From dd9448c6e3cb5beee097b5aa76b7b930283eefb9 Mon Sep 17 00:00:00 2001 From: Ywenrui44091 Date: Fri, 28 Jul 2023 11:00:51 +0800 Subject: [PATCH] =?UTF-8?q?=E8=AE=BE=E7=BD=AECONFIG=5FMODULE=5FSIG=3Dy?= =?UTF-8?q?=E5=92=8CCONFIG=5FMODULE=5FSIG=5FFORCE=3Dy=EF=BC=8C=E5=A2=9E?= =?UTF-8?q?=E5=BC=BASELinux=E5=AF=B9insmod=E7=9A=84=E7=AE=A1=E6=8E=A7?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Ywenrui44091 --- .../arch/arm/configs/hispark_phoenix_standard_defconfig | 1 - .../arch/arm/configs/hispark_taurus_small_defconfig | 1 - .../arch/arm/configs/hispark_taurus_standard_defconfig | 1 - .../arch/arm/configs/qemu-arm-linux_standard_defconfig | 1 - linux-5.10/arch/arm/configs/small_common_defconfig | 1 - linux-5.10/arch/arm/configs/standard_common_defconfig | 1 - linux-5.10/arch/arm64/configs/rk3399_standard_defconfig | 1 - linux-5.10/arch/arm64/configs/rk3568_standard_defconfig | 1 - .../arch/arm64/configs/unionpi_tiger_standard_defconfig | 1 - .../arch/x86/configs/qemu-x86_64-linux_standard_defconfig | 1 - linux-5.10/base_defconfig | 8 +++++++- linux-5.10/hispark_taurus/arch/arm_defconfig | 1 - linux-5.10/qemu/arch/arm_defconfig | 1 - linux-5.10/qemu/arch/x86_64_defconfig | 1 - linux-5.10/rk3568/arch/arm64_defconfig | 1 - linux-5.10/unionpi_tiger/arch/arm64_defconfig | 1 - linux-5.10/yangfan/arch/arm64_defconfig | 1 - 17 files changed, 7 insertions(+), 17 deletions(-) diff --git a/linux-5.10/arch/arm/configs/hispark_phoenix_standard_defconfig b/linux-5.10/arch/arm/configs/hispark_phoenix_standard_defconfig index b00a92b..0e2dfb7 100755 --- a/linux-5.10/arch/arm/configs/hispark_phoenix_standard_defconfig +++ b/linux-5.10/arch/arm/configs/hispark_phoenix_standard_defconfig @@ -588,7 +588,6 @@ CONFIG_MODULE_UNLOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_MODVERSIONS=y # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set # CONFIG_MODULE_COMPRESS is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set # CONFIG_UNUSED_SYMBOLS is not set diff --git a/linux-5.10/arch/arm/configs/hispark_taurus_small_defconfig b/linux-5.10/arch/arm/configs/hispark_taurus_small_defconfig index b0ccd33..8638129 100755 --- a/linux-5.10/arch/arm/configs/hispark_taurus_small_defconfig +++ b/linux-5.10/arch/arm/configs/hispark_taurus_small_defconfig @@ -622,7 +622,6 @@ CONFIG_MODULE_UNLOAD=y CONFIG_MODULE_FORCE_UNLOAD=y # CONFIG_MODVERSIONS is not set # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set # CONFIG_MODULE_COMPRESS is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set # CONFIG_UNUSED_SYMBOLS is not set diff --git a/linux-5.10/arch/arm/configs/hispark_taurus_standard_defconfig b/linux-5.10/arch/arm/configs/hispark_taurus_standard_defconfig index ccff75d..3bd8713 100755 --- a/linux-5.10/arch/arm/configs/hispark_taurus_standard_defconfig +++ b/linux-5.10/arch/arm/configs/hispark_taurus_standard_defconfig @@ -564,7 +564,6 @@ CONFIG_MODULE_UNLOAD=y CONFIG_MODULE_FORCE_UNLOAD=y # CONFIG_MODVERSIONS is not set # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set # CONFIG_MODULE_COMPRESS is not set # CONFIG_TRIM_UNUSED_KSYMS is not set CONFIG_BLOCK=y diff --git a/linux-5.10/arch/arm/configs/qemu-arm-linux_standard_defconfig b/linux-5.10/arch/arm/configs/qemu-arm-linux_standard_defconfig index b36fde6..54c5799 100755 --- a/linux-5.10/arch/arm/configs/qemu-arm-linux_standard_defconfig +++ b/linux-5.10/arch/arm/configs/qemu-arm-linux_standard_defconfig @@ -969,7 +969,6 @@ CONFIG_MODULE_UNLOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set # CONFIG_MODVERSIONS is not set # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set # CONFIG_MODULE_COMPRESS is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set # CONFIG_UNUSED_SYMBOLS is not set diff --git a/linux-5.10/arch/arm/configs/small_common_defconfig b/linux-5.10/arch/arm/configs/small_common_defconfig index 9f55199..06efc3e 100644 --- a/linux-5.10/arch/arm/configs/small_common_defconfig +++ b/linux-5.10/arch/arm/configs/small_common_defconfig @@ -540,7 +540,6 @@ CONFIG_MODULE_UNLOAD=y CONFIG_MODULE_FORCE_UNLOAD=y # CONFIG_MODVERSIONS is not set # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set # CONFIG_MODULE_COMPRESS is not set # CONFIG_TRIM_UNUSED_KSYMS is not set CONFIG_BLOCK=y diff --git a/linux-5.10/arch/arm/configs/standard_common_defconfig b/linux-5.10/arch/arm/configs/standard_common_defconfig index 6d87404..88877b1 100644 --- a/linux-5.10/arch/arm/configs/standard_common_defconfig +++ b/linux-5.10/arch/arm/configs/standard_common_defconfig @@ -528,7 +528,6 @@ CONFIG_MODULE_UNLOAD=y CONFIG_MODULE_FORCE_UNLOAD=y # CONFIG_MODVERSIONS is not set # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set # CONFIG_MODULE_COMPRESS is not set # CONFIG_TRIM_UNUSED_KSYMS is not set CONFIG_BLOCK=y diff --git a/linux-5.10/arch/arm64/configs/rk3399_standard_defconfig b/linux-5.10/arch/arm64/configs/rk3399_standard_defconfig index ef2e52d..9293d99 100644 --- a/linux-5.10/arch/arm64/configs/rk3399_standard_defconfig +++ b/linux-5.10/arch/arm64/configs/rk3399_standard_defconfig @@ -687,7 +687,6 @@ CONFIG_MODULE_UNLOAD=y CONFIG_MODULE_FORCE_UNLOAD=y # CONFIG_MODVERSIONS is not set # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set # CONFIG_MODULE_COMPRESS is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set # CONFIG_UNUSED_SYMBOLS is not set diff --git a/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig b/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig index cf80d8a..738ac9b 100644 --- a/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig +++ b/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig @@ -695,7 +695,6 @@ CONFIG_MODULE_UNLOAD=y CONFIG_MODULE_FORCE_UNLOAD=y # CONFIG_MODVERSIONS is not set # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set # CONFIG_MODULE_COMPRESS is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set # CONFIG_UNUSED_SYMBOLS is not set diff --git a/linux-5.10/arch/arm64/configs/unionpi_tiger_standard_defconfig b/linux-5.10/arch/arm64/configs/unionpi_tiger_standard_defconfig index ba9bda5..3906465 100755 --- a/linux-5.10/arch/arm64/configs/unionpi_tiger_standard_defconfig +++ b/linux-5.10/arch/arm64/configs/unionpi_tiger_standard_defconfig @@ -710,7 +710,6 @@ CONFIG_MODULE_UNLOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set # CONFIG_MODVERSIONS is not set # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set # CONFIG_MODULE_COMPRESS is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set # CONFIG_UNUSED_SYMBOLS is not set diff --git a/linux-5.10/arch/x86/configs/qemu-x86_64-linux_standard_defconfig b/linux-5.10/arch/x86/configs/qemu-x86_64-linux_standard_defconfig index 7da3bcf..c856eb8 100644 --- a/linux-5.10/arch/x86/configs/qemu-x86_64-linux_standard_defconfig +++ b/linux-5.10/arch/x86/configs/qemu-x86_64-linux_standard_defconfig @@ -777,7 +777,6 @@ CONFIG_MODULE_UNLOAD=y CONFIG_MODULE_FORCE_UNLOAD=y # CONFIG_MODVERSIONS is not set # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set # CONFIG_MODULE_COMPRESS is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set # CONFIG_UNUSED_SYMBOLS is not set diff --git a/linux-5.10/base_defconfig