From 3d01c4de549b4e4bddba6102715c212bbcff2fbb Mon Sep 17 00:00:00 2001 From: Dmitry Vyukov Date: Fri, 19 Mar 2021 15:47:04 +0100 Subject: dashboard/config/linux: regenerate configs --- dashboard/config/linux/bits/linux-next.yml | 2 +- dashboard/config/linux/stable-5.4-kasan-base.config | 2 +- dashboard/config/linux/stable-5.4-kasan.config | 2 +- .../config/linux/upstream-apparmor-kasan-base.config | 17 ++++++++++++++--- dashboard/config/linux/upstream-apparmor-kasan.config | 18 +++++++++++++++--- dashboard/config/linux/upstream-arm-kasan-base.config | 2 +- dashboard/config/linux/upstream-arm-kasan.config | 2 +- .../config/linux/upstream-arm64-kasan-base.config | 2 +- dashboard/config/linux/upstream-arm64-kasan.config | 2 +- dashboard/config/linux/upstream-arm64-mte-base.config | 2 +- dashboard/config/linux/upstream-arm64-mte.config | 2 +- dashboard/config/linux/upstream-kcsan-base.config | 2 +- dashboard/config/linux/upstream-kcsan.config | 2 +- dashboard/config/linux/upstream-kmsan-base.config | 2 +- dashboard/config/linux/upstream-kmsan.config | 2 +- dashboard/config/linux/upstream-leak-base.config | 2 +- dashboard/config/linux/upstream-leak.config | 2 +- .../config/linux/upstream-riscv64-kasan-base.config | 2 +- dashboard/config/linux/upstream-riscv64-kasan.config | 2 +- dashboard/config/linux/upstream-s390-kasan-base.config | 2 +- dashboard/config/linux/upstream-s390-kasan.config | 2 +- .../config/linux/upstream-selinux-kasan-base.config | 17 ++++++++++++++--- dashboard/config/linux/upstream-selinux-kasan.config | 18 +++++++++++++++--- .../config/linux/upstream-smack-kasan-base.config | 17 ++++++++++++++--- dashboard/config/linux/upstream-smack-kasan.config | 18 +++++++++++++++--- dashboard/config/linux/upstream-usb-base.config | 2 +- dashboard/config/linux/upstream-usb.config | 2 +- 27 files changed, 108 insertions(+), 39 deletions(-) (limited to 'dashboard/config') diff --git a/dashboard/config/linux/bits/linux-next.yml b/dashboard/config/linux/bits/linux-next.yml index c62e19845..5ef1d88b7 100644 --- a/dashboard/config/linux/bits/linux-next.yml +++ b/dashboard/config/linux/bits/linux-next.yml @@ -3,4 +3,4 @@ kernel: repo: git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next-history.git - tag: next-20210317 + tag: next-20210319 diff --git a/dashboard/config/linux/stable-5.4-kasan-base.config b/dashboard/config/linux/stable-5.4-kasan-base.config index ad17f06ac..dfccdcdcc 100644 --- a/dashboard/config/linux/stable-5.4-kasan-base.config +++ b/dashboard/config/linux/stable-5.4-kasan-base.config @@ -4417,7 +4417,7 @@ CONFIG_EVM_ADD_XATTRS=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set CONFIG_DEFAULT_SECURITY_APPARMOR=y # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" # # Kernel hardening options diff --git a/dashboard/config/linux/stable-5.4-kasan.config b/dashboard/config/linux/stable-5.4-kasan.config index 50f885eb0..d077bfa91 100644 --- a/dashboard/config/linux/stable-5.4-kasan.config +++ b/dashboard/config/linux/stable-5.4-kasan.config @@ -7499,7 +7499,7 @@ CONFIG_EVM_ADD_XATTRS=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set CONFIG_DEFAULT_SECURITY_APPARMOR=y # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" # # Kernel hardening options diff --git a/dashboard/config/linux/upstream-apparmor-kasan-base.config b/dashboard/config/linux/upstream-apparmor-kasan-base.config index 6ef9117b0..0098346b9 100644 --- a/dashboard/config/linux/upstream-apparmor-kasan-base.config +++ b/dashboard/config/linux/upstream-apparmor-kasan-base.config @@ -1,5 +1,5 @@ # Automatically generated by syz-kconf; DO NOT EDIT. -# Kernel: git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next-history.git next-20210317 +# Kernel: