mirror of
https://github.com/kernelkit/infix.git
synced 2026-07-27 11:13:02 +02:00
Joachim Wiberg
937d4c38c7
Use kernel cmdline option 'usbcore.authorized_default=2' to lock all
external/user-visible USB ports by default.
The kernel distinguishes internal vs external USB ports using ACPI
methods (_UPC and _PLD) on x86/x86_64 systems. On ACPI systems, ports
marked as non-visible but connectable are considered internal (e.g.,
hard-wired USB-to-Ethernet adapters) and are automatically authorized,
while user-visible external ports require manual authorization.
However, on device tree systems the kernel lacks a standard mechanism
for identifying internal ports. The 'authorized_default=2' setting falls
back to requiring authorization for all devices on these platforms,
We list user-accessible USB ports in the device tree ('usb-ports' and
'usb-port-names'), with unlisted ports being implicitly internal and
managed separately.
Fixes #1065
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
270 lines
6.1 KiB
Plaintext
270 lines
6.1 KiB
Plaintext
CONFIG_SYSVIPC=y
|
|
CONFIG_POSIX_MQUEUE=y
|
|
CONFIG_AUDIT=y
|
|
CONFIG_NO_HZ_IDLE=y
|
|
CONFIG_HIGH_RES_TIMERS=y
|
|
CONFIG_BPF_SYSCALL=y
|
|
CONFIG_BPF_JIT=y
|
|
CONFIG_PREEMPT=y
|
|
CONFIG_BSD_PROCESS_ACCT=y
|
|
CONFIG_BSD_PROCESS_ACCT_V3=y
|
|
CONFIG_TASKSTATS=y
|
|
CONFIG_TASK_DELAY_ACCT=y
|
|
CONFIG_TASK_XACCT=y
|
|
CONFIG_TASK_IO_ACCOUNTING=y
|
|
CONFIG_IKCONFIG=y
|
|
CONFIG_IKCONFIG_PROC=y
|
|
CONFIG_LOG_BUF_SHIFT=18
|
|
CONFIG_MEMCG=y
|
|
CONFIG_BLK_CGROUP=y
|
|
CONFIG_CFS_BANDWIDTH=y
|
|
CONFIG_RT_GROUP_SCHED=y
|
|
CONFIG_CGROUP_PIDS=y
|
|
CONFIG_CGROUP_FREEZER=y
|
|
CONFIG_CPUSETS=y
|
|
CONFIG_CGROUP_DEVICE=y
|
|
CONFIG_CGROUP_CPUACCT=y
|
|
CONFIG_CGROUP_PERF=y
|
|
CONFIG_CGROUP_BPF=y
|
|
CONFIG_USER_NS=y
|
|
CONFIG_SCHED_AUTOGROUP=y
|
|
CONFIG_BLK_DEV_INITRD=y
|
|
CONFIG_KALLSYMS_ALL=y
|
|
CONFIG_PROFILING=y
|
|
CONFIG_SMP=y
|
|
CONFIG_EFI=y
|
|
CONFIG_KPROBES=y
|
|
# CONFIG_GCC_PLUGINS is not set
|
|
CONFIG_MODULES=y
|
|
CONFIG_MODULE_UNLOAD=y
|
|
CONFIG_NET=y
|
|
CONFIG_PACKET=y
|
|
CONFIG_XDP_SOCKETS=y
|
|
