snlavaise/pmaports-rtwo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

kconfigcheck: Don't require LTO_CLANG_THIN for CFI

Browse Source 
This is only required on kernels prior to 6.1 and not even supported on
some architectures like ARMv7.

Signed-off-by: Jens Reidel <adrian@postmarketos.org>
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/7537>
This commit is contained in:
Jens Reidel
2025-12-15 23:32:12 +00:00
committed by The Friendly Merge Bot
parent 93cc790a9d
commit 7d3b8e05df
1 changed files with 3 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
kconfigcheck.toml
+3 -5
View File
@@ -571,27 +571,25 @@ DM_VERITY = "m"
EROFS_FS = "y"
EROFS_FS_ZIP = "y"
# In 6.18+, CFI_CLANG is CFI and does not require LTO
# In 6.18+, CFI_CLANG is CFI
["category:hardening".">=6.18_rc1"."x86_64 aarch64 armv7 riscv64"]
CFI = "y"
CFI_PERMISSIVE = "n"
# All older versions use CFI_CLANG
["category:hardening".">=6.10.0 <6.18_rc1"."armv7"]
CFI_CLANG = "y"
LTO_CLANG_THIN = "y" # Required for CFI
CFI_PERMISSIVE = "n"
["category:hardening".">=6.6.0 <6.18_rc1"."riscv64"]
CFI_CLANG = "y"
LTO_CLANG_THIN = "y" # Required for CFI
CFI_PERMISSIVE = "n"
["category:hardening".">=6.1.0 <6.18_rc1"."x86_64"]
CFI_CLANG = "y"
LTO_CLANG_THIN = "y" # Required for CFI
CFI_PERMISSIVE = "n"
["category:hardening".">=5.13.0 <6.18_rc1"."aarch64"]
CFI_CLANG = "y"
LTO_CLANG_THIN = "y" # Required for CFI
CFI_PERMISSIVE = "n"
["category:hardening".">=5.13.0 <6.1_rc1"."aarch64"]
LTO_CLANG_THIN = "y" # Required for CFI pre-6.1
["category:hardening".">=6.12.0"."x86_64 aarch64 armv7 riscv64"]
CFI_ICALL_NORMALIZE_INTEGERS = "y" # Required for CFI with Rust