mirror of
https://github.com/openwrt/openwrt.git
synced 2024-12-27 01:11:14 +00:00
77e3e706ce
In 4.14.57, a new symbol for Spectre v4 mitigation was introduced for ARM64. Add this symbol to all ARM64 targets using kernel 4.14. This mitigates CVE-2018-3639 on ARM64. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
187 lines
5.2 KiB
Plaintext
187 lines
5.2 KiB
Plaintext
CONFIG_64BIT=y
|
|
# CONFIG_ACPI is not set
|
|
CONFIG_ARCH_DMA_ADDR_T_64BIT=y
|
|
CONFIG_ARCH_HAS_CACHE_LINE_SIZE=y
|
|
CONFIG_ARCH_HAS_GIGANTIC_PAGE=y
|
|
CONFIG_ARCH_HAS_HOLES_MEMORYMODEL=y
|
|
CONFIG_ARCH_HAS_KCOV=y
|
|
CONFIG_ARCH_MMAP_RND_BITS=18
|
|
CONFIG_ARCH_MMAP_RND_BITS_MAX=24
|
|
CONFIG_ARCH_MMAP_RND_BITS_MIN=18
|
|
CONFIG_ARCH_MMAP_RND_COMPAT_BITS=11
|
|
CONFIG_ARCH_MMAP_RND_COMPAT_BITS_MIN=11
|
|
CONFIG_ARCH_PHYS_ADDR_T_64BIT=y
|
|
CONFIG_ARCH_SELECT_MEMORY_MODEL=y
|
|
CONFIG_ARCH_SPARSEMEM_DEFAULT=y
|
|
CONFIG_ARCH_SPARSEMEM_ENABLE=y
|
|
CONFIG_ARCH_SUPPORTS_DEBUG_PAGEALLOC=y
|
|
CONFIG_ARCH_SUPPORTS_NUMA_BALANCING=y
|
|
CONFIG_ARCH_VEXPRESS=y
|
|
CONFIG_ARCH_WANT_COMPAT_IPC_PARSE_VERSION=y
|
|
CONFIG_ARCH_WANT_FRAME_POINTERS=y
|
|
CONFIG_ARCH_WANT_HUGE_PMD_SHARE=y
|
|
CONFIG_ARM64=y
|
|
# CONFIG_ARM64_16K_PAGES is not set
|
|
CONFIG_ARM64_4K_PAGES=y
|
|
# CONFIG_ARM64_64K_PAGES is not set
|
|
CONFIG_ARM64_CONT_SHIFT=4
|
|
CONFIG_ARM64_CRYPTO=y
|
|
CONFIG_ARM64_ERRATUM_819472=y
|
|
CONFIG_ARM64_ERRATUM_824069=y
|
|
CONFIG_ARM64_ERRATUM_826319=y
|
|
CONFIG_ARM64_ERRATUM_827319=y
|
|
CONFIG_ARM64_ERRATUM_832075=y
|
|
CONFIG_ARM64_ERRATUM_843419=y
|
|
CONFIG_ARM64_ERRATUM_845719=y
|
|
CONFIG_ARM64_HW_AFDBM=y
|
|
# CONFIG_ARM64_LSE_ATOMICS is not set
|
|
CONFIG_ARM64_MODULE_CMODEL_LARGE=y
|
|
CONFIG_ARM64_PAGE_SHIFT=12
|
|
CONFIG_ARM64_PAN=y
|
|
# CONFIG_ARM64_PMEM is not set
|
|
# CONFIG_ARM64_PTDUMP is not set
|
|
# CONFIG_ARM64_PTDUMP_DEBUGFS is not set
|
|
# CONFIG_ARM64_RANDOMIZE_TEXT_OFFSET is not set
|
|
CONFIG_ARM64_SSBD=y
|
|
# CONFIG_ARM64_SW_TTBR0_PAN is not set
|
|
CONFIG_ARM64_UAO=y
|
|
CONFIG_ARM64_VA_BITS=39
|
|
CONFIG_ARM64_VA_BITS_39=y
|
|
# CONFIG_ARM64_VA_BITS_48 is not set
|
|
CONFIG_ARM64_VHE=y
|
|
