Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

kernel: config: clean up '=n' settings #2290

Merged
merged 1 commit into from
Jul 25, 2022
Merged

kernel: config: clean up '=n' settings #2290

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
58 changes: 29 additions & 29 deletions packages/kernel-5.10/config-bottlerocket
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,13 +39,13 @@ CONFIG_FRAMEBUFFER_CONSOLE_DEFERRED_TAKEOVER=y
CONFIG_SECURITY_YAMA=y

# Do not allow SELinux to be disabled at boot.
CONFIG_SECURITY_SELINUX_BOOTPARAM=n
# CONFIG_SECURITY_SELINUX_BOOTPARAM is not set

# Do not allow SELinux to be disabled at runtime.
CONFIG_SECURITY_SELINUX_DISABLE=n
# CONFIG_SECURITY_SELINUX_DISABLE is not set

# Do not allow SELinux to use `enforcing=0` behavior.
CONFIG_SECURITY_SELINUX_DEVELOP=n
# CONFIG_SECURITY_SELINUX_DEVELOP is not set

# Check the protection applied by the kernel for mmap and mprotect,
# rather than the protection requested by userspace.
Expand Down Expand Up @@ -73,7 +73,7 @@ CONFIG_DEBUG_INFO_BTF=y

# We don't want to extend the kernel command line with any upstream defaults;
# Bottlerocket uses a fairly custom setup that needs tight control over it.
CONFIG_CMDLINE_EXTEND=n
# CONFIG_CMDLINE_EXTEND is not set

# Enable ZSTD kernel image compression
CONFIG_HAVE_KERNEL_ZSTD=y
Expand All @@ -98,31 +98,31 @@ CONFIG_BOOT_CONFIG=y
CONFIG_CHECKPOINT_RESTORE=y

# Disable unused filesystems.
CONFIG_AFS_FS=n
CONFIG_CRAMFS=n
CONFIG_ECRYPT_FS=n
CONFIG_EXT2_FS=n
CONFIG_EXT3_FS=n
# CONFIG_AFS_FS is not set
# CONFIG_CRAMFS is not set
# CONFIG_ECRYPT_FS is not set
# CONFIG_EXT2_FS is not set
# CONFIG_EXT3_FS is not set
CONFIG_EXT4_USE_FOR_EXT2=y
CONFIG_GFS2_FS=n
CONFIG_HFS_FS=n
CONFIG_HFSPLUS_FS=n
CONFIG_JFS_FS=n
CONFIG_JFFS2_FS=n
CONFIG_NFS_V2=n
CONFIG_NILFS2_FS=n
CONFIG_NTFS_FS=n
CONFIG_ROMFS_FS=n
CONFIG_UFS_FS=n
CONFIG_ZONEFS_FS=n
# CONFIG_GFS2_FS is not set
# CONFIG_HFS_FS is not set
# CONFIG_HFSPLUS_FS is not set
# CONFIG_JFS_FS is not set
# CONFIG_JFFS2_FS is not set
# CONFIG_NFS_V2 is not set
# CONFIG_NILFS2_FS is not set
# CONFIG_NTFS_FS is not set
# CONFIG_ROMFS_FS is not set
# CONFIG_UFS_FS is not set
# CONFIG_ZONEFS_FS is not set

# Disable unused network protocols.
CONFIG_AF_RXRPC=n
CONFIG_ATM=n
CONFIG_CAN=n
CONFIG_HSR=n
CONFIG_IP_DCCP=n
CONFIG_L2TP=n
CONFIG_RDS=n
CONFIG_RFKILL=n
CONFIG_TIPC=n
# CONFIG_AF_RXRPC is not set
# CONFIG_ATM is not set
# CONFIG_CAN is not set
# CONFIG_HSR is not set
# CONFIG_IP_DCCP is not set
# CONFIG_L2TP is not set
# CONFIG_RDS is not set
# CONFIG_RFKILL is not set
# CONFIG_TIPC is not set
60 changes: 30 additions & 30 deletions packages/kernel-5.15/config-bottlerocket
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,13 +39,13 @@ CONFIG_FRAMEBUFFER_CONSOLE_DEFERRED_TAKEOVER=y
CONFIG_SECURITY_YAMA=y

# Do not allow SELinux to be disabled at boot.
CONFIG_SECURITY_SELINUX_BOOTPARAM=n
# CONFIG_SECURITY_SELINUX_BOOTPARAM is not set

# Do not allow SELinux to be disabled at runtime.
CONFIG_SECURITY_SELINUX_DISABLE=n
# CONFIG_SECURITY_SELINUX_DISABLE is not set

# Do not allow SELinux to use `enforcing=0` behavior.
CONFIG_SECURITY_SELINUX_DEVELOP=n
# CONFIG_SECURITY_SELINUX_DEVELOP is not set

# Check the protection applied by the kernel for mmap and mprotect,
# rather than the protection requested by userspace.
Expand Down Expand Up @@ -73,7 +73,7 @@ CONFIG_DEBUG_INFO_BTF=y

# We don't want to extend the kernel command line with any upstream defaults;
# Bottlerocket uses a fairly custom setup that needs tight control over it.
CONFIG_CMDLINE_EXTEND=n
# CONFIG_CMDLINE_EXTEND is not set

# Enable ZSTD kernel image compression
CONFIG_HAVE_KERNEL_ZSTD=y
Expand All @@ -98,32 +98,32 @@ CONFIG_BOOT_CONFIG=y
CONFIG_CHECKPOINT_RESTORE=y

