These drivers have had security problems and it is assumed that Android
devices or virtual guests will themselves not need to support hosting a
virtualized guest. Even with this change, virtualization is still
supported, just the in-kernel accelerators will be unavailable.
Bug: 131891260
Test: TreeHugger
Change-Id: Ib7d8b86a24558c75c5e61931059ef3aa294ffc09
Merged-In: Ib7d8b86a24558c75c5e61931059ef3aa294ffc09
Signed-off-by: Alistair Delva <adelva@google.com>
Android does not use per-cgroup CPU allowance for RT tasks feature.
Disable it so that RT task allowance is controlled globally using
/proc/sys/kernel/sched_rt_runtime_us.
Bug: 149954332
Test: TreeHugger
Change-Id: I63fe994732d9abb0119a79870f4c3c772db75aa7
Suggested-by: Snild Dolkow <snild@sony.com>
Signed-off-by: Suren Baghdasaryan <surenb@google.com>
Merged-In: I63fe994732d9abb0119a79870f4c3c772db75aa7
The MD4 digest algorithm is heavily broken and obsolete, and there
shouldn't be any reason for it to be enabled in the kernel's crypto API.
So let's require that it not be enabled.
(Note: explicitly handling MD4 does *not* mean that it's fine to use
every other crypto algorithm. MD4 is just a particularly obvious case,
which previously was unnecessarily enabled in GKI. So there was a good
opportunity to make this change together with disabling it in GKI.)
Bug: 150302692
Test: Treehugger
Change-Id: I8884c24d50cf3e33eb5e3b1db46578cd6c3bfaef
Merged-In: I8884c24d50cf3e33eb5e3b1db46578cd6c3bfaef
The CDD requires file-based encryption on all devices launched with Q or
higher.
Also, in android-4.14 and later the filesystem-specific kconfig options
CONFIG_EXT4_ENCRYPTION and CONFIG_F2FS_FS_ENCRYPTION have been replaced
with a single option CONFIG_FS_ENCRYPTION. (In android-4.14 and
android-4.19 the old names are still allowed for compatibility, but both
just select CONFIG_FS_ENCRYPTION.)
Thus, start requiring CONFIG_FS_ENCRYPTION=y.
Bug: 150245658
Test: Treehugger
Change-Id: Ia08ce7adadf3f32d27e565f5be54085bf9c711ee
Merged-In: Ia08ce7adadf3f32d27e565f5be54085bf9c711ee
There will be no immutable GKI modules for the R release.
Vendors may have the option to enable IKHEADERS as a module
for non GKI builds.
5.4 is allowed only as a GKI. Note the difference in configuration
for IKHEADERS between 5.4 and 4.14/4.19.
Bug: 143488798
Test: Treehugger
Change-Id: I775b6cf0122d69345ee6d7f06561d0ffb6316559
With adoption of PSI events as low memory notification mechanism MEMCG
becomes optional and PSI becomes mandatory. Note that MEMCG can still be
used for instance in Android Go devices but it's not mandatory anymore.
Bug: 147468269
Test: CtsKernelConfigTestCases on a system with CONFIG_MEMCG=n
Change-Id: I379f2a386f81342af8375c1ef510ae7a5e1ae914
Signed-off-by: Suren Baghdasaryan <surenb@google.com>
This requirement is obsolete and the common kernel no longer supports
the feature. An alternative has been devised, see "perf_event: Add
support for LSM and SELinux checks" upstream.
Bug: 137092007
Link: https://lore.kernel.org/lkml/20191014170308.70668-1-joel@joelfernandes.org/
Change-Id: I4bb1f1d3cf659c663367c091cf730480e1d03337
Signed-off-by: Alistair Delva <adelva@google.com>
Quota logging is needed to enable data metering.
Bug: 147203196
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: Icf223e83be1c979c95d1622d5a13b3a68716e6e2
The CTS tests in CtsHardwareTestCases are required for all Android
devices. In order to pass these tests, several kernel configs must be
enabled. Make these configs mandatory to help OEMs pass the CTS tests.
Configs moved from 'recommended' to 'base':
HID_GENERIC (covered by AsusGamepadTest)
HID_SONY (covered by SonyDualshock4Test)
INPUT
INPUT_EVDEV
INPUT_JOYSTICK
JOYSTICK_XPAD
UHID
Configs added to 'recommended':
HID_STEAM
As more tests are added, more configs will be added to 'base' or
'recommended'.
Bug: 136263708
Test: cross-checked with pixel configs
Change-Id: Ie2790d33d6f9df7526477a3691882f9757043c7b
