mirror of
https://github.com/AuxXxilium/linux_dsm_epyc7002.git
synced 2024-12-03 05:46:42 +07:00
e80d4af0a3
This patch introcudes a new kernel module pkey which is providing protected key handling and management functions. The pkey API is available within the kernel for other s390 specific code to create and manage protected keys. Additionally the functions are exported to user space via IOCTL calls. The implementation makes extensive use of functions provided by the zcrypt device driver. For generating protected keys from secure keys there is also a CEX coprocessor card needed. Signed-off-by: Harald Freudenberger <freude@linux.vnet.ibm.com> Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
247 lines
5.3 KiB
Plaintext
247 lines
5.3 KiB
Plaintext
CONFIG_SYSVIPC=y
|
|
CONFIG_POSIX_MQUEUE=y
|
|
CONFIG_USELIB=y
|
|
CONFIG_AUDIT=y
|
|
CONFIG_NO_HZ_IDLE=y
|
|
CONFIG_HIGH_RES_TIMERS=y
|
|
CONFIG_TASKSTATS=y
|
|
CONFIG_TASK_DELAY_ACCT=y
|
|
CONFIG_TASK_XACCT=y
|
|
CONFIG_TASK_IO_ACCOUNTING=y
|
|
CONFIG_IKCONFIG=y
|
|
CONFIG_IKCONFIG_PROC=y
|
|
CONFIG_CGROUPS=y
|
|
CONFIG_MEMCG=y
|
|
CONFIG_MEMCG_SWAP=y
|
|
CONFIG_BLK_CGROUP=y
|
|
CONFIG_CGROUP_SCHED=y
|
|
CONFIG_RT_GROUP_SCHED=y
|
|
CONFIG_CGROUP_PIDS=y
|
|
CONFIG_CGROUP_FREEZER=y
|
|
CONFIG_CGROUP_HUGETLB=y
|
|
CONFIG_CPUSETS=y
|
|
CONFIG_CGROUP_DEVICE=y
|
|
CONFIG_CGROUP_CPUACCT=y
|
|
CONFIG_CGROUP_PERF=y
|
|
CONFIG_CHECKPOINT_RESTORE=y
|
|
CONFIG_NAMESPACES=y
|
|
CONFIG_USER_NS=y
|
|
CONFIG_BLK_DEV_INITRD=y
|
|
CONFIG_EXPERT=y
|
|
CONFIG_BPF_SYSCALL=y
|
|
CONFIG_USERFAULTFD=y
|
|
# CONFIG_COMPAT_BRK is not set
|
|
CONFIG_PROFILING=y
|
|
CONFIG_OPROFILE=y
|
|
CONFIG_KPROBES=y
|
|
CONFIG_JUMP_LABEL=y
|
|
CONFIG_STATIC_KEYS_SELFTEST=y
|
|
CONFIG_MODULES=y
|
|
CONFIG_MODULE_UNLOAD=y
|
|
CONFIG_BLK_DEV_INTEGRITY=y
|
|
CONFIG_PARTITION_ADVANCED=y
|
|
CONFIG_IBM_PARTITION=y
|
|
CONFIG_DEFAULT_DEADLINE=y
|
|
CONFIG_LIVEPATCH=y
|
|
CONFIG_NR_CPUS=256
|
|
CONFIG_NUMA=y
|
|
CONFIG_HZ_100=y
|
|
CONFIG_MEMORY_HOTPLUG=y
|
|
CONFIG_MEMORY_HOTREMOVE=y
|
|
CONFIG_KSM=y
|
|
CONFIG_TRANSPARENT_HUGEPAGE=y
|
|
CONFIG_CLEANCACHE=y
|
|
CONFIG_FRONTSWAP=y
|
|
CONFIG_CMA=y
|
|
CONFIG_ZSWAP=y
|
|
CONFIG_ZBUD=m
|
|
CONFIG_ZSMALLOC=m
|
|
CONFIG_ZSMALLOC_STAT=y
|
|
CONFIG_IDLE_PAGE_TRACKING=y
|
|
CONFIG_CRASH_DUMP=y
|
|
CONFIG_BINFMT_MISC=m
|
|
CONFIG_HIBERNATION=y
|
|
CONFIG_NET=y
|
|
CONFIG_PACKET=y
|
|
CONFIG_UNIX=y
|
|
CONFIG_NET_KEY=y
