From 5c490ad325413835d7ee53fb82bb4a55befaa969 Mon Sep 17 00:00:00 2001 From: Wolfgang Wiedmeyer Date: Mon, 12 Jun 2017 22:11:11 +0200 Subject: espresso defconfig: enable ath9k, do some hardening and disable TEE-related driver code Ensure that heap randomization is enabled all the time. Enable stack-protector mode and seccomp. Signed-off-by: Wolfgang Wiedmeyer --- arch/arm/configs/espresso_defconfig | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/arch/arm/configs/espresso_defconfig b/arch/arm/configs/espresso_defconfig index 000d56b..b18cb7e 100644 --- a/arch/arm/configs/espresso_defconfig +++ b/arch/arm/configs/espresso_defconfig @@ -20,6 +20,7 @@ CONFIG_KALLSYMS_ALL=y CONFIG_ASHMEM=y # CONFIG_AIO is not set CONFIG_EMBEDDED=y +# CONFIG_COMPAT_BRK is not set CONFIG_PROFILING=y CONFIG_MODULES=y CONFIG_MODULE_FORCE_LOAD=y @@ -61,6 +62,8 @@ CONFIG_HIGHMEM=y CONFIG_COMPACTION=y CONFIG_KSM=y CONFIG_ZSMALLOC=y +CONFIG_SECCOMP=y +CONFIG_CC_STACKPROTECTOR=y CONFIG_ARM_FLUSH_CONSOLE_ON_RESTART=y CONFIG_CMDLINE="androidboot.hardware=espresso" CONFIG_CMDLINE_EXTEND=y @@ -202,6 +205,8 @@ CONFIG_BT_HCIUART_H4=y CONFIG_CFG80211=y # CONFIG_CFG80211_WEXT is not set CONFIG_CFG80211_ALLOW_RECONNECT=y +CONFIG_MAC80211=y +CONFIG_MAC80211_DEBUG_MENU=y CONFIG_RFKILL=y CONFIG_SYNC=y CONFIG_ZRAM=y @@ -232,6 +237,10 @@ CONFIG_IFB=y CONFIG_DUMMY=y CONFIG_TUN=y CONFIG_WIFI_CONTROL_FUNC=y +CONFIG_ATH_COMMON=y +CONFIG_ATH_DEBUG=y +CONFIG_ATH9K_HTC=y +CONFIG_ATH9K_HTC_DEBUGFS=y CONFIG_BCMDHD=m CONFIG_BCMDHD_FW_PATH="/system/vendor/firmware/fw_bcmdhd.bin" CONFIG_BCMDHD_NVRAM_PATH="/system/etc/wifi/nvram_net.txt" @@ -455,7 +464,6 @@ CONFIG_KEYS_DEBUG_PROC_KEYS=y CONFIG_SECURITY=y CONFIG_SECURITY_NETWORK=y CONFIG_SECURITY_SELINUX=y -CONFIG_SECURITY_MIDDLEWARE_COMPONENT=y CONFIG_CRYPTO_MD4=y CONFIG_CRYPTO_SHA256=y CONFIG_CRYPTO_TWOFISH=y -- cgit v1.1