| commit | 5ad76c27abbb7d7e65c97bce6be63d7aa542a531 | [log] [tgz] |
|---|---|---|
| author | Joel Stanley <joel@jms.id.au> | Mon Mar 23 17:52:05 2020 +1030 |
| committer | Joel Stanley <joel@jms.id.au> | Mon Mar 23 18:00:11 2020 +1030 |
| tree | 1da82a4b88e956238232e1a835d6f6c970cccb6f | |
| parent | e9a99472750d69a0efdfe0277de48dd19dafb839 [diff] |
linux-aspeed: Enable CGROUP_BPF and NAMESPACES
These are used by systemd to provide isolation features:
Required for IPAddressDeny= and IPAddressAllow= in resource control
unit settings
CONFIG_CGROUP_BPF
Required for PrivateNetwork= in service units:
CONFIG_NET_NS
Note that systemd-localed.service and other systemd units use
PrivateNetwork so this is effectively required.
Required for PrivateUsers= in service units:
CONFIG_USER_NS
(NET_NS is default y so we get it by enabling namespace support).
Change-Id: I48434708078af2bac4ca87434ce4ef76306a84cc
Signed-off-by: Joel Stanley <joel@jms.id.au>
This layer provides support for Aspeed's platforms for use with OpenEmbedded and/or Yocto.
This layer depends on: URI: git://git.openembedded.org/openembedded-core layers: meta branch: master revision: HEAD
meta-aspeed patches are reviewed using the Gerrit instance at https://gerrit.openbmc-project.xyz.
Please submit patches to Gerrit. More information on using Gerrit can be found here. https://github.com/openbmc/meta-aspeed is a hosting mirror only and GitHub pull requests are not monitored and will not be accepted.
Patch checklist. Please ensure patches adhere to the following guidelines:
For questions or help please come join us on the mailing list or in IRC.