Commit Graph

1238 Commits

Author SHA1 Message Date
Jan Alexander Steffens af075e3dca 5.18.6.arch1-1 2022-06-22 18:43:35 +00:00
Jan Alexander Steffens 5f3729800f FS#75102: Add integrity to LSM
This only initializes a cache which is used by IMA. So it does nothing
useful. Still, we technically have the integrity LSM and this removes a
footgun should IMA ever get enabled.
2022-06-19 20:12:32 +00:00
Jan Alexander Steffens 2e8ca45bc9 FS#75102: Enable KEXEC_SIG 2022-06-19 20:12:32 +00:00
Jan Alexander Steffens 1eaae5d53f FS#75102: Revert "Enable KEXEC_SIG and IMA"
Enabling IMA makes it impossible to load unsigned kernel modules when
secure boot is in use, and without shim in the boot you can't get the
kernel to trust a local key for module signing.

This reverts commit 6a241232a3275ef3e314b5b7167e13fffff71282.
2022-06-19 20:12:31 +00:00
Jan Alexander Steffens 0724b8895c FS#75102: Enable KEXEC_SIG and IMA 2022-06-19 19:23:48 +00:00
Jan Alexander Steffens b72d91cb76 Build htmldocs in parallel
If you need clean build output, remove the docs build.
2022-06-19 19:23:47 +00:00
Jan Alexander Steffens b3c8c8615f 5.18.5.arch1-1 2022-06-16 21:18:19 +00:00
Jan Alexander Steffens a0899d416d Disable PECI
As requested by Levente. Only useful for kernels running on baseboard
management controllers.
2022-06-16 21:18:17 +00:00
Jan Alexander Steffens 218d2a950d 5.18.4.arch1-1 2022-06-15 23:42:51 +00:00
Jan Alexander Steffens 5bd573c89e FS#75041: Enable INTEGRITY_MACHINE_KEYRING and related 2022-06-15 23:42:48 +00:00
Jan Alexander Steffens e29a800771 5.18.3.arch1-1 2022-06-09 17:20:22 +00:00
Jan Alexander Steffens 2adaf032c5 5.18.2.arch1-1 2022-06-06 20:35:16 +00:00
Jan Alexander Steffens 3aa8dd1c85 5.18.1.arch1-1 2022-05-30 18:31:45 +00:00
Jan Alexander Steffens f11429d842 FS#74888: Enable BLOCK_LEGACY_AUTOLOAD
Disabling this broke legacy mdraid setups.

See: https://lore.kernel.org/linux-block/20220503212848.5853-1-dmoulding@me.com/
2022-05-30 18:31:42 +00:00
Jan Alexander Steffens 1cc50e39e6 5.18.arch1-1 2022-05-24 22:34:17 +00:00
Jan Alexander Steffens d55c08b891 5.17.9.arch1-1 2022-05-18 21:53:45 +00:00
Jan Alexander Steffens eb235bf7d5 5.17.8.arch1-1 2022-05-16 21:41:18 +00:00
Frederik Schwan c9f9cc83d6 gcc-12.1.0-2 rebuild 2022-05-15 05:14:41 +00:00
Jan Alexander Steffens 40f67dd1f4 5.17.7.arch1-1 2022-05-12 19:28:04 +00:00
Jan Alexander Steffens 231862cf72 5.17.6.arch1-1 2022-05-10 23:31:11 +00:00
Frederik Schwan b2101893db gcc-12.1.0 rebuild 2022-05-06 20:13:38 +00:00
Jan Alexander Steffens 0c61251a1e 5.17.5.arch1-1 2022-04-27 21:57:26 +00:00
Jan Alexander Steffens ee2af8ec43 5.17.4.arch1-1 2022-04-20 19:02:04 +00:00
Jan Alexander Steffens 3709e55626 5.17.3.arch1-1 2022-04-14 12:27:20 +00:00
Jan Alexander Steffens 7988a2548a 5.17.2.arch3-1 2022-04-10 11:47:49 +00:00
Jan Alexander Steffens 5dcd6e2fc5 5.17.2.arch2-1 2022-04-08 20:21:16 +00:00
Jan Alexander Steffens 2d3dd3bff0 5.17.2.arch1-1 2022-04-08 18:11:24 +00:00
