commit f52840931971f2a8c259b5bcf39d03dde5d0e170
author Iliyan Malchev <malchev@google.com> Wed Nov 21 15:51:37 2012 -0800
committer Iliyan Malchev <malchev@google.com> Fri Mar 15 17:09:27 2013 -0700
tree 23edc08d98c5f9a724bda24bada11c6653b1cb9d
parent 40857f3af8883b9d2ab003cea2383b0546b3fd9b

mako: disable support for loadable modules

mako does not need loadable kernel modules; disabling support for them reduces
the attack surface on the kernel

Signed-off-by: Iliyan Malchev <malchev@google.com>

arch/arm/configs/mako_defconfig

diff --git a/arch/arm/configs/mako_defconfig b/arch/arm/configs/mako_defconfig
index 58160ab..d43dc59 100644
--- a/arch/arm/configs/mako_defconfig
+++ b/arch/arm/configs/mako_defconfig
@@ -30,7 +30,7 @@
 CONFIG_PROFILING=y
 CONFIG_OPROFILE=y
 CONFIG_KPROBES=y
-CONFIG_MODULES=y
+# CONFIG_MODULES is not set
 CONFIG_MODULE_UNLOAD=y
 CONFIG_MODULE_FORCE_UNLOAD=y
 CONFIG_MODVERSIONS=y