diff --git a/configs/arcbox-arm64.config b/configs/arcbox-arm64.config index 9110a6e..8330c8c 100644 --- a/configs/arcbox-arm64.config +++ b/configs/arcbox-arm64.config @@ -16,9 +16,16 @@ CONFIG_IKCONFIG=y CONFIG_IKCONFIG_PROC=y CONFIG_SYSVIPC=y CONFIG_POSIX_MQUEUE=y +CONFIG_EPOLL=y +CONFIG_SIGNALFD=y +CONFIG_TIMERFD=y +CONFIG_EVENTFD=y +CONFIG_AIO=y CONFIG_NO_HZ_IDLE=y CONFIG_HIGH_RES_TIMERS=y CONFIG_BPF_SYSCALL=y +CONFIG_BPF_JIT=y +CONFIG_BPF_JIT_ALWAYS_ON=y CONFIG_CGROUPS=y CONFIG_MEMCG=y CONFIG_BLK_CGROUP=y @@ -31,6 +38,7 @@ CONFIG_CGROUP_CPUACCT=y CONFIG_CGROUP_BPF=y CONFIG_PERF_EVENTS=y CONFIG_CGROUP_PERF=y +CONFIG_CGROUP_HUGETLB=y CONFIG_NET_CLS_CGROUP=y CONFIG_CGROUP_NET_PRIO=y CONFIG_CGROUP_NET_CLASSID=y @@ -47,6 +55,8 @@ CONFIG_CHECKPOINT_RESTORE=y CONFIG_KEYS=y CONFIG_SECCOMP=y CONFIG_SECCOMP_FILTER=y +CONFIG_AUDIT=y +CONFIG_AUDITSYSCALL=y # Processor type and features CONFIG_ARM64=y @@ -81,7 +91,8 @@ CONFIG_BINFMT_MISC=y # Memory management CONFIG_FLATMEM=y CONFIG_MEMORY_HOTPLUG=n -CONFIG_TRANSPARENT_HUGEPAGE=n +CONFIG_TRANSPARENT_HUGEPAGE=y +CONFIG_TRANSPARENT_HUGEPAGE_MADVISE=y CONFIG_COMPACTION=y # Networking @@ -153,6 +164,8 @@ CONFIG_NF_CONNTRACK_FTP=y CONFIG_NF_NAT_FTP=y CONFIG_NF_CONNTRACK_TFTP=y CONFIG_NF_NAT_TFTP=y +CONFIG_INET_DIAG=y +CONFIG_NETLINK_DIAG=y # Device Drivers CONFIG_PCI=y @@ -258,6 +271,10 @@ CONFIG_DEBUG_FS=n # Security CONFIG_SECURITY=y CONFIG_SECURITYFS=y +CONFIG_SECURITY_APPARMOR=y +CONFIG_SECURITY_YAMA=y +CONFIG_DEFAULT_SECURITY_APPARMOR=y +CONFIG_LSM="apparmor,yama,integrity" # Cryptographic API CONFIG_CRYPTO=y @@ -300,8 +317,8 @@ CONFIG_REGULATOR=n CONFIG_MEDIA_SUPPORT=n CONFIG_AGP=n CONFIG_STAGING=n -CONFIG_HUGETLBFS=n -CONFIG_HUGETLB_PAGE=n +CONFIG_HUGETLBFS=y +CONFIG_HUGETLB_PAGE=y # Disable profiling and tracing CONFIG_PROFILING=n @@ -312,10 +329,11 @@ CONFIG_KPROBES=n CONFIG_PRINTK=y CONFIG_PRINTK_TIME=y CONFIG_EARLY_PRINTK=y +CONFIG_KALLSYMS=y # Initramfs support CONFIG_BLK_DEV_INITRD=y CONFIG_INITRAMFS_SOURCE="" CONFIG_RD_GZIP=y CONFIG_RD_LZ4=n -CONFIG_RD_ZSTD=n +CONFIG_RD_ZSTD=y diff --git