Re: [OE-core] [PATCH] kernel.bbclass: install .config to deploy dir

[Alexandre Belloni <alexandre.belloni@bootlin.com>]

On 08/02/2024 14:54:49+0100, J�rg Sommer via lists.openembedded.org wrote:
> On 07.02.24 11:25, Matthias Schiffer via lists.openembedded.org wrote:
> > Deploy the kernel configuration with the built images, so it is easy to
> > check its contents, or rebuild the same configuration outside of the
> > Yocto build system.
> 
> Isn't the kernel already in the -dev package included?
> 
> From a security point of view I wouldn't welcome the inclusion in the
> main package, because the config should not be deployed by default. The
> config contains many information about the available code in the kernel,
> which an attacker can only guess otherwise.

However, as per the GPL, you will have to provide the kernel
configuration to the recipients of the product upon request which can be
any attacker.


-- 
Alexandre Belloni, co-owner and COO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com