Applications related to the security mostly need SELinux function which
may increase the overhead of performance howerver. So many tests have
been done on the whole system. The result says it actually doesn't have
impact only when disabling the service in the user-space. However, if
someone still tries to enable the feature, something like the balance of
the performance and the security must be taken into consideration.
Signed-off-by: NJason Xing <kerneljasonxing@linux.alibaba.com>
Reviewed-by: NJoseph Qi <joseph.qi@linux.alibaba.com>

Applications related to the security mostly need audit function which
may increase the overhead of performance howerver. So many tests have
been done on the whole system. The result says it actually doesn't have
impact only when disabling the service in the user-space. However, if
someone still tries to enable the feature, something like the balance of
the performance and the security must be taken into consideration.
Signed-off-by: NJason Xing <kerneljasonxing@linux.alibaba.com>
Reviewed-by: NJoseph Qi <joseph.qi@linux.alibaba.com>

IP policy routing depends on IP_MULTIPLE_TABLES, enable it by default
for IPv4 and IPv6.

Enable CONFIG_IPV6_SUBTREES at the same time, which enables IPv6 routing
by source address or prefix.
Signed-off-by: NXu Yu <xuyu@linux.alibaba.com>
Reviewed-by: NJoseph Qi <joseph.qi@linux.alibaba.com>

Set system time from RTC on startup and resume.
Signed-off-by: NJoseph Qi <joseph.qi@linux.alibaba.com>
Reviewed-by: NCaspar Zhang <caspar@linux.alibaba.com>
Reviewed-by: NJiufei Xue <jiufei.xue@linux.alibaba.com>

CONFIG_DEVMEM is recently added in newer kernels, many applications
depend on this option, enable it by default.
Signed-off-by: NCaspar Zhang <caspar@linux.alibaba.com>
Reviewed-by: NJoseph Qi <joseph.qi@linux.alibaba.com>

IFB driver is needed to do ingress traffic control.
Signed-off-by: NDust Li <dust.li@linux.alibaba-inc.com>

Signed-off-by: NGeorge Zhang <georgezhang@linux.alibaba.com>
Reviewed-by: NCaspar Zhang <caspar@linux.alibaba.com>

Signed-off-by: NCaspar Zhang <caspar@linux.alibaba.com>