kernfrag - Kernel configuration using kernfrag(7) and kern(1)

	Commit message (Collapse)	Author	Lines
2022-07-10	fragments: Enable core scheduling for SMT	Wolfgang Müller	-0/+2
	This should be safe to have enabled (but unused) and gives us an extra layer of potential mitigation of SMT side channels.
2022-06-04	fragments: Add requisite option for KSP	Wolfgang Müller	-0/+1

2021-08-13	fragments: Update to latest KSP recommendations	Wolfgang Müller	-0/+5
	The Gentoo KSP recommendations have changed slightly again, now requiring three different settings instead of just one. Additionally, in order to enable KSP at all, CONFIG_MODIFY_LDT_SYSCALL needs to be unset.
2021-08-13	fragments: Enable CONFIG_SECURITY	Wolfgang Müller	-0/+2
	An upcoming commit updates to the latest KSP recommendations and requires this particular setting as a direct dependency for CONFIG_SECURITY_YAMA.
2021-07-20	fragments: Remove obsoleted KSP switch	Wolfgang Müller	-1/+0
	The newer versions of sys-kernel/gentoo-sources do not have this switch anymore, instead relying only on the architecture-specific switches. Remove it.
2021-07-03	fragments: Enable GENTOO_KERNEL_SELF_PROTECTION	Wolfgang Müller	-0/+3
	This setting pulls in a set of recommended settings [1] from the Kernel Self Protection Project. We are pretty sure that we exhaustively set all these manually already, but since Gentoo upstream provides this option, make use of it too. [1] https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
2021-03-06	fragments: Remove superfluous options for 5.10	Wolfgang Müller	-1/+0
	These options have either been merged into others or enabled unconditionally.
2020-02-29	Improve security by disabling vsyscall table for legacy apps	Wynn Wolf Arbor	-0/+3