From 2dc4c69855b3e2f36dc7ad3cd20422cb30b0da64 Mon Sep 17 00:00:00 2001 From: Ywenrui44091 Date: Mon, 26 Jun 2023 19:51:13 +0800 Subject: [PATCH] =?UTF-8?q?CONFIG=5FSECURITY=5FDMESG=5FRESTRICT=20?= =?UTF-8?q?=E9=85=8D=E7=BD=AE=E9=A1=B9=E8=BF=81=E7=A7=BB=E8=87=B3base=5Fde?= =?UTF-8?q?fconfig?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Ywenrui44091 --- .../arch/arm/configs/hispark_phoenix_standard_defconfig | 1 - linux-5.10/arch/arm/configs/hispark_taurus_small_defconfig | 1 - .../arch/arm/configs/hispark_taurus_standard_defconfig | 1 - .../arch/arm/configs/qemu-arm-linux_standard_defconfig | 1 - linux-5.10/arch/arm/configs/small_common_defconfig | 1 - linux-5.10/arch/arm/configs/standard_common_defconfig | 1 - linux-5.10/arch/arm64/configs/rk3399_standard_defconfig | 1 - linux-5.10/arch/arm64/configs/rk3568_standard_defconfig | 1 - .../arch/arm64/configs/unionpi_tiger_standard_defconfig | 1 - .../arch/x86/configs/qemu-x86_64-linux_standard_defconfig | 1 - linux-5.10/base_defconfig | 7 +++++-- linux-5.10/hispark_taurus/arch/arm_defconfig | 1 - linux-5.10/qemu/arch/arm64_defconfig | 1 - linux-5.10/qemu/arch/arm_defconfig | 1 - linux-5.10/rk3399/arch/arm64_defconfig | 1 - linux-5.10/rk3568/arch/arm64_defconfig | 1 - linux-5.10/unionpi_tige/arch/arm64_defconfig | 1 - 17 files changed, 5 insertions(+), 18 deletions(-) diff --git a/linux-5.10/arch/arm/configs/hispark_phoenix_standard_defconfig b/linux-5.10/arch/arm/configs/hispark_phoenix_standard_defconfig index 92b8044..b00a92b 100755 --- a/linux-5.10/arch/arm/configs/hispark_phoenix_standard_defconfig +++ b/linux-5.10/arch/arm/configs/hispark_phoenix_standard_defconfig @@ -3810,7 +3810,6 @@ CONFIG_KEYS=y # CONFIG_PERSISTENT_KEYRINGS is not set # CONFIG_ENCRYPTED_KEYS is not set # CONFIG_KEY_DH_OPERATIONS is not set -# CONFIG_SECURITY_DMESG_RESTRICT is not set CONFIG_SECURITY=y CONFIG_SECURITY_WRITABLE_HOOKS=y # CONFIG_SECURITYFS is not set diff --git a/linux-5.10/arch/arm/configs/hispark_taurus_small_defconfig b/linux-5.10/arch/arm/configs/hispark_taurus_small_defconfig index 3dfc2a6..b0ccd33 100755 --- a/linux-5.10/arch/arm/configs/hispark_taurus_small_defconfig +++ b/linux-5.10/arch/arm/configs/hispark_taurus_small_defconfig @@ -3177,7 +3177,6 @@ CONFIG_KEYS=y # CONFIG_PERSISTENT_KEYRINGS is not set # CONFIG_ENCRYPTED_KEYS is not set # CONFIG_KEY_DH_OPERATIONS is not set -# CONFIG_SECURITY_DMESG_RESTRICT is not set # CONFIG_SECURITY is not set # CONFIG_SECURITYFS is not set CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y diff --git a/linux-5.10/arch/arm/configs/hispark_taurus_standard_defconfig b/linux-5.10/arch/arm/configs/hispark_taurus_standard_defconfig index f9e9464..ccff75d 100755 --- a/linux-5.10/arch/arm/configs/hispark_taurus_standard_defconfig +++ b/linux-5.10/arch/arm/configs/hispark_taurus_standard_defconfig @@ -2950,7 +2950,6 @@ CONFIG_KEYS=y # CONFIG_BIG_KEYS is not set # CONFIG_ENCRYPTED_KEYS is not set # CONFIG_KEY_DH_OPERATIONS is not set -# CONFIG_SECURITY_DMESG_RESTRICT is not set CONFIG_SECURITY=y CONFIG_SECURITYFS=y CONFIG_SECURITY_NETWORK=y diff --git a/linux-5.10/arch/arm/configs/qemu-arm-linux_standard_defconfig b/linux-5.10/arch/arm/configs/qemu-arm-linux_standard_defconfig index ad3e842..b36fde6 100755 --- a/linux-5.10/arch/arm/configs/qemu-arm-linux_standard_defconfig +++ b/linux-5.10/arch/arm/configs/qemu-arm-linux_standard_defconfig @@ -5936,7 +5936,6 @@ CONFIG_KEYS=y # CONFIG_TRUSTED_KEYS is