Jan Alexander Steffens b6880b286a FS#72275: Don't package files created by depmod 2022-04-08 18:11:21 +00:00
Jan Alexander Steffens d60d23d3e0 FS#74291: Reenable FRAMEBUFFER_CONSOLE_ROTATION 2022-04-01 16:10:30 +00:00
Tobias Powalowski 5b6b1b8eec switch crda to wireless-regdb 2022-03-31 06:39:12 +00:00
Jan Alexander Steffens 8dc941a8b3 FS#68021, FS#74271: Return nvme to a module 2022-03-30 20:34:27 +00:00
Jan Alexander Steffens ba835a0fa6 5.17.1.arch1-1 2022-03-28 21:54:44 +00:00
Jan Alexander Steffens 03fa74e628 FS#74203: Disable SYSFB_SIMPLEFB 2022-03-28 21:54:43 +00:00
Jan Alexander Steffens 432adf96db 5.17.arch1-1 2022-03-23 00:44:26 +00:00
Jan Alexander Steffens e21cc89a76 5.16.16.arch1-1 2022-03-21 23:44:11 +00:00
Jan Alexander Steffens 22c5798bf1 5.16.15.arch1-1 2022-03-17 00:58:21 +00:00
Jan Alexander Steffens 997a6a8651 5.16.14.arch1-1 2022-03-11 18:29:09 +00:00
Jan Alexander Steffens ccba33df68 Enable BPF_UNPRIV_DEFAULT_OFF
This config was enabled by default in v5.15 and we should follow that.
2022-03-09 16:09:34 +00:00
Jan Alexander Steffens 4f1d39f328 5.16.13.arch1-1 2022-03-08 20:36:10 +00:00
Jan Alexander Steffens 455ae3c99a 5.16.12.arch1-1 2022-03-02 13:24:19 +00:00
Jan Alexander Steffens b4d8109660 5.16.11.arch1-2 2022-02-28 11:49:27 +00:00
Jan Alexander Steffens 19488bc439 5.16.11.arch1-1 2022-02-24 07:18:20 +00:00
Jan Alexander Steffens 49dd63df08 5.16.10.arch1-1 2022-02-16 20:15:19 +00:00
Jan Alexander Steffens 74147130fa 5.16.9.arch1-1 2022-02-11 23:14:13 +00:00
Jan Alexander Steffens a4414373de FS#73364: Enable DAMON 2022-02-11 23:14:12 +00:00
Jan Alexander Steffens 9babb28470 5.16.8.arch1-2 2022-02-09 20:03:15 +00:00
Jan Alexander Steffens eb92849ce1 5.16.8.arch1-1 2022-02-08 21:56:54 +00:00
Jan Alexander Steffens 659df960bd FS#72597: Disable ZERO_CALL_USED_REGS
Too much overhead.
2022-02-07 18:29:34 +00:00
Jan Alexander Steffens b49ec6f0be 5.16.7.arch1-1 2022-02-06 17:55:39 +00:00
Jan Alexander Steffens f481961a90 5.16.5.arch1-1 2022-02-01 23:40:25 +00:00
Jan Alexander Steffens a2f19696d0 5.16.4.arch1-1 2022-01-30 04:12:39 +00:00
Jan Alexander Steffens 31ad8e7bc0 5.16.3.arch1-1 2022-01-27 14:57:45 +00:00
Jan Alexander Steffens 05d7e11c00 5.16.2.arch1-1 2022-01-20 17:08:42 +00:00
Jan Alexander Steffens e891efc44c 5.16.1.arch1-1 2022-01-16 12:13:46 +00:00
Jan Alexander Steffens 6376eaf60e 5.16.arch1-1 2022-01-10 21:15:58 +00:00
Jan Alexander Steffens de5111d5bf 5.15.13.arch1-1 2022-01-05 17:11:18 +00:00
Jan Alexander Steffens 992dd34d40 5.15.12.arch1-1 2021-12-29 13:06:04 +00:00
Jan Alexander Steffens fbf05e9061 5.15.11.arch2-1 2021-12-22 17:37:01 +00:00
Jan Alexander Steffens 8e5f14c2b2 5.15.10.arch1-1 2021-12-17 12:37:20 +00:00
Jan Alexander Steffens 38f90fdbe5 5.15.9.arch1-1 2021-12-17 00:17:27 +00:00
Jan Alexander Steffens f6654f361c FS#69505: Replace MTD_RAM with MTD_MTDRAM
The latter is what was actually wanted.