a/configs/arcbox-x86_64.config b/configs/arcbox-x86_64.config index c54d329..b01093b 100644 --- a/configs/arcbox-x86_64.config +++ b/configs/arcbox-x86_64.config @@ -14,9 +14,16 @@ CONFIG_LOCALVERSION="-arcbox" CONFIG_DEFAULT_HOSTNAME="arcbox-vm" CONFIG_SYSVIPC=y CONFIG_POSIX_MQUEUE=y +CONFIG_EPOLL=y +CONFIG_SIGNALFD=y +CONFIG_TIMERFD=y +CONFIG_EVENTFD=y +CONFIG_AIO=y CONFIG_NO_HZ_IDLE=y CONFIG_HIGH_RES_TIMERS=y CONFIG_BPF_SYSCALL=y +CONFIG_BPF_JIT=y +CONFIG_BPF_JIT_ALWAYS_ON=y CONFIG_CGROUPS=y CONFIG_MEMCG=y CONFIG_BLK_CGROUP=y @@ -28,6 +35,7 @@ CONFIG_CGROUP_DEVICE=y CONFIG_CGROUP_CPUACCT=y CONFIG_CGROUP_BPF=y CONFIG_CGROUP_PERF=y +CONFIG_CGROUP_HUGETLB=y CONFIG_PERF_EVENTS=y CONFIG_NET_CLS_CGROUP=y CONFIG_CGROUP_NET_PRIO=y @@ -45,6 +53,8 @@ CONFIG_CHECKPOINT_RESTORE=y CONFIG_KEYS=y CONFIG_SECCOMP=y CONFIG_SECCOMP_FILTER=y +CONFIG_AUDIT=y +CONFIG_AUDITSYSCALL=y # Processor type and features CONFIG_X86_64=y @@ -84,7 +94,8 @@ CONFIG_BINFMT_SCRIPT=y # Memory management CONFIG_FLATMEM=y CONFIG_MEMORY_HOTPLUG=n -CONFIG_TRANSPARENT_HUGEPAGE=n +CONFIG_TRANSPARENT_HUGEPAGE=y +CONFIG_TRANSPARENT_HUGEPAGE_MADVISE=y CONFIG_COMPACTION=y # Networking @@ -156,6 +167,8 @@ CONFIG_NF_CONNTRACK_FTP=y CONFIG_NF_NAT_FTP=y CONFIG_NF_CONNTRACK_TFTP=y CONFIG_NF_NAT_TFTP=y +CONFIG_INET_DIAG=y +CONFIG_NETLINK_DIAG=y # Device Drivers CONFIG_PCI=y @@ -245,6 +258,10 @@ CONFIG_DEBUG_FS=n # Security CONFIG_SECURITY=y CONFIG_SECURITYFS=y +CONFIG_SECURITY_APPARMOR=y +CONFIG_SECURITY_YAMA=y +CONFIG_DEFAULT_SECURITY_APPARMOR=y +CONFIG_LSM="apparmor,yama,integrity" # Cryptographic API CONFIG_CRYPTO=y @@ -287,8 +304,8 @@ CONFIG_REGULATOR=n CONFIG_MEDIA_SUPPORT=n CONFIG_AGP=n CONFIG_STAGING=n -CONFIG_HUGETLBFS=n -CONFIG_HUGETLB_PAGE=n +CONFIG_HUGETLBFS=y +CONFIG_HUGETLB_PAGE=y # Disable profiling and tracing CONFIG_PROFILING=n @@ -299,10 +316,11 @@ CONFIG_KPROBES=n CONFIG_PRINTK=y CONFIG_PRINTK_TIME=y CONFIG_EARLY_PRINTK=y +CONFIG_KALLSYMS=y # Initramfs support CONFIG_BLK_DEV_INITRD=y CONFIG_INITRAMFS_SOURCE="" CONFIG_RD_GZIP=y CONFIG_RD_LZ4=n -CONFIG_RD_ZSTD=n +CONFIG_RD_ZSTD=y