gronod/lfs
1
0
Fork 0
mirror of https://git.linuxfromscratch.org/lfs.git synced 2025-06-18 19:29:21 +01:00
Code Issues Packages Projects Releases Wiki Activity

kernel: Recommend to disable CONFIG_EXPERT

Browse Source 
Let's not encourage users to try tricky things and shoot their own foot.

For systemd, if CONFIG_EXPERT is disable, CONFIG_FHANDLE will be enabled
automatically.  So there is no need to enable CONFIG_EXPERT and then set
CONFIG_FHANDLE manually.
This commit is contained in:
Xi Ruoyao 2023-03-08 11:01:18 +08:00
parent 271c856538
commit e0fb1098a4
No known key found for this signature in database
GPG Key ID: ACAAD20E19E710E3
1 changed files with 15 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
chapter10/kernel.xml
View File

@ -111,6 +111,7 @@
General setup --->
[ ] Compile the kernel with warnings as errors [CONFIG_WERROR]
< > Enable kernel headers through /sys/kernel/kheaders.tar.xz [CONFIG_IKHEADERS]
[ ] Configure standard kernel features (expert users) [CONFIG_EXPERT]
General architecture-dependent options --->
[*] Stack Protector buffer overflow detection [CONFIG_STACKPROTECTOR]
[*] Strong Stack Protector [CONFIG_STACKPROTECTOR_STRONG]
@ -137,8 +138,7 @@ General setup --->
[*] Control Group support [CONFIG_CGROUPS] --->
[*] Memory controller [CONFIG_MEMCG]
[ ] Enable deprecated sysfs features to support old userspace tools [CONFIG_SYSFS_DEPRECATED]
[*] Configure standard kernel features (expert users) [CONFIG_EXPERT] --->
[*] open by fhandle syscalls [CONFIG_FHANDLE]
[ ] Configure standard kernel features (expert users) [CONFIG_EXPERT]
General architecture-dependent options --->
[*] Enable seccomp to safely compute untrusted bytecode [CONFIG_SECCOMP]
[*] Stack Protector buffer overflow detection [CONFIG_STACKPROTECTOR]
@ -236,6 +236,19 @@ Device Drivers --->
</listitem>
</varlistentry>
<varlistentry>
<term>
<parameter>
Configure standard kernel features (expert users)
</parameter>
</term>
<listitem>
<para>This will make some options show up in the configuration
interface but changing those options may be dangerous. Do not use
this unless you know what you are doing.</para>
</listitem>
</varlistentry>
<varlistentry>
<term><parameter>Strong Stack Protector</parameter></term>
<listitem>