2021-12-16 03:14:31 +00:00
Jan Alexander Steffens e3b6f785e9 5.15.8.arch1-1 2021-12-14 23:27:20 +00:00
Jan Alexander Steffens f631e8d68c 5.15.7.arch1-1 2021-12-08 17:33:10 +00:00
Jan Alexander Steffens 67bf0c6741 5.15.6.arch2-1 2021-12-02 17:13:38 +00:00
Jan Alexander Steffens 6fdf85f792 5.15.5.arch1-1 2021-11-25 22:53:04 +00:00
Jan Alexander Steffens 8d31a93b3a 5.15.4.arch1-1 2021-11-21 22:11:10 +00:00
Jan Alexander Steffens 90addb77b2 5.15.3.arch1-1 2021-11-18 22:55:52 +00:00
Jan Alexander Steffens 87b96ed160 5.15.2.arch1-1 2021-11-12 20:28:54 +00:00
Jan Alexander Steffens 741b99dce1 FS#72645: Disable SYSFB_SIMPLEFB 2021-11-12 20:28:52 +00:00
Jan Alexander Steffens 6f0619355f 5.15.1.arch1-2 2021-11-09 17:09:58 +00:00
Jan Alexander Steffens e55609718b FS#72658: Reenable built-in FB drivers 2021-11-09 17:09:57 +00:00
Jan Alexander Steffens eecca3f5e0 5.15.1.arch1-1 2021-11-07 01:10:47 +00:00
Jan Alexander Steffens 911177d3df Disable WERROR
Also leaks into external module builds.
2021-11-03 23:30:53 +00:00
Jan Alexander Steffens 78d0321a90 Set SYSFB_SIMPLEFB=y and SIMPLEDRM=y, disable legacy FB drivers 2021-11-03 23:30:52 +00:00
Jan Alexander Steffens 62812fc5b4 5.15.arch1-1 2021-11-03 23:30:51 +00:00
Jan Alexander Steffens f2086b3d9e 5.14.16.arch1-1 2021-11-02 22:57:45 +00:00
Jan Alexander Steffens 52b131218a 5.14.15.arch1-1 2021-10-28 02:16:58 +00:00
Jan Alexander Steffens 45c17981b1 5.14.14.arch1-1 2021-10-20 22:56:29 +00:00
Jan Alexander Steffens ff11721ddf 5.14.13.arch1-1 2021-10-17 13:22:17 +00:00
Jan Alexander Steffens 2072b4db95 5.14.12.arch1-1 2021-10-13 17:35:24 +00:00
Jan Alexander Steffens 6c1884d7e0 5.14.11.arch1-1 2021-10-10 08:07:16 +00:00
Jan Alexander Steffens 71f7795e0a Print config diff after make olddefconfig 2021-10-10 08:07:15 +00:00
Jan Alexander Steffens 4325d1b2ad 5.14.10.arch1-1 2021-10-07 20:32:54 +00:00
Jan Alexander Steffens 2ef0ab9184 Disable SND_INTEL_BYT_PREFER_SOF
As requested by Jelle.
2021-10-06 22:08:56 +00:00
Jan Alexander Steffens 08f8fd42c1 5.14.9.arch2-1 2021-10-01 19:36:17 +00:00
Jan Alexander Steffens 5b34349b55 5.14.9.arch1-1 2021-09-30 19:13:09 +00:00
Jan Alexander Steffens 595a15167b 5.14.8.arch1-1 2021-09-26 20:22:35 +00:00
Jan Alexander Steffens 045bfb719c FS#72195: Disable FB_HYPERV 2021-09-26 20:22:33 +00:00
Jan Alexander Steffens e614e5b7d1 5.14.7.arch1-1 2021-09-22 22:31:58 +00:00
Jan Alexander Steffens a9ffd8d727 5.14.6.arch1-1 2021-09-18 17:33:29 +00:00
Jan Alexander Steffens af7ee19944 5.14.5.arch1-1 2021-09-16 11:55:43 +00:00
Jan Alexander Steffens 6842071bce 5.14.4.arch2-1 2021-09-16 10:44:38 +00:00
Jan Alexander Steffens 6f0e13bf09 5.14.4.arch1-1 2021-09-15 22:24:27 +00:00
Jan Alexander Steffens 2cedf65a5a 5.14.3.arch1-1 2021-09-12 21:33:52 +00:00
Jan Alexander Steffens f8c67d6d68 5.14.2.arch1-2 2021-09-09 10:30:53 +00:00
Jan Alexander Steffens 25de7a333b FS#72045: Disable WATCHDOG_HRTIMER_PRETIMEOUT 2021-09-09 10:30:52 +00:00
Jan Alexander Steffens eecbf9bbe1 5.14.2.arch1-1 2021-09-08 23:54:10 +00:00
Jan Alexander Steffens ca05999be5 Enable EDAC_IGEN6
This was overlooked.
