Frédéric Pierret (fepitre)
1cc6951e1d
config-qubes: allow signed modules as Fedora set it
2019-12-01 10:25:55 +01:00
Frédéric Pierret (fepitre)
150288eaa4
Update to kernel-5.2.3
2019-07-27 14:35:21 +02:00
Marek Marczykowski-Górecki
98cd4d1c78
config: disable SELinux
...
CONFIG_LSM is a new option which can be used to enable SELinux. Base
Fedora config does that. When disabled at runtime only, SELinux-aware
kernel will refuse setting securit.selinux xattr, breaking multiple
tools, including initramfs generation (cp --preserve=xattr fails).
2019-05-15 21:58:09 +02:00
fepitre
d029ec5c68
Update config-base and remove CONFIG_INTEL_ATOMISP in config-qubes it brokes the build.
2018-08-17 11:05:06 +02:00
Simon Gaiser
f9db313392
Remove CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=0
...
Setting it is not useful since we changed the default LSM anyway and it
makes enabling SELinux harder (requires changing the cmdline).
2018-02-06 02:33:28 +01:00
Simon Gaiser
96b8fba876
Build in AppArmor support
...
It's optionally used by Whonix.
2018-02-06 02:33:17 +01:00
Simon Gaiser
984ffdc07f
Add dummy_ucd driver
...
This is also needed by the qvm-usb tests.
2018-01-10 04:44:54 +01:00
Simon Gaiser
b984faa123
Add usb gadget driver to qvm-usb testing
2018-01-09 05:08:33 +01:00
Simon Gaiser
0986e54ca5
Include usb drivers as modules
...
This should allow to assign usb device to pciback in initramfs before
thos modules get loaded.
2018-01-09 05:08:22 +01:00
Simon Gaiser
33931abaa6
Disable CONFIG_DEBUG_WX, again.
2018-01-06 06:19:09 +01:00
Simon Gaiser
537e0d17a8
Update to 4.14.6 and auto generate config
...
The config is now generated based on Fedora's config. This way we need
to only track qubes specific changes and can quickly update to never
Fedora configs.
2017-12-15 10:08:09 +01:00
