matt/patronageos
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

hardened malloc. networking + firewall. json based config.

Browse Source
This commit is contained in:
matt
2026-02-08 12:36:23 -07:00
parent cdb972579a
commit 2770dfc964
46 changed files with 1443 additions and 138 deletions
Download Patch File Download Diff File Expand all files Collapse all files

210
config/kernel_options.json
View File

@@ -1,4 +1,6 @@
{
"CONFIG_IKCONFIG":"y",
"CONFIG_IKCONFIG_PROC":"y",
"CONFIG_104_QUAD_8": "m",
"CONFIG_60XX_WDT": "m",
"CONFIG_64BIT": "y",
@@ -2908,6 +2910,8 @@
"CONFIG_HDC100X": "m",
"CONFIG_HDC2010": "m",
"CONFIG_HDC3020": "m",
"CONFIG_BPF_SUPPORT_RAW_CT":"y",
"CONFIG_NFT_DNS":"y",
"CONFIG_HDLC": "m",
"CONFIG_HDLC_CISCO": "m",
"CONFIG_HDLC_FR": "m",
@@ -3641,6 +3645,7 @@
"CONFIG_IO_URING": "y",
"CONFIG_IO_WQ": "y",
"CONFIG_IP5XXX_POWER": "m",
"CONFIG_IP6_NF_QUEUE": "m",
"CONFIG_IP6_NF_FILTER": "m",
"CONFIG_IP6_NF_IPTABLES": "m",
"CONFIG_IP6_NF_IPTABLES_LEGACY": "m",
@@ -3750,11 +3755,12 @@
"CONFIG_IP_ROUTE_MULTIPATH": "y",
"CONFIG_IP_ROUTE_VERBOSE": "y",
"CONFIG_IP_SCTP": "m",
"CONFIG_IP_SET": "m",
"CONFIG_IP_SET": "y",
"CONFIG_IP_FILTER": "m",
"CONFIG_IP_SET_BITMAP_IP": "m",
"CONFIG_IP_SET_BITMAP_IPMAC": "m",
"CONFIG_IP_SET_BITMAP_PORT": "m",
"CONFIG_IP_SET_HASH_IP": "m",
"CONFIG_IP_SET_HASH_IP": "y",
"CONFIG_IP_SET_HASH_IPMAC": "m",
"CONFIG_IP_SET_HASH_IPMARK": "m",
"CONFIG_IP_SET_HASH_IPPORT": "m",
@@ -4961,97 +4967,99 @@
"CONFIG_NETFILTER": "y",
"CONFIG_NETFILTER_ADVANCED": "y",
"CONFIG_NETFILTER_BPF_LINK": "y",
"CONFIG_NETFILTER_CONNCOUNT": "m",
"CONFIG_NETFILTER_CONNCOUNT": "y",
"CONFIG_NETFILTER_EGRESS": "y",
"CONFIG_NETFILTER_FAMILY_ARP": "y",
"CONFIG_NETFILTER_FAMILY_BRIDGE": "y",
"CONFIG_NETFILTER_INGRESS": "y",
"CONFIG_NETFILTER_NETLINK": "m",
"CONFIG_NETFILTER_NETLINK_ACCT": "m",
"CONFIG_NETFILTER_NETLINK": "y",
"CONFIG_NETFILTER_NETLINK_ACCT": "y",
"CONFIG_NETFILTER_NETLINK_GLUE_CT": "y",
"CONFIG_NETFILTER_NETLINK_HOOK": "m",
"CONFIG_NETFILTER_NETLINK_LOG": "m",
"CONFIG_NETFILTER_NETLINK_OSF": "m",
"CONFIG_NETFILTER_NETLINK_QUEUE": "m",
"CONFIG_NETFILTER_NETLINK_HOOK": "y",