2021-09-03 21:24:30 +00:00
Jan Alexander Steffens 18427d86c6 5.14.1.arch1-1 2021-09-03 21:04:16 +00:00
Jan Alexander Steffens d73ac85acb 5.13.13.arch1-1 2021-08-26 19:48:22 +00:00
Jan Alexander Steffens 738226335f 5.13.12.arch1-1 2021-08-18 21:30:22 +00:00
Jan Alexander Steffens c21ba89cc1 Set KFENCE_SAMPLE_INTERVAL back to 100
As requested by Levente. The power issues should be solved by now.
2021-08-18 21:30:21 +00:00
Jan Alexander Steffens fb8eb1c560 Enable RANDOMIZE_KSTACK_OFFSET_DEFAULT
Additional hardening at a minimal cost, as requested by Levente.
2021-08-18 21:30:17 +00:00
Jan Alexander Steffens 2552e0b041 5.13.10.arch1-1 2021-08-12 22:36:23 +00:00
Jan Alexander Steffens 5e6049790e 5.13.9.arch1-1 2021-08-08 12:14:43 +00:00
Jan Alexander Steffens 5e111e91cc 5.13.8.arch1-1 2021-08-04 18:46:16 +00:00
Jan Alexander Steffens 82e02793cb 5.13.7.arch1-1 2021-07-31 23:09:11 +00:00
Jan Alexander Steffens d352d2e4ff 5.13.6.arch1-1 2021-07-29 00:51:39 +00:00
Jan Alexander Steffens 86779bcfea 5.13.5.arch1-1 2021-07-26 01:55:01 +00:00
Jan Alexander Steffens 11f06f43c4 5.13.4.arch2-1 2021-07-22 21:18:45 +00:00
David Runge 2589876818 Upgrade to 5.13.4.arch1.
PKGBUILD:
Add C7E7849466FE2358343588377258734B41C31549 as additional recognized valid PGP
key, as heftig might not be able to prepare releases and package for a while.

config:
Consolidate with defaults for 5.13.4 based on previous config.
Update CONFIG_LSM to order landlock before lockdown and re-add bpf, as the
issue discussed in https://bugs.archlinux.org/task/71270 seems to have been a
user-error (using obsolete kernel parameters).
2021-07-20 17:34:49 +00:00
Jan Alexander Steffens fd38ec001c 5.13.1.arch1-1 2021-07-10 00:23:52 +00:00
Jan Alexander Steffens c156c63575 5.12.15.arch1-1 2021-07-08 06:51:34 +00:00
Jan Alexander Steffens 4aa90295a0 5.12.14.arch1-1 2021-07-01 07:57:45 +00:00
Jan Alexander Steffens 5b763178e4 FS#71392: Install IIO hid-sensors header 2021-07-01 07:57:43 +00:00
Jan Alexander Steffens e8d31cb4c2 5.12.13.arch1-2 2021-06-25 23:47:17 +00:00
Jan Alexander Steffens 65eddc1dfd FS#71325: Enable SPI_INTEL_SPI again 2021-06-25 23:47:16 +00:00
Jan Alexander Steffens 74cfa2eb0a Revert "Use our git"
This reverts commit 57840eab683583e89ba506800c08ee752937c586.

We're shutting down git.archlinux.org and don't want to move the linux
repo to gitlab due to its size.
2021-06-25 23:47:14 +00:00
Jan Alexander Steffens 9bff7b52e3 5.12.13.arch1-1 2021-06-23 17:14:01 +00:00
Jan Alexander Steffens 38bd62e40b FS#71296: Enable DEBUG_LIST 2021-06-20 19:20:20 +00:00
Jan Alexander Steffens 7403514fbe 5.12.12.arch1-1 2021-06-18 22:59:23 +00:00
Jan Alexander Steffens e7d5c4d89c 5.12.11.arch1-1 2021-06-16 22:13:35 +00:00
Jan Alexander Steffens d7bf404c33 FS#71270: Don't enable "bpf" LSM by default
It provides all possible hooks, which makes it harder to properly use
major LSMs. Using security= to enable a major LSM puts it at the end of
the list. Some functions (like security_getprocattr) only use the first
matching hook, thus prefer bpf.
