@@ -97,14 +97,39 if [ "$BUILD_KERNEL" = true ] ; then | |||
|
97 | 97 | |
|
98 | 98 | #Switch to KERNELSRC_DIR so we can use set_kernel_config |
|
99 | 99 | cd "${KERNEL_DIR}" || exit |
|
100 | if [ "$KERNEL_ARCH" = arm64 ] | |
|
101 | #Fix SD_DRIVER mess in 64bit config | |
|
102 | # use correct driver MMC_BCM2835_MMC instead of MMC_BCM2835_SDHOST - variable naming is bs | |
|
103 | set_kernel_config CONFIG_MMC_BCM2835 n | |
|
104 | set_kernel_config CONFIG_MMC_SDHCI_IPROC n | |
|
105 | set_kernel_config CONFIG_USB_DWC2 n | |
|
106 | sed -i "s|depends on MMC_BCM2835_MMC && MMC_BCM2835_DMA|depends on MMC_BCM2835_MMC|" "${KERNEL_DIR}"/drivers/mmc/host/Kconfig | |
|
107 | ||
|
108 | #VLAN got disabled without reason in arm64bit | |
|
109 | set_kernel_config CONFIG_IPVLAN m | |
|
110 | ||
|
111 | #V4L2 sub-device userspace API | |
|
112 | set_kernel_config CONFIG_VIDEO_V4L2_SUBDEV_API y | |
|
113 | ||
|
114 | # GPIO-based bitbanging SPI Master | |
|
115 | set_kernel_config CONFIG_SPI_GPIO m | |
|
116 | #SPI Slave protocol | |
|
117 | set_kernel_config CONFIG_SPI_SLAVE y | |
|
118 | ||
|
119 | # Virtual (secure) IP: tunneling | |
|
120 | set_kernel_config CONFIG_NET_IPVTI m | |
|
121 | ||
|
122 | #Wlan driver debug info | |
|
123 | set_kernel_config CONFIG_BRCMDBG m | |
|
124 | ||
|
125 | #GPIO WATCHDOG | |
|
126 | set_kernel_config CONFIG_GPIO_WATCHDOG m | |
|
127 | ||
|
128 | #Camera | |
|
129 | set_kernel_config VIDEO_BCM2835 m | |
|
130 | set_kernel_config VIDEO_BCM2835_UNICAM m | |
|
131 | fi | |
|
100 | 132 | |
|
101 | #Fix SD_DRIVER f* up in Raspberry PI upstream kernel | |
|
102 | # use correct driver MMC_BCM2835_MMC instead of MMC_BCM2835_SDHOST - variable naming is bs | |
|
103 | set_kernel_config CONFIG_MMC_BCM2835 n | |
|
104 | set_kernel_config CONFIG_MMC_SDHCI_IPROC n | |
|
105 | set_kernel_config CONFIG_USB_DWC2 n | |
|
106 | sed -i "s|depends on MMC_BCM2835_MMC && MMC_BCM2835_DMA|depends on MMC_BCM2835_MMC|" "${KERNEL_DIR}"/drivers/mmc/host/Kconfig | |
|
107 | ||
|
108 | 133 | # enable ZSWAP see https://askubuntu.com/a/472227 or https://wiki.archlinux.org/index.php/zswap |
|
109 | 134 | if [ "$KERNEL_ZSWAP" = true ] ; then |
|
110 | 135 | set_kernel_config CONFIG_ZPOOL y |
@@ -169,8 +194,8 if [ "$BUILD_KERNEL" = true ] ; then | |||
|
169 | 194 | set_kernel_config CONFIG_SYSTEM_TRUSTED_KEYS "" |
|
170 | 195 | |
|
171 | 196 | # This option provides support for retaining authentication tokens and access keys in the kernel. |
|
172 |
set_kernel_config CONFIG_KEYS |
|
|
173 |
set_kernel_config CONFIG_KEYS_COMPAT |
|
|
197 | set_kernel_config CONFIG_KEYS y | |
|
198 | set_kernel_config CONFIG_KEYS_COMPAT y | |
|
174 | 199 | |
|
175 | 200 | # Apparmor |
|
176 | 201 | set_kernel_config CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE 0 |
@@ -181,13 +206,13 if [ "$BUILD_KERNEL" = true ] ; then | |||
|
181 | 206 | set_kernel_config CONFIG_DEFAULT_SECURITY "apparmor" |
|
182 | 207 | |
|
183 | 208 | # restrictions on unprivileged users reading the kernel |
|
184 |
set_kernel_config CONFIG_SECURITY_DMESG_RESTRICT |
|
|
209 | set_kernel_config CONFIG_SECURITY_DMESG_RESTRICT y | |
|
185 | 210 | |
|
186 | 211 | # network security hooks |
|
187 | 212 | set_kernel_config CONFIG_SECURITY_NETWORK y |
|
188 |
set_kernel_config CONFIG_SECURITY_NETWORK_XFRM |
|
|
189 |
set_kernel_config CONFIG_SECURITY_PATH |
|
|
190 |
set_kernel_config CONFIG_SECURITY_YAMA |
|
|
213 | set_kernel_config CONFIG_SECURITY_NETWORK_XFRM y | |
|
214 | set_kernel_config CONFIG_SECURITY_PATH y | |
|
215 | set_kernel_config CONFIG_SECURITY_YAMA n | |
|
191 | 216 | |
|
192 | 217 | # New Options |
|
193 | 218 | if [ "$KERNEL_NF" = true ] ; then |
@@ -229,7 +254,7 if [ "$BUILD_KERNEL" = true ] ; then | |||
|
229 | 254 | set_kernel_config CONFIG_CRYPTO_AES_ARM64_NEON_BLK m |
|
230 | 255 | set_kernel_config CONFIG_CRYPTO_CHACHA20_NEON m |
|
231 | 256 | set_kernel_config CONFIG_CRYPTO_AES_ARM64_BS m |
|
232 | echo SYSTEM_TRUSTED_KEYS >> .config | |
|
257 | echo CONFIG_SYSTEM_TRUSTED_KEYS="" >> .config | |
|
233 | 258 | fi |
|
234 | 259 | |
|
235 | 260 | # Netfilter kernel support See https://github.com/raspberrypi/linux/issues/2177#issuecomment-354647406 |
General Comments 0
Vous devez vous connecter pour laisser un commentaire.
Se connecter maintenant