Commit graph

17 commits

Author SHA1 Message Date
Maciej Żenczykowski
659aee1b68 Android U - require CONFIG_USB_NET_AQC111=y and CONFIG_USB_NET_CDC_NCM=y
These two drivers support every >1 gigabit usb ethernet dongle
I've managed to get my hands on.

In practice already enabled on GKI 5.10+ since S.
  $ for i in AND510{S,T} AND515T ANDM; do cd /git/$i; echo; echo $i; git grep '^CONFIG_USB_NET_AQC111=y$' | egrep gki_defconfig; done

  AND510S
  arch/arm64/configs/gki_defconfig:342:CONFIG_USB_NET_AQC111=y
  arch/x86/configs/gki_defconfig:314:CONFIG_USB_NET_AQC111=y

  AND510T
  arch/arm64/configs/gki_defconfig:354:CONFIG_USB_NET_AQC111=y
  arch/x86/configs/gki_defconfig:325:CONFIG_USB_NET_AQC111=y

  AND515T
  arch/arm64/configs/gki_defconfig:350:CONFIG_USB_NET_AQC111=y
  arch/x86/configs/gki_defconfig:320:CONFIG_USB_NET_AQC111=y

  ANDM
  arch/arm64/configs/gki_defconfig:342:CONFIG_USB_NET_AQC111=y
  arch/x86/configs/gki_defconfig:315:CONFIG_USB_NET_AQC111=y

(while CONFIG_USB_NET_CDC_NCM defaults to 'y')

Test: TreeHugger
Bug: 183564444
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: I6c9f71288d46c310c96bbfadfcf18a35a30e8511
2022-06-11 12:24:51 -07:00
Maciej Żenczykowski
1972a9b6c4 Android U - require CONFIG_IFB=y
Can be used for implementing better ingress rate limiting.

In practice already enabled on GKI 5.10+ since S.
  $ for i in AND510{S,T} AND515T ANDM; do cd /git/$i; echo; echo $i; git grep '^CONFIG_IFB=y$' | egrep gki_defconfig; done
  AND510S
  arch/arm64/configs/gki_defconfig:324:CONFIG_IFB=y
  arch/x86/configs/gki_defconfig:296:CONFIG_IFB=y

  AND510T
  arch/arm64/configs/gki_defconfig:337:CONFIG_IFB=y
  arch/x86/configs/gki_defconfig:308:CONFIG_IFB=y

  AND515T
  arch/arm64/configs/gki_defconfig:333:CONFIG_IFB=y
  arch/x86/configs/gki_defconfig:303:CONFIG_IFB=y

  ANDM
  arch/arm64/configs/gki_defconfig:325:CONFIG_IFB=y
  arch/x86/configs/gki_defconfig:298:CONFIG_IFB=y

Test: TreeHugger
Bug: 179454839
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: I04cf0ca5dae83d73f91b75b99fd6263c7e686aef
2022-06-11 12:23:43 -07:00
Patrick Rohr
d3c4f17124 require modules required for bandwidth limiting on 5.10+ T+
Test: TreeHugger
Bug: 157552970
Change-Id: I0095f5dbddc915e41efd5a7a8cdab5c34c5cf946
2022-05-20 11:13:58 +00:00
Yifan Hong
0fd1607884 Delete recommended kernel configs.
Now with GKI, we no longer recommend configs.

Test: TH
Bug: 230144764
Change-Id: I3f3f9401482603eb41d03870b1a233d31b54a367
Merged-In: I3f3f9401482603eb41d03870b1a233d31b54a367
2022-04-27 17:54:50 -07:00
Alexander Potapenko
4ca2ff98bf Merge "Require CONFIG_INIT_STACK_ALL_ZERO on arches that support it" 2022-02-07 18:55:16 +00:00
Jeff Vander Stoep
23acefc286 Disable CONFIG_VMAP_STACK for KASAN builds
Test: treehugger
Bug: 117194687
Signed-off-by: Jeff Vander Stoep <jeffv@google.com>
Change-Id: I876267ab4e44083215ae313de5e4897b06e9ec49
2022-02-07 10:53:11 +00:00
Alexander Potapenko
d8cafe2a98 Require CONFIG_INIT_STACK_ALL_ZERO on arches that support it
CONFIG_INIT_STACK_ALL_ZERO minimizes the effect of bugs caused by uninitialized locals, so we want to prevent it from being accidentally disabled.

