meta-qcom: include hardening configs by default

- Included the hardening.config as part of the default build configuration.
- Improves baseline security without requiring manual opt-in.
- Aligns with best practices for secure and robust builds.

Signed-off-by: Abhilasha Manna <[email protected]>

Author: abhilash-manna

recipes-kernel/linux/linux-qcom-next_git.bb

@@ -36,13 +36,14 @@ S = "${UNPACKDIR}/${BP}"
 KBUILD_DEFCONFIG ?= "defconfig"
 KBUILD_DEFCONFIG:qcom-armv7a = "qcom_defconfig"
 
-CONFIG_LIST =  "${@" ".join(find_cfgs(d))}"
-CONFIG_LIST += "${@bb.utils.contains('DISTRO_FEATURES', 'hardened', '${S}/kernel/configs/hardening.config', '', d)}"
+KBUILD_CONFIG_EXTRA = "${S}/kernel/configs/hardening.config"
+
 
 do_configure:prepend() {
     # Use a copy of the 'defconfig' from the actual repo to merge fragments
     cp ${S}/arch/${ARCH}/configs/${KBUILD_DEFCONFIG} ${B}/.config
 
     # Merge fragment for QCOM value add features
-    ${S}/scripts/kconfig/merge_config.sh -m -O ${B} ${B}/.config ${CONFIG_LIST}
+    ${S}/scripts/kconfig/merge_config.sh -m -O ${B} ${B}/.config ${@" ".join(find_cfgs(d))} ${KBUILD_CONFIG_EXTRA}
+
 }