ipq40xx: only include ath10k-board-qca4019 for the generic subtarget

[openwrt/staging/chunkeey.git] / config / Config-build.in

diff --git a/config/Config-build.in b/config/Config-build.in
index 37cc3d7e5a1209d9f3bef875a35c35b39f399a17..ef1a10c28dce49abf34f38843830f4b957b33e2e 100644 (file)
--- a/config/Config-build.in
+++ b/config/Config-build.in
@@ -1,15 +1,27 @@
+# SPDX-License-Identifier: GPL-2.0-only
+#
 # Copyright (C) 2006-2013 OpenWrt.org
 # Copyright (C) 2016 LEDE Project
-#
-# This is free software, licensed under the GNU General Public License v2.
-# See /LICENSE for more information.
-#
+
+config EXPERIMENTAL
+       bool "Enable experimental features by default"
+       default n
+       help
+         Set this option to build with latest bleeding edge features
+         which may or may not work as expected.
+         If you would like to help the development of OpenWrt, you are
+         encouraged to set this option and provide feedback (both
+         positive and negative). But do so only if you know how to
+         recover your device in case of flashing potentially non-working
+         firmware.
+
+         If you plan to use this build in production, say NO!
 
 menu "Global build settings"
 
        config JSON_OVERVIEW_IMAGE_INFO
                bool "Create JSON info file overview per target"
-               default BUILDBOT
+               default y
                help
                  Create a JSON info file called profiles.json in the target
                  directory containing machine readable list of built profiles
@@ -51,7 +63,7 @@ menu "Global build settings"
        config TESTING_KERNEL
                bool "Use the testing kernel version"
                depends on HAS_TESTING_KERNEL
-               default n
+               default EXPERIMENTAL
                help
                  If the target supports a newer kernel version than the default,
                  you can use this config option to enable it
@@ -95,7 +107,7 @@ menu "Global build settings"
                default n
                help
                  This makes file checksums part of package metadata. It increases size
-                 but provides you with pkg_check command to check for flash coruptions.
+                 but provides you with pkg_check command to check for flash corruptions.
 
        config INCLUDE_CONFIG
                bool "Include build configuration in firmware" if DEVEL
@@ -182,6 +194,14 @@ menu "Global build settings"
                help
                  Specifies arguments passed to the strip command when stripping binaries.
 
+       config SSTRIP_ARGS
+               string
+               prompt "Sstrip arguments"
+               depends on USE_SSTRIP
+               default "-z"
+               help
+                 Specifies arguments passed to the sstrip command when stripping binaries.
+
        config STRIP_KERNEL_EXPORTS
                bool "Strip unnecessary exports from the kernel image"
                help
@@ -197,24 +217,6 @@ menu "Global build settings"
                  make the system libraries incompatible with most of the packages that are
                  not selected during the build process.
 
-       choice
-               prompt "Preferred standard C++ library"
-               default USE_LIBSTDCXX if USE_GLIBC
-               default USE_UCLIBCXX
-               help
-                 Select the preferred standard C++ library for all packages that support this.
-
-               config USE_UCLIBCXX
-                       bool "uClibc++"
-
-               config USE_LIBCXX
-                       bool "libc++"
-                       depends on !USE_UCLIBC
-
-               config USE_LIBSTDCXX
-                       bool "libstdc++"
-       endchoice
-
        comment "Hardening build options"
 
        config PKG_CHECK_FORMAT_SECURITY
@@ -282,11 +284,11 @@ menu "Global build settings"
                        bool "Strong"
        endchoice
 
-       config  KERNEL_STACKPROTECTOR
+       config KERNEL_STACKPROTECTOR
                bool
                default KERNEL_CC_STACKPROTECTOR_REGULAR || KERNEL_CC_STACKPROTECTOR_STRONG
 
-       config  KERNEL_STACKPROTECTOR_STRONG
+       config KERNEL_STACKPROTECTOR_STRONG
                bool
                default KERNEL_CC_STACKPROTECTOR_STRONG
 
@@ -329,27 +331,57 @@ menu "Global build settings"
        endchoice
 
        config TARGET_ROOTFS_SECURITY_LABELS
-               bool "Enable rootfs security labels"
+               bool
                select KERNEL_SQUASHFS_XATTR
                select KERNEL_EXT4_FS_SECURITY
                select KERNEL_F2FS_FS_SECURITY
                select KERNEL_UBIFS_FS_SECURITY
                select KERNEL_JFFS2_FS_SECURITY
+
+       config SELINUX
+               bool "Enable SELinux"
+               select KERNEL_SECURITY_SELINUX
+               select TARGET_ROOTFS_SECURITY_LABELS
+               select PACKAGE_procd-selinux
+               select PACKAGE_busybox-selinux
                help
-                 This option enables the usage of SELinux labels
+                 This option enables SELinux kernel features, applies security labels
+                 in squashfs rootfs and selects the selinux-variants of busybox and procd.
+
+                 Selecting this option results in about 0.5MiB of additional flash space
+                 usage accounting for increased kernel and rootfs size.
 
        choice
                prompt "default SELinux type"
                depends on TARGET_ROOTFS_SECURITY_LABELS
                default SELINUXTYPE_dssp
                help
-                 Choose SELinux policy to be used for build.
+                 Select SELinux policy to be installed and used for applying rootfs labels.
+
                config SELINUXTYPE_targeted
                        bool "targeted"
                        select PACKAGE_refpolicy
+                       help
+                         SELinux Reference Policy (refpolicy)
+
                config SELINUXTYPE_dssp
                        bool "dssp"
                        select PACKAGE_selinux-policy
+                       help
+                         Defensec SELinux Security Policy -- OpenWrt edition
+
        endchoice
 
+       config SECCOMP
+               bool "Enable SECCOMP"
+               select KERNEL_SECCOMP
+               select PACKAGE_procd-seccomp
+               depends on (aarch64 || arm || armeb || mips || mipsel || mips64 || mips64el || i386 || powerpc || x86_64)
+               depends on !TARGET_uml
+               default y
+               help
+                 This option enables seccomp kernel features to safely
+                 execute untrusted bytecode and selects the seccomp-variants
+                 of procd
+
 endmenu