control agent can now uboot commands

2026-04-04 20:19:25 +08:00
parent 4f490ab37e
commit 517cc2e01d
19 changed files with 579 additions and 69 deletions
--- a/kernel-extra.config
+++ b/kernel-extra.config
@@ -293,6 +293,14 @@ CONFIG_SECCOMP_FILTER=y
 # CONFIG_SECURITY=y
 # CONFIG_SECURITYFS=y

+CONFIG_SECURITY_NETWORK=y
+# enables Security Module (LSM) hooks for network operations. CoreDNS needs this
+
+CONFIG_SECURITY_PATH=y
+# Recommended for container isolation
+
+CONFIG_SECURITY_NETWORK_XFRM=y
+

 ###############################################################################
 # Misc userspace/container compatibility