linux-megous: dont auto-enable SELINUX

i think maybe it's disabled for a reason: systemd is built without it, and either it or SUN8I_DE2_CCU seems to be the difference between working drm and non-working drm
This commit is contained in:
Colin 2024-05-21 21:45:31 +00:00
parent 7f71a47d3b
commit b6d31e127d

View File

@ -185,15 +185,15 @@ let
# options needed if `withNixpkgsConfig` is enabled... even if `withFullConfig` is as well
nixpkgsFixes = with lib.kernel; {
SUN8I_DE2_CCU = lib.mkForce module; #< nixos' default `Y` confuses its own config parser
SUN8I_DE2_CCU = lib.mkForce yes; #< nixos' default `Y` confuses its own config parser
#v XXX: required for e.g. SECURITY_LANDLOCK (specified by upstream nixpkgs) to take effect if `autoModules = false`
#v seems that upstream linux (the defconfigs?), it defaults to Yes for:
# - arch/x86/configs/x86_64_defconfig
# - arch/arm64/configs/defconfig
# but that it's left unset for e.g. arch/arm64/configs/pinephone_defconfig. TODO: upstream to nixpkgs
SECURITY = yes;
SECURITY_SELINUX = yes; #< not sure if actually required; it would usually be enabled by autoModules
SECURITY_SELINUX_BOOTPARAM = yes;
# SECURITY_SELINUX = yes; #< not sure if actually required; it would usually be enabled by autoModules
# SECURITY_SELINUX_BOOTPARAM = yes;
# PCI needed because of the dependency on module `ahci`
# like SECURITY, it's present for the default x86, arm64 defconfigs, but not the flavored ones.
PCI = yes;