activate EFI

diff --git a/target/linux/visionfive/config-5.15 b/target/linux/visionfive/config-5.15
index 61bbbae2dace4b33985d3fbec0c10b37316bc2fc..bcb41a5fde2bd7c44349620d7cb13c98e0a8b186 100644 (file)
--- a/target/linux/visionfive/config-5.15
+++ b/target/linux/visionfive/config-5.15
@@ -139,7 +139,6 @@ CONFIG_CRYPTO_DRBG_CTR=y
 CONFIG_CRYPTO_DRBG_HASH=y
 CONFIG_CRYPTO_DRBG_HMAC=y
 CONFIG_CRYPTO_DRBG_MENU=y
-CONFIG_CRYPTO_FIPS=y
 CONFIG_CRYPTO_HASH_INFO=y
 CONFIG_CRYPTO_HMAC=y
 CONFIG_CRYPTO_JITTERENTROPY=y
@@ -235,6 +234,18 @@ CONFIG_EDAC=y
 CONFIG_EDAC_LEGACY_SYSFS=y
 CONFIG_EDAC_SIFIVE=y
 CONFIG_EDAC_SUPPORT=y
+CONFIG_EFI=y
+CONFIG_EFIVAR_FS=m
+# CONFIG_EFI_BOOTLOADER_CONTROL is not set
+# CONFIG_EFI_CAPSULE_LOADER is not set
+# CONFIG_EFI_DISABLE_PCI_DMA is not set
+CONFIG_EFI_EARLYCON=y
+CONFIG_EFI_ESRT=y
+CONFIG_EFI_GENERIC_STUB=y
+CONFIG_EFI_PARAMS_FROM_FDT=y
+CONFIG_EFI_RUNTIME_WRAPPERS=y
+CONFIG_EFI_STUB=y
+# CONFIG_EFI_TEST is not set
 CONFIG_ERRATA_SIFIVE=y
 CONFIG_ERRATA_SIFIVE_CIP_1200=y
 CONFIG_ERRATA_SIFIVE_CIP_453=y
@@ -244,27 +255,23 @@ CONFIG_EXT4_FS_POSIX_ACL=y
 CONFIG_EXT4_FS_SECURITY=y
 CONFIG_FAIR_GROUP_SCHED=y
 CONFIG_FANOTIFY=y
-CONFIG_FANOTIFY_ACCESS_PERMISSIONS=y
 CONFIG_FB=y
 CONFIG_FB_CMDLINE=y
+# CONFIG_FB_EFI is not set
 CONFIG_FB_TILEBLITTING=y
 CONFIG_FIRMWARE_EDID=y
 CONFIG_FIXED_PHY=y
 CONFIG_FIX_EARLYCON_MEM=y
 # CONFIG_FLATMEM_MANUAL is not set
+CONFIG_FONT_8x16=y
+CONFIG_FONT_AUTOSELECT=y
+CONFIG_FONT_SUPPORT=y
 CONFIG_FPU=y
 CONFIG_FREEZER=y
 CONFIG_FRONTSWAP=y
-CONFIG_FS_DAX=y
-CONFIG_FS_ENCRYPTION=y
-CONFIG_FS_ENCRYPTION_ALGS=y
-CONFIG_FS_ENCRYPTION_INLINE_CRYPT=y
 CONFIG_FS_IOMAP=y
 CONFIG_FS_MBCACHE=y
 CONFIG_FS_POSIX_ACL=y
-CONFIG_FS_VERITY=y
-# CONFIG_FS_VERITY_BUILTIN_SIGNATURES is not set
-# CONFIG_FS_VERITY_DEBUG is not set
 CONFIG_FUNCTION_ERROR_INJECTION=y
 CONFIG_FUSION=y
 CONFIG_FUSION_LOGGING=y
@@ -386,9 +393,6 @@ CONFIG_LIBCRC32C=y
 CONFIG_LIBFDT=y
 CONFIG_LOCKUP_DETECTOR=y
 CONFIG_LOCK_DEBUGGING_SUPPORT=y
-# CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set
-# CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set
-CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y
 CONFIG_LOCK_SPIN_ON_OWNER=y
 CONFIG_LOGO=y
 CONFIG_LOGO_LINUX_CLUT224=y
