11 Commits (master)

Author	SHA1	Message	Date
Frédéric Pierret (fepitre)	1cc6951e1d	config-qubes: allow signed modules as Fedora set it	4 years ago
Frédéric Pierret (fepitre)	150288eaa4	Update to kernel-5.2.3	5 years ago
Marek Marczykowski-Górecki	98cd4d1c78	config: disable SELinux ... CONFIG_LSM is a new option which can be used to enable SELinux. Base Fedora config does that. When disabled at runtime only, SELinux-aware kernel will refuse setting securit.selinux xattr, breaking multiple tools, including initramfs generation (cp --preserve=xattr fails).	5 years ago
fepitre	d029ec5c68	Update config-base and remove CONFIG_INTEL_ATOMISP in config-qubes it brokes the build.	6 years ago
Simon Gaiser	f9db313392	Remove CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=0 ... Setting it is not useful since we changed the default LSM anyway and it makes enabling SELinux harder (requires changing the cmdline).	6 years ago
Simon Gaiser	96b8fba876	Build in AppArmor support ... It's optionally used by Whonix.	6 years ago
Simon Gaiser	984ffdc07f	Add dummy_ucd driver ... This is also needed by the qvm-usb tests.	6 years ago
Simon Gaiser	b984faa123	Add usb gadget driver to qvm-usb testing	6 years ago
Simon Gaiser	0986e54ca5	Include usb drivers as modules ... This should allow to assign usb device to pciback in initramfs before thos modules get loaded.	6 years ago
Simon Gaiser	33931abaa6	Disable CONFIG_DEBUG_WX, again.	6 years ago
Simon Gaiser	537e0d17a8	Update to 4.14.6 and auto generate config ... The config is now generated based on Fedora's config. This way we need to only track qubes specific changes and can quickly update to never Fedora configs.	6 years ago