From b86bf6bd9bc1522e72091b4e168cc8bccba1e972 Mon Sep 17 00:00:00 2001 From: Nils Freydank Date: Thu, 12 Aug 2021 16:51:43 +0200 Subject: [PATCH] aptenodytes: Configure modules - signing - signing with SHA512 - compression with XZ - trimming of unused symbols --- aptenodytes-config | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/aptenodytes-config b/aptenodytes-config index 1eeab66..eb4a857 100644 --- a/aptenodytes-config +++ b/aptenodytes-config @@ -716,21 +716,22 @@ CONFIG_MODVERSIONS=y CONFIG_ASM_MODVERSIONS=y # CONFIG_MODULE_SRCVERSION_ALL is not set CONFIG_MODULE_SIG=y -# CONFIG_MODULE_SIG_FORCE is not set +CONFIG_MODULE_SIG_FORCE=y CONFIG_MODULE_SIG_ALL=y -CONFIG_MODULE_SIG_SHA1=y +# CONFIG_MODULE_SIG_SHA1 is not set # CONFIG_MODULE_SIG_SHA224 is not set # CONFIG_MODULE_SIG_SHA256 is not set # CONFIG_MODULE_SIG_SHA384 is not set -# CONFIG_MODULE_SIG_SHA512 is not set -CONFIG_MODULE_SIG_HASH="sha1" -CONFIG_MODULE_COMPRESS_NONE=y +CONFIG_MODULE_SIG_SHA512=y +CONFIG_MODULE_SIG_HASH="sha512" +# CONFIG_MODULE_COMPRESS_NONE is not set # CONFIG_MODULE_COMPRESS_GZIP is not set -# CONFIG_MODULE_COMPRESS_XZ is not set +CONFIG_MODULE_COMPRESS_XZ=y # CONFIG_MODULE_COMPRESS_ZSTD is not set # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set CONFIG_MODPROBE_PATH="/sbin/modprobe" -# CONFIG_TRIM_UNUSED_KSYMS is not set +CONFIG_TRIM_UNUSED_KSYMS=y +CONFIG_UNUSED_KSYMS_WHITELIST="" CONFIG_MODULES_TREE_LOOKUP=y CONFIG_BLOCK=y CONFIG_BLK_RQ_ALLOC_TIME=y