CONFIG_XDP_SOCKETS_DIAG=y
|
|
CONFIG_IP_MULTICAST=y
|
|
CONFIG_IP_ADVANCED_ROUTER=y
|
|
CONFIG_IP_MULTIPLE_TABLES=y
|
|
CONFIG_IP_ROUTE_MULTIPATH=y
|
|
CONFIG_NET_IPIP=m
|
|
CONFIG_NET_IPGRE_DEMUX=m
|
|
CONFIG_NET_IPGRE=m
|
|
CONFIG_NET_IPGRE_BROADCAST=y
|
|
CONFIG_IP_MROUTE=y
|
|
CONFIG_IP_MROUTE_MULTIPLE_TABLES=y
|
|
CONFIG_IP_PIMSM_V1=y
|
|
CONFIG_IP_PIMSM_V2=y
|
|
CONFIG_SYN_COOKIES=y
|
|
CONFIG_NET_IPVTI=m
|
|
CONFIG_NET_FOU_IP_TUNNELS=y
|
|
CONFIG_IPV6_SIT=m
|
|
CONFIG_IPV6_GRE=m
|
|
CONFIG_IPV6_MULTIPLE_TABLES=y
|
|
CONFIG_IPV6_SUBTREES=y
|
|
CONFIG_IPV6_MROUTE=y
|
|
CONFIG_IPV6_MROUTE_MULTIPLE_TABLES=y
|
|
CONFIG_IPV6_PIMSM_V2=y
|
|
CONFIG_NETWORK_PHY_TIMESTAMPING=y
|
|
CONFIG_NETFILTER=y
|
|
CONFIG_BRIDGE_NETFILTER=y
|
|
CONFIG_NETFILTER_NETLINK_QUEUE=y
|
|
CONFIG_NETFILTER_NETLINK_LOG=y
|
|
CONFIG_NF_CONNTRACK=y
|
|
CONFIG_NF_CONNTRACK_EVENTS=y
|
|
CONFIG_NF_CONNTRACK_FTP=y
|
|
CONFIG_NF_TABLES=y
|
|
CONFIG_NF_TABLES_INET=y
|
|
CONFIG_NF_TABLES_NETDEV=y
|
|
CONFIG_NFT_CT=m
|
|
CONFIG_NFT_CONNLIMIT=m
|
|
CONFIG_NFT_LOG=m
|
|
CONFIG_NFT_LIMIT=m
|
|
CONFIG_NFT_MASQ=m
|
|
CONFIG_NFT_REDIR=m
|
|
CONFIG_NFT_NAT=m
|
|
CONFIG_NFT_TUNNEL=m
|
|
CONFIG_NFT_QUEUE=m
|
|
CONFIG_NFT_REJECT=m
|
|
CONFIG_NFT_COMPAT=m
|
|
CONFIG_NFT_HASH=m
|
|
CONFIG_NFT_XFRM=m
|
|
CONFIG_NFT_SOCKET=m
|
|
CONFIG_NFT_OSF=m
|
|
CONFIG_NFT_DUP_NETDEV=m
|
|
CONFIG_NFT_FWD_NETDEV=m
|
|
CONFIG_NFT_REJECT_NETDEV=m
|
|
CONFIG_NETFILTER_XT_TARGET_CHECKSUM=m
|
|
CONFIG_NETFILTER_XT_TARGET_LOG=m
|
|
CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=m
|
|
CONFIG_NETFILTER_XT_MATCH_BPF=m
|
|
CONFIG_NETFILTER_XT_MATCH_CGROUP=m
|
|
CONFIG_NETFILTER_XT_MATCH_COMMENT=m
|
|
CONFIG_NETFILTER_XT_MATCH_CONNLABEL=m
|
|
CONFIG_NETFILTER_XT_MATCH_CONNMARK=m
|
|
CONFIG_NETFILTER_XT_MATCH_CONNTRACK=m
|
|
CONFIG_NETFILTER_XT_MATCH_DSCP=m
|
|
CONFIG_NETFILTER_XT_MATCH_HELPER=m
|
|
CONFIG_NETFILTER_XT_MATCH_LIMIT=m
|
|
CONFIG_NETFILTER_XT_MATCH_MAC=m
|
|
CONFIG_NETFILTER_XT_MATCH_MARK=m
|
|
CONFIG_NETFILTER_XT_MATCH_MULTIPORT=m
|
|
CONFIG_NETFILTER_XT_MATCH_PHYSDEV=m
|
|
CONFIG_IP_NF_IPTABLES=m
|
|
CONFIG_IP_NF_FILTER=m
