I have used the kernel config checking script from https://github.com/a13xp0p0v/kconfig-hardened-check/blob/master/kconfig-hardened-check.py on three systems. Two are fine, but one has lost audio. The driver is loaded, but aplay -L and /dev/snd are missing devices.
Here's the changes in the new, broken audio, config. Any suspects for the breakage? # diff config-23jun2018-pre-hardening config-25jun2018 | grep ^\> > # CONFIG_BPF_SYSCALL is not set > CONFIG_SLUB_DEBUG=y > # CONFIG_SLUB_MEMCG_SYSFS_ON is not set > # CONFIG_SLAB is not set > CONFIG_SLUB=y > CONFIG_SLAB_FREELIST_RANDOM=y > CONFIG_SLAB_FREELIST_HARDENED=y > CONFIG_SLUB_CPU_PARTIAL=y > CONFIG_HAVE_ALIGNED_STRUCT_PAGE=y > CONFIG_GCC_PLUGIN_LATENT_ENTROPY=y > CONFIG_MODULE_SIG=y > CONFIG_MODULE_SIG_FORCE=y > CONFIG_MODULE_SIG_ALL=y > # CONFIG_MODULE_SIG_SHA1 is not set > # CONFIG_MODULE_SIG_SHA224 is not set > # CONFIG_MODULE_SIG_SHA256 is not set > # CONFIG_MODULE_SIG_SHA384 is not set > CONFIG_MODULE_SIG_SHA512=y > CONFIG_MODULE_SIG_HASH="sha512" > # CONFIG_X86_VSYSCALL_EMULATION is not set > CONFIG_DEFAULT_MMAP_MIN_ADDR=65536 > # CONFIG_KEXEC is not set > # CONFIG_KEXEC_FILE is not set > # CONFIG_LEGACY_VSYSCALL_EMULATE is not set > CONFIG_LEGACY_VSYSCALL_NONE=y > # CONFIG_MODIFY_LDT_SYSCALL is not set > # CONFIG_IA32_EMULATION is not set > # CONFIG_DEVKMEM is not set > CONFIG_PAGE_POISONING=y > # CONFIG_PAGE_POISONING_NO_SANITY is not set > # CONFIG_PAGE_POISONING_ZERO is not set > CONFIG_SLUB_DEBUG_ON=y > # CONFIG_SLUB_STATS is not set > CONFIG_SCHED_STACK_END_CHECK=y > CONFIG_DEBUG_LIST=y > CONFIG_DEBUG_SG=y > CONFIG_DEBUG_NOTIFIERS=y > CONFIG_DEBUG_CREDENTIALS=y > # CONFIG_FTRACE is not set > # CONFIG_PROVIDE_OHCI1394_DMA_INIT is not set > # CONFIG_RUNTIME_TESTING_MENU is not set > CONFIG_BUG_ON_DATA_CORRUPTION=y > CONFIG_STRICT_DEVMEM=y > CONFIG_IO_STRICT_DEVMEM=y > CONFIG_X86_PTDUMP_CORE=y > CONFIG_DEBUG_WX=y > CONFIG_SECURITY_DMESG_RESTRICT=y > CONFIG_STATIC_USERMODEHELPER=y > CONFIG_STATIC_USERMODEHELPER_PATH="/sbin/usermode-helper" > CONFIG_SECURITY_YAMA=y > CONFIG_MODULE_SIG_KEY="certs/signing_key.pem"
