From 00e715660a7a85662e6df3b272ac939461082cce Mon Sep 17 00:00:00 2001 From: Thierry Laurion Date: Wed, 21 Jun 2023 13:28:11 -0400 Subject: [PATCH] linux configs for intel: select proper CPU and trust CPU randomization CONFIG_MCORE2=y CONFIG_RANDOM_TRUST_CPU=y --- config/linux-librem_common.config | 9 ++++++--- config/linux-t440p.config | 9 ++++++--- config/linux-x230-legacy.config | 7 +++++-- config/linux-x230-maximized.config | 7 +++++-- 4 files changed, 22 insertions(+), 10 deletions(-) diff --git a/config/linux-librem_common.config b/config/linux-librem_common.config index 0b97f94c3..8046f7255 100644 --- a/config/linux-librem_common.config +++ b/config/linux-librem_common.config @@ -268,11 +268,14 @@ CONFIG_SCHED_OMIT_FRAME_POINTER=y # CONFIG_HYPERVISOR_GUEST is not set # CONFIG_MK8 is not set # CONFIG_MPSC is not set -# CONFIG_MCORE2 is not set +CONFIG_MCORE2=y # CONFIG_MATOM is not set -CONFIG_GENERIC_CPU=y +# CONFIG_GENERIC_CPU is not set CONFIG_X86_INTERNODE_CACHE_SHIFT=6 CONFIG_X86_L1_CACHE_SHIFT=6 +CONFIG_X86_INTEL_USERCOPY=y +CONFIG_X86_USE_PPRO_CHECKSUM=y +CONFIG_X86_P6_NOP=y CONFIG_X86_TSC=y CONFIG_X86_CMPXCHG64=y CONFIG_X86_CMOV=y @@ -1466,7 +1469,7 @@ CONFIG_TCG_TIS=y # CONFIG_XILLYBUS is not set # end of Character devices -# CONFIG_RANDOM_TRUST_CPU is not set +CONFIG_RANDOM_TRUST_CPU=y # CONFIG_RANDOM_TRUST_BOOTLOADER is not set # diff --git a/config/linux-t440p.config b/config/linux-t440p.config index 42725aa8f..c426575b5 100644 --- a/config/linux-t440p.config +++ b/config/linux-t440p.config @@ -268,11 +268,14 @@ CONFIG_SCHED_OMIT_FRAME_POINTER=y # CONFIG_HYPERVISOR_GUEST is not set # CONFIG_MK8 is not set # CONFIG_MPSC is not set -# CONFIG_MCORE2 is not set +CONFIG_MCORE2=y # CONFIG_MATOM is not set -CONFIG_GENERIC_CPU=y +# CONFIG_GENERIC_CPU is not set CONFIG_X86_INTERNODE_CACHE_SHIFT=6 CONFIG_X86_L1_CACHE_SHIFT=6 +CONFIG_X86_INTEL_USERCOPY=y +CONFIG_X86_USE_PPRO_CHECKSUM=y +CONFIG_X86_P6_NOP=y CONFIG_X86_TSC=y CONFIG_X86_CMPXCHG64=y CONFIG_X86_CMOV=y @@ -1463,7 +1466,7 @@ CONFIG_TCG_TIS=y # CONFIG_XILLYBUS is not set # end of Character devices -# CONFIG_RANDOM_TRUST_CPU is not set +CONFIG_RANDOM_TRUST_CPU=y # CONFIG_RANDOM_TRUST_BOOTLOADER is not set # diff --git a/config/linux-x230-legacy.config b/config/linux-x230-legacy.config index 69ec555a4..8fcff7a45 100644 --- a/config/linux-x230-legacy.config +++ b/config/linux-x230-legacy.config @@ -271,11 +271,14 @@ CONFIG_SCHED_OMIT_FRAME_POINTER=y # CONFIG_HYPERVISOR_GUEST is not set # CONFIG_MK8 is not set # CONFIG_MPSC is not set -# CONFIG_MCORE2 is not set +CONFIG_MCORE2=y # CONFIG_MATOM is not set -CONFIG_GENERIC_CPU=y +# CONFIG_GENERIC_CPU is not set CONFIG_X86_INTERNODE_CACHE_SHIFT=6 CONFIG_X86_L1_CACHE_SHIFT=6 +CONFIG_X86_INTEL_USERCOPY=y +CONFIG_X86_USE_PPRO_CHECKSUM=y +CONFIG_X86_P6_NOP=y CONFIG_X86_TSC=y CONFIG_X86_CMPXCHG64=y CONFIG_X86_CMOV=y diff --git a/config/linux-x230-maximized.config b/config/linux-x230-maximized.config index 3b9ba7ec3..d27c00a00 100644 --- a/config/linux-x230-maximized.config +++ b/config/linux-x230-maximized.config @@ -271,11 +271,14 @@ CONFIG_SCHED_OMIT_FRAME_POINTER=y # CONFIG_HYPERVISOR_GUEST is not set # CONFIG_MK8 is not set # CONFIG_MPSC is not set -# CONFIG_MCORE2 is not set +CONFIG_MCORE2=y # CONFIG_MATOM is not set -CONFIG_GENERIC_CPU=y +# CONFIG_GENERIC_CPU is not set CONFIG_X86_INTERNODE_CACHE_SHIFT=6 CONFIG_X86_L1_CACHE_SHIFT=6 +CONFIG_X86_INTEL_USERCOPY=y +CONFIG_X86_USE_PPRO_CHECKSUM=y +CONFIG_X86_P6_NOP=y CONFIG_X86_TSC=y CONFIG_X86_CMPXCHG64=y CONFIG_X86_CMOV=y