b/linux-5.10/base_defconfig index d6e9a19..2c37003 100644 --- a/linux-5.10/base_defconfig +++ b/linux-5.10/base_defconfig @@ -78,4 +78,10 @@ CONFIG_SECURITY=y #Security DMESG restrict # CONFIG_SECURITY_DMESG_RESTRICT=y -# end of Security DMESG restrict \ No newline at end of file +# end of Security DMESG restrict + +#Enhance SELinux's control over insmod +# +CONFIG_MODULE_SIG=y +CONFIG_MODULE_SIG_FORCE=y +#end of Enhance SELinux's control over insmod \ No newline at end of file diff --git a/linux-5.10/hispark_taurus/arch/arm_defconfig b/linux-5.10/hispark_taurus/arch/arm_defconfig index 048bae5..d5af6ca 100644 --- a/linux-5.10/hispark_taurus/arch/arm_defconfig +++ b/linux-5.10/hispark_taurus/arch/arm_defconfig @@ -653,7 +653,6 @@ CONFIG_MODULE_UNLOAD=y CONFIG_MODULE_FORCE_UNLOAD=y # CONFIG_MODVERSIONS is not set # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set # CONFIG_MODULE_COMPRESS is not set # CONFIG_TRIM_UNUSED_KSYMS is not set CONFIG_BLOCK=y diff --git a/linux-5.10/qemu/arch/arm_defconfig b/linux-5.10/qemu/arch/arm_defconfig index a3047f8..2c3b20f 100644 --- a/linux-5.10/qemu/arch/arm_defconfig +++ b/linux-5.10/qemu/arch/arm_defconfig @@ -814,7 +814,6 @@ CONFIG_ARCH_HAS_GCOV_PROFILE_ALL=y # CONFIG_MODULE_FORCE_UNLOAD is not set # CONFIG_MODVERSIONS is not set # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set # CONFIG_MODULE_COMPRESS is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set # CONFIG_UNUSED_SYMBOLS is not set diff --git a/linux-5.10/qemu/arch/x86_64_defconfig b/linux-5.10/qemu/arch/x86_64_defconfig index a6951a8..701495d 100644 --- a/linux-5.10/qemu/arch/x86_64_defconfig +++ b/linux-5.10/qemu/arch/x86_64_defconfig @@ -628,7 +628,6 @@ CONFIG_ARCH_HAS_GCOV_PROFILE_ALL=y CONFIG_MODULE_FORCE_UNLOAD=y # CONFIG_MODVERSIONS is not set # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set # CONFIG_MODULE_COMPRESS is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set # CONFIG_UNUSED_SYMBOLS is not set diff --git a/linux-5.10/rk3568/arch/arm64_defconfig b/linux-5.10/rk3568/arch/arm64_defconfig index c7d598e..c288471 100644 --- a/linux-5.10/rk3568/arch/arm64_defconfig +++ b/linux-5.10/rk3568/arch/arm64_defconfig @@ -495,7 +495,6 @@ CONFIG_ARCH_HAS_GCOV_PROFILE_ALL=y CONFIG_MODULE_FORCE_UNLOAD=y # CONFIG_MODVERSIONS is not set # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set # CONFIG_MODULE_COMPRESS is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set # CONFIG_UNUSED_SYMBOLS is not set diff --git a/linux-5.10/unionpi_tiger/arch/arm64_defconfig b/linux-5.10/unionpi_tiger/arch/arm64_defconfig index 1dfb7d7..e044207 100644 --- a/linux-5.10/unionpi_tiger/arch/arm64_defconfig +++ b/linux-5.10/unionpi_tiger/arch/arm64_defconfig @@ -506,7 +506,6 @@ CONFIG_ARCH_HAS_GCOV_PROFILE_ALL=y # CONFIG_MODULE_FORCE_UNLOAD is not set # CONFIG_MODVERSIONS is not set # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set # CONFIG_MODULE_COMPRESS is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set # CONFIG_UNUSED_SYMBOLS is not set diff --git a/linux-5.10/yangfan/arch/arm64_defconfig b/linux-5.10/yangfan/arch/arm64_defconfig index e5f78bf..78d14fe 100644 --- a/linux-5.10/yangfan/arch/arm64_defconfig +++ b/linux-5.10/yangfan/arch/arm64_defconfig @@ -482,7 +482,6 @@ CONFIG_ARCH_HAS_GCOV_PROFILE_ALL=y CONFIG_MODULE_FORCE_UNLOAD=y # CONFIG_MODVERSIONS is not set # CONFIG_MODULE_SRCVERSION_ALL is not set -# CONFIG_MODULE_SIG is not set # CONFIG_MODULE_COMPRESS is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set # CONFIG_UNUSED_SYMBOLS is not set -- Gitee