diff options
Diffstat (limited to 'bootstrap')
| -rwxr-xr-x | bootstrap | 47 |
1 files changed, 25 insertions, 22 deletions
@@ -505,32 +505,34 @@ cd linux # Adjust configuration. # -if [ -z "$kernel_source" ]; then +# Note that we do some of these even for the pre-configured kernel. +# +# Note that SECURITY_LOCKDOWN_LSM forces MODULE_SIG ('select' in Kconfig). +# +# Generally, if you disable an option but it still appears enabled after +# the kernel build, search for 'select XXX' in Kconfig* and also disable +# any found symbols. +# +scripts/config --disable KCSAN +scripts/config --disable SECURITY_LOCKDOWN_LSM +scripts/config --disable MODULE_SIG +scripts/config --set-str BUILD_SALT '' +scripts/config --set-str SYSTEM_TRUSTED_KEYS '' - # Note that SECURITY_LOCKDOWN_LSM forces MODULE_SIG ('select' in Kconfig). - # - # Generally, if you disable an option but it still appears enabled after - # the kernel build, search for 'select XXX' in Kconfig* and also disable - # any found symbols. - # - scripts/config --disable KCSAN - scripts/config --disable SECURITY_LOCKDOWN_LSM - scripts/config --disable MODULE_SIG - scripts/config --set-str BUILD_SALT '' - scripts/config --set-str SYSTEM_TRUSTED_KEYS '' +scripts/config --enable INIT_STACK_NONE +scripts/config --disable INIT_STACK_ALL_PATTERN +scripts/config --disable INIT_STACK_ALL_ZERO - scripts/config --enable INIT_STACK_NONE - scripts/config --disable INIT_STACK_ALL_PATTERN - scripts/config --disable INIT_STACK_ALL_ZERO +scripts/config --enable DEBUG_INFO_NONE +scripts/config --disable DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT - scripts/config --enable DEBUG_INFO_NONE - scripts/config --disable DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT +# aarch64/5.19 additions: +# +scripts/config --disable KCOV +scripts/config --disable SHADOW_CALL_STACK +scripts/config --disable VIDEO_ADV7511 - # aarch64/5.19 additions: - # - scripts/config --disable KCOV - scripts/config --disable SHADOW_CALL_STACK - scripts/config --disable VIDEO_ADV7511 +if [ -z "$kernel_source" ]; then # Disable sound subsystem/drivers. # @@ -549,6 +551,7 @@ if [ -z "$kernel_source" ]; then # Disable wireless network drivers. # scripts/config --disable CONFIG_WLAN + fi # Adjust kernel command line size limit. |