diff mbox series

[08/21] linux: Compile binfmt_misc as a module

Message ID	901fdb4c-371d-520c-3720-03a73a2840ed@ipfire.org
State	Accepted
Headers	Message-ID: <901fdb4c-371d-520c-3720-03a73a2840ed@ipfire.org> Date: Mon, 26 Dec 2022 19:27:11 +0000 MIME-Version: 1.0 Subject: [PATCH 08/21] linux: Compile binfmt_misc as a module Content-Language: en-US To: development@lists.ipfire.org References: <0e60a1de-6210-835e-54a4-ec5e3128e42e@ipfire.org> From: =?utf-8?q?Peter_M=C3=BCller?= <peter.mueller@ipfire.org> In-Reply-To: <0e60a1de-6210-835e-54a4-ec5e3128e42e@ipfire.org> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Precedence: list Errors-To: development-bounces@lists.ipfire.org Sender: "Development" <development-bounces@lists.ipfire.org>
Series	linux: Update to 5.15.85 and backport many IPFire 3.x changes \| [00/21] linux: Update to 5.15.85 and backport many IPFire 3.x changes [01/21] linux: Update to 5.15.85 [02/21] linux: Disable the entire PCMCIA/CardBus subsystem [03/21] linux: Enable parallel crypto by default [04/21] linux: Disable syscalls that allows processes to r/w other processes' memory [05/21] linux: Disable the latent entropy plugin [06/21] linux: Build all library routines as modules and disable self-tests [07/21] linux: Build all HWRNGs as modules [08/21] linux: Compile binfmt_misc as a module [09/21] linux: Wipe all memory when rebooting on EFI [10/21] linux: Disable the Distributed Lock Manager [11/21] linux: Disable some character devices that do not make sense [12/21] linux: Make graphics configruation sane [13/21] linux: Disable all sorts of useless Device Mapper targets [14/21] linux: Enable various modern ciphers/hashes/etc. and acceleration [15/21] linux: Compress the kernel, modules and firmware using Zstandard [16/21] linux: Disable ACPI configfs support [17/21] linux: Enable support for more USB host controllers as modules [18/21] linux: Poison kernel stack before returning from syscalls [19/21] linux: Enable Landlock support [20/21] linux: Update x86_64 rootfile [21/21] linux: Align ARM kernel configurations as much as possible

Commit Message

Peter Müller Dec. 26, 2022, 7:27 p.m. UTC

  Backported from IPFire 3.x as aea3e8471c0c11d4a5a1164efbe7c7c948667b6e.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
---
 config/kernel/kernel.config.x86_64-ipfire | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Comments

Michael Tremer Dec. 27, 2022, 11:23 a.m. UTC | #1

I believe some people see this as a security feature.

In IPFire 2 we don’t use this I think, so a module will be just fine.

Acked-by: Michael Tremer <michael.tremer@ipfire.org>

> On 26 Dec 2022, at 20:27, Peter Müller <peter.mueller@ipfire.org> wrote:
> 
> Backported from IPFire 3.x as aea3e8471c0c11d4a5a1164efbe7c7c948667b6e.
> 
> Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
> ---
> config/kernel/kernel.config.x86_64-ipfire | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/config/kernel/kernel.config.x86_64-ipfire b/config/kernel/kernel.config.x86_64-ipfire
> index e3a57b18a..519fc8770 100644
> --- a/config/kernel/kernel.config.x86_64-ipfire
> +++ b/config/kernel/kernel.config.x86_64-ipfire
> @@ -902,7 +902,7 @@ CONFIG_COMPAT_BINFMT_ELF=y
> CONFIG_ELFCORE=y
> CONFIG_CORE_DUMP_DEFAULT_ELF_HEADERS=y
> CONFIG_BINFMT_SCRIPT=y
> -CONFIG_BINFMT_MISC=y
> +CONFIG_BINFMT_MISC=m
> CONFIG_COREDUMP=y
> # end of Executable file formats
> 
> -- 
> 2.35.3

diff mbox series

Patch

diff --git a/config/kernel/kernel.config.x86_64-ipfire b/config/kernel/kernel.config.x86_64-ipfire
index e3a57b18a..519fc8770 100644
--- a/config/kernel/kernel.config.x86_64-ipfire
+++ b/config/kernel/kernel.config.x86_64-ipfire
@@ -902,7 +902,7 @@  CONFIG_COMPAT_BINFMT_ELF=y
 CONFIG_ELFCORE=y
 CONFIG_CORE_DUMP_DEFAULT_ELF_HEADERS=y
 CONFIG_BINFMT_SCRIPT=y
-CONFIG_BINFMT_MISC=y
+CONFIG_BINFMT_MISC=m
 CONFIG_COREDUMP=y
 # end of Executable file formats