From e85e597300987ee5bf035fdd6e20b850080c83ad Mon Sep 17 00:00:00 2001
From: hrdl <31923882+hrdl-github@users.noreply.github.com>
Date: Sun, 16 Feb 2025 12:48:46 +0100
Subject: [PATCH 1/2] arm64: pinenote_defconfig: Add options for hid_bpf

These options allow using udev_hid_bpf to trace input events to
measure the input-to-display latency.
---
 arch/arm64/configs/pinenote_defconfig | 25 +++++++++++++++++++++++--
 1 file changed, 23 insertions(+), 2 deletions(-)

diff --git a/arch/arm64/configs/pinenote_defconfig b/arch/arm64/configs/pinenote_defconfig
index c24f75f3ecef53..0ddc9a15fb3434 100644
--- a/arch/arm64/configs/pinenote_defconfig
+++ b/arch/arm64/configs/pinenote_defconfig
@@ -191,8 +191,6 @@ CONFIG_DMA_CMA=y
 CONFIG_PRINTK_TIME=y
 # CONFIG_DEBUG_MISC is not set
 CONFIG_DEBUG_INFO_DWARF5=y
-CONFIG_DEBUG_INFO_REDUCED=y
-CONFIG_DEBUG_INFO_SPLIT=y
 CONFIG_MAGIC_SYSRQ=y
 # CONFIG_MAGIC_SYSRQ_SERIAL is not set
 CONFIG_DEBUG_FS=y
@@ -225,6 +223,11 @@ CONFIG_FUNCTION_GRAPH_TRACER=y
 CONFIG_FUNCTION_GRAPH_RETVAL=y
 CONFIG_OF_OVERLAY=y
 
+##
+## file: arch/Kconfig
+##
+CONFIG_KPROBES=y
+
 ##
 ## file: arch/arm64/crypto/Kconfig
 ##
@@ -549,6 +552,11 @@ CONFIG_HIDRAW=y
 CONFIG_UHID=m
 CONFIG_HID_MICROSOFT=y
 
+##
+## file: drivers/hid/bpf/Kconfig
+##
+CONFIG_HID_BPF=y
+
 ##
 ## file: drivers/hid/i2c-hid/Kconfig
 ##
@@ -1342,6 +1350,19 @@ CONFIG_PM_TEST_SUSPEND=y
 CONFIG_WQ_POWER_EFFICIENT_DEFAULT=y
 CONFIG_ENERGY_MODEL=y
 
+##
+## file: kernel/trace/Kconfig
+##
+CONFIG_KPROBE_EVENTS=y
+CONFIG_UPROBE_EVENTS=y
+
+##
+## file: lib/Kconfig.debug
+##
+# CONFIG_DEBUG_INFO_REDUCED is not set
+# CONFIG_DEBUG_INFO_SPLIT is not set
+CONFIG_DEBUG_INFO_BTF=y
+
 ##
 ## file: net/Kconfig
 ##

From d9d498eb7e60ca6028b5218132a8fad9bf14d83f Mon Sep 17 00:00:00 2001
From: hrdl <31923882+hrdl-github@users.noreply.github.com>
Date: Sun, 16 Feb 2025 12:53:00 +0100
Subject: [PATCH 2/2] arm64: pinenote_defconfig: Add options for landlock

Landlock is used by pacman to restrict filesystem access.
---
 arch/arm64/configs/pinenote_defconfig | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/arch/arm64/configs/pinenote_defconfig b/arch/arm64/configs/pinenote_defconfig
index 0ddc9a15fb3434..7d12c0c701995c 100644
--- a/arch/arm64/configs/pinenote_defconfig
+++ b/arch/arm64/configs/pinenote_defconfig
@@ -186,7 +186,6 @@ CONFIG_NLS_ISO8859_1=y
 CONFIG_NLS_UTF8=y
 CONFIG_UNICODE=y
 CONFIG_KEYS=y
-CONFIG_LSM=""
 CONFIG_DMA_CMA=y
 CONFIG_PRINTK_TIME=y
 # CONFIG_DEBUG_MISC is not set
@@ -1524,6 +1523,17 @@ CONFIG_CFG80211_DEBUGFS=y
 ##
 CONFIG_XFRM_USER=m
 
+##
+## file: security/Kconfig
+##
+CONFIG_LSM="landlock"
+CONFIG_SECURITY=y
+
+##
+## file: security/landlock/Kconfig
+##
+CONFIG_SECURITY_LANDLOCK=y
+
 ##
 ## file: sound/Kconfig
 ##