609d69d688
5.18.10.arch1-1
2022-07-07 18:25:25 +00:00
45817f47a0
5.18.9.arch1-1
2022-07-02 22:53:43 +00:00
df223a294a
5.18.8.arch1-1
2022-06-30 04:58:59 +00:00
a2ad438aca
5.18.7.arch1-1
2022-06-25 20:55:59 +00:00
af075e3dca
5.18.6.arch1-1
2022-06-22 18:43:35 +00:00
5f3729800f
FS#75102: Add integrity to LSM
...
This only initializes a cache which is used by IMA. So it does nothing
useful. Still, we technically have the integrity LSM and this removes a
footgun should IMA ever get enabled.
2022-06-19 20:12:32 +00:00
2e8ca45bc9
FS#75102: Enable KEXEC_SIG
2022-06-19 20:12:32 +00:00
1eaae5d53f
FS#75102: Revert "Enable KEXEC_SIG and IMA"
...
Enabling IMA makes it impossible to load unsigned kernel modules when
secure boot is in use, and without shim in the boot you can't get the
kernel to trust a local key for module signing.
This reverts commit 6a241232a3275ef3e314b5b7167e13fffff71282.
2022-06-19 20:12:31 +00:00
0724b8895c
FS#75102: Enable KEXEC_SIG and IMA
2022-06-19 19:23:48 +00:00
b72d91cb76
Build htmldocs in parallel
...
If you need clean build output, remove the docs build.
2022-06-19 19:23:47 +00:00
b3c8c8615f
5.18.5.arch1-1
2022-06-16 21:18:19 +00:00
a0899d416d
Disable PECI
...
As requested by Levente. Only useful for kernels running on baseboard
management controllers.
2022-06-16 21:18:17 +00:00
218d2a950d
5.18.4.arch1-1
2022-06-15 23:42:51 +00:00
5bd573c89e
FS#75041: Enable INTEGRITY_MACHINE_KEYRING and related
2022-06-15 23:42:48 +00:00
e29a800771
5.18.3.arch1-1
2022-06-09 17:20:22 +00:00
2adaf032c5
5.18.2.arch1-1
2022-06-06 20:35:16 +00:00
3aa8dd1c85
5.18.1.arch1-1
2022-05-30 18:31:45 +00:00
f11429d842
FS#74888: Enable BLOCK_LEGACY_AUTOLOAD
...
Disabling this broke legacy mdraid setups.
See: https://lore.kernel.org/linux-block/20220503212848.5853-1-dmoulding@me.com/
2022-05-30 18:31:42 +00:00
1cc50e39e6
5.18.arch1-1
2022-05-24 22:34:17 +00:00
d55c08b891
5.17.9.arch1-1
2022-05-18 21:53:45 +00:00
eb235bf7d5
5.17.8.arch1-1
2022-05-16 21:41:18 +00:00
c9f9cc83d6
gcc-12.1.0-2 rebuild
2022-05-15 05:14:41 +00:00
40f67dd1f4
5.17.7.arch1-1
2022-05-12 19:28:04 +00:00
231862cf72
5.17.6.arch1-1
2022-05-10 23:31:11 +00:00
b2101893db
gcc-12.1.0 rebuild
2022-05-06 20:13:38 +00:00
0c61251a1e
5.17.5.arch1-1
2022-04-27 21:57:26 +00:00
ee2af8ec43
5.17.4.arch1-1
2022-04-20 19:02:04 +00:00
3709e55626
5.17.3.arch1-1
2022-04-14 12:27:20 +00:00
7988a2548a
5.17.2.arch3-1
2022-04-10 11:47:49 +00:00
5dcd6e2fc5
5.17.2.arch2-1
2022-04-08 20:21:16 +00:00
2d3dd3bff0
5.17.2.arch1-1
2022-04-08 18:11:24 +00:00
b6880b286a
FS#72275: Don't package files created by depmod
2022-04-08 18:11:21 +00:00
d60d23d3e0
FS#74291: Reenable FRAMEBUFFER_CONSOLE_ROTATION
2022-04-01 16:10:30 +00:00
5b6b1b8eec
switch crda to wireless-regdb
2022-03-31 06:39:12 +00:00
8dc941a8b3
FS#68021, FS#74271: Return nvme to a module
2022-03-30 20:34:27 +00:00
ba835a0fa6
5.17.1.arch1-1
2022-03-28 21:54:44 +00:00
03fa74e628
FS#74203: Disable SYSFB_SIMPLEFB
2022-03-28 21:54:43 +00:00
432adf96db
5.17.arch1-1
2022-03-23 00:44:26 +00:00
e21cc89a76
5.16.16.arch1-1
2022-03-21 23:44:11 +00:00
22c5798bf1
5.16.15.arch1-1
2022-03-17 00:58:21 +00:00
997a6a8651
5.16.14.arch1-1
2022-03-11 18:29:09 +00:00
ccba33df68
Enable BPF_UNPRIV_DEFAULT_OFF
...