2021-06-16 22:13:34 +00:00
Jan Alexander Steffens 3f21513a71 5.12.10.arch1-1 2021-06-10 17:16:45 +00:00
Jan Alexander Steffens 9fe32edb60 5.12.9.arch1-1 2021-06-03 12:11:43 +00:00
Jan Alexander Steffens b7f14e1a69 5.12.8.arch1-1 2021-05-28 21:05:54 +00:00
Jan Alexander Steffens 99703861e1 FS#69505: Enable MTD_ROM 2021-05-27 19:39:55 +00:00
Jan Alexander Steffens b72d63df03 5.12.7.arch1-1 2021-05-26 22:45:28 +00:00
Jan Alexander Steffens 1da8e74711 5.12.6.arch1-1 2021-05-23 01:36:16 +00:00
Jan Alexander Steffens ea7ccabcad 5.12.5.arch1-1 2021-05-19 11:46:27 +00:00
Jan Alexander Steffens 3c493d93c4 5.12.4.arch2-1 2021-05-18 22:29:32 +00:00
Jan Alexander Steffens 04cd0126a3 5.12.4.arch1-2 2021-05-15 21:38:30 +00:00
Jan Alexander Steffens 2a8704f5e1 Set KFENCE_SAMPLE_INTERVAL to 0
Turns off KFENCE by default, as requested by Levente. There are power
use issues, see
https://lore.kernel.org/linux-mm/20210421105132.3965998-1-elver@google.com/
2021-05-15 21:38:29 +00:00
Jan Alexander Steffens 1646eced3b Enable DEBUG_INFO_DWARF4
Required for BTF to work with GCC 11.
2021-05-15 21:38:27 +00:00
Jan Alexander Steffens acb9384891 5.12.4.arch1-1 2021-05-14 14:20:31 +00:00
Jan Alexander Steffens 24c6f0d688 5.12.3.arch2-1 2021-05-13 20:01:56 +00:00
Jan Alexander Steffens 4b8cbaa097 5.12.3.arch1-2 2021-05-13 00:02:40 +00:00
Jan Alexander Steffens 1214e4e40a 5.12.3.arch1-1 2021-05-12 18:53:54 +00:00
Jan Alexander Steffens cc87e6b052 5.12.2.arch1-1 2021-05-07 16:08:11 +00:00
Jan Alexander Steffens db81b3eea9 FS#70742: Enable MTD_NAND_ECC_* 2021-05-07 16:08:09 +00:00
Jan Alexander Steffens 621ea2d08c 5.12.1.arch1-1 2021-05-02 13:41:41 +00:00
Jan Alexander Steffens 7f6df05917 Turn on KFENCE by default
As requested by Levente.
2021-05-02 13:41:40 +00:00
Jan Alexander Steffens b03b4f7e6f 5.12.arch1-1 2021-04-26 21:33:26 +00:00
Jan Alexander Steffens d71e920034 5.11.16.arch1-1 2021-04-21 20:39:28 +00:00
Jan Alexander Steffens 62782a577d FS#69181: Enable FB_UVESA 2021-04-21 20:39:27 +00:00
Jan Alexander Steffens 0d66f76ec1 FS#68698: Enable HID_SENSOR_CUSTOM_SENSOR 2021-04-21 20:39:26 +00:00
Jan Alexander Steffens 6f3f90e76b FS#69505: Enable MTD_RAM 2021-04-21 20:39:22 +00:00
Jan Alexander Steffens 3f3fcefaf5 5.11.15.arch1-2 2021-04-17 00:56:35 +00:00
Jan Alexander Steffens 85750f85be Revert "Enable LOAD_UEFI_KEYS"
It didn't help secure dkms modules like we thought it would.
