLE is not set +CONFIG_SECURITY_SELINUX_SID2STR_CACHE_SIZE=256 +CONFIG_SECURITY_SELINUX_SIDTAB_HASH_BITS=9 +# CONFIG_SECURITY_SMACK is not set +# CONFIG_SYN_COOKIES is not set +# CONFIG_TCP_CONG_ADVANCED is not set +CONFIG_TCP_CONG_CUBIC=y +# CONFIG_TCP_MD5SIG is not set +# CONFIG_TIPC is not set +# CONFIG_TLS is not set CONFIG_TMPFS_XATTR=y CONFIG_USER_NS=y CONFIG_VIRT_DRIVERS=y +# CONFIG_XFRM_USER is not set CONFIG_ZRAM=y CONFIG_ZSMALLOC=y diff --git a/arch/arm64/configs/vendor/pineapple_tuivm_debug.config b/arch/arm64/configs/vendor/pineapple_tuivm_debug.config index d1de69928537..c3c20579bc60 100644 --- a/arch/arm64/configs/vendor/pineapple_tuivm_debug.config +++ b/arch/arm64/configs/vendor/pineapple_tuivm_debug.config @@ -23,4 +23,5 @@ CONFIG_PM_ADVANCED_DEBUG=y CONFIG_PM_DEBUG=y CONFIG_PM_SLEEP_DEBUG=y CONFIG_PROBE_EVENTS=y +CONFIG_SECURITY_SELINUX_DEVELOP=y CONFIG_WQ_WATCHDOG=y