@@ -453,27 +457,10 @@ CONFIG_MMC_SDHCI_PLTFM=y
 CONFIG_MMC_SPI=y
 CONFIG_MMIOWB=y
 CONFIG_MODULES_USE_ELF_RELA=y
-# CONFIG_MODULE_COMPRESS_NONE is not set
-CONFIG_MODULE_COMPRESS_XZ=y
 CONFIG_MODULE_SECTIONS=y
-CONFIG_MODULE_SIG=y
-CONFIG_MODULE_SIG_ALL=y
-# CONFIG_MODULE_SIG_FORCE is not set
-CONFIG_MODULE_SIG_FORMAT=y
-CONFIG_MODULE_SIG_HASH="sha512"
-CONFIG_MODULE_SIG_KEY="certs/signing_key.pem"
-# CONFIG_MODULE_SIG_KEY_TYPE_ECDSA is not set
-CONFIG_MODULE_SIG_KEY_TYPE_RSA=y
-# CONFIG_MODULE_SIG_SHA1 is not set
-# CONFIG_MODULE_SIG_SHA224 is not set
-# CONFIG_MODULE_SIG_SHA256 is not set
-# CONFIG_MODULE_SIG_SHA384 is not set
-CONFIG_MODULE_SIG_SHA512=y
 # CONFIG_MOXA_INTELLIO is not set
 # CONFIG_MOXA_SMARTIO is not set
 CONFIG_MPILIB=y
-CONFIG_MPLS=y
-CONFIG_MPTCP=y
 CONFIG_MQ_IOSCHED_DEADLINE=y
 CONFIG_MUTEX_SPIN_ON_OWNER=y
 CONFIG_NAMESPACES=y
@@ -482,7 +469,6 @@ CONFIG_NCSI_OEM_CMD_GET_MAC=y
 CONFIG_NEED_DMA_MAP_STATE=y
 CONFIG_NETFILTER=y
 CONFIG_NETFILTER_XTABLES=y
-CONFIG_NETLABEL=y
 CONFIG_NETWORK_PHY_TIMESTAMPING=y
 CONFIG_NETWORK_SECMARK=y
 CONFIG_NET_CLS_ACT=y
@@ -498,22 +484,6 @@ CONFIG_NET_SELFTESTS=y
 CONFIG_NET_SWITCHDEV=y
 CONFIG_NET_TC_SKB_EXT=y
 CONFIG_NET_TULIP=y
-# CONFIG_NET_VENDOR_ALACRITECH is not set
-# CONFIG_NET_VENDOR_CAVIUM is not set
-# CONFIG_NET_VENDOR_CORTINA is not set
-# CONFIG_NET_VENDOR_EZCHIP is not set
-# CONFIG_NET_VENDOR_HUAWEI is not set
-# CONFIG_NET_VENDOR_I825XX is not set
-# CONFIG_NET_VENDOR_MICROCHIP is not set
-# CONFIG_NET_VENDOR_MICROSEMI is not set
-# CONFIG_NET_VENDOR_NI is not set
-# CONFIG_NET_VENDOR_QUALCOMM is not set
-# CONFIG_NET_VENDOR_RENESAS is not set
-# CONFIG_NET_VENDOR_SAMSUNG is not set
-# CONFIG_NET_VENDOR_SEEQ is not set
-# CONFIG_NET_VENDOR_SOCIONEXT is not set
-# CONFIG_NET_VENDOR_SOLARFLARE is not set
-# CONFIG_NET_VENDOR_SYNOPSYS is not set
 CONFIG_NO_HZ=y
 CONFIG_NO_HZ_COMMON=y
 CONFIG_NO_HZ_FULL=y
@@ -576,8 +546,6 @@ CONFIG_PHYS_ADDR_T_64BIT=y
 # CONFIG_PHYS_RAM_BASE_FIXED is not set
 CONFIG_PINCTRL=y
 CONFIG_PINCTRL_STARFIVE=y
-CONFIG_PKCS7_MESSAGE_PARSER=y
-# CONFIG_PKCS7_TEST_KEY is not set
 # CONFIG_PKCS8_PRIVATE_KEY_PARSER is not set
 CONFIG_PM_DEVFREQ=y
 # CONFIG_PM_DEVFREQ_EVENT is not set
@@ -640,6 +608,7 @@ CONFIG_REGULATOR_PWM=y
 # CONFIG_REGULATOR_TPS65086 is not set
 CONFIG_REMOTEPROC=y