|
|
CONFIG_IP_NF_TARGET_REJECT=m
|
|
CONFIG_IP_NF_NAT=m
|
|
CONFIG_IP_NF_TARGET_MASQUERADE=m
|
|
CONFIG_IP_NF_MANGLE=m
|
|
CONFIG_IP6_NF_IPTABLES=m
|
|
CONFIG_IP6_NF_MATCH_AH=m
|
|
CONFIG_IP6_NF_MATCH_EUI64=m
|
|
CONFIG_IP6_NF_MATCH_IPV6HEADER=m
|
|
CONFIG_IP6_NF_FILTER=m
|
|
CONFIG_IP6_NF_TARGET_REJECT=m
|
|
CONFIG_IP6_NF_RAW=m
|
|
CONFIG_IP6_NF_NAT=m
|
|
CONFIG_IP6_NF_TARGET_MASQUERADE=m
|
|
CONFIG_IP6_NF_TARGET_NPT=m
|
|
CONFIG_NF_TABLES_BRIDGE=m
|
|
CONFIG_NFT_BRIDGE_META=m
|
|
CONFIG_NF_CONNTRACK_BRIDGE=m
|
|
CONFIG_BRIDGE_NF_EBTABLES=m
|
|
CONFIG_BRIDGE_EBT_BROUTE=m
|
|
CONFIG_BRIDGE_EBT_T_FILTER=m
|
|
CONFIG_BRIDGE_EBT_T_NAT=m
|
|
CONFIG_BRIDGE_EBT_802_3=m
|
|
CONFIG_BRIDGE_EBT_ARP=m
|
|
CONFIG_BRIDGE_EBT_IP=m
|
|
CONFIG_BRIDGE_EBT_IP6=m
|
|
CONFIG_BRIDGE_EBT_LIMIT=m
|
|
CONFIG_BRIDGE_EBT_PKTTYPE=m
|
|
CONFIG_BRIDGE_EBT_STP=m
|
|
CONFIG_BRIDGE_EBT_VLAN=m
|
|
CONFIG_BRIDGE_EBT_ARPREPLY=m
|
|
CONFIG_BRIDGE_EBT_DNAT=m
|
|
CONFIG_BRIDGE_EBT_REDIRECT=m
|
|
CONFIG_BRIDGE_EBT_SNAT=m
|
|
CONFIG_BRIDGE_EBT_LOG=m
|
|
CONFIG_BRIDGE_EBT_NFLOG=m
|
|
CONFIG_BRIDGE=y
|
|
CONFIG_BRIDGE_VLAN_FILTERING=y
|
|
CONFIG_BRIDGE_MRP=y
|
|
CONFIG_BRIDGE_CFM=y
|
|
CONFIG_VLAN_8021Q=y
|
|
CONFIG_VLAN_8021Q_GVRP=y
|
|
CONFIG_VLAN_8021Q_MVRP=y
|
|
CONFIG_NET_SCHED=y
|
|
CONFIG_NET_CLS_BASIC=y
|
|
CONFIG_NET_CLS_BPF=y
|
|
CONFIG_NET_CLS_FLOWER=y
|
|
CONFIG_NETLINK_DIAG=y
|
|
CONFIG_MPLS=y
|
|
CONFIG_NET_MPLS_GSO=y
|
|
CONFIG_MPLS_ROUTING=m
|
|
CONFIG_MPLS_IPTUNNEL=m
|
|
CONFIG_NET_SWITCHDEV=y
|
|
CONFIG_NET_PKTGEN=y
|
|
# CONFIG_WIRELESS is not set
|
|
CONFIG_NET_9P=y
|
|
CONFIG_NET_9P_VIRTIO=y
|
|
CONFIG_LWTUNNEL=y
|
|
CONFIG_PCI=y
|
|
CONFIG_PCI_MSI=y
|
|
CONFIG_UEVENT_HELPER=y
|
|
CONFIG_UEVENT_HELPER_PATH="/sbin/hotplug"
|
|
CONFIG_DEVTMPFS=y
|
|
CONFIG_DEVTMPFS_MOUNT=y
|
|
CONFIG_FW_CFG_SYSFS=y
|
|
CONFIG_FW_CFG_SYSFS_CMDLINE=y
|
|
CONFIG_BLK_DEV_NULL_BLK=y
|
|
CONFIG_BLK_DEV_LOOP=y
|
|
CONFIG_BLK_DEV_RAM=y
|
|
CONFIG_VIRTIO_BLK=y
|
|
CONFIG_BLK_DEV_SD=y
|
|
CONFIG_BLK_DEV_SR=y
|
|
CONFIG_SCSI_VIRTIO=y
|
|
CONFIG_ATA=y
|
|
CONFIG_ATA_PIIX=y
|
|
CONFIG_MD=y
|
|
CONFIG_BLK_DEV_DM=y
