summaryrefslogtreecommitdiffstats
path: root/fragments (unfollow)
Commit message (Collapse)AuthorLines
2021-08-13fragments: Enable CONFIG_SECURITYWolfgang Müller-0/+2
An upcoming commit updates to the latest KSP recommendations and requires this particular setting as a direct dependency for CONFIG_SECURITY_YAMA.
2021-08-13fragments: Use expert mode by defaultWolfgang Müller-0/+2
An upcoming commit which updates to the latest KSP recommendations requires expert mode for one setting. Enable it here.
2021-07-20fragments: Remove obsoleted KSP switchWolfgang Müller-1/+0
The newer versions of sys-kernel/gentoo-sources do not have this switch anymore, instead relying only on the architecture-specific switches. Remove it.
2021-07-03fragments: Enable GENTOO_KERNEL_SELF_PROTECTIONWolfgang Müller-0/+3
This setting pulls in a set of recommended settings [1] from the Kernel Self Protection Project. We are pretty sure that we exhaustively set all these manually already, but since Gentoo upstream provides this option, make use of it too. [1] https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
2021-04-16fragments: Add fragment enabling support for systemdWolfgang Müller-0/+1
This fragment relies on the Gentoo patchsets for the Linux kernel, as the config option is not an upstream one.
2021-03-06fragments: Enable CONFIG_BT_HS by defaultWolfgang Müller-0/+1
This will support high-speed bluetooth interfaces.
2021-03-06fragments: Enable CONFIG_RASWolfgang Müller-0/+1
This is needed for CONFIG_EDAC* but is not enabled by default upstream.
2021-03-06fragments: Remove superfluous options for 5.10Wolfgang Müller-3/+0
These options have either been merged into others or enabled unconditionally.
2020-10-25fragments: Add fragment with the PL2303 serial-to-USB driverWynn Wolf Arbor-0/+2
2020-08-28fragments: Remove AUDIT_WATCH and AUDIT_TREE from security/auditWynn Wolf Arbor-2/+0
These two options have been replaced [1] by CONFIG_AUDITSYSCALL. [1] https://patchwork.kernel.org/patch/10686725/
2020-08-07Remove CONFIG_CIFS_ACLWynn Wolf Arbor-1/+0
This option is now contained in CIFS_POSIX
2020-08-07fragments: Add fragment enabling wireguard supportWynn Wolf Arbor-0/+1
2020-02-29Add fragment that enables filesystem encryptionWynn Wolf Arbor-0/+1
2020-02-29Add new netfilter/nftables optionsWynn Wolf Arbor-0/+3
2020-02-29Enable PCI by defaultWynn Wolf Arbor-0/+1
This option was apparently changed to default to no on the 5.4 series
2020-02-29Improve security by disabling vsyscall table for legacy appsWynn Wolf Arbor-0/+3
2020-02-29Remove deprecated kernel optionsWynn Wolf Arbor-22/+0
2020-02-29Allow multiple routing tables for IPv6Wynn Wolf Arbor-0/+2