# Disable unused filesystems.
CONFIG_AFS_FS=n
CONFIG_CRAMFS=n
CONFIG_ECRYPT_FS=n
CONFIG_EXT2_FS=n
CONFIG_EXT3_FS=n
# CONFIG_AFS_FS is not set
# CONFIG_CRAMFS is not set
# CONFIG_ECRYPT_FS is not set
# CONFIG_EXT2_FS is not set
# CONFIG_EXT3_FS is not set
CONFIG_EXT4_USE_FOR_EXT2=y
CONFIG_GFS2_FS=n
CONFIG_HFS_FS=n
CONFIG_HFSPLUS_FS=n
CONFIG_JFS_FS=n
CONFIG_JFFS2_FS=n
CONFIG_NFS_V2=n
CONFIG_NILFS2_FS=n
CONFIG_NTFS_FS=n
CONFIG_ROMFS_FS=n
CONFIG_UFS_FS=n
CONFIG_ZONEFS_FS=n
CONFIG_NTFS3_FS=n
# CONFIG_GFS2_FS is not set
# CONFIG_HFS_FS is not set
# CONFIG_HFSPLUS_FS is not set
# CONFIG_JFS_FS is not set
# CONFIG_JFFS2_FS is not set
# CONFIG_NFS_V2 is not set
# CONFIG_NILFS2_FS is not set
# CONFIG_NTFS_FS is not set
# CONFIG_ROMFS_FS is not set
# CONFIG_UFS_FS is not set
# CONFIG_ZONEFS_FS is not set
# CONFIG_NTFS3_FS is not set

# Disable unused network protocols.
CONFIG_AF_RXRPC=n
CONFIG_ATM=n
CONFIG_CAN=n
CONFIG_HSR=n
CONFIG_IP_DCCP=n
CONFIG_L2TP=n
CONFIG_RDS=n
CONFIG_RFKILL=n
CONFIG_TIPC=n
# CONFIG_AF_RXRPC is not set
# CONFIG_ATM is not set
# CONFIG_CAN is not set
# CONFIG_HSR is not set
# CONFIG_IP_DCCP is not set
# CONFIG_L2TP is not set
# CONFIG_RDS is not set
# CONFIG_RFKILL is not set
# CONFIG_TIPC is not set
58 changes: 29 additions & 29 deletions packages/kernel-5.4/config-bottlerocket
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,13 +34,13 @@ CONFIG_EFI_MIXED=y
CONFIG_SECURITY_YAMA=y

# Do not allow SELinux to be disabled at boot.
CONFIG_SECURITY_SELINUX_BOOTPARAM=n
# CONFIG_SECURITY_SELINUX_BOOTPARAM is not set

# Do not allow SELinux to be disabled at runtime.
CONFIG_SECURITY_SELINUX_DISABLE=n
# CONFIG_SECURITY_SELINUX_DISABLE is not set

# Do not allow SELinux to use `enforcing=0` behavior.
CONFIG_SECURITY_SELINUX_DEVELOP=n
# CONFIG_SECURITY_SELINUX_DEVELOP is not set

# Check the protection applied by the kernel for mmap and mprotect,
# rather than the protection requested by userspace.
Expand Down Expand Up @@ -68,7 +68,7 @@ CONFIG_DEBUG_INFO_BTF=y

# We don't want to extend the kernel command line with any upstream defaults;
# Bottlerocket uses a fairly custom setup that needs tight control over it.
CONFIG_CMDLINE_EXTEND=n
# CONFIG_CMDLINE_EXTEND is not set

# Enable ZSTD kernel image compression
CONFIG_HAVE_KERNEL_ZSTD=y
Expand All @@ -87,31 +87,31 @@ CONFIG_MOUSE_PS2=m
CONFIG_CHECKPOINT_RESTORE=y

# Disable unused filesystems.
CONFIG_AFS_FS=n
CONFIG_CRAMFS=n
CONFIG_ECRYPT_FS=n
CONFIG_EXT2_FS=n
CONFIG_EXT3_FS=n
# CONFIG_AFS_FS is not set
# CONFIG_CRAMFS is not set
# CONFIG_ECRYPT_FS is not set
# CONFIG_EXT2_FS is not set
# CONFIG_EXT3_FS is not set
CONFIG_EXT4_USE_FOR_EXT2=y
CONFIG_GFS2_FS=n
CONFIG_HFS_FS=n
CONFIG_HFSPLUS_FS=n
CONFIG_JFS_FS=n
CONFIG_JFFS2_FS=n
CONFIG_NFS_V2=n
CONFIG_NILFS2_FS=n
CONFIG_NTFS_FS=n
CONFIG_ROMFS_FS=n
CONFIG_UFS_FS=n
CONFIG_ZONEFS_FS=n
# CONFIG_GFS2_FS is not set
# CONFIG_HFS_FS is not set
# CONFIG_HFSPLUS_FS is not set
# CONFIG_JFS_FS is not set
# CONFIG_JFFS2_FS is not set
# CONFIG_NFS_V2 is not set
# CONFIG_NILFS2_FS is not set
# CONFIG_NTFS_FS is not set
# CONFIG_ROMFS_FS is not set
# CONFIG_UFS_FS is not set
# CONFIG_ZONEFS_FS is not set

# Disable unused network protocols.
CONFIG_AF_RXRPC=n
CONFIG_ATM=n
CONFIG_CAN=n
CONFIG_HSR=n
CONFIG_IP_DCCP=n
CONFIG_L2TP=n
CONFIG_RDS=n
CONFIG_RFKILL=n
CONFIG_TIPC=n
# CONFIG_AF_RXRPC is not set
# CONFIG_ATM is not set
# CONFIG_CAN is not set
# CONFIG_HSR is not set
# CONFIG_IP_DCCP is not set
# CONFIG_L2TP is not set
# CONFIG_RDS is not set
# CONFIG_RFKILL is not set
# CONFIG_TIPC is not set