diff mbox series

[09/21] linux: Wipe all memory when rebooting on EFI

Message ID	d3b90853-25aa-4c49-b9fd-c52f251db4d6@ipfire.org
State	Accepted
Commit	7a390182197285d03b3672ce450b3715016c36cc
Headers	Message-ID: <d3b90853-25aa-4c49-b9fd-c52f251db4d6@ipfire.org> Date: Mon, 26 Dec 2022 19:27:31 +0000 MIME-Version: 1.0 Subject: [PATCH 09/21] linux: Wipe all memory when rebooting on EFI Content-Language: en-US To: development@lists.ipfire.org References: <0e60a1de-6210-835e-54a4-ec5e3128e42e@ipfire.org> From: =?utf-8?q?Peter_M=C3=BCller?= <peter.mueller@ipfire.org> In-Reply-To: <0e60a1de-6210-835e-54a4-ec5e3128e42e@ipfire.org> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Precedence: list Errors-To: development-bounces@lists.ipfire.org Sender: "Development" <development-bounces@lists.ipfire.org>
Series	linux: Update to 5.15.85 and backport many IPFire 3.x changes \| [00/21] linux: Update to 5.15.85 and backport many IPFire 3.x changes [01/21] linux: Update to 5.15.85 [02/21] linux: Disable the entire PCMCIA/CardBus subsystem [03/21] linux: Enable parallel crypto by default [04/21] linux: Disable syscalls that allows processes to r/w other processes' memory [05/21] linux: Disable the latent entropy plugin [06/21] linux: Build all library routines as modules and disable self-tests [07/21] linux: Build all HWRNGs as modules [08/21] linux: Compile binfmt_misc as a module [09/21] linux: Wipe all memory when rebooting on EFI [10/21] linux: Disable the Distributed Lock Manager [11/21] linux: Disable some character devices that do not make sense [12/21] linux: Make graphics configruation sane [13/21] linux: Disable all sorts of useless Device Mapper targets [14/21] linux: Enable various modern ciphers/hashes/etc. and acceleration [15/21] linux: Compress the kernel, modules and firmware using Zstandard [16/21] linux: Disable ACPI configfs support [17/21] linux: Enable support for more USB host controllers as modules [18/21] linux: Poison kernel stack before returning from syscalls [19/21] linux: Enable Landlock support [20/21] linux: Update x86_64 rootfile [21/21] linux: Align ARM kernel configurations as much as possible

Commit Message

Peter Müller Dec. 26, 2022, 7:27 p.m. UTC

  Backported from IPFire 3.x as 49242a5661a550b370fff56f893df0983700ef32.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
---
 config/kernel/kernel.config.x86_64-ipfire | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Comments

Michael Tremer Dec. 27, 2022, 11:23 a.m. UTC | #1

Acked-by: Michael Tremer <michael.tremer@ipfire.org>

> On 26 Dec 2022, at 20:27, Peter Müller <peter.mueller@ipfire.org> wrote:
> 
> Backported from IPFire 3.x as 49242a5661a550b370fff56f893df0983700ef32.
> 
> Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
> ---
> config/kernel/kernel.config.x86_64-ipfire | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/config/kernel/kernel.config.x86_64-ipfire b/config/kernel/kernel.config.x86_64-ipfire
> index 519fc8770..39ca3af30 100644
> --- a/config/kernel/kernel.config.x86_64-ipfire
> +++ b/config/kernel/kernel.config.x86_64-ipfire
> @@ -1882,7 +1882,7 @@ CONFIG_EFI_GENERIC_STUB_INITRD_CMDLINE_LOADER=y
> # CONFIG_EFI_CAPSULE_LOADER is not set
> # CONFIG_EFI_TEST is not set
> # CONFIG_APPLE_PROPERTIES is not set
> -# CONFIG_RESET_ATTACK_MITIGATION is not set
> +CONFIG_RESET_ATTACK_MITIGATION=y
> # CONFIG_EFI_RCI2_TABLE is not set
> CONFIG_EFI_DISABLE_PCI_DMA=y
> # end of EFI (Extensible Firmware Interface) Support
> -- 
> 2.35.3

diff mbox series

Patch

diff --git a/config/kernel/kernel.config.x86_64-ipfire b/config/kernel/kernel.config.x86_64-ipfire
index 519fc8770..39ca3af30 100644
--- a/config/kernel/kernel.config.x86_64-ipfire
+++ b/config/kernel/kernel.config.x86_64-ipfire
@@ -1882,7 +1882,7 @@  CONFIG_EFI_GENERIC_STUB_INITRD_CMDLINE_LOADER=y
 # CONFIG_EFI_CAPSULE_LOADER is not set
 # CONFIG_EFI_TEST is not set
 # CONFIG_APPLE_PROPERTIES is not set
-# CONFIG_RESET_ATTACK_MITIGATION is not set
+CONFIG_RESET_ATTACK_MITIGATION=y
 # CONFIG_EFI_RCI2_TABLE is not set
 CONFIG_EFI_DISABLE_PCI_DMA=y
 # end of EFI (Extensible Firmware Interface) Support