"CONFIG_NETFILTER_NETLINK_LOG": "y",
"CONFIG_NETFILTER_NETLINK_OSF": "y",
"CONFIG_NETFILTER_NETLINK_QUEUE": "y",
"CONFIG_NETFILTER_SKIP_EGRESS": "y",
"CONFIG_NETFILTER_SYNPROXY": "m",
"CONFIG_NETFILTER_XTABLES": "m",
"CONFIG_NETFILTER_SYNPROXY": "y",
"CONFIG_NETFILTER_XTABLES": "y",
"CONFIG_NETFILTER_XTABLES_COMPAT": "y",
"CONFIG_NETFILTER_XT_CONNMARK": "m",
"CONFIG_NETFILTER_XT_MARK": "m",
"CONFIG_NETFILTER_XT_MATCH_ADDRTYPE": "m",
"CONFIG_NETFILTER_XT_MATCH_BPF": "m",
"CONFIG_NETFILTER_XT_MATCH_CGROUP": "m",
"CONFIG_NETFILTER_XT_CONNMARK": "y",
"CONFIG_NETFILTER_XT_MARK": "y",
"CONFIG_NETFILTER_XT_MATCH_ADDRTYPE": "y",
"CONFIG_NETFILTER_XT_MATCH_BPF": "y",
"CONFIG_NETFILTER_XT_MATCH_CGROUP": "y",
"CONFIG_NETFILTER_XT_MATCH_CLUSTER": "m",
"CONFIG_NETFILTER_XT_MATCH_COMMENT": "m",
"CONFIG_NETFILTER_XT_MATCH_CONNBYTES": "m",
"CONFIG_NETFILTER_XT_MATCH_CONNLABEL": "m",
"CONFIG_NETFILTER_XT_MATCH_CONNLIMIT": "m",
"CONFIG_NETFILTER_XT_MATCH_CONNMARK": "m",
"CONFIG_NETFILTER_XT_MATCH_CONNTRACK": "m",
"CONFIG_NETFILTER_XT_MATCH_COMMENT": "y",
"CONFIG_NETFILTER_XT_MATCH_CONNBYTES": "y",
"CONFIG_NETFILTER_XT_MATCH_CONNLABEL": "y",
"CONFIG_NETFILTER_XT_MATCH_CONNLIMIT": "y",
"CONFIG_NETFILTER_XT_MATCH_CONNMARK": "y",
"CONFIG_NETFILTER_XT_MATCH_CONNTRACK": "y",
"CONFIG_NETFILTER_XT_MATCH_CPU": "m",
"CONFIG_NETFILTER_XT_MATCH_DCCP": "m",
"CONFIG_NETFILTER_XT_MATCH_DEVGROUP": "m",
"CONFIG_NETFILTER_XT_MATCH_DSCP": "m",
"CONFIG_NETFILTER_XT_MATCH_ECN": "m",
"CONFIG_NETFILTER_XT_MATCH_ESP": "m",
"CONFIG_NETFILTER_XT_MATCH_HASHLIMIT": "m",
"CONFIG_NETFILTER_XT_MATCH_HELPER": "m",
"CONFIG_NETFILTER_XT_MATCH_HL": "m",
"CONFIG_NETFILTER_XT_MATCH_IPCOMP": "m",
"CONFIG_NETFILTER_XT_MATCH_IPRANGE": "m",
"CONFIG_NETFILTER_XT_MATCH_IPVS": "m",
"CONFIG_NETFILTER_XT_MATCH_L2TP": "m",
"CONFIG_NETFILTER_XT_MATCH_LENGTH": "m",
"CONFIG_NETFILTER_XT_MATCH_LIMIT": "m",
"CONFIG_NETFILTER_XT_MATCH_MAC": "m",
"CONFIG_NETFILTER_XT_MATCH_MARK": "m",
"CONFIG_NETFILTER_XT_MATCH_MULTIPORT": "m",
"CONFIG_NETFILTER_XT_MATCH_NFACCT": "m",
"CONFIG_NETFILTER_XT_MATCH_OSF": "m",
"CONFIG_NETFILTER_XT_MATCH_OWNER": "m",
