Commit Graph

10 Commits

Author SHA1 Message Date
Frédéric Pierret (fepitre)
150288eaa4
Update to kernel-5.2.3 2019-07-27 14:35:21 +02:00
Marek Marczykowski-Górecki
98cd4d1c78
config: disable SELinux
CONFIG_LSM is a new option which can be used to enable SELinux. Base
Fedora config does that. When disabled at runtime only, SELinux-aware
kernel will refuse setting securit.selinux xattr, breaking multiple
tools, including initramfs generation (cp --preserve=xattr fails).
2019-05-15 21:58:09 +02:00
fepitre
d029ec5c68
Update config-base and remove CONFIG_INTEL_ATOMISP in config-qubes it brokes the build. 2018-08-17 11:05:06 +02:00
Simon Gaiser
f9db313392 Remove CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=0
Setting it is not useful since we changed the default LSM anyway and it
makes enabling SELinux harder (requires changing the cmdline).
2018-02-06 02:33:28 +01:00
Simon Gaiser
96b8fba876 Build in AppArmor support
It's optionally used by Whonix.
2018-02-06 02:33:17 +01:00
Simon Gaiser
984ffdc07f Add dummy_ucd driver
This is also needed by the qvm-usb tests.
2018-01-10 04:44:54 +01:00
Simon Gaiser
b984faa123 Add usb gadget driver to qvm-usb testing 2018-01-09 05:08:33 +01:00
Simon Gaiser
0986e54ca5 Include usb drivers as modules
This should allow to assign usb device to pciback in initramfs before
thos modules get loaded.
2018-01-09 05:08:22 +01:00
Simon Gaiser
33931abaa6 Disable CONFIG_DEBUG_WX, again. 2018-01-06 06:19:09 +01:00
Simon Gaiser
537e0d17a8 Update to 4.14.6 and auto generate config
The config is now generated based on Fedora's config. This way we need
to only track qubes specific changes and can quickly update to never
Fedora configs.
2017-12-15 10:08:09 +01:00