From b1435f0af8db31f79b9767bca6e8438d3ee3ce74 Mon Sep 17 00:00:00 2001 From: Leo Barsky Date: Sun, 1 Sep 2024 15:54:05 -0400 Subject: kernel: activate *_FS_SECURITY and *_FS_ACL_ATTR options for all big flash targets This patch activate *_FS_SECURITY and *_FS_ACL_ATTR options for all big flash memory targets. Fixes docker error: "failed to register layer: lsetxattr security.capability /usr/bin/ping: operation not supported" Forum discussion: https://forum.openwrt.org/t/docker-pull-fails-failed-to-register-layer-operation-not-supported/138253 Signed-off-by: Leo Barsky Link: https://github.com/openwrt/openwrt/pull/16181 Signed-off-by: Hauke Mehrtens --- config/Config-kernel.in | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'config') diff --git a/config/Config-kernel.in b/config/Config-kernel.in index 73b26b631a..fdc5850bde 100644 --- a/config/Config-kernel.in +++ b/config/Config-kernel.in @@ -1247,6 +1247,7 @@ config KERNEL_BTRFS_FS menu "Filesystem ACL and attr support options" config USE_FS_ACL_ATTR bool "Use filesystem ACL and attr support by default" + default y if !SMALL_FLASH help Make using ACLs (e.g. POSIX ACL, NFSv4 ACL) the default for kernel and packages, except tmpfs, flash filesystems, @@ -1415,15 +1416,19 @@ config KERNEL_LSM config KERNEL_EXT4_FS_SECURITY bool "Ext4 Security Labels" + default y if !SMALL_FLASH config KERNEL_F2FS_FS_SECURITY bool "F2FS Security Labels" + default y if !SMALL_FLASH config KERNEL_UBIFS_FS_SECURITY bool "UBIFS Security Labels" + default y if !SMALL_FLASH config KERNEL_JFFS2_FS_SECURITY bool "JFFS2 Security Labels" + default y if !SMALL_FLASH config KERNEL_WERROR bool "Compile the kernel with warnings as errors" -- cgit v1.2.3