# CONFIG_ARMV8_DEPRECATED is not set
|
|
CONFIG_ARM_GIC_V3_ITS=y
|
|
CONFIG_ARM_PMU=y
|
|
# CONFIG_ARM_SBSA_WATCHDOG is not set
|
|
CONFIG_ATOMIC64_SELFTEST=y
|
|
CONFIG_AUDIT_ARCH_COMPAT_GENERIC=y
|
|
CONFIG_BACKLIGHT_CLASS_DEVICE=y
|
|
CONFIG_BACKLIGHT_LCD_SUPPORT=y
|
|
CONFIG_BLOCK_COMPAT=y
|
|
CONFIG_BOUNCE=y
|
|
CONFIG_CLKSRC_MMIO=y
|
|
CONFIG_CLKSRC_VERSATILE=y
|
|
CONFIG_CLK_SP810=y
|
|
CONFIG_CLK_VEXPRESS_OSC=y
|
|
CONFIG_COMMON_CLK_VERSATILE=y
|
|
# CONFIG_COMMON_CLK_XGENE is not set
|
|
CONFIG_COMPAT=y
|
|
CONFIG_COMPAT_BINFMT_ELF=y
|
|
CONFIG_COMPAT_NETLINK_MESSAGES=y
|
|
CONFIG_COMPAT_OLD_SIGACTION=y
|
|
# CONFIG_CPU_BIG_ENDIAN is not set
|
|
CONFIG_CPU_IDLE=y
|
|
# CONFIG_CPU_IDLE_GOV_LADDER is not set
|
|
CONFIG_CPU_IDLE_GOV_MENU=y
|
|
CONFIG_CPU_PM=y
|
|
CONFIG_CRYPTO_ABLK_HELPER=y
|
|
CONFIG_CRYPTO_AES_ARM64_BS=y
|
|
CONFIG_CRYPTO_AES_ARM64_CE=y
|
|
CONFIG_CRYPTO_AES_ARM64_CE_BLK=y
|
|
CONFIG_CRYPTO_AES_ARM64_CE_CCM=y
|
|
CONFIG_CRYPTO_AES_ARM64_NEON_BLK=y
|
|
CONFIG_CRYPTO_CHACHA20_NEON=y
|
|
CONFIG_CRYPTO_CRC32_ARM64=y
|
|
CONFIG_CRYPTO_CRC32_ARM64_CE=y
|
|
CONFIG_CRYPTO_CRYPTD=y
|
|
# CONFIG_CRYPTO_DEV_CAVIUM_ZIP is not set
|
|
CONFIG_CRYPTO_GHASH_ARM64_CE=y
|
|
CONFIG_CRYPTO_SHA1_ARM64_CE=y
|
|
CONFIG_CRYPTO_SHA2_ARM64_CE=y
|
|
CONFIG_CRYPTO_SHA512_ARM64=y
|
|
# CONFIG_DEBUG_ALIGN_RODATA is not set
|
|
CONFIG_DEBUG_BUGVERBOSE=y
|
|
CONFIG_DEBUG_RODATA=y
|
|
CONFIG_FB=y
|
|
CONFIG_FB_ARMCLCD=y
|
|
CONFIG_FB_CFB_COPYAREA=y
|
|
CONFIG_FB_CFB_FILLRECT=y
|
|
CONFIG_FB_CFB_IMAGEBLIT=y
|
|
CONFIG_FB_CMDLINE=y
|
|
CONFIG_FB_MODE_HELPERS=y
|
|
CONFIG_FSL_ERRATUM_A008585=y
|
|
# CONFIG_FSL_MC_BUS is not set
|
|
CONFIG_GENERIC_BUG_RELATIVE_POINTERS=y
|
|
CONFIG_GENERIC_CPU_AUTOPROBE=y
|
|
CONFIG_GENERIC_CSUM=y
|
|
CONFIG_GENERIC_TIME_VSYSCALL=y
|
|
CONFIG_GPIO_GENERIC=y
|
|
CONFIG_GPIO_GENERIC_PLATFORM=y
|
|
CONFIG_HARDEN_BRANCH_PREDICTOR=y
|
|
CONFIG_HAVE_ALIGNED_STRUCT_PAGE=y
|
|
CONFIG_HAVE_ARCH_HUGE_VMAP=y
|
|
CONFIG_HAVE_ARCH_KASAN=y
|
|
CONFIG_HAVE_ARCH_MMAP_RND_COMPAT_BITS=y
|
|
CONFIG_HAVE_ARCH_TRANSPARENT_HUGEPAGE=y
|
|
CONFIG_HAVE_CMPXCHG_DOUBLE=y
|
|
CONFIG_HAVE_CMPXCHG_LOCAL=y
|
|
