On Thu, Feb 09, 2023 at 05:08:10PM +0100, Jan Beulich wrote: > On 09.02.2023 17:02, George Dunlap wrote: > > On Thu, Feb 9, 2023 at 1:43 PM Jan Beulich <jbeul...@suse.com> wrote: > > > >> On 02.02.2023 16:51, Andrew Cooper wrote: > >>> On 12/01/2023 4:52 pm, Jan Beulich wrote: > >> > >> Anyway, I have a prototype for the two CET controls mostly ready now, so > >> I guess we'll continue the discussion there once I've submitted that one. > >> > > > > One thing that it occured to me will be important: `make randconfig` must > > continue to work somehow. > > Hmm, good point. For now I've merely added a TBD to the patch I've already > sent. Right now I can't see how that might be possible without the user > specifying which options cannot be turned on due to tool chain dependencies > (by way of a seeding .config, I suppose). > > > I'm not sure how Anthony's patch to deal with `checkpolicy` deals with > > that. > > Given his remark on the community call I did actually try to locate it, > assuming that it had at least "policy" in the title. But I couldn't find > anything in my mailbox.
0b000a2ce813 ("xen: rework `checkpolicy` detection when using "randconfig"") It boil down to adding "CONFIG_XSM_FLASK_POLICY=n" via KCONFIG_ALLCONFIG option. The macro $(filechk_kconfig_allconfig,) does the job. -- Anthony PERARD