not set # CONFIG_ENCRYPTED_KEYS is not set # CONFIG_KEY_DH_OPERATIONS is not set -# CONFIG_SECURITY_DMESG_RESTRICT is not set # CONFIG_SECURITY is not set CONFIG_SECURITYFS=y CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y diff --git a/linux-5.10/arch/arm/configs/small_common_defconfig b/linux-5.10/arch/arm/configs/small_common_defconfig index 0c9b44a..9f55199 100644 --- a/linux-5.10/arch/arm/configs/small_common_defconfig +++ b/linux-5.10/arch/arm/configs/small_common_defconfig @@ -2781,7 +2781,6 @@ CONFIG_KEYS=y # CONFIG_BIG_KEYS is not set # CONFIG_ENCRYPTED_KEYS is not set # CONFIG_KEY_DH_OPERATIONS is not set -# CONFIG_SECURITY_DMESG_RESTRICT is not set # CONFIG_SECURITY is not set # CONFIG_SECURITYFS is not set CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y diff --git a/linux-5.10/arch/arm/configs/standard_common_defconfig b/linux-5.10/arch/arm/configs/standard_common_defconfig index c6abf76..6d87404 100644 --- a/linux-5.10/arch/arm/configs/standard_common_defconfig +++ b/linux-5.10/arch/arm/configs/standard_common_defconfig @@ -2819,7 +2819,6 @@ CONFIG_KEYS=y # CONFIG_BIG_KEYS is not set # CONFIG_ENCRYPTED_KEYS is not set # CONFIG_KEY_DH_OPERATIONS is not set -# CONFIG_SECURITY_DMESG_RESTRICT is not set CONFIG_SECURITY=y CONFIG_SECURITYFS=y CONFIG_SECURITY_NETWORK=y diff --git a/linux-5.10/arch/arm64/configs/rk3399_standard_defconfig b/linux-5.10/arch/arm64/configs/rk3399_standard_defconfig index 0f3635b..ef2e52d 100644 --- a/linux-5.10/arch/arm64/configs/rk3399_standard_defconfig +++ b/linux-5.10/arch/arm64/configs/rk3399_standard_defconfig @@ -6125,7 +6125,6 @@ CONFIG_KEYS=y # CONFIG_TRUSTED_KEYS is not set # CONFIG_ENCRYPTED_KEYS is not set # CONFIG_KEY_DH_OPERATIONS is not set -# CONFIG_SECURITY_DMESG_RESTRICT is not set CONFIG_SECURITY=y CONFIG_SECURITYFS=y CONFIG_SECURITY_NETWORK=y diff --git a/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig b/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig index 6fa7cd1..cf80d8a 100644 --- a/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig +++ b/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig @@ -6199,7 +6199,6 @@ CONFIG_KEYS=y # CONFIG_TRUSTED_KEYS is not set # CONFIG_ENCRYPTED_KEYS is not set # CONFIG_KEY_DH_OPERATIONS is not set -CONFIG_SECURITY_DMESG_RESTRICT=y CONFIG_SECURITY=y CONFIG_SECURITYFS=y CONFIG_SECURITY_NETWORK=y diff --git a/linux-5.10/arch/arm64/configs/unionpi_tiger_standard_defconfig b/linux-5.10/arch/arm64/configs/unionpi_tiger_standard_defconfig index 318dd23..ba9bda5 100755 --- a/linux-5.10/arch/arm64/configs/unionpi_tiger_standard_defconfig +++ b/linux-5.10/arch/arm64/configs/unionpi_tiger_standard_defconfig @@ -6046,7 +6046,6 @@ CONFIG_KEYS=y # CONFIG_BIG_KEYS is not set # CONFIG_ENCRYPTED_KEYS is not set # CONFIG_KEY_DH_OPERATIONS is not set -# CONFIG_SECURITY_DMESG_RESTRICT is not set CONFIG_SECURITY=y CONFIG_SECURITYFS=y CONFIG_SECURITY_NETWORK=y diff --git a/linux-5.10/arch/x86/configs/qemu-x86_64-linux_standard_defconfig b/linux-5.10/arch/x86/configs/qemu-x86_64-linux_standard_defconfig index f7d112f..7da3bcf 100644 --- a/linux-5.10/arch/x86/configs/qemu-x86_64-linux_standard_defconfig +++ b/linux-5.10/arch/x86/configs/qemu-x86_64-linux_standard_defconfig @@ -4271,7 +4271,6 @@ CONFIG_KEYS=y # CONFIG_PERSISTENT_KEYRINGS is not set # CONFIG_ENCRYPTED_KEYS is not set # CONFIG_KEY_DH_OPERATIONS is not set -# CONFIG_SECURITY_DMESG_RESTRICT is not set # CONFIG_SECURITY is