diff -Naurp a/arch/arm/configs/bcm2711_defconfig b/arch/arm/configs/bcm2711_defconfig

--- a/arch/arm/configs/bcm2711_defconfig	2020-03-20 11:43:40.000000000 +0000

+++ b/arch/arm/configs/bcm2711_defconfig	2020-03-20 16:49:57.845295276 +0000

@@ -2,6 +2,7 @@ CONFIG_LOCALVERSION="-v7l"

 # CONFIG_LOCALVERSION_AUTO is not set

 CONFIG_SYSVIPC=y

 CONFIG_POSIX_MQUEUE=y

+CONFIG_AUDIT=y

 CONFIG_GENERIC_IRQ_DEBUGFS=y

 CONFIG_NO_HZ=y

 CONFIG_HIGH_RES_TIMERS=y

@@ -124,6 +125,7 @@ CONFIG_IPV6_SUBTREES=y

 CONFIG_IPV6_MROUTE=y

 CONFIG_IPV6_MROUTE_MULTIPLE_TABLES=y

 CONFIG_IPV6_PIMSM_V2=y

+CONFIG_NETLABEL=y

 CONFIG_NETFILTER=y

 CONFIG_NF_CONNTRACK=m

 CONFIG_NF_CONNTRACK_ZONES=y

@@ -171,6 +173,7 @@ CONFIG_NFT_FIB_NETDEV=m

 CONFIG_NF_FLOW_TABLE_INET=m

 CONFIG_NF_FLOW_TABLE=m

 CONFIG_NETFILTER_XT_SET=m

+CONFIG_NETFILTER_XT_TARGET_AUDIT=m

 CONFIG_NETFILTER_XT_TARGET_CHECKSUM=m

 CONFIG_NETFILTER_XT_TARGET_CLASSIFY=m

 CONFIG_NETFILTER_XT_TARGET_CONNMARK=m

@@ -278,6 +281,7 @@ CONFIG_IP_NF_TARGET_CLUSTERIP=m

 CONFIG_IP_NF_TARGET_ECN=m

 CONFIG_IP_NF_TARGET_TTL=m

 CONFIG_IP_NF_RAW=m

+CONFIG_IP_NF_SECURITY=m

 CONFIG_IP_NF_ARPTABLES=m

 CONFIG_IP_NF_ARPFILTER=m

 CONFIG_IP_NF_ARP_MANGLE=m

@@ -299,6 +303,7 @@ CONFIG_IP6_NF_FILTER=m

 CONFIG_IP6_NF_TARGET_REJECT=m

 CONFIG_IP6_NF_MANGLE=m

 CONFIG_IP6_NF_RAW=m

+CONFIG_IP6_NF_SECURITY=m

 CONFIG_IP6_NF_NAT=m

 CONFIG_IP6_NF_TARGET_MASQUERADE=m

 CONFIG_IP6_NF_TARGET_NPT=m

@@ -1378,6 +1383,7 @@ CONFIG_NILFS2_FS=m

 CONFIG_F2FS_FS=y

 CONFIG_FS_ENCRYPTION=y

 CONFIG_FANOTIFY=y

+CONFIG_FANOTIFY_ACCESS_PERMISSIONS=y

 CONFIG_QFMT_V1=m

 CONFIG_QFMT_V2=m

 CONFIG_AUTOFS4_FS=y

@@ -1420,6 +1426,7 @@ CONFIG_NFS_FSCACHE=y

 CONFIG_NFSD=m

 CONFIG_NFSD_V3_ACL=y

 CONFIG_NFSD_V4=y

+CONFIG_NFSD_V4_SECURITY_LABEL=y

 CONFIG_CIFS=m

 CONFIG_CIFS_WEAK_PW_HASH=y

 CONFIG_CIFS_UPCALL=y

@@ -1468,6 +1475,13 @@ CONFIG_NLS_ISO8859_15=m

 CONFIG_NLS_KOI8_R=m

 CONFIG_NLS_KOI8_U=m

 CONFIG_DLM=m

+CONFIG_SECURITY=y

+CONFIG_SECURITY_NETWORK=y

+CONFIG_SECURITY_PATH=y

+CONFIG_SECURITY_SELINUX=y

+CONFIG_SECURITY_SELINUX_BOOTPARAM=y

+CONFIG_SECURITY_SELINUX_DISABLE=y

+CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1

 CONFIG_CRYPTO_USER=m

 CONFIG_CRYPTO_XCBC=m

 CONFIG_CRYPTO_TGR192=m

@@ -1496,3 +1510,9 @@ CONFIG_FUNCTION_PROFILER=y

 CONFIG_KGDB=y

 CONFIG_KGDB_KDB=y

 CONFIG_KDB_KEYBOARD=y

+CONFIG_NET_TEAM=m

+CONFIG_NET_TEAM_MODE_ACTIVEBACKUP=m

+CONFIG_NET_TEAM_MODE_BROADCAST=m

+CONFIG_NET_TEAM_MODE_LOADBALANCE=m

+CONFIG_NET_TEAM_MODE_RANDOM=m

+CONFIG_NET_TEAM_MODE_ROUNDROBIN=m

diff -Naurp a/arch/arm64/configs/bcm2711_defconfig b/arch/arm64/configs/bcm2711_defconfig

