diff --git a/board/coreboot/linux-4.1-grsec.config b/board/coreboot/linux-4.1-grsec.config index 4c96974..ff84d30 100644 --- a/board/coreboot/linux-4.1-grsec.config +++ b/board/coreboot/linux-4.1-grsec.config @@ -488,6 +488,8 @@ CONFIG_SECCOMP=y CONFIG_HZ_1000=y CONFIG_HZ=1000 CONFIG_SCHED_HRTICK=y +CONFIG_KEXEC=y +# CONFIG_KEXEC_FILE is not set CONFIG_CRASH_DUMP=y CONFIG_PHYSICAL_START=0x1000000 CONFIG_RELOCATABLE=y @@ -507,6 +509,7 @@ CONFIG_USE_PERCPU_NUMA_NODE_ID=y # CONFIG_SUSPEND=y CONFIG_SUSPEND_FREEZER=y +# CONFIG_HIBERNATION is not set CONFIG_PM_SLEEP=y CONFIG_PM_SLEEP_SMP=y # CONFIG_PM_AUTOSLEEP is not set @@ -1564,6 +1567,7 @@ CONFIG_UNIX98_PTYS=y # CONFIG_N_GSM is not set # CONFIG_TRACE_SINK is not set CONFIG_DEVMEM=y +CONFIG_DEVKMEM=y # # Serial drivers @@ -1606,6 +1610,7 @@ CONFIG_TCG_TIS=y # CONFIG_TCG_CRB is not set # CONFIG_TCG_TIS_ST33ZP24 is not set # CONFIG_TELCLOCK is not set +CONFIG_DEVPORT=y # CONFIG_XILLYBUS is not set # @@ -3278,7 +3283,7 @@ CONFIG_PROBE_EVENTS=y # CONFIG_SAMPLES is not set CONFIG_HAVE_ARCH_KGDB=y # CONFIG_KGDB is not set -CONFIG_STRICT_DEVMEM=y +# CONFIG_STRICT_DEVMEM is not set CONFIG_X86_VERBOSE_BOOTUP=y CONFIG_EARLY_PRINTK=y CONFIG_EARLY_PRINTK_DBGP=y @@ -3343,8 +3348,8 @@ CONFIG_PAX=y # # PaX Control # -# CONFIG_PAX_SOFTMODE is not set -# CONFIG_PAX_EI_PAX is not set +CONFIG_PAX_SOFTMODE=y +CONFIG_PAX_EI_PAX=y CONFIG_PAX_PT_PAX_FLAGS=y # CONFIG_PAX_XATTR_PAX_FLAGS is not set # CONFIG_PAX_NO_ACL_FLAGS is not set @@ -3390,7 +3395,7 @@ CONFIG_PAX_LATENT_ENTROPY=y # # Memory Protections # -CONFIG_GRKERNSEC_KMEM=y +# CONFIG_GRKERNSEC_KMEM is not set # CONFIG_GRKERNSEC_IO is not set CONFIG_GRKERNSEC_BPF_HARDEN=y CONFIG_GRKERNSEC_PERF_HARDEN=y @@ -3454,7 +3459,7 @@ CONFIG_GRKERNSEC_CHROOT_INITRD=y # CONFIG_GRKERNSEC_AUDIT_MOUNT is not set # CONFIG_GRKERNSEC_SIGNAL is not set # CONFIG_GRKERNSEC_FORKFAIL is not set -CONFIG_GRKERNSEC_TIME=y +# CONFIG_GRKERNSEC_TIME is not set CONFIG_GRKERNSEC_PROC_IPADDR=y CONFIG_GRKERNSEC_RWXMAP_LOG=y