diff mbox series

[05/21] linux: Disable the latent entropy plugin

Message ID	be08cd59-1786-fc43-0b30-a9b2826d29bb@ipfire.org
State	Accepted
Commit	6647dd5c5cb21da833ecd5a1459e445faf7007fd
Headers	Message-ID: <be08cd59-1786-fc43-0b30-a9b2826d29bb@ipfire.org> Date: Mon, 26 Dec 2022 19:26:08 +0000 MIME-Version: 1.0 Subject: [PATCH 05/21] linux: Disable the latent entropy plugin Content-Language: en-US To: development@lists.ipfire.org References: <0e60a1de-6210-835e-54a4-ec5e3128e42e@ipfire.org> From: =?utf-8?q?Peter_M=C3=BCller?= <peter.mueller@ipfire.org> In-Reply-To: <0e60a1de-6210-835e-54a4-ec5e3128e42e@ipfire.org> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Precedence: list Errors-To: development-bounces@lists.ipfire.org Sender: "Development" <development-bounces@lists.ipfire.org>
Series	linux: Update to 5.15.85 and backport many IPFire 3.x changes \| [00/21] linux: Update to 5.15.85 and backport many IPFire 3.x changes [01/21] linux: Update to 5.15.85 [02/21] linux: Disable the entire PCMCIA/CardBus subsystem [03/21] linux: Enable parallel crypto by default [04/21] linux: Disable syscalls that allows processes to r/w other processes' memory [05/21] linux: Disable the latent entropy plugin [06/21] linux: Build all library routines as modules and disable self-tests [07/21] linux: Build all HWRNGs as modules [08/21] linux: Compile binfmt_misc as a module [09/21] linux: Wipe all memory when rebooting on EFI [10/21] linux: Disable the Distributed Lock Manager [11/21] linux: Disable some character devices that do not make sense [12/21] linux: Make graphics configruation sane [13/21] linux: Disable all sorts of useless Device Mapper targets [14/21] linux: Enable various modern ciphers/hashes/etc. and acceleration [15/21] linux: Compress the kernel, modules and firmware using Zstandard [16/21] linux: Disable ACPI configfs support [17/21] linux: Enable support for more USB host controllers as modules [18/21] linux: Poison kernel stack before returning from syscalls [19/21] linux: Enable Landlock support [20/21] linux: Update x86_64 rootfile [21/21] linux: Align ARM kernel configurations as much as possible

Commit Message

Peter Müller Dec. 26, 2022, 7:26 p.m. UTC

  It does not generate cryptographically secure entropy.

Backported from IPFire 3.x as 6aea180b26906f001611dcc0c54f494818069d8c.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
---
 config/kernel/kernel.config.x86_64-ipfire | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Comments

Michael Tremer Dec. 27, 2022, 11:22 a.m. UTC | #1

Acked-by: Michael Tremer <michael.tremer@ipfire.org>

> On 26 Dec 2022, at 20:26, Peter Müller <peter.mueller@ipfire.org> wrote:
> 
> It does not generate cryptographically secure entropy.
> 
> Backported from IPFire 3.x as 6aea180b26906f001611dcc0c54f494818069d8c.
> 
> Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
> ---
> config/kernel/kernel.config.x86_64-ipfire | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/config/kernel/kernel.config.x86_64-ipfire b/config/kernel/kernel.config.x86_64-ipfire
> index 663dd444b..4e7f98b6b 100644
> --- a/config/kernel/kernel.config.x86_64-ipfire
> +++ b/config/kernel/kernel.config.x86_64-ipfire
> @@ -782,7 +782,7 @@ CONFIG_ARCH_HAS_GCOV_PROFILE_ALL=y
> CONFIG_HAVE_GCC_PLUGINS=y
> CONFIG_GCC_PLUGINS=y
> # CONFIG_GCC_PLUGIN_CYC_COMPLEXITY is not set
> -CONFIG_GCC_PLUGIN_LATENT_ENTROPY=y
> +# CONFIG_GCC_PLUGIN_LATENT_ENTROPY is not set
> # CONFIG_GCC_PLUGIN_RANDSTRUCT is not set
> # end of General architecture-dependent options
> 
> -- 
> 2.35.3

diff mbox series

Patch

diff --git a/config/kernel/kernel.config.x86_64-ipfire b/config/kernel/kernel.config.x86_64-ipfire
index 663dd444b..4e7f98b6b 100644
--- a/config/kernel/kernel.config.x86_64-ipfire
+++ b/config/kernel/kernel.config.x86_64-ipfire
@@ -782,7 +782,7 @@  CONFIG_ARCH_HAS_GCOV_PROFILE_ALL=y
 CONFIG_HAVE_GCC_PLUGINS=y
 CONFIG_GCC_PLUGINS=y
 # CONFIG_GCC_PLUGIN_CYC_COMPLEXITY is not set
-CONFIG_GCC_PLUGIN_LATENT_ENTROPY=y
+# CONFIG_GCC_PLUGIN_LATENT_ENTROPY is not set
 # CONFIG_GCC_PLUGIN_RANDSTRUCT is not set
 # end of General architecture-dependent options