 # CONFIG_REMOTEPROC_CDEV is not set
+# CONFIG_RESET_ATTACK_MITIGATION is not set
 CONFIG_RESET_CONTROLLER=y
 CONFIG_RESET_SIMPLE=y
 CONFIG_RESET_STARFIVE_JH7100=y
@@ -656,6 +625,7 @@ CONFIG_RISCV_TIMER=y
 CONFIG_RISCV_UNCACHED_OFFSET=0xF80000000
 CONFIG_RPS=y
 CONFIG_RTC_CLASS=y
+# CONFIG_RTC_DRV_EFI is not set
 CONFIG_RTC_DRV_GOLDFISH=y
 CONFIG_RTC_I2C_AND_SPI=y
 # CONFIG_RTC_SYSTOHC is not set
@@ -676,17 +646,6 @@ CONFIG_SCSI_DH=y
 # CONFIG_SCSI_DH_RDAC is not set
 CONFIG_SCSI_LOGGING=y
 CONFIG_SCSI_SCAN_ASYNC=y
-CONFIG_SECONDARY_TRUSTED_KEYRING=y
-CONFIG_SECURITY=y
-CONFIG_SECURITY_LOCKDOWN_LSM=y
-CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y
-CONFIG_SECURITY_NETWORK=y
-CONFIG_SECURITY_NETWORK_XFRM=y
-CONFIG_SECURITY_SELINUX=y
-CONFIG_SECURITY_SELINUX_BOOTPARAM=y
-CONFIG_SECURITY_SELINUX_SID2STR_CACHE_SIZE=256
-CONFIG_SECURITY_SELINUX_SIDTAB_HASH_BITS=9
-CONFIG_SECURITY_YAMA=y
 # CONFIG_SERIAL_8250_16550A_VARIANTS is not set
 CONFIG_SERIAL_8250_DW=y
 CONFIG_SERIAL_8250_DWLIB=y
@@ -716,7 +675,6 @@ CONFIG_SIFIVE_L2_FLUSH_SIZE=0x800000000
 CONFIG_SIFIVE_L2_FLUSH_START=0x80000000
 CONFIG_SIFIVE_L2_IRQ_DISABLE=y
 CONFIG_SIFIVE_PLIC=y
-CONFIG_SIGNED_PE_FILE_VERIFICATION=y
 CONFIG_SKB_EXTENSIONS=y
 CONFIG_SLAB_FREELIST_HARDENED=y
 CONFIG_SLAB_FREELIST_RANDOM=y
@@ -764,13 +722,8 @@ CONFIG_SWPHY=y
 CONFIG_SYNC_FILE=y
 CONFIG_SYSCON_REBOOT_MODE=y
 CONFIG_SYSCTL_EXCEPTION_TRACE=y
-CONFIG_SYSTEM_BLACKLIST_HASH_LIST=""
-CONFIG_SYSTEM_BLACKLIST_KEYRING=y
-CONFIG_SYSTEM_DATA_VERIFICATION=y
-CONFIG_SYSTEM_EXTRA_CERTIFICATE=y
-CONFIG_SYSTEM_EXTRA_CERTIFICATE_SIZE=4096
-# CONFIG_SYSTEM_REVOCATION_LIST is not set
-CONFIG_SYSTEM_TRUSTED_KEYRING=y
+CONFIG_SYSFB=y
+# CONFIG_SYSFB_SIMPLEFB is not set
 CONFIG_TASKSTATS=y
 CONFIG_TASK_DELAY_ACCT=y
 CONFIG_TASK_IO_ACCOUNTING=y
@@ -787,6 +740,7 @@ CONFIG_TREE_SRCU=y
 # CONFIG_TULIP is not set
 CONFIG_TUNE_GENERIC=y
 # CONFIG_UAPI_HEADER_TEST is not set
+CONFIG_UCS2_STRING=y
 CONFIG_UDMABUF=y
 # CONFIG_ULI526X is not set
 CONFIG_UNICODE=y
@@ -815,7 +769,6 @@ CONFIG_WATCHDOG_CORE=y
 CONFIG_WATCHDOG_SYSFS=y
 CONFIG_WATCH_QUEUE=y
 # CONFIG_WINBOND_840 is not set
-CONFIG_X509_CERTIFICATE_PARSER=y
 CONFIG_XDP_SOCKETS=y
 # CONFIG_XDP_SOCKETS_DIAG is not set
 CONFIG_XFRM_ALGO=y