- 5.4.211

[packages/kernel.git] / kernel-multiarch.config

diff --git a/kernel-multiarch.config b/kernel-multiarch.config
index f5768771e95eadc4814c6bf23cf5596e4daadc5f..0d950aa6528c2b558ebc1c006a83b17b913a9d75 100644 (file)
--- a/kernel-multiarch.config
+++ b/kernel-multiarch.config
@@ -119,6 +119,8 @@ SYSTEM_EXTRA_CERTIFICATE_SIZE all=4096
 SECONDARY_TRUSTED_KEYRING all=y
 SYSTEM_BLACKLIST_KEYRING all=y
 SYSTEM_BLACKLIST_HASH_LIST all=""
+SYSTEM_REVOCATION_LIST all=y
+SYSTEM_REVOCATION_KEYS all=""
 
 #-
 #- *** FILE: crypto/Kconfig ***
@@ -566,6 +568,7 @@ BCMA_DEBUG all=n
 BLK_DEV all=y
 BLK_DEV_NULL_BLK all=m
 BLK_DEV_FD all=m sparc=y
+BLK_DEV_FD_RAWCMD all=y
 MAC_FLOPPY ppc=m
 PARIDE all=m
 #- file drivers/block/paride/Kconfig goes here
@@ -725,8 +728,8 @@ TELCLOCK i386=m x86_64=m
 DEVPORT all=y
 #- file drivers/s390/char/Kconfig goes here
 #- file drivers/char/xillybus/Kconfig goes here
-RANDOM_TRUST_CPU all=n
-RANDOM_TRUST_BOOTLOADER all=n
+RANDOM_TRUST_CPU all=y
+RANDOM_TRUST_BOOTLOADER all=y
 
 #-
 #- *** FILE: drivers/char/agp/Kconfig ***
@@ -10415,6 +10418,7 @@ KALLSYMS_ABSOLUTE_PERCPU all=y
 KALLSYMS_BASE_RELATIVE all=y
 BPF_SYSCALL all=y
 BPF_JIT_ALWAYS_ON all=y
+BPF_UNPRIV_DEFAULT_OFF all=y
 USERFAULTFD all=y
 EMBEDDED all=n
 PC104 all=y