From patchwork Fri Jan 7 18:03:04 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Marcel Ziswiler X-Patchwork-Id: 12706879 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id A2A10C433FE for ; Fri, 7 Jan 2022 18:09:50 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender: Content-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post: List-Archive:List-Unsubscribe:List-Id:MIME-Version:References:In-Reply-To: Message-Id:Date:Subject:Cc:To:From:Reply-To:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: List-Owner; bh=5zuiDC3IxiArxtBaIM8A1w4JqGZbDKLiPuC4ocNDd2s=; b=VJ3rU2+rk30Bzy RsrBB0iatYnKBOCBphldNy5JFZ5V3J2qDzF6kYJjY1SyqBYJl+rl9pEIoDrKTFNb24wHD/czDABXi aXlJZ/QslC8j96uKjWPlsEtgDV4FQyJlItoMOKeYdM0S6G+Sn5/kwy8oOX+Bfo4ST2s8YRBa4JY31 kDdOlWJWlNwZoB1ikJ+DDZNpNoLuTFxRcYKi0BQ2ymJa0P5NRS64oFtJmxZTUd6Z3K+5Nm5nnBJjs N2ImqFc5mCQN63/RTQrkYFSuahmCTeI3XhIokVfG/1kw2Dj/ekonjSsg4k+9VheztO02/4tuNu8ke Um+E+L5xeqtseG/4kkdg==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.94.2 #2 (Red Hat Linux)) id 1n5tcj-004n8s-2e; Fri, 07 Jan 2022 18:05:57 +0000 Received: from mout.perfora.net ([74.208.4.194]) by bombadil.infradead.org with esmtps (Exim 4.94.2 #2 (Red Hat Linux)) id 1n5tbI-004mW1-JM for linux-arm-kernel@lists.infradead.org; Fri, 07 Jan 2022 18:04:33 +0000 Received: from localhost.localdomain ([194.191.235.54]) by mrelay.perfora.net (mreueus004 [74.208.5.2]) with ESMTPSA (Nemesis) id 1MnqT8-1mZN8Y43S6-00pHqr; Fri, 07 Jan 2022 19:03:57 +0100 From: Marcel Ziswiler To: linux-arm-kernel@lists.infradead.org Cc: Marek Vasut , Marcel Ziswiler , Alexei Starovoitov , Andrii Nakryiko , Arnd Bergmann , Biju Das , Bjorn Andersson , Catalin Marinas , Daniel Borkmann , Enric Balletbo i Serra , Geert Uytterhoeven , =?utf-8?q?Guido_G=C3=BCnther?= , John Fastabend , KP Singh , Krzysztof Kozlowski , Martin KaFai Lau , Olof Johansson , Shawn Guo , Song Liu , Will Deacon , Yonghong Song , bpf@vger.kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org Subject: [PATCH v1 04/14] arm64: defconfig: enable bpf/cgroup firewalling Date: Fri, 7 Jan 2022 19:03:04 +0100 Message-Id: <20220107180314.1816515-5-marcel@ziswiler.com> X-Mailer: git-send-email 2.33.1 In-Reply-To: <20220107180314.1816515-1-marcel@ziswiler.com> References: <20220107180314.1816515-1-marcel@ziswiler.com> MIME-Version: 1.0 X-Provags-ID: V03:K1:hnmCG4gNJe/WfYxTTdBLiKuTD21o0vH1c0vKJTADHuWy4MsGR2l YQBGK1mg00A33MLbiZvQGzNRlncHl83cidX1ZhNCWOlI1n6ZzYPzrsEyYqYWg9VCEBJ+rwE xvdW2v+w8JUdUJwFRvQxPDIfCWLEaYrguHyD1QOOOkjYPocsRRZfOyd8wW8sGTzwR8U+H5Z PCcpvlARSo+Em6Nh31yGw== X-UI-Out-Filterresults: notjunk:1;V03:K0:FooxGjKyGYw=:H2U7u+X0UTs8/Hheog0UBe H9mniLEzmTQwh9gg0LPb8yzNJm56adDPVhCxJBKURYzYL/zwsgx3RiETKvLhbRHrIfBnOSA1B O1Tz0qURYuQN4pkWJhbdcH3tILbEhj/VOjA5eLvnn5yvcO4s32gbtMQLBsutlR+1PQK3wUSdG lr2JQBDpvxwFMjShLM4q0gnVwndVd2HYlC6TCfy3AbXsTaM/AY6Hbl8Ouu8PBKE6F6ts1ugO7 bYFnmg7YOw6DBYSnKR6m9UMLV0YKiClcePDSKQEBenMSmj4C+pBN1raXZCU9r70akgDuGCn8E LbXEnjwHAxlrvZN7X4Jkkkn4PfBcvLY8D0F31GBSFz1cNxCVVduJbdzg+kv7ChSLC+vo5MlHR wTV1Z2sEST8Y68qAhegrJmIq0ejXnYKX8VvbiMjv6pJ3CozypTvDxYmDnGibeK3T34gUsbKho SI6xDDxcljnmtwDUrBW9PYjOSvEEyGqufH5LYjJFoR4pkQbcVcMiJF6ulR1IZv0SIURlgWKFt 6Re+tou7ad2qljCb+9q05RTrJHSAkkv0FF4d8FeOaGck7eI8EH2qLw4JqwuNZa6pyfvfoCA7f 9mY48zbD0nDAMZOy2erSdv91b7AsFtcL0ih9C9YIoYsfhtKA0jjX3avc9ISJJV8N6NpD3jHkj bW5f9HywjryCGge8VYsff2k/5aBiR3Nl6FzQtOe2wJQ1z334NZDu0waXguHlErdJyFIgLv+8p kmMsAnj6GSwMNb5+ X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20220107_100428_737752_9C3986B3 X-CRM114-Status: UNSURE ( 9.11 ) X-CRM114-Notice: Please train this message. X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org From: Marcel Ziswiler This avoids the following systemd warning: [ 2.618538] systemd[1]: system-getty.slice: unit configures an IP firewall, but the local system does not support BPF/cgroup firewalling. [ 2.630916] systemd[1]: (This warning is only shown for the first unit using IP firewalling.) Signed-off-by: Marcel Ziswiler Acked-by: Song Liu --- arch/arm64/configs/defconfig | 2 ++ 1 file changed, 2 insertions(+) diff --git a/arch/arm64/configs/defconfig b/arch/arm64/configs/defconfig index 79e4bf9f4c2c..3c8106c5776a 100644 --- a/arch/arm64/configs/defconfig +++ b/arch/arm64/configs/defconfig @@ -3,6 +3,7 @@ CONFIG_POSIX_MQUEUE=y CONFIG_AUDIT=y CONFIG_NO_HZ_IDLE=y CONFIG_HIGH_RES_TIMERS=y +CONFIG_BPF_SYSCALL=y CONFIG_BPF_JIT=y CONFIG_IRQ_TIME_ACCOUNTING=y CONFIG_BSD_PROCESS_ACCT=y @@ -18,6 +19,7 @@ CONFIG_CPUSETS=y CONFIG_CGROUP_DEVICE=y CONFIG_CGROUP_CPUACCT=y CONFIG_CGROUP_PERF=y +CONFIG_CGROUP_BPF=y CONFIG_USER_NS=y CONFIG_SCHED_AUTOGROUP=y CONFIG_BLK_DEV_INITRD=y