| Commit message (Collapse) | Author | Lines |
|
These are useful to show with lm-sensors. No more need to show
temperatures using smartctl.
|
|
This should be safe to have enabled (but unused) and gives us an extra
layer of potential mitigation of SMT side channels.
|
|
This should improve handling of very large core counts and should be
safe to enable globally.
|
|
For now this enables the processor aggregator, which should reduce power
consumption when supported by the ACPI device.
|
|
This is needed for application such as htop and doesn't hurt to be
included in the base group.
|
|
|
|
This seems to be a harmless optimization.
|
|
This option does no longer exist in the 5.15 branch.
|
|
|
|
The Gentoo KSP recommendations have changed slightly again, now
requiring three different settings instead of just one. Additionally, in
order to enable KSP at all, CONFIG_MODIFY_LDT_SYSCALL needs to be unset.
|
|
An upcoming commit updates to the latest KSP recommendations and
requires this particular setting as a direct dependency for
CONFIG_SECURITY_YAMA.
|
|
An upcoming commit which updates to the latest KSP recommendations
requires expert mode for one setting. Enable it here.
|
|
The newer versions of sys-kernel/gentoo-sources do not have this switch
anymore, instead relying only on the architecture-specific switches.
Remove it.
|
|
This setting pulls in a set of recommended settings [1] from the Kernel
Self Protection Project. We are pretty sure that we exhaustively set all
these manually already, but since Gentoo upstream provides this option,
make use of it too.
[1] https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
|
|
This is needed for CONFIG_EDAC* but is not enabled by default upstream.
|
|
These options have either been merged into others or enabled
unconditionally.
|
|
|
|
|
|
|