Commit Graph

11 Commits

Author SHA1 Message Date
T J Vivek Vilvaraj 41f1c83e6b config: restrict dmesg output] config: Restrict DMESG output.
Restricting DMESG output impedes attackers from exploiting
vulnerabilites. enabling CONFIG_SECURITY_DMESG_RESTRICT
treats DMESG output as sensitive.

Signed-off-by: T J Vivek Vilvaraj <t.j.vivek.vilvaraj@intel.com>
2019-07-01 22:45:21 -05:00
Miguel Bernal Marin 68498ddf88 Revert "remove workarround from VMAP_STACK"
This reverts commit be877175f2.

The fix is already in ACRN but not in PKT
https://github.com/projectacrn/acrn-hypervisor/issues/1318
2019-05-24 11:54:47 -05:00
Miguel Bernal Marin be877175f2 remove workarround from VMAP_STACK 2019-05-24 11:26:00 -05:00
Miguel Bernal Marin 29b5e6c2ba config: update STACKPROTECTOR 2019-03-16 01:44:04 -06:00
Miguel Bernal Marin 31e4661a21 fragment: sos: add security settings 2019-03-16 01:32:34 -06:00
Alek Du 3c78540eb6 Revert "disable IOTC_WTD"
This reverts commit 404cf52139.

The iTCO watch is an important/must-have feature for GP2.0 platform.

If any other hardware has a bug to support it, the platform should put the
module into blacklist and should not just disable the feature.
2019-02-26 09:20:17 +00:00
stelukun 4a971decad config: Enable CONFIG_DRM_I915_LOW_LEVEL_TRACEPOINTS for sos
VTunes needs the config CONFIG_DRM_I915_LOW_LEVEL_TRACEPOINTS
to be enabled to show schuduled tasks and preemption events
in GPU timeline
2019-02-21 15:51:21 -06:00
Miguel Bernal Marin 404cf52139 disable IOTC_WTD
That driver exposes a bug in the hypervisor so any hardware which has
that watchdog hangs on boot.

Requested-by: Burton, Ross <ross.burton@intel.com>
Context: https://github.com/projectacrn/acrn-hypervisor/issues/2507
2019-02-12 14:24:40 -06:00
Miguel Bernal Marin e51afc5c7a drop embedded ucode
Clear Linux removed the ucode integration in the kernel time ago,
so sync with it.
2019-02-03 11:43:56 -06:00
Alek Du 20db2da07b update to PKT lts-v4.19.8-base-190109T063124Z
also change cpu gov to default performance.

Signed-off-by: Alek Du <alek.du@intel.com>
2019-01-10 00:16:04 +00:00
Miguel Bernal Marin 18534dfd5f adding distro fragment for sos
Some changes are needed to do after sync with PKT. These changes are
clearlinux distro specific.

After sync with PKT just run at linux sources directory

scripts/kconfig/merge_config.sh config-iot-lts2018-sos fragment-sos
2018-12-21 11:37:40 -06:00