diff options
author | John Rigby <john.rigby@linaro.org> | 2010-09-03 00:03:56 -0600 |
---|---|---|
committer | Lee Jones <lee.jones@linaro.org> | 2012-01-20 12:02:25 +0000 |
commit | 3d3066e022db7db213cb5c3f218ef9d3eef11ba7 (patch) | |
tree | 259a9cc82b2e443cce7e0842e96167250a081904 /debian.linaro/config | |
parent | ce4b59b8d57a4ccf8eebe18d17e330cddb3e050e (diff) |
LINARO: Add generic linaro packaging
Signed-off-by: John Rigby <john.rigby@linaro.org>
Diffstat (limited to 'debian.linaro/config')
-rw-r--r-- | debian.linaro/config/armel/config.common.armel | 3 | ||||
-rw-r--r-- | debian.linaro/config/armel/config.flavour.%FLAVOUR% | 3 | ||||
-rw-r--r-- | debian.linaro/config/config.common.ubuntu | 3 | ||||
-rw-r--r-- | debian.linaro/config/enforce | 57 |
4 files changed, 66 insertions, 0 deletions
diff --git a/debian.linaro/config/armel/config.common.armel b/debian.linaro/config/armel/config.common.armel new file mode 100644 index 00000000000..1903a346e48 --- /dev/null +++ b/debian.linaro/config/armel/config.common.armel @@ -0,0 +1,3 @@ +# +# Config options for config.common.armel automatically generated by splitconfig.pl +# diff --git a/debian.linaro/config/armel/config.flavour.%FLAVOUR% b/debian.linaro/config/armel/config.flavour.%FLAVOUR% new file mode 100644 index 00000000000..3af5c648f72 --- /dev/null +++ b/debian.linaro/config/armel/config.flavour.%FLAVOUR% @@ -0,0 +1,3 @@ +# +# Config options for config.flavour.%FLAVOUR% automatically generated by splitconfig.pl +# diff --git a/debian.linaro/config/config.common.ubuntu b/debian.linaro/config/config.common.ubuntu new file mode 100644 index 00000000000..45749474d36 --- /dev/null +++ b/debian.linaro/config/config.common.ubuntu @@ -0,0 +1,3 @@ +# +# Common config options automatically generated by splitconfig.pl +# diff --git a/debian.linaro/config/enforce b/debian.linaro/config/enforce new file mode 100644 index 00000000000..a1204508b99 --- /dev/null +++ b/debian.linaro/config/enforce @@ -0,0 +1,57 @@ +# +# SECURITY items +# +# Ensure this option is enabled. +value CONFIG_COMPAT_BRK n +value CONFIG_DEVKMEM n +value CONFIG_LSM_MMAP_MIN_ADDR 0 +value CONFIG_SECURITY y +!exists CONFIG_SECURITY_FILE_CAPABILITIES | value CONFIG_SECURITY_FILE_CAPABILITIES y +value CONFIG_SECURITY_SELINUX y +value CONFIG_SECURITY_SMACK y +value CONFIG_SECURITY_YAMA y +value CONFIG_SYN_COOKIES y +value CONFIG_DEFAULT_SECURITY_APPARMOR y +# For architectures which support this option ensure it is enabled. +!exists CONFIG_SECCOMP | value CONFIG_SECCOMP y +!exists CONFIG_CC_STACKPROTECTOR | value CONFIG_CC_STACKPROTECTOR y +!exists CONFIG_DEBUG_RODATA | value CONFIG_DEBUG_RODATA y +!exists CONFIG_STRICT_DEVMEM | value CONFIG_STRICT_DEVMEM y +# For architectures which support this option ensure it is disabled. +!exists CONFIG_COMPAT_VDSO | value CONFIG_COMPAT_VDSO n +# Default to 32768 for armel, 65536 for everything else. +(( arch armel | arch sparc ) & value CONFIG_DEFAULT_MMAP_MIN_ADDR 32768 ) | \ + ( value CONFIG_DEFAULT_MMAP_MIN_ADDR 65536) + +# CONFIG_USB_DEVICE_FS breaks udev USB firmware loading and is deprecated +# ensure it is disabled. +value CONFIG_USB_DEVICEFS n + +# upstart requires DEVTMPFS be enabled and mounted by default. +value CONFIG_DEVTMPFS y +value CONFIG_DEVTMPFS_MOUNT y + +# some /dev nodes require POSIX ACLs, like /dev/dsp +value CONFIG_TMPFS_POSIX_ACL y + +# Ramdisk size should be a minimum of 64M +value CONFIG_BLK_DEV_RAM_SIZE 65536 + +# LVM requires dm_mod built in to activate correctly (LP: #560717) +value CONFIG_BLK_DEV_DM y + +# sysfs: ensure all DEPRECATED items are off +value CONFIG_SYSFS_DEPRECATED_V2 n +!exists CONFIG_SYSFS_DEPRECATED | value CONFIG_SYSFS_DEPRECATED n + +# automatically add local version will cause packaging failure +value CONFIG_LOCALVERSION_AUTO n + +# provide framebuffer console form the start +# UbuntuSpec:foundations-m-grub2-boot-framebuffer +value CONFIG_FRAMEBUFFER_CONSOLE y + +# GRUB changes will rely on built in vesafb on x86, +# UbuntuSpec:foundations-m-grub2-boot-framebuffer +(( arch i386 | arch amd64 ) & value CONFIG_FB_VESA y) | \ + value CONFIG_FB_VESA m | !exists CONFIG_FB_VESA |