@@ -159,7 +159,7 if [ "$BUILD_KERNEL" = true ] ; then | |||||
159 | # New Options |
|
159 | # New Options | |
160 | if [ "$KERNEL_NF" = true ] ; then |
|
160 | if [ "$KERNEL_NF" = true ] ; then | |
161 | set_kernel_config CONFIG_IP_NF_SECURITY m |
|
161 | set_kernel_config CONFIG_IP_NF_SECURITY m | |
162 |
set_kernel_config CONFIG_NETLABEL |
|
162 | set_kernel_config CONFIG_NETLABEL y | |
163 | set_kernel_config CONFIG_IP6_NF_SECURITY m |
|
163 | set_kernel_config CONFIG_IP6_NF_SECURITY m | |
164 | fi |
|
164 | fi | |
165 | set_kernel_config CONFIG_SECURITY_SELINUX n |
|
165 | set_kernel_config CONFIG_SECURITY_SELINUX n | |
@@ -178,6 +178,8 if [ "$BUILD_KERNEL" = true ] ; then | |||||
178 | set_kernel_config CONFIG_SYSTEM_EXTRA_CERTIFICATE y |
|
178 | set_kernel_config CONFIG_SYSTEM_EXTRA_CERTIFICATE y | |
179 | set_kernel_config CONFIG_SECONDARY_TRUSTED_KEYRING y |
|
179 | set_kernel_config CONFIG_SECONDARY_TRUSTED_KEYRING y | |
180 | set_kernel_config CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY n |
|
180 | set_kernel_config CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY n | |
|
181 | set_kernel_config CONFIG_SYSTEM_TRUSTED_KEYS m | |||
|
182 | set_kernel_config CONFIG_SYSTEM_EXTRA_CERTIFICATE_SIZE 4096 | |||
181 |
|
183 | |||
182 | set_kernel_config CONFIG_ARM64_CRYPTO y |
|
184 | set_kernel_config CONFIG_ARM64_CRYPTO y | |
183 | set_kernel_config CONFIG_CRYPTO_SHA256_ARM64 m |
|
185 | set_kernel_config CONFIG_CRYPTO_SHA256_ARM64 m |
@@ -189,7 +189,7 if [ "$ENABLE_SYSTEMDSWAP" = true ] ; then | |||||
189 | cd "${R}/tmp/systemd-swap" || exit |
|
189 | cd "${R}/tmp/systemd-swap" || exit | |
190 |
|
190 | |||
191 | # Build package |
|
191 | # Build package | |
192 |
|
|
192 | bash ./package.sh debian | |
193 |
|
193 | |||
194 | # Install package |
|
194 | # Install package | |
195 | chroot_exec dpkg -i /tmp/systemd-swap/systemd-swap-*any.deb |
|
195 | chroot_exec dpkg -i /tmp/systemd-swap/systemd-swap-*any.deb |
General Comments 0
Vous devez vous connecter pour laisser un commentaire.
Se connecter maintenant