add selinux config

scripts/configure-kernel.sh

@@ -112,6 +112,15 @@ function modify_kernel_config() {
         '--disable CONFIG_CRYPTO_AEGIS128_SIMD'
     )
 
+    if grep -q 'fedora' /etc/os-release; then
+        SELINUX_CONFIG=(
+            '--enable CONFIG_SECURITY_SELINUX'
+            '--enable CONFIG_DEFAULT_SECURITY_SELINUX'
+        )
+    else
+            SELINUX_CONFIG=()
+    fi
+
     if [[ "${BUILD_WITH_RUST:-0}" == '1' ]] && [[ "${LLVM:-0}" == '1' ]]; then
         setup_rust_toolchain
         make rustavailable
@@ -146,10 +155,9 @@ function modify_kernel_config() {
         '--enable CONFIG_DEBUG_FS'
         '--enable CONFIG_DEBUG_FS_ALLOW_ALL'
         '--enable CONFIG_DEBUG_INFO'
+        '--enable CONFIG_DEBUG_INFO_SPLIT'
         '--enable CONFIG_DEBUG_KERNEL'
         '--enable CONFIG_DEBUG_MISC'
-        '--enable CONFIG_DYNAMIC_DEBUG'
-        '--enable CONFIG_DYNAMIC_DEBUG_CORE'
         '--enable CONFIG_FRAME_POINTER'
         '--enable CONFIG_GDB_SCRIPTS'
         '--enable CONFIG_KALLSYMS'
@@ -157,7 +165,6 @@ function modify_kernel_config() {
         '--enable CONFIG_KGDB'
         '--enable CONFIG_KGDB_KDB'
         '--enable CONFIG_KGDB_SERIAL_CONSOLE'
-        '--enable CONFIG_KASAN'
         '--enable CONFIG_LOCK_TORTURE_TEST'
         '--enable CONFIG_LOCKDEP'
         '--enable CONFIG_LOCKUP_DETECTOR'
@@ -179,6 +186,7 @@ function modify_kernel_config() {
         "${DEFCONFIG_ADD_ONS[@]}"
         "${SIGNING_REMOVAL[@]}"
         "${ARM_SIMD_DISABLE[@]}"
+        "${SELINUX_CONFIG[@]}"
         "${RUST_CONFIG[@]}"
         "${SCHED_EXT_CONFIG[@]}"
         "${DEBUG_CONFIG[@]}"