not set CONFIG_SECURITYFS=y # CONFIG_INTEL_TXT is not set diff --git a/linux-5.10/base_defconfig b/linux-5.10/base_defconfig index 202d225..d6e9a19 100644 --- a/linux-5.10/base_defconfig +++ b/linux-5.10/base_defconfig @@ -74,5 +74,8 @@ CONFIG_PROC_FS=y CONFIG_SECURITY=y # end of Security options - - +# +#Security DMESG restrict +# +CONFIG_SECURITY_DMESG_RESTRICT=y +# end of Security DMESG restrict \ No newline at end of file diff --git a/linux-5.10/hispark_taurus/arch/arm_defconfig b/linux-5.10/hispark_taurus/arch/arm_defconfig index d0e1e36..048bae5 100644 --- a/linux-5.10/hispark_taurus/arch/arm_defconfig +++ b/linux-5.10/hispark_taurus/arch/arm_defconfig @@ -3161,7 +3161,6 @@ CONFIG_KEYS=y # CONFIG_BIG_KEYS is not set # CONFIG_ENCRYPTED_KEYS is not set # CONFIG_KEY_DH_OPERATIONS is not set -# CONFIG_SECURITY_DMESG_RESTRICT is not set CONFIG_SECURITY=y CONFIG_SECURITYFS=y CONFIG_SECURITY_NETWORK=y diff --git a/linux-5.10/qemu/arch/arm64_defconfig b/linux-5.10/qemu/arch/arm64_defconfig index 860777d..a708287 100644 --- a/linux-5.10/qemu/arch/arm64_defconfig +++ b/linux-5.10/qemu/arch/arm64_defconfig @@ -5509,7 +5509,6 @@ CONFIG_IO_WQ=y # CONFIG_TRUSTED_KEYS is not set # CONFIG_ENCRYPTED_KEYS is not set # CONFIG_KEY_DH_OPERATIONS is not set -# CONFIG_SECURITY_DMESG_RESTRICT is not set # CONFIG_SECURITY is not set # CONFIG_HARDENED_USERCOPY is not set # CONFIG_FORTIFY_SOURCE is not set diff --git a/linux-5.10/qemu/arch/arm_defconfig b/linux-5.10/qemu/arch/arm_defconfig index 860777d..a708287 100644 --- a/linux-5.10/qemu/arch/arm_defconfig +++ b/linux-5.10/qemu/arch/arm_defconfig @@ -5509,7 +5509,6 @@ CONFIG_IO_WQ=y # CONFIG_TRUSTED_KEYS is not set # CONFIG_ENCRYPTED_KEYS is not set # CONFIG_KEY_DH_OPERATIONS is not set -# CONFIG_SECURITY_DMESG_RESTRICT is not set # CONFIG_SECURITY is not set # CONFIG_HARDENED_USERCOPY is not set # CONFIG_FORTIFY_SOURCE is not set diff --git a/linux-5.10/rk3399/arch/arm64_defconfig b/linux-5.10/rk3399/arch/arm64_defconfig index 6963b65..d68576b 100644 --- a/linux-5.10/rk3399/arch/arm64_defconfig +++ b/linux-5.10/rk3399/arch/arm64_defconfig @@ -5542,7 +5542,6 @@ CONFIG_IO_WQ=y # CONFIG_TRUSTED_KEYS is not set # CONFIG_ENCRYPTED_KEYS is not set # CONFIG_KEY_DH_OPERATIONS is not set -# CONFIG_SECURITY_DMESG_RESTRICT is not set # CONFIG_SECURITY_NETWORK_XFRM is not set CONFIG_LSM_MMAP_MIN_ADDR=32768 # CONFIG_HARDENED_USERCOPY is not set diff --git a/linux-5.10/rk3568/arch/arm64_defconfig b/linux-5.10/rk3568/arch/arm64_defconfig index 01499a4..c7d598e 100644 --- a/linux-5.10/rk3568/arch/arm64_defconfig +++ b/linux-5.10/rk3568/arch/arm64_defconfig @@ -5603,7 +5603,6 @@ CONFIG_IO_WQ=y # CONFIG_TRUSTED_KEYS is not set # CONFIG_ENCRYPTED_KEYS is not set # CONFIG_KEY_DH_OPERATIONS is not set -CONFIG_SECURITY_DMESG_RESTRICT=y # CONFIG_SECURITY_NETWORK_XFRM is not set CONFIG_LSM_MMAP_MIN_ADDR=32768 # CONFIG_FORTIFY_SOURCE is not set diff --git a/linux-5.10/unionpi_tige/arch/arm64_defconfig b/linux-5.10/unionpi_tige/arch/arm64_defconfig index 0f678a0..b722d6f 100644 --- a/linux-5.10/unionpi_tige/arch/arm64_defconfig +++ b/linux-5.10/unionpi_tige/arch/arm64_defconfig @@ -5474,7 +5474,6 @@ CONFIG_UNICODE=y # CONFIG_BIG_KEYS is not set # CONFIG_ENCRYPTED_KEYS is not set # CONFIG_KEY_DH_OPERATIONS is not set -# CONFIG_SECURITY_DMESG_RESTRICT is not set # CONFIG_SECURITY_NETWORK_XFRM is not set CONFIG_LSM_MMAP_MIN_ADDR=32768 # CONFIG_HARDENED_USERCOPY is not set -- Gitee