"CONFIG_NETFILTER_XT_MATCH_PHYSDEV": "m",
"CONFIG_NETFILTER_XT_MATCH_PKTTYPE": "m",
"CONFIG_NETFILTER_XT_MATCH_POLICY": "m",
"CONFIG_NETFILTER_XT_MATCH_QUOTA": "m",
"CONFIG_NETFILTER_XT_MATCH_RATEEST": "m",
"CONFIG_NETFILTER_XT_MATCH_REALM": "m",
"CONFIG_NETFILTER_XT_MATCH_RECENT": "m",
"CONFIG_NETFILTER_XT_MATCH_SCTP": "m",
"CONFIG_NETFILTER_XT_MATCH_SOCKET": "m",
"CONFIG_NETFILTER_XT_MATCH_STATE": "m",
"CONFIG_NETFILTER_XT_MATCH_STATISTIC": "m",
"CONFIG_NETFILTER_XT_MATCH_STRING": "m",
"CONFIG_NETFILTER_XT_MATCH_TCPMSS": "m",
"CONFIG_NETFILTER_XT_MATCH_TIME": "m",
"CONFIG_NETFILTER_XT_MATCH_U32": "m",
"CONFIG_NETFILTER_XT_NAT": "m",
"CONFIG_NETFILTER_XT_SET": "m",
"CONFIG_NETFILTER_XT_TARGET_AUDIT": "m",
"CONFIG_NETFILTER_XT_TARGET_CHECKSUM": "m",
"CONFIG_NETFILTER_XT_TARGET_CLASSIFY": "m",
"CONFIG_NETFILTER_XT_TARGET_CONNMARK": "m",
"CONFIG_NETFILTER_XT_TARGET_CONNSECMARK": "m",
"CONFIG_NETFILTER_XT_TARGET_CT": "m",
"CONFIG_NETFILTER_XT_TARGET_DSCP": "m",
"CONFIG_NETFILTER_XT_TARGET_HL": "m",
"CONFIG_NETFILTER_XT_TARGET_HMARK": "m",
"CONFIG_NETFILTER_XT_TARGET_IDLETIMER": "m",
"CONFIG_NETFILTER_XT_TARGET_LED": "m",
"CONFIG_NETFILTER_XT_TARGET_LOG": "m",
"CONFIG_NETFILTER_XT_TARGET_MARK": "m",
"CONFIG_NETFILTER_XT_TARGET_MASQUERADE": "m",
"CONFIG_NETFILTER_XT_TARGET_NETMAP": "m",
"CONFIG_NETFILTER_XT_TARGET_NFLOG": "m",
"CONFIG_NETFILTER_XT_TARGET_NFQUEUE": "m",
"CONFIG_NETFILTER_XT_TARGET_RATEEST": "m",
"CONFIG_NETFILTER_XT_TARGET_REDIRECT": "m",
"CONFIG_NETFILTER_XT_TARGET_SECMARK": "m",
"CONFIG_NETFILTER_XT_TARGET_TCPMSS": "m",
"CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP": "m",
"CONFIG_NETFILTER_XT_TARGET_TEE": "m",
"CONFIG_NETFILTER_XT_TARGET_TPROXY": "m",
"CONFIG_NETFILTER_XT_TARGET_TRACE": "m",
"CONFIG_NETFILTER_XT_MATCH_DCCP": "y",
"CONFIG_NETFILTER_XT_MATCH_DEVGROUP": "y",
"CONFIG_NETFILTER_XT_MATCH_DSCP": "y",
"CONFIG_NETFILTER_XT_MATCH_ECN": "y",
"CONFIG_NETFILTER_XT_MATCH_ESP": "y",
"CONFIG_NETFILTER_XT_MATCH_HASHLIMIT": "y",
"CONFIG_NETFILTER_XT_MATCH_HELPER": "y",
"CONFIG_NETFILTER_XT_MATCH_HL": "y",
"CONFIG_NETFILTER_XT_MATCH_IPCOMP": "y",
"CONFIG_NETFILTER_XT_MATCH_IPRANGE": "y",