|
|
CONFIG_DM_VERITY=y
|
|
CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG=y
|
|
CONFIG_NETDEVICES=y
|
|
CONFIG_BONDING=m
|
|
CONFIG_DUMMY=m
|
|
CONFIG_MACVLAN=m
|
|
CONFIG_MACVTAP=m
|
|
CONFIG_IPVLAN=m
|
|
CONFIG_IPVTAP=m
|
|
CONFIG_VXLAN=m
|
|
CONFIG_GENEVE=m
|
|
CONFIG_BAREUDP=m
|
|
CONFIG_MACSEC=m
|
|
CONFIG_TUN=m
|
|
CONFIG_VETH=m
|
|
CONFIG_VIRTIO_NET=y
|
|
CONFIG_NLMON=y
|
|
CONFIG_NET_VRF=y
|
|
CONFIG_E1000=y
|
|
CONFIG_NE2K_PCI=y
|
|
CONFIG_8139CP=y
|
|
CONFIG_ROCKER=y
|
|
# CONFIG_WLAN is not set
|
|
CONFIG_INPUT_EVDEV=y
|
|
CONFIG_SERIAL_8250=y
|
|
CONFIG_SERIAL_8250_CONSOLE=y
|
|
CONFIG_VIRTIO_CONSOLE=y
|
|
CONFIG_HW_RANDOM_VIRTIO=m
|
|
CONFIG_I2C=y
|
|
CONFIG_WATCHDOG=y
|
|
CONFIG_WATCHDOG_SYSFS=y
|
|
CONFIG_SOFT_WATCHDOG=y
|
|
CONFIG_I6300ESB_WDT=y
|
|
CONFIG_USB=y
|
|
CONFIG_USB_XHCI_HCD=m
|
|
CONFIG_USB_EHCI_HCD=m
|
|
CONFIG_USB_UHCI_HCD=m
|
|
CONFIG_USB_STORAGE=m
|
|
CONFIG_NEW_LEDS=y
|
|
CONFIG_LEDS_CLASS=y
|
|
CONFIG_LEDS_TRIGGERS=y
|
|
CONFIG_LEDS_TRIGGER_TIMER=y
|
|
CONFIG_LEDS_TRIGGER_HEARTBEAT=y
|
|
CONFIG_LEDS_TRIGGER_ACTIVITY=y
|
|
CONFIG_LEDS_TRIGGER_NETDEV=y
|
|
CONFIG_RTC_CLASS=y
|
|
CONFIG_SYNC_FILE=y
|
|
CONFIG_VIRTIO_PCI=y
|
|
CONFIG_VIRTIO_BALLOON=y
|
|
CONFIG_VIRTIO_INPUT=y
|
|
CONFIG_VIRTIO_MMIO=y
|
|
CONFIG_VIRTIO_MMIO_CMDLINE_DEVICES=y
|
|
CONFIG_EXT4_FS=y
|
|
CONFIG_BTRFS_FS=y
|
|
CONFIG_BTRFS_FS_POSIX_ACL=y
|
|
CONFIG_FUSE_FS=y
|
|
CONFIG_VIRTIO_FS=y
|
|
CONFIG_OVERLAY_FS=y
|
|
CONFIG_VFAT_FS=y
|
|
CONFIG_EXFAT_FS=y
|
|
CONFIG_TMPFS=y
|
|
CONFIG_TMPFS_POSIX_ACL=y
|
|
CONFIG_SQUASHFS=y
|
|
CONFIG_SQUASHFS_LZO=y
|
|
CONFIG_SQUASHFS_XZ=y
|
|
CONFIG_SQUASHFS_ZSTD=y
|
|
CONFIG_9P_FS=y
|
|
CONFIG_NLS_CODEPAGE_437=y
|
|
CONFIG_NLS_ISO8859_1=y
|
|
CONFIG_CRYPTO_AES=y
|
|
CONFIG_CRYPTO_GCM=y
|
|
CONFIG_DEBUG_KERNEL=y
|
|
CONFIG_DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT=y
|
|
CONFIG_MAGIC_SYSRQ=y
|
|
CONFIG_DEBUG_FS=y
|
|
CONFIG_PANIC_ON_OOPS=y
|
|
CONFIG_PANIC_TIMEOUT=20
|
|
CONFIG_DETECT_HUNG_TASK=y
|
|
CONFIG_BOOTPARAM_HUNG_TASK_PANIC=y
|
|
CONFIG_FUNCTION_TRACER=y
|
|
CONFIG_UNWINDER_FRAME_POINTER=y
|