|
|
CONFIG_INET=y
|
|
CONFIG_IP_MULTICAST=y
|
|
CONFIG_L2TP=m
|
|
CONFIG_L2TP_DEBUGFS=m
|
|
CONFIG_VLAN_8021Q=y
|
|
CONFIG_NET_SCHED=y
|
|
CONFIG_NET_SCH_CBQ=m
|
|
CONFIG_NET_SCH_PRIO=m
|
|
CONFIG_NET_SCH_RED=m
|
|
CONFIG_NET_SCH_SFQ=m
|
|
CONFIG_NET_SCH_TEQL=m
|
|
CONFIG_NET_SCH_TBF=m
|
|
CONFIG_NET_SCH_GRED=m
|
|
CONFIG_NET_SCH_DSMARK=m
|
|
CONFIG_NET_CLS_TCINDEX=m
|
|
CONFIG_NET_CLS_ROUTE4=m
|
|
CONFIG_NET_CLS_FW=m
|
|
CONFIG_NET_CLS_U32=m
|
|
CONFIG_CLS_U32_MARK=y
|
|
CONFIG_NET_CLS_RSVP=m
|
|
CONFIG_NET_CLS_RSVP6=m
|
|
CONFIG_NET_CLS_ACT=y
|
|
CONFIG_NET_ACT_POLICE=y
|
|
CONFIG_BPF_JIT=y
|
|
CONFIG_UEVENT_HELPER_PATH="/sbin/hotplug"
|
|
CONFIG_DEVTMPFS=y
|
|
CONFIG_BLK_DEV_LOOP=m
|
|
CONFIG_BLK_DEV_NBD=m
|
|
CONFIG_BLK_DEV_RAM=y
|
|
CONFIG_VIRTIO_BLK=y
|
|
CONFIG_SCSI=y
|
|
CONFIG_BLK_DEV_SD=y
|
|
CONFIG_CHR_DEV_ST=y
|
|
CONFIG_BLK_DEV_SR=y
|
|
CONFIG_BLK_DEV_SR_VENDOR=y
|
|
CONFIG_CHR_DEV_SG=y
|
|
CONFIG_SCSI_CONSTANTS=y
|
|
CONFIG_SCSI_LOGGING=y
|
|
CONFIG_SCSI_FC_ATTRS=y
|
|
CONFIG_ZFCP=y
|
|
CONFIG_SCSI_VIRTIO=y
|
|
CONFIG_MD=y
|
|
CONFIG_MD_LINEAR=m
|
|
CONFIG_MD_RAID0=m
|
|
CONFIG_MD_MULTIPATH=m
|
|
CONFIG_BLK_DEV_DM=y
|
|
CONFIG_DM_CRYPT=m
|
|
CONFIG_DM_SNAPSHOT=m
|
|
CONFIG_DM_MIRROR=m
|
|
CONFIG_DM_LOG_USERSPACE=m
|
|
CONFIG_DM_RAID=m
|
|
CONFIG_DM_ZERO=m
|
|
CONFIG_DM_MULTIPATH=m
|
|
CONFIG_DM_MULTIPATH_QL=m
|
|
CONFIG_DM_MULTIPATH_ST=m
|
|
CONFIG_DM_UEVENT=y
|
|
CONFIG_DM_VERITY=m
|
|
CONFIG_DM_SWITCH=m
|
|
CONFIG_NETDEVICES=y
|
|
CONFIG_BONDING=m
|
|
CONFIG_DUMMY=m
|
|
CONFIG_EQUALIZER=m
|
|
CONFIG_TUN=m
|
|
CONFIG_VIRTIO_NET=y
|
|
# CONFIG_NET_VENDOR_ALACRITECH is not set
|
|
# CONFIG_NET_VENDOR_SOLARFLARE is not set
|
|
# CONFIG_INPUT is not set
|
|
# CONFIG_SERIO is not set
|
|
CONFIG_DEVKMEM=y
|
|
CONFIG_RAW_DRIVER=m
|
|
CONFIG_VIRTIO_BALLOON=y
|
|
CONFIG_EXT4_FS=y
|
|
CONFIG_EXT4_FS_POSIX_ACL=y
|
|
CONFIG_EXT4_FS_SECURITY=y
|
|
CONFIG_XFS_FS=y
|
|
CONFIG_XFS_QUOTA=y
|
|
CONFIG_XFS_POSIX_ACL=y
|
|
CONFIG_XFS_RT=y
|
|
CONFIG_BTRFS_FS=y
|
|
CONFIG_BTRFS_FS_POSIX_ACL=y
|
|
CONFIG_FANOTIFY=y
|
|
CONFIG_FUSE_FS=y
|
|
CONFIG_PROC_KCORE=y
|
|
CONFIG_TMPFS=y
|
|
CONFIG_TMPFS_POSIX_ACL=y
|
|
CONFIG_HUGETLBFS=y
|
|
# CONFIG_NETWORK_FILESYSTEMS is not set
|
|
CONFIG_DEBUG_INFO=y
|
|
CONFIG_DEBUG_INFO_DWARF4=y
|
|
CONFIG_GDB_SCRIPTS=y
|
|
CONFIG_UNUSED_SYMBOLS=y
|
|
CONFIG_DEBUG_SECTION_MISMATCH=y
|
|
CONFIG_DEBUG_FORCE_WEAK_PER_CPU=y