"CONFIG_NETFILTER_XT_MATCH_IPVS": "y",
"CONFIG_NETFILTER_XT_MATCH_L2TP": "y",
"CONFIG_NETFILTER_XT_MATCH_LENGTH": "y",
"CONFIG_NETFILTER_XT_MATCH_LIMIT": "y",
"CONFIG_NETFILTER_XT_MATCH_MAC": "y",
"CONFIG_NETFILTER_XT_MATCH_MARK": "y",
"CONFIG_NETFILTER_XT_MATCH_MULTIPORT": "y",
"CONFIG_NETFILTER_XT_MATCH_NFACCT": "y",
"CONFIG_NETFILTER_XT_MATCH_OSF": "y",
"CONFIG_NETFILTER_XT_MATCH_OWNER": "y",
"CONFIG_NETFILTER_XT_MATCH_PHYSDEV": "y",
"CONFIG_NETFILTER_XT_MATCH_PKTTYPE": "y",
"CONFIG_NETFILTER_XT_MATCH_POLICY": "y",
"CONFIG_NETFILTER_XT_MATCH_QUOTA": "y",
"CONFIG_NETFILTER_XT_MATCH_RATEEST": "y",
"CONFIG_NETFILTER_XT_MATCH_REALM": "y",
"CONFIG_NETFILTER_XT_MATCH_RECENT": "y",
"CONFIG_NETFILTER_XT_MATCH_SCTP": "y",
"CONFIG_NETFILTER_XT_MATCH_SOCKET": "y",
"CONFIG_NETFILTER_XT_MATCH_STATE": "y",
"CONFIG_NETFILTER_XT_MATCH_STATISTIC": "y",
"CONFIG_NETFILTER_XT_MATCH_STRING": "y",
"CONFIG_NETFILTER_XT_MATCH_TCPMSS": "y",
"CONFIG_NETFILTER_XT_MATCH_TIME": "y",
"CONFIG_NETFILTER_XT_MATCH_U32": "y",
"CONFIG_NETFILTER_XT_NAT": "y",
"CONFIG_NETFILTER_XT_SET": "y",
"CONFIG_NETFILTER_XT_TARGET_BPF": "y",
"CONFIG_NETFILTER_XT_TARGET_AUDIT": "y",
"CONFIG_NETFILTER_XT_TARGET_CHECKSUM": "y",
"CONFIG_NETFILTER_XT_TARGET_CLASSIFY": "y",
"CONFIG_NETFILTER_XT_TARGET_CONNMARK": "y",
"CONFIG_NETFILTER_XT_TARGET_CONNSECMARK": "y",
"CONFIG_NETFILTER_XT_TARGET_CT": "y",
"CONFIG_NETFILTER_XT_TARGET_DSCP": "y",
"CONFIG_NETFILTER_XT_TARGET_HL": "y",
"CONFIG_NETFILTER_XT_TARGET_HMARK": "y",
"CONFIG_NETFILTER_XT_TARGET_IDLETIMER": "y",
"CONFIG_NETFILTER_XT_TARGET_LED": "y",
"CONFIG_NETFILTER_XT_TARGET_LOG": "y",
"CONFIG_NETFILTER_XT_TARGET_MARK": "y",
"CONFIG_NETFILTER_XT_TARGET_MASQUERADE": "y",
"CONFIG_NETFILTER_XT_TARGET_NETMAP": "y",
"CONFIG_NETFILTER_XT_TARGET_NFLOG": "y",
"CONFIG_NETFILTER_XT_TARGET_NFQUEUE": "y",
"CONFIG_NETFILTER_XT_TARGET_NFQ": "y",
"CONFIG_NETFILTER_XT_TARGET_RATEEST": "y",
"CONFIG_NETFILTER_XT_TARGET_REDIRECT": "y",
"CONFIG_NETFILTER_XT_TARGET_SECMARK": "y",
"CONFIG_NETFILTER_XT_TARGET_TCPMSS": "y",
"CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP": "y",
