fix alias for stack protector kernel config.

- fix YAML syntax
- alias -> aliases
- no need for CONFIG prefix
- add renamed config since 4.18
This commit is contained in:
Jiahui Feng 2020-02-19 14:41:42 -08:00
parent afa72e93cd
commit 68b7564e7e

View File

@ -49,7 +49,7 @@ kernelSpec:
- name: IP6_NF_IPTABLES
description: 'Required by kube-proxy.'
- name: IP_NF_TARGET_REDIRECT
alias:
aliases:
- NETFILTER_XT_TARGET_REDIRECT
description: 'Enabled REDIRECT: all incoming connections are mapped onto
the incoming interface''s address, causing the packets to come to the
@ -167,10 +167,11 @@ kernelSpec:
description: 'Enabled the SECCOMP application API.'
- name: SECURITY_APPARMOR
description: 'Enable for AppArmor support.'
- name: CC_STACKPROTECTOR_STRONG
alias:
- CONFIG_CC_STACKPROTECTOR_REGULAR
CONFIG_CC_STACKPROTECTOR_ALL
- name: CC_STACKPROTECTOR_STRONG # Linux kernel <= 4.17
aliases:
- CC_STACKPROTECTOR_REGULAR # Linux kernel <= 4.17
- CC_STACKPROTECTOR_ALL # Linux kernel <= 4.17
- STACKPROTECTOR_STRONG # Linux kernel >= 4.18
description: 'Add the stack buffer overflow protections.'
- name: STRICT_DEVMEM
description: 'Required for blocking the direct physical memory access.'