|
|
CONFIG_MAGIC_SYSRQ=y
|
|
CONFIG_DEBUG_PAGEALLOC=y
|
|
CONFIG_DETECT_HUNG_TASK=y
|
|
CONFIG_PANIC_ON_OOPS=y
|
|
CONFIG_TIMER_STATS=y
|
|
CONFIG_DEBUG_RT_MUTEXES=y
|
|
CONFIG_PROVE_LOCKING=y
|
|
CONFIG_LOCK_STAT=y
|
|
CONFIG_DEBUG_LOCKDEP=y
|
|
CONFIG_DEBUG_ATOMIC_SLEEP=y
|
|
CONFIG_DEBUG_LIST=y
|
|
CONFIG_DEBUG_SG=y
|
|
CONFIG_DEBUG_NOTIFIERS=y
|
|
CONFIG_RCU_CPU_STALL_TIMEOUT=60
|
|
CONFIG_RCU_TRACE=y
|
|
CONFIG_LATENCYTOP=y
|
|
CONFIG_SCHED_TRACER=y
|
|
CONFIG_FTRACE_SYSCALLS=y
|
|
CONFIG_TRACER_SNAPSHOT_PER_CPU_SWAP=y
|
|
CONFIG_STACK_TRACER=y
|
|
CONFIG_BLK_DEV_IO_TRACE=y
|
|
CONFIG_UPROBE_EVENT=y
|
|
CONFIG_FUNCTION_PROFILER=y
|
|
CONFIG_TRACE_ENUM_MAP_FILE=y
|
|
CONFIG_KPROBES_SANITY_TEST=y
|
|
CONFIG_S390_PTDUMP=y
|
|
CONFIG_CRYPTO_CRYPTD=m
|
|
CONFIG_CRYPTO_TEST=m
|
|
CONFIG_CRYPTO_CCM=m
|
|
CONFIG_CRYPTO_GCM=m
|
|
CONFIG_CRYPTO_CBC=y
|
|
CONFIG_CRYPTO_CTS=m
|
|
CONFIG_CRYPTO_ECB=m
|
|
CONFIG_CRYPTO_LRW=m
|
|
CONFIG_CRYPTO_PCBC=m
|
|
CONFIG_CRYPTO_XTS=m
|
|
CONFIG_CRYPTO_CMAC=m
|
|
CONFIG_CRYPTO_XCBC=m
|
|
CONFIG_CRYPTO_VMAC=m
|
|
CONFIG_CRYPTO_CRC32=m
|
|
CONFIG_CRYPTO_MD4=m
|
|
CONFIG_CRYPTO_MICHAEL_MIC=m
|
|
CONFIG_CRYPTO_RMD128=m
|
|
CONFIG_CRYPTO_RMD160=m
|
|
CONFIG_CRYPTO_RMD256=m
|
|
CONFIG_CRYPTO_RMD320=m
|
|
CONFIG_CRYPTO_SHA256=y
|
|
CONFIG_CRYPTO_SHA512=m
|
|
CONFIG_CRYPTO_TGR192=m
|
|
CONFIG_CRYPTO_WP512=m
|
|
CONFIG_CRYPTO_ANUBIS=m
|
|
CONFIG_CRYPTO_ARC4=m
|
|
CONFIG_CRYPTO_BLOWFISH=m
|
|
CONFIG_CRYPTO_CAMELLIA=m
|
|
CONFIG_CRYPTO_CAST5=m
|
|
CONFIG_CRYPTO_CAST6=m
|
|
CONFIG_CRYPTO_FCRYPT=m
|
|
CONFIG_CRYPTO_KHAZAD=m
|
|
CONFIG_CRYPTO_SALSA20=m
|
|
CONFIG_CRYPTO_SEED=m
|
|
CONFIG_CRYPTO_SERPENT=m
|
|
CONFIG_CRYPTO_TEA=m
|
|
CONFIG_CRYPTO_TWOFISH=m
|
|
CONFIG_CRYPTO_DEFLATE=m
|
|
CONFIG_CRYPTO_LZ4=m
|
|
CONFIG_CRYPTO_LZ4HC=m
|
|
CONFIG_CRYPTO_ANSI_CPRNG=m
|
|
CONFIG_CRYPTO_USER_API_HASH=m
|
|
CONFIG_CRYPTO_USER_API_SKCIPHER=m
|
|
CONFIG_CRYPTO_USER_API_RNG=m
|
|
CONFIG_ZCRYPT=m
|
|
CONFIG_PKEY=m
|
|
CONFIG_CRYPTO_SHA1_S390=m
|
|
CONFIG_CRYPTO_SHA256_S390=m
|
|
CONFIG_CRYPTO_SHA512_S390=m
|
|
CONFIG_CRYPTO_DES_S390=m
|
|
CONFIG_CRYPTO_AES_S390=m
|
|
CONFIG_CRYPTO_CRC32_S390=y
|
|
CONFIG_CRC7=m
|
|
# CONFIG_XZ_DEC_X86 is not set
|
|
# CONFIG_XZ_DEC_POWERPC is not set
|
|
# CONFIG_XZ_DEC_IA64 is not set
|
|
# CONFIG_XZ_DEC_ARM is not set
|
|
# CONFIG_XZ_DEC_ARMTHUMB is not set
|
|
# CONFIG_XZ_DEC_SPARC is not set
|
|
CONFIG_CMM=m
|