##// END OF EJS Templates
a
Unknown -
r561:6e8eb71ca421
parent child
Show More
@@ -97,14 +97,39 if [ "$BUILD_KERNEL" = true ] ; then
97 97
98 98 #Switch to KERNELSRC_DIR so we can use set_kernel_config
99 99 cd "${KERNEL_DIR}" || exit
100 if [ "$KERNEL_ARCH" = arm64 ]
101 #Fix SD_DRIVER mess in 64bit config
102 # use correct driver MMC_BCM2835_MMC instead of MMC_BCM2835_SDHOST - variable naming is bs
103 set_kernel_config CONFIG_MMC_BCM2835 n
104 set_kernel_config CONFIG_MMC_SDHCI_IPROC n
105 set_kernel_config CONFIG_USB_DWC2 n
106 sed -i "s|depends on MMC_BCM2835_MMC && MMC_BCM2835_DMA|depends on MMC_BCM2835_MMC|" "${KERNEL_DIR}"/drivers/mmc/host/Kconfig
107
108 #VLAN got disabled without reason in arm64bit
109 set_kernel_config CONFIG_IPVLAN m
110
111 #V4L2 sub-device userspace API
112 set_kernel_config CONFIG_VIDEO_V4L2_SUBDEV_API y
113
114 # GPIO-based bitbanging SPI Master
115 set_kernel_config CONFIG_SPI_GPIO m
116 #SPI Slave protocol
117 set_kernel_config CONFIG_SPI_SLAVE y
118
119 # Virtual (secure) IP: tunneling
120 set_kernel_config CONFIG_NET_IPVTI m
121
122 #Wlan driver debug info
123 set_kernel_config CONFIG_BRCMDBG m
124
125 #GPIO WATCHDOG
126 set_kernel_config CONFIG_GPIO_WATCHDOG m
127
128 #Camera
129 set_kernel_config VIDEO_BCM2835 m
130 set_kernel_config VIDEO_BCM2835_UNICAM m
131 fi
100 132
101 #Fix SD_DRIVER f* up in Raspberry PI upstream kernel
102 # use correct driver MMC_BCM2835_MMC instead of MMC_BCM2835_SDHOST - variable naming is bs
103 set_kernel_config CONFIG_MMC_BCM2835 n
104 set_kernel_config CONFIG_MMC_SDHCI_IPROC n
105 set_kernel_config CONFIG_USB_DWC2 n
106 sed -i "s|depends on MMC_BCM2835_MMC && MMC_BCM2835_DMA|depends on MMC_BCM2835_MMC|" "${KERNEL_DIR}"/drivers/mmc/host/Kconfig
107
108 133 # enable ZSWAP see https://askubuntu.com/a/472227 or https://wiki.archlinux.org/index.php/zswap
109 134 if [ "$KERNEL_ZSWAP" = true ] ; then
110 135 set_kernel_config CONFIG_ZPOOL y
@@ -169,8 +194,8 if [ "$BUILD_KERNEL" = true ] ; then
169 194 set_kernel_config CONFIG_SYSTEM_TRUSTED_KEYS ""
170 195
171 196 # This option provides support for retaining authentication tokens and access keys in the kernel.
172 set_kernel_config CONFIG_KEYS=y
173 set_kernel_config CONFIG_KEYS_COMPAT=y
197 set_kernel_config CONFIG_KEYS y
198 set_kernel_config CONFIG_KEYS_COMPAT y
174 199
175 200 # Apparmor
176 201 set_kernel_config CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE 0
@@ -181,13 +206,13 if [ "$BUILD_KERNEL" = true ] ; then
181 206 set_kernel_config CONFIG_DEFAULT_SECURITY "apparmor"
182 207
183 208 # restrictions on unprivileged users reading the kernel
184 set_kernel_config CONFIG_SECURITY_DMESG_RESTRICT=y
209 set_kernel_config CONFIG_SECURITY_DMESG_RESTRICT y
185 210
186 211 # network security hooks
187 212 set_kernel_config CONFIG_SECURITY_NETWORK y
188 set_kernel_config CONFIG_SECURITY_NETWORK_XFRM=y
189 set_kernel_config CONFIG_SECURITY_PATH=y
190 set_kernel_config CONFIG_SECURITY_YAMA=y
213 set_kernel_config CONFIG_SECURITY_NETWORK_XFRM y
214 set_kernel_config CONFIG_SECURITY_PATH y
215 set_kernel_config CONFIG_SECURITY_YAMA n
191 216
192 217 # New Options
193 218 if [ "$KERNEL_NF" = true ] ; then
@@ -229,7 +254,7 if [ "$BUILD_KERNEL" = true ] ; then
229 254 set_kernel_config CONFIG_CRYPTO_AES_ARM64_NEON_BLK m
230 255 set_kernel_config CONFIG_CRYPTO_CHACHA20_NEON m
231 256 set_kernel_config CONFIG_CRYPTO_AES_ARM64_BS m
232 echo SYSTEM_TRUSTED_KEYS >> .config
257 echo CONFIG_SYSTEM_TRUSTED_KEYS="" >> .config
233 258 fi
234 259
235 260 # Netfilter kernel support See https://github.com/raspberrypi/linux/issues/2177#issuecomment-354647406
General Comments 0
Vous devez vous connecter pour laisser un commentaire. Se connecter maintenant