From: Peter Müller Date: Wed, 6 Apr 2022 20:18:22 +0000 (+0000) Subject: kernel: Align rootfile again due to forgotten hardening patch X-Git-Tag: v2.27-core167~6^2~1 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=3f65e4996b10f371129612f4b7e94beaa8ac3cb3;p=ipfire-2.x.git kernel: Align rootfile again due to forgotten hardening patch Signed-off-by: Peter Müller --- diff --git a/config/rootfiles/common/aarch64/linux b/config/rootfiles/common/aarch64/linux index f5fc0d3518..34a347e1eb 100644 --- a/config/rootfiles/common/aarch64/linux +++ b/config/rootfiles/common/aarch64/linux @@ -8327,6 +8327,7 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER-ipfire/build/include/config/LOCKDEP_SUPPORT #lib/modules/KVER-ipfire/build/include/config/LOCKD_V4 #lib/modules/KVER-ipfire/build/include/config/LOCK_DEBUGGING_SUPPORT +#lib/modules/KVER-ipfire/build/include/config/LOCK_DOWN_KERNEL_FORCE_INTEGRITY #lib/modules/KVER-ipfire/build/include/config/LOCK_SPIN_ON_OWNER #lib/modules/KVER-ipfire/build/include/config/LOGO #lib/modules/KVER-ipfire/build/include/config/LOGO_LINUX_CLUT224 @@ -9675,6 +9676,8 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER-ipfire/build/include/config/SECURITY #lib/modules/KVER-ipfire/build/include/config/SECURITYFS #lib/modules/KVER-ipfire/build/include/config/SECURITY_DMESG_RESTRICT +#lib/modules/KVER-ipfire/build/include/config/SECURITY_LOCKDOWN_LSM +#lib/modules/KVER-ipfire/build/include/config/SECURITY_LOCKDOWN_LSM_EARLY #lib/modules/KVER-ipfire/build/include/config/SENSORS_AD7414 #lib/modules/KVER-ipfire/build/include/config/SENSORS_AD7418 #lib/modules/KVER-ipfire/build/include/config/SENSORS_ADM1021 diff --git a/config/rootfiles/common/armv6l/linux b/config/rootfiles/common/armv6l/linux index e17e050498..fd85de41b6 100644 --- a/config/rootfiles/common/armv6l/linux +++ b/config/rootfiles/common/armv6l/linux @@ -8690,6 +8690,7 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER-ipfire/build/include/config/LOCKDEP_SUPPORT #lib/modules/KVER-ipfire/build/include/config/LOCKD_V4 #lib/modules/KVER-ipfire/build/include/config/LOCK_DEBUGGING_SUPPORT +#lib/modules/KVER-ipfire/build/include/config/LOCK_DOWN_KERNEL_FORCE_INTEGRITY #lib/modules/KVER-ipfire/build/include/config/LOCK_SPIN_ON_OWNER #lib/modules/KVER-ipfire/build/include/config/LOGO #lib/modules/KVER-ipfire/build/include/config/LOGO_LINUX_CLUT224 @@ -10096,6 +10097,8 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER-ipfire/build/include/config/SECURITY #lib/modules/KVER-ipfire/build/include/config/SECURITYFS #lib/modules/KVER-ipfire/build/include/config/SECURITY_DMESG_RESTRICT +#lib/modules/KVER-ipfire/build/include/config/SECURITY_LOCKDOWN_LSM +#lib/modules/KVER-ipfire/build/include/config/SECURITY_LOCKDOWN_LSM_EARLY #lib/modules/KVER-ipfire/build/include/config/SELECT_MEMORY_MODEL #lib/modules/KVER-ipfire/build/include/config/SENSORS_AD7414 #lib/modules/KVER-ipfire/build/include/config/SENSORS_AD7418 diff --git a/config/rootfiles/common/x86_64/linux b/config/rootfiles/common/x86_64/linux index 01271488c3..2bb3dbdb40 100644 --- a/config/rootfiles/common/x86_64/linux +++ b/config/rootfiles/common/x86_64/linux @@ -8415,6 +8415,7 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER-ipfire/build/include/config/LOCKD_V4 #lib/modules/KVER-ipfire/build/include/config/LOCKUP_DETECTOR #lib/modules/KVER-ipfire/build/include/config/LOCK_DEBUGGING_SUPPORT +#lib/modules/KVER-ipfire/build/include/config/LOCK_DOWN_KERNEL_FORCE_INTEGRITY #lib/modules/KVER-ipfire/build/include/config/LOCK_EVENT_COUNTS #lib/modules/KVER-ipfire/build/include/config/LOCK_SPIN_ON_OWNER #lib/modules/KVER-ipfire/build/include/config/LOGO @@ -9868,6 +9869,8 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER-ipfire/build/include/config/SECURITY #lib/modules/KVER-ipfire/build/include/config/SECURITYFS #lib/modules/KVER-ipfire/build/include/config/SECURITY_DMESG_RESTRICT +#lib/modules/KVER-ipfire/build/include/config/SECURITY_LOCKDOWN_LSM +#lib/modules/KVER-ipfire/build/include/config/SECURITY_LOCKDOWN_LSM_EARLY #lib/modules/KVER-ipfire/build/include/config/SELECT_MEMORY_MODEL #lib/modules/KVER-ipfire/build/include/config/SENSORS_ABITUGURU #lib/modules/KVER-ipfire/build/include/config/SENSORS_ABITUGURU3