git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next-history.git next-20210319 # # Automatically generated file; DO NOT EDIT. @@ -12,6 +12,8 @@ CONFIG_CLANG_VERSION=0 CONFIG_LD_IS_BFD=y CONFIG_LD_VERSION=23501 CONFIG_LLD_VERSION=0 +CONFIG_HAS_RUST=y +CONFIG_RUSTC_VERSION=14800 CONFIG_CC_CAN_LINK=y CONFIG_CC_CAN_LINK_STATIC=y CONFIG_CC_HAS_ASM_GOTO=y @@ -264,6 +266,7 @@ CONFIG_SLAB_MERGE_DEFAULT=y CONFIG_SLUB_CPU_PARTIAL=y CONFIG_SYSTEM_DATA_VERIFICATION=y CONFIG_PROFILING=y +# CONFIG_RUST is not set CONFIG_TRACEPOINTS=y # end of General setup @@ -882,6 +885,7 @@ CONFIG_ARCH_HAS_PKEYS=y # CONFIG_GUP_TEST is not set CONFIG_ARCH_HAS_PTE_SPECIAL=y CONFIG_KMAP_LOCAL=y +CONFIG_SECRETMEM=y # end of Memory Management options CONFIG_NET=y @@ -3199,6 +3203,7 @@ CONFIG_DRM_PANEL_BRIDGE=y # CONFIG_DRM_CIRRUS_QEMU is not set # CONFIG_DRM_GM12U320 is not set # CONFIG_DRM_VBOXVIDEO is not set +# CONFIG_DRM_GUD is not set # CONFIG_DRM_LEGACY is not set CONFIG_DRM_PANEL_ORIENTATION_QUIRKS=y @@ -4197,6 +4202,7 @@ CONFIG_IRQCHIP=y # CONFIG_PHY_MIXEL_MIPI_DPHY is not set # CONFIG_PHY_PXA_28NM_HSIC is not set # CONFIG_PHY_PXA_28NM_USB2 is not set +# CONFIG_PHY_SPARX5_SERDES is not set # CONFIG_PHY_INTEL_LGM_COMBO is not set # CONFIG_PHY_INTEL_LGM_EMMC is not set # end of PHY Subsystem @@ -4339,7 +4345,6 @@ CONFIG_TMPFS_XATTR=y # CONFIG_TMPFS_INODE64 is not set CONFIG_HUGETLBFS=y CONFIG_HUGETLB_PAGE=y -CONFIG_HUGETLB_PAGE_FREE_VMEMMAP=y CONFIG_MEMFD_CREATE=y CONFIG_ARCH_HAS_GIGANTIC_PAGE=y CONFIG_CONFIGFS_FS=y @@ -4498,6 +4503,7 @@ CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y # CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set # CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set +CONFIG_SECURITY_LANDLOCK=y CONFIG_INTEGRITY=y CONFIG_INTEGRITY_SIGNATURE=y CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y @@ -4530,7 +4536,7 @@ CONFIG_EVM_ADD_XATTRS=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set CONFIG_DEFAULT_SECURITY_APPARMOR=y # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" # # Kernel hardening options @@ -5193,6 +5199,11 @@ CONFIG_KCOV_IRQ_AREA_SIZE=0x40000 # CONFIG_RUNTIME_TESTING_MENU is not set # CONFIG_MEMTEST is not set # end of Kernel Testing and Coverage + +# +# Rust hacking +# +# end of Rust hacking # end of Kernel hacking CONFIG_DEBUG_MEMORY=y diff --git a/dashboard/config/linux/upstream-apparmor-kasan.config b/dashboard/config/linux/upstream-apparmor-kasan.config index 0a9fecdde..078d4b62c 100644 --- a/dashboard/config/linux/upstream-apparmor-kasan.config +++ b/dashboard/config/linux/upstream-apparmor-kasan.config @@ -1,5 +1,5 @@ # Automatically generated by syz-kconf; DO NOT EDIT. -# Kernel: git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next-history.git next-20210317 +# Kernel: git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next-history.git next-20210319 # # Automatically generated file; DO NOT EDIT. @@ -12,6 +12,8 @@ CONFIG_CLANG_VERSION=0 CONFIG_LD_IS_BFD=y CONFIG_LD_VERSION=23501 CONFIG_LLD_VERSION=0 +CONFIG_HAS_RUST=y +CONFIG_RUSTC_VERSION=14800 CONFIG_CC_CAN_LINK=y CONFIG_CC_CAN_LINK_STATIC=y CONFIG_CC_HAS_ASM_GOTO=y @@ -285,6 +287,7 @@ CONFIG_SLAB_MERGE_DEFAULT=y CONFIG_SLUB_CPU_PARTIAL=y CONFIG_SYSTEM_DATA_VERIFICATION=y CONFIG_PROFILING=y +# CONFIG_RUST is not set CONFIG_TRACEPOINTS=y # end of General setup @@ -1015,6 +1018,7 @@ CONFIG_READ_ONLY_THP_FOR_FS=y CONFIG_ARCH_HAS_PTE_SPECIAL=y CONFIG_MAPPING_DIRTY_HELPERS=y CONFIG_KMAP_LOCAL=y +CONFIG_SECRETMEM=y # end of Memory Management options CONFIG_NET=y @@ -1576,6 +1580,7 @@ CONFIG_NET_DSA=y # CONFIG_NET_DSA_TAG_AR9331 is not set CONFIG_NET_DSA_TAG_BRCM_COMMON=y CONFIG_NET_DSA_TAG_BRCM=y +# CONFIG_NET_DSA_TAG_BRCM_LEGACY is not set CONFIG_NET_DSA_TAG_BRCM_PREPEND=y # CONFIG_NET_DSA_TAG_HELLCREEK is not set # CONFIG_NET_DSA_TAG_GSWIP is not set @@ -5219,6 +5224,7 @@ CONFIG_DRM_CIRRUS_QEMU=y # CONFIG_TINYDRM_ST7586 is not set # CONFIG_TINYDRM_ST7735R is not set # CONFIG_DRM_VBOXVIDEO is not set +# CONFIG_DRM_GUD is not set # CONFIG_DRM_LEGACY is not set CONFIG_DRM_PANEL_ORIENTATION_QUIRKS=y @@ -7306,6 +7312,7 @@ CONFIG_GENERIC_PHY=y # CONFIG_PHY_MIXEL_MIPI_DPHY is not set # CONFIG_PHY_PXA_28NM_HSIC is not set # CONFIG_PHY_PXA_28NM_USB2 is not set +# CONFIG_PHY_SPARX5_SERDES is not set CONFIG_PHY_CPCAP_USB=y # CONFIG_PHY_MAPPHONE_MDM6600 is not set # CONFIG_PHY_OCELOT_SERDES is not set @@ -7546,7 +7553,6 @@ CONFIG_TMPFS_XATTR=y # CONFIG_TMPFS_INODE64 is not set CONFIG_HUGETLBFS=y CONFIG_HUGETLB_PAGE=y -CONFIG_HUGETLB_PAGE_FREE_VMEMMAP=y CONFIG_MEMFD_CREATE=y CONFIG_ARCH_HAS_GIGANTIC_PAGE=y CONFIG_CONFIGFS_FS=y @@ -7831,6 +7837,7 @@ CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y # CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set # CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set +CONFIG_SECURITY_LANDLOCK=y CONFIG_INTEGRITY=y CONFIG_INTEGRITY_SIGNATURE=y CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y @@ -7867,7 +7874,7 @@ CONFIG_EVM_ADD_XATTRS=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set CONFIG_DEFAULT_SECURITY_APPARMOR=y # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" # # Kernel hardening options @@ -8604,6 +8611,11 @@ CONFIG_KCOV_IRQ_AREA_SIZE=0x40000 # CONFIG_RUNTIME_TESTING_MENU is not set # CONFIG_MEMTEST is not set # end of Kernel Testing and Coverage + +# +# Rust hacking +# +# end of Rust hacking # end of Kernel hacking CONFIG_DEBUG_MEMORY=y diff --git a/dashboard/config/linux/upstream-arm-kasan-base.config b/dashboard/config/linux/upstream-arm-kasan-base.config index c4824294e..e271f9875 100644 --- a/dashboard/config/linux/upstream-arm-kasan-base.config +++ b/dashboard/config/linux/upstream-arm-kasan-base.config @@ -3711,7 +3711,7 @@ CONFIG_EVM_ADD_XATTRS=y CONFIG_DEFAULT_SECURITY_SELINUX=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,selinux,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,selinux,bpf" # # Kernel hardening options diff --git a/dashboard/config/linux/upstream-arm-kasan.config b/dashboard/config/linux/upstream-arm-kasan.config index e93553883..0a797e7a9 100644 --- a/dashboard/config/linux/upstream-arm-kasan.config +++ b/dashboard/config/linux/upstream-arm-kasan.config @@ -6258,7 +6258,7 @@ CONFIG_EVM_ADD_XATTRS=y CONFIG_DEFAULT_SECURITY_SELINUX=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,selinux,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,selinux,bpf" # # Kernel hardening options diff --git a/dashboard/config/linux/upstream-arm64-kasan-base.config b/dashboard/config/linux/upstream-arm64-kasan-base.config index 6fffc7acd..8a0d0509a 100644 --- a/dashboard/config/linux/upstream-arm64-kasan-base.config +++ b/dashboard/config/linux/upstream-arm64-kasan-base.config @@ -5404,7 +5404,7 @@ CONFIG_EVM_ADD_XATTRS=y CONFIG_DEFAULT_SECURITY_SELINUX=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,selinux,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,selinux,bpf" # # Kernel hardening options diff --git a/dashboard/config/linux/upstream-arm64-kasan.config b/dashboard/config/linux/upstream-arm64-kasan.config index 8a5663789..0a403b610 100644 --- a/dashboard/config/linux/upstream-arm64-kasan.config +++ b/dashboard/config/linux/upstream-arm64-kasan.config @@ -5935,7 +5935,7 @@ CONFIG_EVM_ADD_XATTRS=y CONFIG_DEFAULT_SECURITY_SELINUX=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,selinux,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,selinux,bpf" # # Kernel hardening options diff --git a/dashboard/config/linux/upstream-arm64-mte-base.config