commit 5ad76c27abbb7d7e65c97bce6be63d7aa542a531
author Joel Stanley <joel@jms.id.au> Mon Mar 23 17:52:05 2020 +1030
committer Joel Stanley <joel@jms.id.au> Mon Mar 23 18:00:11 2020 +1030
tree 1da82a4b88e956238232e1a835d6f6c970cccb6f
parent e9a99472750d69a0efdfe0277de48dd19dafb839

linux-aspeed: Enable CGROUP_BPF and NAMESPACES

These are used by systemd to provide isolation features:

  Required for IPAddressDeny= and IPAddressAllow= in resource control
  unit settings
    CONFIG_CGROUP_BPF

  Required for PrivateNetwork= in service units:
    CONFIG_NET_NS
  Note that systemd-localed.service and other systemd units use
  PrivateNetwork so this is effectively required.

  Required for PrivateUsers= in service units:
    CONFIG_USER_NS

(NET_NS is default y so we get it by enabling namespace support).

Change-Id: I48434708078af2bac4ca87434ce4ef76306a84cc
Signed-off-by: Joel Stanley <joel@jms.id.au>

recipes-kernel/linux/linux-aspeed/aspeed-g4/defconfig

diff --git a/recipes-kernel/linux/linux-aspeed/aspeed-g4/defconfig b/recipes-kernel/linux/linux-aspeed/aspeed-g4/defconfig
index 939a60e..00dd0ca 100644
--- a/recipes-kernel/linux/linux-aspeed/aspeed-g4/defconfig
+++ b/recipes-kernel/linux/linux-aspeed/aspeed-g4/defconfig
@@ -7,6 +7,9 @@
 CONFIG_IKCONFIG_PROC=y
 CONFIG_LOG_BUF_SHIFT=16
 CONFIG_CGROUPS=y
+CONFIG_CGROUP_BPF=y
+CONFIG_NAMESPACES=y
+CONFIG_USER_NS=y
 CONFIG_BLK_DEV_INITRD=y
 # CONFIG_RD_BZIP2 is not set
 # CONFIG_RD_LZO is not set