firmware/br-ext-chip-allwinner/board/v83x/kernel/patches/00000-security_Kconfig.patch

34 lines
1.1 KiB
Diff

diff -drupN a/security/Kconfig b/security/Kconfig
--- a/security/Kconfig 2018-08-06 17:23:04.000000000 +0300
+++ b/security/Kconfig 2022-06-12 05:28:14.000000000 +0300
@@ -18,6 +18,15 @@ config SECURITY_DMESG_RESTRICT
If you are unsure how to answer this question, answer N.
+config SECURITY_PERF_EVENTS_RESTRICT
+ bool "Restrict unprivileged use of performance events"
+ depends on PERF_EVENTS
+ help
+ If you say Y here, the kernel.perf_event_paranoid sysctl
+ will be set to 3 by default, and no unprivileged use of the
+ perf_event_open syscall will be permitted unless it is
+ changed.
+
config SECURITY
bool "Enable different security models"
depends on SYSFS
@@ -168,6 +177,13 @@ config HARDENED_USERCOPY_PAGESPAN
been removed. This config is intended to be used only while
trying to find such users.
+config FILE_INTEGRITY
+ depends on SECURITYFS
+ tristate "Enable System File Verify Module"
+ default n
+ help
+ Sunxi file integrity verify module for android system
+
source security/selinux/Kconfig
source security/smack/Kconfig
source security/tomoyo/Kconfig