b/dashboard/config/linux/upstream-arm64-mte-base.config index 818bcf625..d5f88bbb2 100644 --- a/dashboard/config/linux/upstream-arm64-mte-base.config +++ b/dashboard/config/linux/upstream-arm64-mte-base.config @@ -5387,7 +5387,7 @@ CONFIG_EVM_ADD_XATTRS=y CONFIG_DEFAULT_SECURITY_SMACK=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,smack,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,smack,bpf" # # Kernel hardening options diff --git a/dashboard/config/linux/upstream-arm64-mte.config b/dashboard/config/linux/upstream-arm64-mte.config index 7f4837c4f..e5447b90a 100644 --- a/dashboard/config/linux/upstream-arm64-mte.config +++ b/dashboard/config/linux/upstream-arm64-mte.config @@ -5921,7 +5921,7 @@ CONFIG_EVM_ADD_XATTRS=y CONFIG_DEFAULT_SECURITY_SMACK=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,smack,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,smack,bpf" # # Kernel hardening options diff --git a/dashboard/config/linux/upstream-kcsan-base.config b/dashboard/config/linux/upstream-kcsan-base.config index 8f5160933..650a02a7d 100644 --- a/dashboard/config/linux/upstream-kcsan-base.config +++ b/dashboard/config/linux/upstream-kcsan-base.config @@ -4513,7 +4513,7 @@ CONFIG_EVM_ADD_XATTRS=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set CONFIG_DEFAULT_SECURITY_APPARMOR=y # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" # # Kernel hardening options diff --git a/dashboard/config/linux/upstream-kcsan.config b/dashboard/config/linux/upstream-kcsan.config index f3b111d7d..38e320cae 100644 --- a/dashboard/config/linux/upstream-kcsan.config +++ b/dashboard/config/linux/upstream-kcsan.config @@ -7847,7 +7847,7 @@ CONFIG_EVM_ADD_XATTRS=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set CONFIG_DEFAULT_SECURITY_APPARMOR=y # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" # # Kernel hardening options diff --git a/dashboard/config/linux/upstream-kmsan-base.config b/dashboard/config/linux/upstream-kmsan-base.config index 60a264edf..4bd288c77 100644 --- a/dashboard/config/linux/upstream-kmsan-base.config +++ b/dashboard/config/linux/upstream-kmsan-base.config @@ -4438,7 +4438,7 @@ CONFIG_EVM_ADD_XATTRS=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set CONFIG_DEFAULT_SECURITY_APPARMOR=y # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" # # Kernel hardening options diff --git a/dashboard/config/linux/upstream-kmsan.config b/dashboard/config/linux/upstream-kmsan.config index 0161b0c99..d058be4f9 100644 --- a/dashboard/config/linux/upstream-kmsan.config +++ b/dashboard/config/linux/upstream-kmsan.config @@ -7633,7 +7633,7 @@ CONFIG_EVM_ADD_XATTRS=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set CONFIG_DEFAULT_SECURITY_APPARMOR=y # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" # # Kernel hardening options diff --git a/dashboard/config/linux/upstream-leak-base.config b/dashboard/config/linux/upstream-leak-base.config index dd5d10e8a..98be2967c 100644 --- a/dashboard/config/linux/upstream-leak-base.config +++ b/dashboard/config/linux/upstream-leak-base.config @@ -4512,7 +4512,7 @@ CONFIG_EVM_ADD_XATTRS=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set CONFIG_DEFAULT_SECURITY_APPARMOR=y # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" # # Kernel hardening options diff --git a/dashboard/config/linux/upstream-leak.config b/dashboard/config/linux/upstream-leak.config index c28ca8f62..969c9b343 100644 --- a/dashboard/config/linux/upstream-leak.config +++ b/dashboard/config/linux/upstream-leak.config @@ -7846,7 +7846,7 @@ CONFIG_EVM_ADD_XATTRS=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set CONFIG_DEFAULT_SECURITY_APPARMOR=y # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" # # Kernel