Bug: 204439281
Bug: 205279854
Test: TreeHugger
Change-Id: I2014cd9bc2e3ebb8442ccc632c82619d62645dd4
2022-02-04 18:27:47 +00:00
Treehugger Robot
c9727b8ce3 Merge "Require CONFIG_VMAP_STACK on arches that support it" 2022-01-31 10:04:00 +00:00
Bob Badour
8e30736b3d Fix licenses and license texts.
No legacy_notice code remains. Everything appears to be Android 1p.

Test: m nothing
Change-Id: I25b66acf26102862e3e35ec72c2261b020df834e
2022-01-25 12:21:06 -08:00
Jeff Vander Stoep
5ef33e6af2 Require CONFIG_VMAP_STACK on arches that support it
Turns unbounded recursion in kernel code from being a potentially
exploitable bug into a crash.

This is likely a no-op. CONFIG_VMAP_STACK is already the default
on architectures that support it. CONFIG_VMAP_STACK has been
supported on x86_64 since 4.9 and on arm64 since 4.14. This change
is to prevent it from being accidentally disabled.

Test: On Pixel 5:
adb pull /proc/config.gz gunzip config.gz;
grep CONFIG_VMAP_STACK=y config
Bug: 117194687
Change-Id: I458d7a9d3a28b057b372a7456dbdeb3397423a15
Signed-off-by: Jeff Vander Stoep <jeffv@google.com>
2022-01-24 17:44:55 +00:00
Nick Desaulniers
1ede69c685 Revert "Revert "Require clang be used to assemble the kernel""
This reverts commit dd46951e69.

Reason for revert: downstream kernel projects failed an unrelated SELinux related test when they
updated from Android Common Kernel, so they rolled back their pull dropping the patches necessary
to make this test pass.

Bug: 210043760
Bug: 214384465
Change-Id: I0f591dfa23017fec00733891dad6ec286a697585
2022-01-14 18:57:39 +00:00
Jon Spivack
dd46951e69 Revert "Require clang be used to assemble the kernel"
This reverts commit 8631131e28.

Reason for revert: DroidMonitor-triggered revert due to breakage https://android-build.googleplex.com/builds/quarterdeck?branch=git_master&target=tangor-userdebug&lkgb=8077945&lkbb=8078056&fkbb=8078056, bug b/214440119

Bug: 214440119
Change-Id: Ib0b4c1d51333bba7ab989efd911c0783febb78d6
2022-01-13 23:25:15 +00:00
Nick Desaulniers
8631131e28 Require clang be used to assemble the kernel
Check that clang is used to assemble the kernel (CONFIG_AS_IS_LLVM).
This is implied by setting LLVM=1 in linux-5.15.y or LLVM_IAS=1 in
linux-5.10.y.

Bug: 209655537
Bug: 210043760
Bug: 213947595
Signed-off-by: Nick Desaulniers <ndesaulniers@google.com>
Change-Id: I131460e03a733444cc6167ecdc070db1477c854c
2022-01-10 16:37:38 -08:00
Nick Desaulniers
ca90813f54 Require clang and lld
These are already covered by vts_kernel_toolchain. Add the additional
requirements that clang be used as the compiler (CONFIG_CC_IS_CLANG=y)
and lld as the linker (CONFIG_LD_IS_LLD).

For Android:
* CC=clang was required for aarch64 in Q.
* CC=clang was required in R.
* LD=lld was required for S.

A follow up patch with additionally check for CONFIG_AS_IS_LLVM=y once
the dependencies are backported properly.

Bug: 209655537
Bug: 210043760
Test: Treehugger
Signed-off-by: Nick Desaulniers <ndesaulniers@google.com>
Change-Id: I0e54800d92323e7a9931914a054dd713eaea03c9
2021-12-10 12:50:15 -08:00
Jeff Vander Stoep
1e77afeaca Move kASLR from recommended to mandatory
Test: KernelConfigTest
Change-Id: I640f86c2c5742b13f1db24149f63b1eed9ffc52c
2021-12-01 19:24:08 +01:00
Alistair Delva
279960205f Drop useless non_debuggable.config file
This removes references to it in the Android.bp files as well.

Change-Id: I67d74bfb9a3f36825bca513e088fb1651132e7d7
2021-11-11 00:07:51 +00:00
Alistair Delva
3fdd2980cc Initial kernel/configs for 5.15
For now, these are identical to 5.10.

Change-Id: I91698856d855161e05e0a8997b42c469a800c2bf
2021-11-10 13:58:46 -08:00