--- a/arch/arm64/configs/bcm2711_defconfig	2020-03-20 11:43:40.000000000 +0000

+++ b/arch/arm64/configs/bcm2711_defconfig	2020-03-20 16:44:49.430793984 +0000

@@ -2,6 +2,7 @@ CONFIG_LOCALVERSION="-v8"

 # CONFIG_LOCALVERSION_AUTO is not set

 CONFIG_SYSVIPC=y

 CONFIG_POSIX_MQUEUE=y

+CONFIG_AUDIT=y

 CONFIG_GENERIC_IRQ_DEBUGFS=y

 CONFIG_NO_HZ=y

 CONFIG_HIGH_RES_TIMERS=y

@@ -123,6 +124,7 @@ CONFIG_IPV6_SUBTREES=y

 CONFIG_IPV6_MROUTE=y

 CONFIG_IPV6_MROUTE_MULTIPLE_TABLES=y

 CONFIG_IPV6_PIMSM_V2=y

+CONFIG_NETLABEL=y

 CONFIG_NETFILTER=y

 CONFIG_NF_CONNTRACK=m

 CONFIG_NF_CONNTRACK_ZONES=y

@@ -170,6 +172,7 @@ CONFIG_NFT_FIB_NETDEV=m

 CONFIG_NF_FLOW_TABLE_INET=m

 CONFIG_NF_FLOW_TABLE=m

 CONFIG_NETFILTER_XT_SET=m

+CONFIG_NETFILTER_XT_TARGET_AUDIT=m

 CONFIG_NETFILTER_XT_TARGET_CHECKSUM=m

 CONFIG_NETFILTER_XT_TARGET_CLASSIFY=m

 CONFIG_NETFILTER_XT_TARGET_CONNMARK=m

@@ -277,6 +280,7 @@ CONFIG_IP_NF_TARGET_CLUSTERIP=m

 CONFIG_IP_NF_TARGET_ECN=m

 CONFIG_IP_NF_TARGET_TTL=m

 CONFIG_IP_NF_RAW=m

+CONFIG_IP_NF_SECURITY=m

 CONFIG_IP_NF_ARPTABLES=m

 CONFIG_IP_NF_ARPFILTER=m

 CONFIG_IP_NF_ARP_MANGLE=m

@@ -298,6 +302,7 @@ CONFIG_IP6_NF_FILTER=m

 CONFIG_IP6_NF_TARGET_REJECT=m

 CONFIG_IP6_NF_MANGLE=m

 CONFIG_IP6_NF_RAW=m

+CONFIG_IP6_NF_SECURITY=m

 CONFIG_IP6_NF_NAT=m

 CONFIG_IP6_NF_TARGET_MASQUERADE=m

 CONFIG_IP6_NF_TARGET_NPT=m

@@ -1369,6 +1374,7 @@ CONFIG_NILFS2_FS=m

 CONFIG_F2FS_FS=y

 CONFIG_FS_ENCRYPTION=y

 CONFIG_FANOTIFY=y

+CONFIG_FANOTIFY_ACCESS_PERMISSIONS=y

 CONFIG_QFMT_V1=m

 CONFIG_QFMT_V2=m

 CONFIG_AUTOFS4_FS=y

@@ -1411,6 +1417,7 @@ CONFIG_NFS_FSCACHE=y

 CONFIG_NFSD=m

 CONFIG_NFSD_V3_ACL=y

 CONFIG_NFSD_V4=y

+CONFIG_NFSD_V4_SECURITY_LABEL=y

 CONFIG_CIFS=m

 CONFIG_CIFS_WEAK_PW_HASH=y

 CONFIG_CIFS_UPCALL=y

@@ -1459,6 +1466,13 @@ CONFIG_NLS_ISO8859_15=m

 CONFIG_NLS_KOI8_R=m

 CONFIG_NLS_KOI8_U=m

 CONFIG_DLM=m

+CONFIG_SECURITY=y

+CONFIG_SECURITY_NETWORK=y

+CONFIG_SECURITY_PATH=y

+CONFIG_SECURITY_SELINUX=y

+CONFIG_SECURITY_SELINUX_BOOTPARAM=y

+CONFIG_SECURITY_SELINUX_DISABLE=y

+CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1

 CONFIG_CRYPTO_USER=m

 CONFIG_CRYPTO_XCBC=m

 CONFIG_CRYPTO_TGR192=m

@@ -1486,3 +1500,9 @@ CONFIG_FUNCTION_PROFILER=y

 CONFIG_KGDB=y

 CONFIG_KGDB_KDB=y

 CONFIG_KDB_KEYBOARD=y

+CONFIG_NET_TEAM=m

+CONFIG_NET_TEAM_MODE_ACTIVEBACKUP=m

+CONFIG_NET_TEAM_MODE_BROADCAST=m

+CONFIG_NET_TEAM_MODE_LOADBALANCE=m

+CONFIG_NET_TEAM_MODE_RANDOM=m

+CONFIG_NET_TEAM_MODE_ROUNDROBIN=m