kernel: Disable the RANDSTRUCT plugin

This does not seem to have the benefit we are expecting and comes with a
huge compile time cost that I would like to disable this for now.

As a disitribution kernel we do/have to publish the seed which makes
this entire feature very questionable.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/kernel/config-generic b/kernel/config-generic
index b626e9550ecff626db659afacff7dd3726e40e87..47ca2b33e1205af3aa25ea8c8469c412b0912fa2 100644 (file)
--- a/kernel/config-generic
+++ b/kernel/config-generic
@@ -6219,11 +6219,9 @@ CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y
 CONFIG_ZERO_CALL_USED_REGS=y
 # end of Memory initialization
 
-# CONFIG_RANDSTRUCT_NONE is not set
+CONFIG_RANDSTRUCT_NONE=y
 # CONFIG_RANDSTRUCT_FULL is not set
-CONFIG_RANDSTRUCT_PERFORMANCE=y
-CONFIG_RANDSTRUCT=y
-CONFIG_GCC_PLUGIN_RANDSTRUCT=y
+# CONFIG_RANDSTRUCT_PERFORMANCE is not set
 # end of Kernel hardening options
 # end of Security options
 

diff --git a/kernel/kernel.nm b/kernel/kernel.nm
index 0ce81c29821666dc396a84d53bdf87bf77ee19cf..935d9b4f1ec7cbdd3641b40716ead99137f9b4c0 100644 (file)
--- a/kernel/kernel.nm
+++ b/kernel/kernel.nm
@@ -5,7 +5,7 @@
 
 name       = kernel
 version    = 6.0.6
-release    = 1
+release    = 2
 thisapp    = linux-%{version}
 
 maintainer = Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>