2021-04-17 00:56:34 +00:00
Jan Alexander Steffens 4e15a9f945 5.11.15.arch1-1 2021-04-16 12:28:14 +00:00
Jan Alexander Steffens e0674e41ca 5.11.14.arch1-1 2021-04-14 12:48:08 +00:00
Jan Alexander Steffens 0ab80e4b19 5.11.13.arch3-1 2021-04-14 11:11:29 +00:00
Jan Alexander Steffens 47a3ddc4b0 5.11.13.arch2-1 2021-04-12 00:54:06 +00:00
Jan Alexander Steffens 46d00c9794 5.11.13.arch1-1 2021-04-10 21:25:36 +00:00
Jan Alexander Steffens 44305ad48b FS#70375: Disable BT_HS 2021-04-09 18:49:50 +00:00
Jan Alexander Steffens 3272234053 FS#70384: Return atkbd to a module 2021-04-09 14:49:24 +00:00
Jan Alexander Steffens eac563f39e 5.11.12.arch1-1 2021-04-07 22:37:33 +00:00
Jan Alexander Steffens 56380b3e43 FS#70299: Enable IDLE_PAGE_TRACKING 2021-04-05 12:50:09 +00:00
Jan Alexander Steffens e74e4210d3 5.11.11.arch1-1 2021-03-30 14:47:29 +00:00
Jan Alexander Steffens f99611e296 FS#69441: Revert "Disable USB gadget support" 2021-03-30 14:47:28 +00:00
Jan Alexander Steffens 320113849b 5.11.10.arch1-1 2021-03-26 00:56:43 +00:00
Jan Alexander Steffens ca32941726 5.11.9.arch1-1 2021-03-24 19:28:05 +00:00
Jan Alexander Steffens d014a88b5b FS#70140: Enable EFI_VARS_PSTORE_DEFAULT_DISABLE 2021-03-24 19:28:03 +00:00
Jan Alexander Steffens 364d5e5432 5.11.8.arch1-1 2021-03-21 02:30:21 +00:00
Jan Alexander Steffens 1cf3662d97 FS#70064: Set SND_HDA_PREALLOC_SIZE to 0
This is also the default in Fedora.
2021-03-21 02:30:20 +00:00
Jan Alexander Steffens 1c099ca397 5.11.7.arch1-1 2021-03-17 17:35:35 +00:00
Jan Alexander Steffens b4a2e977d4 FS#69992: Enable SND_SOC_INTEL_SKYLAKE_HDAUDIO_CODEC 2021-03-15 16:28:21 +00:00
Jan Alexander Steffens 7e6eb07df5 FS#69479: Disable BCM63XX drivers 2021-03-14 14:40:19 +00:00
Jan Alexander Steffens fc7f97fc30 FS#33958, FS#35753: Fix tomoyo settings 2021-03-14 14:40:17 +00:00
Jan Alexander Steffens 80415a58a9 5.11.6.arch1-1 2021-03-11 15:05:55 +00:00
Jan Alexander Steffens 44637ec6c7 5.11.5.arch1-1 2021-03-09 20:07:14 +00:00
Jan Alexander Steffens e280f34fb3 5.11.4.arch1-1 2021-03-07 18:34:36 +00:00
Jan Alexander Steffens 62f6c03f2c 5.11.3.arch1-1 2021-03-04 22:24:21 +00:00
Jan Alexander Steffens 1dca396562 5.11.2.arch1-1 2021-02-26 22:42:58 +00:00
Jan Alexander Steffens ec11f3e288 5.11.1.arch1-1 2021-02-23 14:47:16 +00:00
Jan Alexander Steffens ae5ce75f0d 5.11.arch2-1 2021-02-19 00:11:51 +00:00
Jan Alexander Steffens cc8cce72b9 5.11.arch1-1 2021-02-15 23:56:35 +00:00
Jan Alexander Steffens c3046f0b81 5.10.16.arch1-1 2021-02-13 21:20:45 +00:00
Jan Alexander Steffens ce690b2efd 5.10.15.arch1-1 2021-02-10 19:05:11 +00:00
Jan Alexander Steffens 3550611332 5.10.14.arch1-1 2021-02-07 23:17:50 +00:00
Jan Alexander Steffens d159b9a739 5.10.13.arch1-2 2021-02-06 11:45:09 +00:00
Jan Alexander Steffens 71c2279684 FS#69158: Return psmouse to a module 2021-02-04 19:32:19 +00:00
