meta-qcom: include "hardened" distro feature by default

- Enabled the hardened feature as part of the default build configuration.
- Improves baseline security without requiring manual opt-in.
- Aligns with best practices for secure and robust builds.

Signed-off-by: Abhilasha Manna <[email protected]>

Author: abhilash-manna

ci/base.yml

@@ -39,7 +39,7 @@ local_conf_header:
     IMAGE_CLASSES += "image_types_qcom"
     IMAGE_FSTYPES += "qcomflash"
   extra: |
-    DISTRO_FEATURES:append = " efi pni-names"
+    DISTRO_FEATURES:append = " efi pni-names hardened"
     EXTRA_IMAGE_FEATURES = "allow-empty-password empty-root-password allow-root-login"
     IMAGE_ROOTFS_EXTRA_SPACE = "307200"
     WATCHDOG_RUNTIME_SEC:pn-systemd = "30"

recipes-kernel/linux/linux-qcom-next_git.bb

@@ -36,7 +36,7 @@ S = "${UNPACKDIR}/${BP}"
 KBUILD_DEFCONFIG ?= "defconfig"
 KBUILD_DEFCONFIG:qcom-armv7a = "qcom_defconfig"
 
-CONFIG_LIST =  "${@" ".join(find_cfgs(d))}"
+CONFIG_LIST = "${@" ".join(find_cfgs(d))}"
 CONFIG_LIST += "${@bb.utils.contains('DISTRO_FEATURES', 'hardened', '${S}/kernel/configs/hardening.config', '', d)}"
 
 do_configure:prepend() {