CONFIG_HAVE_DEBUG_BUGVERBOSE=y
|
|
CONFIG_HAVE_EBPF_JIT=y
|
|
CONFIG_HAVE_GENERIC_RCU_GUP=y
|
|
CONFIG_HAVE_MEMORY_PRESENT=y
|
|
CONFIG_HAVE_PATA_PLATFORM=y
|
|
CONFIG_HAVE_RCU_TABLE_FREE=y
|
|
# CONFIG_HUGETLBFS is not set
|
|
CONFIG_HW_RANDOM=y
|
|
# CONFIG_HW_RANDOM_CAVIUM is not set
|
|
CONFIG_HW_RANDOM_VIRTIO=y
|
|
CONFIG_ILLEGAL_POINTER_VALUE=0xdead000000000000
|
|
CONFIG_LCD_CLASS_DEVICE=m
|
|
# CONFIG_LCD_PLATFORM is not set
|
|
# CONFIG_LIQUIDIO is not set
|
|
CONFIG_LZO_COMPRESS=y
|
|
CONFIG_LZO_DECOMPRESS=y
|
|
CONFIG_MFD_CORE=y
|
|
CONFIG_MFD_SYSCON=y
|
|
CONFIG_MFD_VEXPRESS_SYSREG=y
|
|
CONFIG_MMC=y
|
|
CONFIG_MMC_ARMMMCI=y
|
|
# CONFIG_MMC_CAVIUM_THUNDERX is not set
|
|
# CONFIG_MMC_TIFM_SD is not set
|
|
CONFIG_MODULES_USE_ELF_RELA=y
|
|
# CONFIG_MTD_PHYSMAP_OF is not set
|
|
CONFIG_NEED_SG_DMA_LENGTH=y
|
|
CONFIG_NO_HZ=y
|
|
CONFIG_NO_HZ_COMMON=y
|
|
CONFIG_NO_HZ_IDLE=y
|
|
CONFIG_NR_CPUS=64
|
|
# CONFIG_NUMA is not set
|
|
# CONFIG_PCIE_KIRIN is not set
|
|
CONFIG_PCI_BUS_ADDR_T_64BIT=y
|
|
# CONFIG_PCI_HISI is not set
|
|
# CONFIG_PCI_HOST_THUNDER_ECAM is not set
|
|
# CONFIG_PCI_HOST_THUNDER_PEM is not set
|
|
# CONFIG_PCI_XGENE is not set
|
|
CONFIG_PGTABLE_LEVELS=3
|
|
CONFIG_PHYS_ADDR_T_64BIT=y
|
|
# CONFIG_PHY_XGENE is not set
|
|
CONFIG_PM=y
|
|
CONFIG_PM_CLK=y
|
|
# CONFIG_PM_DEBUG is not set
|
|
CONFIG_PM_GENERIC_DOMAINS=y
|
|
CONFIG_PM_GENERIC_DOMAINS_OF=y
|
|
CONFIG_POWER_RESET=y
|
|
CONFIG_POWER_RESET_VEXPRESS=y
|
|
CONFIG_POWER_SUPPLY=y
|
|
# CONFIG_RANDOMIZE_BASE is not set
|
|
CONFIG_REGMAP=y
|
|
CONFIG_REGMAP_MMIO=y
|
|
CONFIG_SMC91X=y
|
|
CONFIG_SPARSEMEM=y
|
|
CONFIG_SPARSEMEM_EXTREME=y
|
|
CONFIG_SPARSEMEM_MANUAL=y
|
|
CONFIG_SPARSEMEM_VMEMMAP=y
|
|
CONFIG_SPARSEMEM_VMEMMAP_ENABLE=y
|
|
CONFIG_SYSCTL_EXCEPTION_TRACE=y
|
|
CONFIG_SYSVIPC_COMPAT=y
|
|
CONFIG_SYS_SUPPORTS_HUGETLBFS=y
|
|
# CONFIG_THUNDER_NIC_BGX is not set
|
|
# CONFIG_THUNDER_NIC_PF is not set
|
|
# CONFIG_THUNDER_NIC_RGX is not set
|
|
# CONFIG_THUNDER_NIC_VF is not set
|
|
CONFIG_UNMAP_KERNEL_AT_EL0=y
|
|
CONFIG_VEXPRESS_CONFIG=y
|
|
CONFIG_VEXPRESS_SYSCFG=y
|
|
CONFIG_VIDEOMODE_HELPERS=y
|
|
CONFIG_VMAP_STACK=y
|