T J Vivek Vilvaraj
41f1c83e6b
config: restrict dmesg output] config: Restrict DMESG output.
...
Restricting DMESG output impedes attackers from exploiting
vulnerabilites. enabling CONFIG_SECURITY_DMESG_RESTRICT
treats DMESG output as sensitive.
Signed-off-by: T J Vivek Vilvaraj <t.j.vivek.vilvaraj@intel.com>
2019-07-01 22:45:21 -05:00
Miguel Bernal Marin
68498ddf88
Revert "remove workarround from VMAP_STACK"
...
This reverts commit be877175f2
.
The fix is already in ACRN but not in PKT
https://github.com/projectacrn/acrn-hypervisor/issues/1318
2019-05-24 11:54:47 -05:00
Miguel Bernal Marin
be877175f2
remove workarround from VMAP_STACK
2019-05-24 11:26:00 -05:00
Miguel Bernal Marin
29b5e6c2ba
config: update STACKPROTECTOR
2019-03-16 01:44:04 -06:00
Miguel Bernal Marin
31e4661a21
fragment: sos: add security settings
2019-03-16 01:32:34 -06:00
Alek Du
3c78540eb6
Revert "disable IOTC_WTD"
...
This reverts commit 404cf52139
.
The iTCO watch is an important/must-have feature for GP2.0 platform.
If any other hardware has a bug to support it, the platform should put the
module into blacklist and should not just disable the feature.
2019-02-26 09:20:17 +00:00
stelukun
4a971decad
config: Enable CONFIG_DRM_I915_LOW_LEVEL_TRACEPOINTS for sos
...
VTunes needs the config CONFIG_DRM_I915_LOW_LEVEL_TRACEPOINTS
to be enabled to show schuduled tasks and preemption events
in GPU timeline
2019-02-21 15:51:21 -06:00
Miguel Bernal Marin
404cf52139
disable IOTC_WTD
...
That driver exposes a bug in the hypervisor so any hardware which has
that watchdog hangs on boot.
Requested-by: Burton, Ross <ross.burton@intel.com>
Context: https://github.com/projectacrn/acrn-hypervisor/issues/2507
2019-02-12 14:24:40 -06:00
Miguel Bernal Marin
e51afc5c7a
drop embedded ucode
...
Clear Linux removed the ucode integration in the kernel time ago,
so sync with it.
2019-02-03 11:43:56 -06:00
Alek Du
20db2da07b
update to PKT lts-v4.19.8-base-190109T063124Z
...
also change cpu gov to default performance.
Signed-off-by: Alek Du <alek.du@intel.com>
2019-01-10 00:16:04 +00:00
Miguel Bernal Marin
18534dfd5f
adding distro fragment for sos
...
Some changes are needed to do after sync with PKT. These changes are
clearlinux distro specific.
After sync with PKT just run at linux sources directory
scripts/kconfig/merge_config.sh config-iot-lts2018-sos fragment-sos
2018-12-21 11:37:40 -06:00