Jan Alexander Steffens 2630980304 5.10.13.arch1-1 2021-02-04 00:25:58 +00:00
Jan Alexander Steffens 7874717d9d FS#69479: Disable Lantiq and Rockchip drivers 2021-02-04 00:25:57 +00:00
Jan Alexander Steffens 861c5dfd04 Update security config
- Build in loadpin, but keep it disabled by default
- Enable bpf by default
2021-02-04 00:25:55 +00:00
Jan Alexander Steffens d04972b60c FS#69212: Reenable multimedia test drivers 2021-01-31 01:33:42 +00:00
Jan Alexander Steffens 9d28b37b79 5.10.12.arch1-1 2021-01-31 01:33:39 +00:00
Jan Alexander Steffens cf0be7beee 5.10.11.arch1-1 2021-01-27 15:42:47 +00:00
Jan Alexander Steffens 66b09ae393 5.10.10.arch1-1 2021-01-24 00:56:16 +00:00
Jan Alexander Steffens 460787f437 5.10.9.arch1-1 2021-01-19 23:33:14 +00:00
Jan Alexander Steffens 732488a858 5.10.8.arch1-1 2021-01-17 23:12:23 +00:00
Jan Alexander Steffens 0007db0e69 5.10.7.arch1-1 2021-01-13 13:01:40 +00:00
Jan Alexander Steffens c19564ecfa 5.10.6.arch1-1 2021-01-09 19:17:04 +00:00
Jan Alexander Steffens 29ab84e2ba 5.10.5.arch1-1 2021-01-07 12:05:32 +00:00
Jan Alexander Steffens 8ffb940e20 5.10.4.arch2-1 2021-01-01 06:17:42 +00:00
Jan Alexander Steffens 87cfb1a823 Reenable MTD_PHRAM
Can be used with syslinux's memdiskfind to mount a filesystem image.
2021-01-01 06:17:41 +00:00
Jan Alexander Steffens 45857ed86c Enable SECURITY_DMESG_RESTRICT
Default on Debian, and seems to be reasonable for us since we also don't
allow access to the system journal by default.
2020-12-31 01:18:17 +00:00
Jan Alexander Steffens b54786ee1f 5.10.4.arch1-1 2020-12-31 01:18:16 +00:00
Jan Alexander Steffens 66ead9f4aa 5.10.3.arch1-1 2020-12-27 12:02:15 +00:00
Jan Alexander Steffens ddeb06b257 Revert two config changes
As requested by Levente.
2020-12-22 01:33:12 +00:00
Jan Alexander Steffens 5ee180e682 5.10.2.arch1-1 2020-12-21 20:50:34 +00:00
Jan Alexander Steffens c6467751e8 Update sums 2020-12-18 23:32:11 +00:00
Jan Alexander Steffens 056e1229cd Disable DCCP (still affected by CVE-2020-16119) 2020-12-18 17:58:35 +00:00
Jan Alexander Steffens 8c2a9a8da9 FS#68978 Enable SoundWire machine driver 2020-12-16 14:37:37 +00:00
Jan Alexander Steffens e32e0ba50d 5.10.1.arch1-1 2020-12-15 21:22:15 +00:00
Jan Alexander Steffens d0179d6259 5.9.14.arch1-1 2020-12-12 22:02:25 +00:00
Jan Alexander Steffens 01bedab48a 5.9.13.arch1-1 2020-12-08 13:13:09 +00:00
Jan Alexander Steffens 7c79d74fff 5.9.12.arch1-1 2020-12-02 17:23:51 +00:00
Jan Alexander Steffens fe6596ab57 5.9.11.arch2-1 2020-11-28 02:51:37 +00:00
Jan Alexander Steffens 0b08d44ef8 5.9.11.arch1-1 2020-11-24 16:27:08 +00:00
Jan Alexander Steffens 85e1041b01 5.9.10.arch1-1 2020-11-22 15:26:46 +00:00
Jan Alexander Steffens 6be6ead80b 5.9.9.arch1-1 2020-11-18 20:51:25 +00:00
Jan Alexander Steffens 706a33e2de 5.9.8.arch1-1 2020-11-10 23:52:19 +00:00
