mirror of
https://github.com/openwrt/openwrt.git
synced 2024-12-22 15:02:32 +00:00
b3f95490b9
This adds initial support for kernel 4.14 based on the patches for kernel 4.9. In the configuration I deactivated some of the new possible security features like: CONFIG_REFCOUNT_FULL CONFIG_SLAB_FREELIST_HARDENED CONFIG_SOFTLOCKUP_DETECTOR CONFIG_WARN_ALL_UNSEEDED_RANDOM And these overlay FS options are also deactivated: CONFIG_OVERLAY_FS_INDEX CONFIG_OVERLAY_FS_REDIRECT_DIR I activated this: CONFIG_FORTIFY_SOURCE CONFIG_POSIX_TIMERS CONFIG_SLAB_MERGE_DEFAULT CONFIG_WATCHDOG_HANDLE_BOOT_ENABLED I am not sure if I did the porting correct for the following patches: target/linux/generic/backport-4.14/020-backport_netfilter_rtcache.patch target/linux/generic/hack-4.14/220-gc_sections.patch target/linux/generic/hack-4.14/321-powerpc_crtsavres_prereq.patch target/linux/generic/pending-4.14/305-mips_module_reloc.patch target/linux/generic/pending-4.14/611-netfilter_match_bypass_default_table.patch target/linux/generic/pending-4.14/680-NET-skip-GRO-for-foreign-MAC-addresses.patch Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
61 lines
1.9 KiB
Diff
61 lines
1.9 KiB
Diff
From fd1799b0bf5efa46dd3e6dfbbf3955564807e508 Mon Sep 17 00:00:00 2001
|
|
From: Felix Fietkau <nbd@nbd.name>
|
|
Date: Fri, 7 Jul 2017 17:12:51 +0200
|
|
Subject: kernel: prevent cryptomgr from pulling in useless extra dependencies for tests that are not run
|
|
|
|
Reduces kernel size after LZMA by about 5k on MIPS
|
|
|
|
lede-commit: 044c316167e076479a344c59905e5b435b84a77f
|
|
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
|
---
|
|
crypto/Kconfig | 13 ++++++-------
|
|
crypto/algboss.c | 4 ++++
|
|
2 files changed, 10 insertions(+), 7 deletions(-)
|
|
|
|
--- a/crypto/Kconfig
|
|
+++ b/crypto/Kconfig
|
|
@@ -143,13 +143,13 @@ config CRYPTO_MANAGER
|
|
cbc(aes).
|
|
|
|
config CRYPTO_MANAGER2
|
|
- def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
|
|
- select CRYPTO_AEAD2
|
|
- select CRYPTO_HASH2
|
|
- select CRYPTO_BLKCIPHER2
|
|
- select CRYPTO_AKCIPHER2
|
|
- select CRYPTO_KPP2
|
|
- select CRYPTO_ACOMP2
|
|
+ def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y && !CRYPTO_MANAGER_DISABLE_TESTS)
|
|
+ select CRYPTO_AEAD2 if !CRYPTO_MANAGER_DISABLE_TESTS
|
|
+ select CRYPTO_HASH2 if !CRYPTO_MANAGER_DISABLE_TESTS
|
|
+ select CRYPTO_BLKCIPHER2 if !CRYPTO_MANAGER_DISABLE_TESTS
|
|
+ select CRYPTO_AKCIPHER2 if !CRYPTO_MANAGER_DISABLE_TESTS
|
|
+ select CRYPTO_KPP2 if !CRYPTO_MANAGER_DISABLE_TESTS
|
|
+ select CRYPTO_ACOMP2 if !CRYPTO_MANAGER_DISABLE_TESTS
|
|
|
|
config CRYPTO_USER
|
|
tristate "Userspace cryptographic algorithm configuration"
|
|
@@ -162,7 +162,6 @@ config CRYPTO_USER
|
|
config CRYPTO_MANAGER_DISABLE_TESTS
|
|
bool "Disable run-time self tests"
|
|
default y
|
|
- depends on CRYPTO_MANAGER2
|
|
help
|
|
Disable run-time self tests that normally take place at
|
|
algorithm registration.
|
|
--- a/crypto/algboss.c
|
|
+++ b/crypto/algboss.c
|
|
@@ -248,8 +248,12 @@ static int cryptomgr_schedule_test(struc
|
|
type = alg->cra_flags;
|
|
|
|
/* Do not test internal algorithms. */
|
|
+#ifdef CONFIG_CRYPTO_MANAGER_DISABLE_TESTS
|
|
+ type |= CRYPTO_ALG_TESTED;
|
|
+#else
|
|
if (type & CRYPTO_ALG_INTERNAL)
|
|
type |= CRYPTO_ALG_TESTED;
|
|
+#endif
|
|
|
|
param->type = type;
|
|
|