staging/mans0n/config, branch master

kernel: enable KASAN option for more architectures

2024-03-08T08:07:48Z

KASAN has supported more architectures, such as ARM, PPC32 and RISC-V 64. Enable KASAN option for those architectures. Signed-off-by: Qingfang Deng

broadcom-wl: remove package

2024-02-03T15:16:36Z

Also remove remaining wireless extension support, since this package was the only in-tree user of it Signed-off-by: Felix Fietkau

build: add option for building with stack-protector-all

2024-01-19T20:27:14Z

The GCC option -fstack-protector-all is a security feature used to protect against stack-smashing attacks. This option enhances the stack-smashing protection provided by -fstack-protector-strong. -fstack-protector-all option applies stack protection to all functions, regardless of their characteristics. While this offers the most comprehensive protection against stack-smashing attacks, it can significantly impact the performance of the program because every function call includes additional checks for stack integrity. This option can incur a performance penalty because of the extra checks added to every function call, but it significantly enhances security, making it harder for attackers to exploit buffer overflows to execute arbitrary code. It's particularly useful in scenarios where security is paramount and performance trade-offs are acceptable. Signed-off-by: Cedric DOURLENT

target: Make TARGET_SERIAL independent of GRUB configuration

2023-11-29T22:43:01Z

GRUB_SERIAL is also used for the default serial on the target and not only in grub. When no grub was build it was not available and the build fails. Rename GRUB_SERIAL to TARGET_SERIAL and make it always available on x86 and armsr targets. Fixes: #14063 Fixes: b10768476f9d ("x86,armsr: interpolate GRUB_SERIAL into /etc/inittab") Signed-off-by: Hauke Mehrtens

kernel: provide better control & help for SLUB configuration

2023-11-09T20:23:01Z

Allow selecting KERNEL_SLUB_DEBUG and KERNEL_SLUB_DEBUG_ON manually and provide detailed help for both. Signed-off-by: Rafał Miłecki

build: add CycloneDX SBOM JSON support

2023-11-01T11:14:41Z

CycloneDX is an open source standard developed by the OWASP foundation. It supports a wide range of development ecosystems, a comprehensive set of use cases, and focuses on automation, ease of adoption, and progressive enhancement of SBOMs (Software Bill Of Materials) throughout build pipelines. So lets add support for CycloneDX SBOM for packages and images manifests. Signed-off-by: Petr Štetiar

kernel: default ARM_PMU on for armsr/armv8

2023-08-15T13:55:00Z

CONFIG_ARM_PMU (Arm Performance Monitor Unit) is a requirement to use KVM (virtualization) from Linux 5.11+, as the virtualised guest has virtualized PMU access. Signed-off-by: Mathew McBride

build: Add option KERNEL_KASAN_SW_TAGS and HW_TAGS

2023-08-10T21:09:37Z

Currently KASAN is supported but only the generic one. SW-tag and HW-tag based KASAN have less impact on memory footprint or performance, and are worth supporting. Add choice menu for software and hardware Tag-Based KASAN, in addition to the generic one. Signed-off-by: Zhen XIN [Restructure commit message] Signed-off-by: Hauke Mehrtens

kernel: modules: add xdp-sockets-diag support

2023-07-05T18:02:12Z

Support for PF_XDP sockets monitoring interface used by the ss tool. Signed-off-by: Tianling Shen

config: add a knob to use the mold linker for packages

2023-07-04T18:25:40Z

Building it requires gcc >= 10.2 or clang >= 12. Using sstrip with its -z argument can produce non-working binaries, like a segfaulting `getrandom`, so don't allow that combination. Signed-off-by: Andre Heider