• T
    configs: enable security and sm3/4 configs for trust · 34e80779
    Tianjia Zhang 提交于
    to #26581627
    
    Enable a set of config related to kernel trust, including
    vptm, IMA, EVM, smack LSM, and SM3, SM4, in which SM algorithm
    is compiled into module.
    
    These configs also support the x64 arm platform.
    
    The following are some performance data. The output of
    `systemd-analyze` on the startup time of an ECS (executed
    three times):
    
    before:
    725ms (kernel) + 471ms (initrd) + 3.375s (userspace) = 4.572s
    794ms (kernel) + 426ms (initrd) + 3.281s (userspace) = 4.501s
    797ms (kernel) + 464ms (initrd) + 3.275s (userspace) = 4.538s
    
    after:
    777ms (kernel) + 439ms (initrd) + 3.456s (userspace) = 4.672s
    785ms (kernel) + 450ms (initrd) + 3.313s (userspace) = 4.549s
    741ms (kernel) + 481ms (initrd) + 3.274s (userspace) = 4.497s
    Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>
    Reviewed-by: jia zhang's avatarJia Zhang <zhang.jia@linux.alibaba.com>
    Reviewed-by: NShile Zhang <shile.zhang@linux.alibaba.com>
    34e80779
kernel-4.19-x86_64-alios7.config 157.1 KB