Merge branch 'from-hackurx-3'

config_files/links.txt

+######################################################
+#                                                    #
+# Some kernel configurations are available directly. #
+#                                                    #
+######################################################
+
+Alpine Linux:
+https://git.alpinelinux.org/cgit/aports/plain/main/linux-vanilla/config-vanilla.x86_64?h=3.8-stable
+
+Arch Linux:
+https://git.archlinux.org/svntogit/packages.git/plain/linux-hardened/trunk/config.x86_64
+
+Oracle Linux: Unbreakable Enterprise Kernel (UEK):
+https://raw.githubusercontent.com/oracle/linux-uek/uek5/master/uek-rpm/ol7/config-x86_64
+
+SUSE Linux Enterprise (SLE):
+https://kernel.opensuse.org/cgit/kernel-source/plain/config/x86_64/default?h=SLE15-SP1
+
+openSUSE:
+https://kernel.opensuse.org/cgit/kernel-source/plain/config/x86_64/default?h=openSUSE-15.0
+
+Pentoo:
+https://raw.githubusercontent.com/pentoo/pentoo-livecd/master/livecd/amd64/kernel/config-4.17.11

config_files/oracle-uek5.config

 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86 4.14.35-1818.0.9.el7uek.x86_64 Kernel Configuration
+# Linux/x86 4.14.35 Kernel Configuration
 #
 CONFIG_64BIT=y
 CONFIG_X86_64=y
@@ -6279,7 +6279,7 @@ CONFIG_AMD_IOMMU_V2=m
 CONFIG_DMAR_TABLE=y
 CONFIG_INTEL_IOMMU=y
 # CONFIG_INTEL_IOMMU_SVM is not set
-# CONFIG_INTEL_IOMMU_DEFAULT_ON is not set
+CONFIG_INTEL_IOMMU_DEFAULT_ON=y
 CONFIG_INTEL_IOMMU_FLOPPY_WA=y
 CONFIG_IRQ_REMAP=y
 
@@ -7292,7 +7292,7 @@ CONFIG_BIG_KEYS=y
 CONFIG_TRUSTED_KEYS=y
 CONFIG_ENCRYPTED_KEYS=y
 # CONFIG_KEY_DH_OPERATIONS is not set
-CONFIG_SECURITY_DMESG_RESTRICT=y
+# CONFIG_SECURITY_DMESG_RESTRICT is not set
 CONFIG_SECURITY=y
 CONFIG_SECURITY_WRITABLE_HOOKS=y
 CONFIG_SECURITYFS=y
@@ -7308,6 +7308,7 @@ CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
 CONFIG_FORTIFY_SOURCE=y
 # CONFIG_STATIC_USERMODEHELPER is not set
 CONFIG_LOCK_DOWN_KERNEL=y
+# CONFIG_ALLOW_LOCKDOWN_LIFT_BY_SYSRQ is not set
 CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT=y
 CONFIG_SECURITY_SELINUX=y
 CONFIG_SECURITY_SELINUX_BOOTPARAM=y
@@ -7700,3 +7701,4 @@ CONFIG_ARCH_HAS_UACCESS_FLUSHCACHE=y
 CONFIG_STACKDEPOT=y
 CONFIG_SBITMAP=y
 # CONFIG_STRING_SELFTEST is not set
+