hardening options diff --git a/dashboard/config/linux/upstream-riscv64-kasan-base.config b/dashboard/config/linux/upstream-riscv64-kasan-base.config index 1778c81ed..39dbaeaf7 100644 --- a/dashboard/config/linux/upstream-riscv64-kasan-base.config +++ b/dashboard/config/linux/upstream-riscv64-kasan-base.config @@ -3143,7 +3143,7 @@ CONFIG_EVM_ADD_XATTRS=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set CONFIG_DEFAULT_SECURITY_APPARMOR=y # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" # # Kernel hardening options diff --git a/dashboard/config/linux/upstream-riscv64-kasan.config b/dashboard/config/linux/upstream-riscv64-kasan.config index ef20d49e7..b74e76570 100644 --- a/dashboard/config/linux/upstream-riscv64-kasan.config +++ b/dashboard/config/linux/upstream-riscv64-kasan.config @@ -5667,7 +5667,7 @@ CONFIG_EVM_ADD_XATTRS=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set CONFIG_DEFAULT_SECURITY_APPARMOR=y # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" # # Kernel hardening options diff --git a/dashboard/config/linux/upstream-s390-kasan-base.config b/dashboard/config/linux/upstream-s390-kasan-base.config index c27c48107..f2d0cba78 100644 --- a/dashboard/config/linux/upstream-s390-kasan-base.config +++ b/dashboard/config/linux/upstream-s390-kasan-base.config @@ -2594,7 +2594,7 @@ CONFIG_EVM_ADD_XATTRS=y CONFIG_DEFAULT_SECURITY_SELINUX=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,selinux,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,selinux,bpf" # # Kernel hardening options diff --git a/dashboard/config/linux/upstream-s390-kasan.config b/dashboard/config/linux/upstream-s390-kasan.config index 3718efcde..157752f1b 100644 --- a/dashboard/config/linux/upstream-s390-kasan.config +++ b/dashboard/config/linux/upstream-s390-kasan.config @@ -5590,7 +5590,7 @@ CONFIG_EVM_ADD_XATTRS=y CONFIG_DEFAULT_SECURITY_SELINUX=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,selinux,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,selinux,bpf" # # Kernel hardening options diff --git a/dashboard/config/linux/upstream-selinux-kasan-base.config b/dashboard/config/linux/upstream-selinux-kasan-base.config index b35b11c05..f1d861372 100644 --- a/dashboard/config/linux/upstream-selinux-kasan-base.config +++ b/dashboard/config/linux/upstream-selinux-kasan-base.config @@ -1,5 +1,5 @@ # Automatically generated by syz-kconf; DO NOT EDIT. -# Kernel: git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next-history.git next-20210317 +# Kernel: git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next-history.git next-20210319 # # Automatically generated file; DO NOT EDIT. @@ -12,6 +12,8 @@ CONFIG_CLANG_VERSION=0 CONFIG_LD_IS_BFD=y CONFIG_LD_VERSION=23501 CONFIG_LLD_VERSION=0 +CONFIG_HAS_RUST=y +CONFIG_RUSTC_VERSION=14800 CONFIG_CC_CAN_LINK=y CONFIG_CC_CAN_LINK_STATIC=y CONFIG_CC_HAS_ASM_GOTO=y @@ -262,6 +264,7 @@ CONFIG_SLAB_MERGE_DEFAULT=y # CONFIG_SHUFFLE_PAGE_ALLOCATOR is not set CONFIG_SYSTEM_DATA_VERIFICATION=y CONFIG_PROFILING=y +# CONFIG_RUST is not set CONFIG_TRACEPOINTS=y # end of General setup @@ -879,6 +882,7 @@ CONFIG_ARCH_HAS_PKEYS=y # CONFIG_GUP_TEST is not set CONFIG_ARCH_HAS_PTE_SPECIAL=y CONFIG_KMAP_LOCAL=y +CONFIG_SECRETMEM=y # end of Memory Management options CONFIG_NET=y @@ -3196,6 +3200,7 @@ CONFIG_DRM_PANEL_BRIDGE=y # CONFIG_DRM_CIRRUS_QEMU is not set # CONFIG_DRM_GM12U320 is not set # CONFIG_DRM_VBOXVIDEO is not set +# CONFIG_DRM_GUD is not set # CONFIG_DRM_LEGACY is not set CONFIG_DRM_PANEL_ORIENTATION_QUIRKS=y @@ -4194,6 +4199,7 @@ CONFIG_IRQCHIP=y # CONFIG_PHY_MIXEL_MIPI_DPHY is not set # CONFIG_PHY_PXA_28NM_HSIC is not set # CONFIG_PHY_PXA_28NM_USB2 is not set +# CONFIG_PHY_SPARX5_SERDES is not set # CONFIG_PHY_INTEL_LGM_COMBO is not set # CONFIG_PHY_INTEL_LGM_EMMC is not set # end of PHY Subsystem @@ -4336,7 +4342,6 @@ CONFIG_TMPFS_XATTR=y # CONFIG_TMPFS_INODE64 is not set CONFIG_HUGETLBFS=y CONFIG_HUGETLB_PAGE=y -CONFIG_HUGETLB_PAGE_FREE_VMEMMAP=y CONFIG_MEMFD_CREATE=y CONFIG_ARCH_HAS_GIGANTIC_PAGE=y CONFIG_CONFIGFS_FS=y @@ -4498,6 +4503,7 @@ CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y # CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set # CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set +CONFIG_SECURITY_LANDLOCK=y CONFIG_INTEGRITY=y CONFIG_INTEGRITY_SIGNATURE=y CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y @@ -4530,7 +4536,7 @@ CONFIG_EVM_ADD_XATTRS=y CONFIG_DEFAULT_SECURITY_SELINUX=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,selinux,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,selinux,bpf" # # Kernel hardening options @@ -5192,6 +5198,11 @@ CONFIG_KCOV_IRQ_AREA_SIZE=0x40000 # CONFIG_RUNTIME_TESTING_MENU is not set # CONFIG_MEMTEST is not set # end of Kernel Testing and Coverage + +# +# Rust hacking +# +# end of Rust hacking # end of Kernel hacking CONFIG_DEBUG_MEMORY=y diff --git a/dashboard/config/linux/upstream-selinux-kasan.config b/dashboard/config/linux/upstream-selinux-kasan.config index 7b084e464..5478dc31e 100644 --- a/dashboard/config/linux/upstream-selinux-kasan.config +++ b/dashboard/config/linux/upstream-selinux-kasan.config @@ -1,5 +1,5 @@ # Automatically generated by syz-kconf; DO NOT EDIT. -# Kernel: git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next-history.git next-20210317 +# Kernel: git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next-history.git next-20210319 # # Automatically generated file; DO NOT EDIT. @@ -12,6 +12,8 @@ CONFIG_CLANG_VERSION=0 CONFIG_LD_IS_BFD=y CONFIG_LD_VERSION=23501 CONFIG_LLD_VERSION=0 +CONFIG_HAS_RUST=y +CONFIG_RUSTC_VERSION=14800 CONFIG_CC_CAN_LINK=y CONFIG_CC_CAN_LINK_STATIC=y CONFIG_CC_HAS_ASM_GOTO=y @@ -280,6 +282,7 @@ CONFIG_SLAB_MERGE_DEFAULT=y # CONFIG_SHUFFLE_PAGE_ALLOCATOR is not set CONFIG_SYSTEM_DATA_VERIFICATION=y CONFIG_PROFILING=y +# CONFIG_RUST is not set CONFIG_TRACEPOINTS=y # end of General setup @@ -1009,6 +1012,7 @@ CONFIG_READ_ONLY_THP_FOR_FS=y CONFIG_ARCH_HAS_PTE_SPECIAL=y CONFIG_MAPPING_DIRTY_HELPERS=y CONFIG_KMAP_LOCAL=y +CONFIG_SECRETMEM=y # end of Memory Management options CONFIG_NET=y @@ -1570,6 +1574,7 @@ CONFIG_NET_DSA=y # CONFIG_NET_DSA_TAG_AR9331 is not set CONFIG_NET_DSA_TAG_BRCM_COMMON=y CONFIG_NET_DSA_TAG_BRCM=y +# CONFIG_NET_DSA_TAG_BRCM_LEGACY is not set CONFIG_NET_DSA_TAG_BRCM_PREPEND=y # CONFIG_NET_DSA_TAG_HELLCREEK is not set # CONFIG_NET_DSA_TAG_GSWIP is not set @@ -5213,6 +5218,7 @@ CONFIG_DRM_CIRRUS_QEMU=y # CONFIG_TINYDRM_ST7586 is not set # CONFIG_TINYDRM_ST7735R is not set # CONFIG_DRM_VBOXVIDEO is not set +# CONFIG_DRM_GUD is not set # CONFIG_DRM_LEGACY is not set CONFIG_DRM_PANEL_ORIENTATION_QUIRKS=y @@ -7300,6 +7306,7 @@ CONFIG_GENERIC_PHY=y # CONFIG_PHY_MIXEL_MIPI_DPHY is not set # CONFIG_PHY_PXA_28NM_HSIC is not set # CONFIG_PHY_PXA_28NM_USB2 is not set +# CONFIG_PHY_SPARX5_SERDES is not set CONFIG_PHY_CPCAP_USB=y # CONFIG_PHY_MAPPHONE_MDM6600 is not set # CONFIG_PHY_OCELOT_SERDES is not set @@ -7540,7 +7547,6 @@ CONFIG_TMPFS_XATTR=y # CONFIG_TMPFS_INODE64 is not set CONFIG_HUGETLBFS=y CONFIG_HUGETLB_PAGE=y -CONFIG_HUGETLB_PAGE_FREE_VMEMMAP=y CONFIG_MEMFD_CREATE=y CONFIG_ARCH_HAS_GIGANTIC_PAGE=y CONFIG_CONFIGFS_FS=y @@ -7828,6 +7834,7 @@ CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y # CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set # CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set +CONFIG_SECURITY_LANDLOCK=y CONFIG_INTEGRITY=y CONFIG_INTEGRITY_SIGNATURE=y CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y @@ -7864,7 +7871,7 @@ CONFIG_EVM_ADD_XATTRS=y CONFIG_DEFAULT_SECURITY_SELINUX=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,selinux,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,selinux,bpf" # # Kernel hardening options @@ -8600,6 +8607,11 @@ CONFIG_KCOV_IRQ_AREA_SIZE=0x40000 # CONFIG_RUNTIME_TESTING_MENU is not set # CONFIG_MEMTEST is not set # end of Kernel Testing and Coverage + +# +# Rust hacking +# +# end of Rust hacking # end of Kernel hacking CONFIG_DEBUG_MEMORY=y diff --git a/dashboard/config/linux/upstream-smack-kasan-base.config b/dashboard/config/linux/upstream-smack-kasan-base.config index 713cf4270..fb01b3110 100644 --- a/dashboard/config/linux/upstream-smack-kasan-base.config +++ b/dashboard/config/linux/upstream-smack-kasan-base.config @@ -1,5 +1,5 @@ # Automatically generated by syz-kconf; DO NOT EDIT. -# Kernel: git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next-history.git next-20210317 +# Kernel: git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next-history.git next-20210319 # # Automatically generated file; DO NOT EDIT. @@ -12,6 +12,8 @@ CONFIG_CLANG_VERSION=110001 CONFIG_LD_IS_BFD=y CONFIG_LD_VERSION=23501 CONFIG_LLD_VERSION=0 +CONFIG_HAS_RUST=y +CONFIG_RUSTC_VERSION=14800 CONFIG_CC_CAN_LINK=y CONFIG_CC_CAN_LINK_STATIC=y CONFIG_CC_HAS_ASM_GOTO=y @@ -265,6 +267,7 @@ CONFIG_SLAB_MERGE_DEFAULT=y CONFIG_SLUB_CPU_PARTIAL=y CONFIG_SYSTEM_DATA_VERIFICATION=y CONFIG_PROFILING=y +# CONFIG_RUST is not set CONFIG_TRACEPOINTS=y # end of General setup @@ -883,6 +886,7 @@ CONFIG_ARCH_HAS_PKEYS=y # CONFIG_GUP_TEST is not set CONFIG_ARCH_HAS_PTE_SPECIAL=y CONFIG_KMAP_LOCAL=y +CONFIG_SECRETMEM=y # end of Memory Management options CONFIG_NET=y @@ -3200,6 +3204,7 @@ CONFIG_DRM_PANEL_BRIDGE=y # CONFIG_DRM_CIRRUS_QEMU is not set # CONFIG_DRM_GM12U320 is not set # CONFIG_DRM_VBOXVIDEO is not set +# CONFIG_DRM_GUD is not set # CONFIG_DRM_LEGACY is not set CONFIG_DRM_PANEL_ORIENTATION_QUIRKS=y @@ -4198,6 +4203,7 @@ CONFIG_IRQCHIP=y # CONFIG_PHY_MIXEL_MIPI_DPHY is not set # CONFIG_PHY_PXA_28NM_HSIC is not set # CONFIG_PHY_PXA_28NM_USB2 is not set +# CONFIG_PHY_SPARX5_SERDES is not set # CONFIG_PHY_INTEL_LGM_COMBO is not set # CONFIG_PHY_INTEL_LGM_EMMC is not set # end of PHY Subsystem @@ -4340,7 +4346,6 @@ CONFIG_TMPFS_XATTR=y # CONFIG_TMPFS_INODE64 is not set CONFIG_HUGETLBFS=y CONFIG_HUGETLB_PAGE=y -CONFIG_HUGETLB_PAGE_FREE_VMEMMAP=y CONFIG_MEMFD_CREATE=y CONFIG_ARCH_HAS_GIGANTIC_PAGE=y CONFIG_CONFIGFS_FS=y @@ -4497,6 +4502,7 @@ CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y # CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set # CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set +CONFIG_SECURITY_LANDLOCK=y CONFIG_INTEGRITY=y CONFIG_INTEGRITY_SIGNATURE=y CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y @@ -4530,7 +4536,7 @@ CONFIG_EVM_ADD_XATTRS=y CONFIG_DEFAULT_SECURITY_SMACK=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,smack,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,smack,bpf" # # Kernel hardening options @@ -5201,6 +5207,11 @@ CONFIG_KCOV_IRQ_AREA_SIZE=0x40000 # CONFIG_RUNTIME_TESTING_MENU is not set # CONFIG_MEMTEST is not set # end of Kernel Testing and Coverage + +# +# Rust hacking +# +# end of Rust hacking # end of Kernel hacking CONFIG_DEBUG_MEMORY=y diff --git a/dashboard/config/linux/upstream-smack-kasan.config b/dashboard/config/linux/upstream-smack-kasan.config index 85816d198..4ad93f481 100644 --- a/dashboard/config/linux/upstream-smack-kasan.config +++ b/dashboard/config/linux/upstream-smack-kasan.config @@ -1,5 +1,5 @@ # Automatically generated by syz-kconf; DO NOT EDIT. -# Kernel: git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next-history.git