summaryrefslogtreecommitdiffstats
path: root/config
diff options
context:
space:
mode:
authorLeo Barsky <leobrsky@proton.me>2024-09-01 15:54:05 -0400
committerHauke Mehrtens <hauke@hauke-m.de>2024-09-06 22:46:59 +0200
commitb1435f0af8db31f79b9767bca6e8438d3ee3ce74 (patch)
treeefa1f807b53458805cab0d059ce8b90331a222f3 /config
parentd760576132a1c37d0f533597b1742186d8692319 (diff)
downloadopenwrt-b1435f0af8db31f79b9767bca6e8438d3ee3ce74.tar.gz
openwrt-b1435f0af8db31f79b9767bca6e8438d3ee3ce74.tar.bz2
openwrt-b1435f0af8db31f79b9767bca6e8438d3ee3ce74.zip
kernel: activate *_FS_SECURITY and *_FS_ACL_ATTR options for all big flash targets
This patch activate *_FS_SECURITY and *_FS_ACL_ATTR options for all big flash memory targets. Fixes docker error: "failed to register layer: lsetxattr security.capability /usr/bin/ping: operation not supported" Forum discussion: https://forum.openwrt.org/t/docker-pull-fails-failed-to-register-layer-operation-not-supported/138253 Signed-off-by: Leo Barsky <leobrsky@proton.me> Link: https://github.com/openwrt/openwrt/pull/16181 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Diffstat (limited to 'config')
-rw-r--r--config/Config-kernel.in5
1 files changed, 5 insertions, 0 deletions
diff --git a/config/Config-kernel.in b/config/Config-kernel.in
index 73b26b631a..fdc5850bde 100644
--- a/config/Config-kernel.in
+++ b/config/Config-kernel.in
@@ -1247,6 +1247,7 @@ config KERNEL_BTRFS_FS
menu "Filesystem ACL and attr support options"
config USE_FS_ACL_ATTR
bool "Use filesystem ACL and attr support by default"
+ default y if !SMALL_FLASH
help
Make using ACLs (e.g. POSIX ACL, NFSv4 ACL) the default
for kernel and packages, except tmpfs, flash filesystems,
@@ -1415,15 +1416,19 @@ config KERNEL_LSM
config KERNEL_EXT4_FS_SECURITY
bool "Ext4 Security Labels"
+ default y if !SMALL_FLASH
config KERNEL_F2FS_FS_SECURITY
bool "F2FS Security Labels"
+ default y if !SMALL_FLASH
config KERNEL_UBIFS_FS_SECURITY
bool "UBIFS Security Labels"
+ default y if !SMALL_FLASH
config KERNEL_JFFS2_FS_SECURITY
bool "JFFS2 Security Labels"
+ default y if !SMALL_FLASH
config KERNEL_WERROR
bool "Compile the kernel with warnings as errors"