Jan Alexander Steffens 141dd23c01 5.9.7.arch1-1 2020-11-10 15:00:15 +00:00
Jan Alexander Steffens 073b042f87 5.9.6.arch1-1 2020-11-05 21:49:56 +00:00
Jan Alexander Steffens 1bcde0c2d1 5.9.5.arch2-1 2020-11-05 15:05:22 +00:00
Jan Alexander Steffens 87febd662a 5.9.4.arch1-1 2020-11-04 22:42:21 +00:00
Jan Alexander Steffens 34b501df44 5.9.3.arch1-1 2020-11-01 14:53:55 +00:00
Jan Alexander Steffens dea8c573f1 5.9.2.arch1-1 2020-10-29 18:18:58 +00:00
Jan Alexander Steffens a9e6574b98 5.9.1.arch1-1 2020-10-17 14:45:48 +00:00
Jan Alexander Steffens 2c8951be72 5.9.arch1-1 2020-10-12 21:06:00 +00:00
Jan Alexander Steffens dc92454675 5.8.14.arch1-1: FS#68092 Restore HDA prealloc 2020-10-07 23:59:36 +00:00
Jan Alexander Steffens f6fda030c2 5.8.13.arch1-1 2020-10-01 21:59:37 +00:00
Jan Alexander Steffens 4ec9ebe04a 5.8.12.arch1-1 2020-09-26 23:12:41 +00:00
Jan Alexander Steffens 5433c11e0e 5.8.11.arch1-1 2020-09-24 17:38:11 +00:00
Jan Alexander Steffens d39b43e014 5.8.10.arch1-1 2020-09-17 18:56:28 +00:00
Jan Alexander Steffens 1a3aa2b5c6 5.8.9.arch2-1 2020-09-14 01:30:07 +00:00
Jan Alexander Steffens 7722de06ba 5.8.9.arch1-1 2020-09-13 23:34:48 +00:00
Jan Alexander Steffens abbabff91a 5.8.8.arch1-1 2020-09-09 20:07:15 +00:00
Jan Alexander Steffens 556fc02660 5.8.7.arch1-1 2020-09-05 13:22:51 +00:00
Jan Alexander Steffens ea62179998 5.8.6.arch1-1 2020-09-03 18:54:38 +00:00
Jan Alexander Steffens 09a3f454bd 5.8.5.arch1-1 2020-08-27 20:01:26 +00:00
Jan Alexander Steffens b69a10324d 5.8.4.arch1-1 2020-08-26 19:44:43 +00:00
Jan Alexander Steffens 7984c04fb1 5.8.3.arch1-1 2020-08-21 18:03:45 +00:00
Jan Alexander Steffens 0f4a2e284f 5.8.2.arch1-1 2020-08-20 21:40:15 +00:00
Jan Alexander Steffens 15b630a385 5.8.1.arch1-2 2020-08-16 19:01:58 +00:00
Jan Alexander Steffens ebf81a0b24 5.8.1.arch1-1 2020-08-12 19:43:08 +00:00
Jan Alexander Steffens 04d29ded1f 5.8.arch1-2: Enable MEM_SOFT_DIRTY (FS#67509) and USERFAULTFD (FS#62780) 2020-08-09 01:43:59 +00:00
Jan Alexander Steffens 3b798b5973 5.8.arch1-1 2020-08-03 20:08:49 +00:00
Jan Alexander Steffens 6f2434369d 5.7.12.arch1-1 2020-07-31 18:33:21 +00:00
Jan Alexander Steffens ad5bfbb468 5.7.11.arch1-1 2020-07-29 22:37:08 +00:00
Jan Alexander Steffens ab2cd357d4 5.7.10.arch1-1 2020-07-22 20:52:26 +00:00
Jan Alexander Steffens 7aeb19a664 5.7.9.arch1-1 2020-07-16 20:52:28 +00:00
Jan Alexander Steffens d45dd6cdc9 5.7.8.arch1-1 2020-07-09 18:51:38 +00:00
Jan Alexander Steffens fbec51332d 5.7.7.arch1-1 2020-07-01 16:03:39 +00:00
Jan Alexander Steffens 86fcfba038 5.7.6.arch1-1 2020-06-25 01:09:41 +00:00
Jan Alexander Steffens 9ae891e5fc 5.7.5.arch1-1 2020-06-22 09:09:14 +00:00
Jan Alexander Steffens bc168a108d 5.7.4.arch1-1 2020-06-18 16:57:35 +00:00
Jan Alexander Steffens c55f0296cc 5.7.3.arch1-1 2020-06-17 21:58:44 +00:00
Jan Alexander Steffens 9b95df05fa 5.7.2.arch1-1 2020-06-11 00:16:02 +00:00