This change is in line with the project's rebranding.

The collection is also changed a bit to drop the "meta-" prefix. There
is no clear standardization on the collection name. Some use an ID, some
use ID-layer, some use meta-ID etc. We have decided to use the the layer
name without the "meta-" prefix  because this is an ID, not a layer per
se.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Followed up the project rename in the unified linux tree recipe.
Remaining change is the rename of the branch in the kernel repo and the
follow up change here.

Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com>

This rename also better reflects the purpose of the file since it
reflects ASOS kernel policies.

Signed-off-by: Amit Kucheria <amit.kucheria.ext@huawei.com>

The root filesystem defaults to squashfs.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Document and add gcc plugin based hardening options

Signed-off-by: Bernhard Rosenkränzer <bernhard.rosenkraenzer.ext@huawei.com>

Fix building the kernel's gcc plugins with gcc 11.x - gcc 11.x needs
constexpr (hence -std=gnu++11 or higher), and the check for gcc
plugin support needs modifications (or simple disabling, given in
our context, we know gcc has plugin support).

Signed-off-by: Bernhard Rosenkränzer <bernhard.rosenkraenzer.ext@huawei.com>

Marta Rybczynska authored 3 years ago and Davide Ricci committed 3 years ago

Add kernel hardening options based on the Kernel Self Protection Project
recommendations [1] and set them in the default kernel.

[1] https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings



Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com>

For qemuarm  builds we have seen the case that ths gcc plugins build
inside the linux kernel has been failing on missing header files gmp.h,
mcp.h and others. The native dependencies have been available, but the
kernel Makefile did not have the correct include path for the headers.

Neither poky dunfell nor master has this problem. No upstreaming needed.

Closes: https://git.ostc-eu.org/OSTC/OHOS/meta-ohos/-/merge_requests/93



Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Due to a configuration bug in upstream, the build system outputs a
configuration warning similar to:

---------- CONFIG_SERIAL_OF_PLATFORM -----------------
Config: CONFIG_SERIAL_OF_PLATFORM
From:
[...]/tmp/work-shared/qemux86-64/kernel-source/.kernel-meta/configs/v5.10/standard/cfg/8250.cfg
Requested value:  CONFIG_SERIAL_OF_PLATFORM=y
Actual value:

Avoid this by disabling the specific config.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>