"CONFIG_NETFILTER_XT_TARGET_TEE": "y",
"CONFIG_NETFILTER_XT_TARGET_TPROXY": "y",
"CONFIG_NETFILTER_XT_TARGET_TRACE": "y",
"CONFIG_NETFS_DEBUG": "y",
"CONFIG_NETFS_STATS": "y",
"CONFIG_NETFS_SUPPORT": "m",
@@ -5418,17 +5426,18 @@
"CONFIG_NFT_QUEUE": "m",
"CONFIG_NFT_QUOTA": "m",
"CONFIG_NFT_REDIR": "m",
"CONFIG_NFT_REJECT": "m",
"CONFIG_NFT_REJECT_INET": "m",
"CONFIG_NFT_REJECT_IPV4": "m",
"CONFIG_NFT_REJECT_IPV6": "m",
"CONFIG_NFT_REJECT_NETDEV": "m",
"CONFIG_NFT_REJECT": "y",
"CONFIG_NFT_REJECT_INET": "y",
"CONFIG_NFT_REJECT_IPV4": "y",
"CONFIG_NFT_REJECT_IPV6": "y",
"CONFIG_NFT_REJECT_NETDEV": "y",
"CONFIG_NFT_SOCKET": "m",
"CONFIG_NFT_SYNPROXY": "m",
"CONFIG_NFT_TPROXY": "m",
"CONFIG_NFT_TUNNEL": "m",
"CONFIG_NFT_XFRM": "m",
"CONFIG_NF_CONNTRACK": "m",
"CONFIG_NFQ": "y",
"CONFIG_NF_CONNTRACK": "y",
"CONFIG_NF_CONNTRACK_AMANDA": "m",
"CONFIG_NF_CONNTRACK_BRIDGE": "m",
"CONFIG_NF_CONNTRACK_BROADCAST": "m",
@@ -5467,7 +5476,7 @@
"CONFIG_NF_LOG_IPV4": "m",
"CONFIG_NF_LOG_IPV6": "m",
"CONFIG_NF_LOG_SYSLOG": "m",
"CONFIG_NF_NAT": "m",
"CONFIG_NF_NAT": "y",
"CONFIG_NF_NAT_AMANDA": "m",
"CONFIG_NF_NAT_FTP": "m",
"CONFIG_NF_NAT_H323": "m",
@@ -5479,19 +5488,20 @@
"CONFIG_NF_NAT_SIP": "m",
"CONFIG_NF_NAT_SNMP_BASIC": "m",
"CONFIG_NF_NAT_TFTP": "m",
"CONFIG_NF_REJECT_IPV4": "m",
"CONFIG_NF_REJECT_IPV6": "m",
"CONFIG_NF_SOCKET_IPV4": "m",
"CONFIG_NF_SOCKET_IPV6": "m",
"CONFIG_NF_TABLES": "m",
"CONFIG_NF_TABLES_SET": "y",
"CONFIG_NF_REJECT_IPV4": "y",
"CONFIG_NF_REJECT_IPV6": "y",
"CONFIG_NF_SOCKET_IPV4": "y",
"CONFIG_NF_SOCKET_IPV6": "y",
"CONFIG_NF_TABLES": "y",
"CONFIG_NF_TABLES_ARP": "y",
"CONFIG_NF_TABLES_BRIDGE": "m",
"CONFIG_NF_TABLES_BRIDGE": "y",
"CONFIG_NF_TABLES_INET": "y",
"CONFIG_NF_TABLES_IPV4": "y",
"CONFIG_NF_TABLES_IPV6": "y",
"CONFIG_NF_TABLES_NETDEV": "y",
"CONFIG_NF_TPROXY_IPV4": "m",
"CONFIG_NF_TPROXY_IPV6": "m",
"CONFIG_NF_TPROXY_IPV4": "y",
"CONFIG_NF_TPROXY_IPV6": "y",
"CONFIG_NGBE": "m",
"CONFIG_NI903X_WDT": "m",
"CONFIG_NIC7018_WDT": "m",
@@ -9677,4 +9687,4 @@
"CONFIG_ZSWAP_COMPRESSOR_DEFAULT_LZO": "y",
"CONFIG_ZSWAP_SHRINKER_DEFAULT_ON": "y",
"CONFIG_ZSWAP_ZPOOL_DEFAULT_ZBUD": "y"
}
}