next-20210317 +# Kernel: git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next-history.git next-20210319 # # Automatically generated file; DO NOT EDIT. @@ -12,6 +12,8 @@ CONFIG_CLANG_VERSION=110001 CONFIG_LD_IS_BFD=y CONFIG_LD_VERSION=23501 CONFIG_LLD_VERSION=0 +CONFIG_HAS_RUST=y +CONFIG_RUSTC_VERSION=14800 CONFIG_CC_CAN_LINK=y CONFIG_CC_CAN_LINK_STATIC=y CONFIG_CC_HAS_ASM_GOTO=y @@ -286,6 +288,7 @@ CONFIG_SLAB_MERGE_DEFAULT=y CONFIG_SLUB_CPU_PARTIAL=y CONFIG_SYSTEM_DATA_VERIFICATION=y CONFIG_PROFILING=y +# CONFIG_RUST is not set CONFIG_TRACEPOINTS=y # end of General setup @@ -1016,6 +1019,7 @@ CONFIG_READ_ONLY_THP_FOR_FS=y CONFIG_ARCH_HAS_PTE_SPECIAL=y CONFIG_MAPPING_DIRTY_HELPERS=y CONFIG_KMAP_LOCAL=y +CONFIG_SECRETMEM=y # end of Memory Management options CONFIG_NET=y @@ -1577,6 +1581,7 @@ CONFIG_NET_DSA=y # CONFIG_NET_DSA_TAG_AR9331 is not set CONFIG_NET_DSA_TAG_BRCM_COMMON=y CONFIG_NET_DSA_TAG_BRCM=y +# CONFIG_NET_DSA_TAG_BRCM_LEGACY is not set CONFIG_NET_DSA_TAG_BRCM_PREPEND=y # CONFIG_NET_DSA_TAG_HELLCREEK is not set # CONFIG_NET_DSA_TAG_GSWIP is not set @@ -5220,6 +5225,7 @@ CONFIG_DRM_CIRRUS_QEMU=y # CONFIG_TINYDRM_ST7586 is not set # CONFIG_TINYDRM_ST7735R is not set # CONFIG_DRM_VBOXVIDEO is not set +# CONFIG_DRM_GUD is not set # CONFIG_DRM_LEGACY is not set CONFIG_DRM_PANEL_ORIENTATION_QUIRKS=y @@ -7307,6 +7313,7 @@ CONFIG_GENERIC_PHY=y # CONFIG_PHY_MIXEL_MIPI_DPHY is not set # CONFIG_PHY_PXA_28NM_HSIC is not set # CONFIG_PHY_PXA_28NM_USB2 is not set +# CONFIG_PHY_SPARX5_SERDES is not set CONFIG_PHY_CPCAP_USB=y # CONFIG_PHY_MAPPHONE_MDM6600 is not set # CONFIG_PHY_OCELOT_SERDES is not set @@ -7547,7 +7554,6 @@ CONFIG_TMPFS_XATTR=y # CONFIG_TMPFS_INODE64 is not set CONFIG_HUGETLBFS=y CONFIG_HUGETLB_PAGE=y -CONFIG_HUGETLB_PAGE_FREE_VMEMMAP=y CONFIG_MEMFD_CREATE=y CONFIG_ARCH_HAS_GIGANTIC_PAGE=y CONFIG_CONFIGFS_FS=y @@ -7830,6 +7836,7 @@ CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y # CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set # CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set +CONFIG_SECURITY_LANDLOCK=y CONFIG_INTEGRITY=y CONFIG_INTEGRITY_SIGNATURE=y CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y @@ -7867,7 +7874,7 @@ CONFIG_EVM_ADD_XATTRS=y CONFIG_DEFAULT_SECURITY_SMACK=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,smack,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,smack,bpf" # # Kernel hardening options @@ -8612,6 +8619,11 @@ CONFIG_KCOV_IRQ_AREA_SIZE=0x40000 # CONFIG_RUNTIME_TESTING_MENU is not set # CONFIG_MEMTEST is not set # end of Kernel Testing and Coverage + +# +# Rust hacking +# +# end of Rust hacking # end of Kernel hacking CONFIG_DEBUG_MEMORY=y diff --git a/dashboard/config/linux/upstream-usb-base.config b/dashboard/config/linux/upstream-usb-base.config index 8a9ec00b1..8ed53aa8e 100644 --- a/dashboard/config/linux/upstream-usb-base.config +++ b/dashboard/config/linux/upstream-usb-base.config @@ -4571,7 +4571,7 @@ CONFIG_EVM_ADD_XATTRS=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set CONFIG_DEFAULT_SECURITY_APPARMOR=y # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" # # Kernel hardening options diff --git a/dashboard/config/linux/upstream-usb.config b/dashboard/config/linux/upstream-usb.config index 5e75cf582..c704ffa16 100644 --- a/dashboard/config/linux/upstream-usb.config +++ b/dashboard/config/linux/upstream-usb.config @@ -7030,7 +7030,7 @@ CONFIG_EVM_ADD_XATTRS=y # CONFIG_DEFAULT_SECURITY_TOMOYO is not set CONFIG_DEFAULT_SECURITY_APPARMOR=y # CONFIG_DEFAULT_SECURITY_DAC is not set -CONFIG_LSM="lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" +CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf" # # Kernel hardening options -- cgit mrf-deployment