mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-07-19 18:02:01 +00:00
fix alias for stack protector kernel config.
- fix YAML syntax - alias -> aliases - no need for CONFIG prefix - add renamed config since 4.18
This commit is contained in:
parent
afa72e93cd
commit
68b7564e7e
@ -49,7 +49,7 @@ kernelSpec:
|
||||
- name: IP6_NF_IPTABLES
|
||||
description: 'Required by kube-proxy.'
|
||||
- name: IP_NF_TARGET_REDIRECT
|
||||
alias:
|
||||
aliases:
|
||||
- NETFILTER_XT_TARGET_REDIRECT
|
||||
description: 'Enabled REDIRECT: all incoming connections are mapped onto
|
||||
the incoming interface''s address, causing the packets to come to the
|
||||
@ -167,10 +167,11 @@ kernelSpec:
|
||||
description: 'Enabled the SECCOMP application API.'
|
||||
- name: SECURITY_APPARMOR
|
||||
description: 'Enable for AppArmor support.'
|
||||
- name: CC_STACKPROTECTOR_STRONG
|
||||
alias:
|
||||
- CONFIG_CC_STACKPROTECTOR_REGULAR
|
||||
CONFIG_CC_STACKPROTECTOR_ALL
|
||||
- name: CC_STACKPROTECTOR_STRONG # Linux kernel <= 4.17
|
||||
aliases:
|
||||
- CC_STACKPROTECTOR_REGULAR # Linux kernel <= 4.17
|
||||
- CC_STACKPROTECTOR_ALL # Linux kernel <= 4.17
|
||||
- STACKPROTECTOR_STRONG # Linux kernel >= 4.18
|
||||
description: 'Add the stack buffer overflow protections.'
|
||||
- name: STRICT_DEVMEM
|
||||
description: 'Required for blocking the direct physical memory access.'
|
||||
|
Loading…
Reference in New Issue
Block a user