This config was enabled by default in v5.15 and we should follow that.
2022-03-09 16:09:34 +00:00
4f1d39f328
5.16.13.arch1-1
2022-03-08 20:36:10 +00:00
455ae3c99a
5.16.12.arch1-1
2022-03-02 13:24:19 +00:00
b4d8109660
5.16.11.arch1-2
2022-02-28 11:49:27 +00:00
19488bc439
5.16.11.arch1-1
2022-02-24 07:18:20 +00:00
49dd63df08
5.16.10.arch1-1
2022-02-16 20:15:19 +00:00
74147130fa
5.16.9.arch1-1
2022-02-11 23:14:13 +00:00
a4414373de
FS#73364: Enable DAMON
2022-02-11 23:14:12 +00:00
9babb28470
5.16.8.arch1-2
2022-02-09 20:03:15 +00:00
eb92849ce1
5.16.8.arch1-1
2022-02-08 21:56:54 +00:00
659df960bd
FS#72597: Disable ZERO_CALL_USED_REGS
...
Too much overhead.
2022-02-07 18:29:34 +00:00
b49ec6f0be
5.16.7.arch1-1
2022-02-06 17:55:39 +00:00
f481961a90
5.16.5.arch1-1
2022-02-01 23:40:25 +00:00
a2f19696d0
5.16.4.arch1-1
2022-01-30 04:12:39 +00:00
31ad8e7bc0
5.16.3.arch1-1
2022-01-27 14:57:45 +00:00
05d7e11c00
5.16.2.arch1-1
2022-01-20 17:08:42 +00:00
e891efc44c
5.16.1.arch1-1
2022-01-16 12:13:46 +00:00
6376eaf60e
5.16.arch1-1
2022-01-10 21:15:58 +00:00
de5111d5bf
5.15.13.arch1-1
2022-01-05 17:11:18 +00:00
992dd34d40
5.15.12.arch1-1
2021-12-29 13:06:04 +00:00
fbf05e9061
5.15.11.arch2-1
2021-12-22 17:37:01 +00:00
8e5f14c2b2
5.15.10.arch1-1
2021-12-17 12:37:20 +00:00
38f90fdbe5
5.15.9.arch1-1
2021-12-17 00:17:27 +00:00
f6654f361c
FS#69505: Replace MTD_RAM with MTD_MTDRAM
...
The latter is what was actually wanted.
2021-12-16 03:14:31 +00:00
e3b6f785e9
5.15.8.arch1-1
2021-12-14 23:27:20 +00:00
f631e8d68c
5.15.7.arch1-1
2021-12-08 17:33:10 +00:00
67bf0c6741
5.15.6.arch2-1
2021-12-02 17:13:38 +00:00
6fdf85f792
5.15.5.arch1-1
2021-11-25 22:53:04 +00:00
8d31a93b3a
5.15.4.arch1-1
2021-11-21 22:11:10 +00:00
90addb77b2
5.15.3.arch1-1
2021-11-18 22:55:52 +00:00
87b96ed160
5.15.2.arch1-1
2021-11-12 20:28:54 +00:00
741b99dce1
FS#72645: Disable SYSFB_SIMPLEFB
2021-11-12 20:28:52 +00:00
6f0619355f
5.15.1.arch1-2
2021-11-09 17:09:58 +00:00
e55609718b
FS#72658: Reenable built-in FB drivers
2021-11-09 17:09:57 +00:00
eecca3f5e0
5.15.1.arch1-1
2021-11-07 01:10:47 +00:00
911177d3df
Disable WERROR
...
Also leaks into external module builds.
2021-11-03 23:30:53 +00:00
78d0321a90
Set SYSFB_SIMPLEFB=y and SIMPLEDRM=y, disable legacy FB drivers
2021-11-03 23:30:52 +00:00
62812fc5b4
5.15.arch1-1
2021-11-03 23:30:51 +00:00
f2086b3d9e
5.14.16.arch1-1
2021-11-02 22:57:45 +00:00
52b131218a
5.14.15.arch1-1
2021-10-28 02:16:58 +00:00
45c17981b1
5.14.14.arch1-1
2021-10-20 22:56:29 +00:00
ff11721ddf
5.14.13.arch1-1
2021-10-17 13:22:17 +00:00
2072b4db95
5.14.12.arch1-1
2021-10-13 17:35:24 +00:00
6c1884d7e0
5.14.11.arch1-1
2021-10-10 08:07:16 +00:00
71f7795e0a
Print config diff after make olddefconfig
2021-10-10 08:07:15 +00:00
4325d1b2ad
5.14.10.arch1-1
2021-10-07 20:32:54 +00:00
2ef0ab9184
Disable SND_INTEL_BYT_PREFER_SOF
...
As requested by Jelle.
2021-10-06 22:08:56 +00:00
08f8fd42c1
5.14.9.arch2-1
2021-10-01 19:36:17 +00:00
5b34349b55
5.14.9.arch1-1
2021-09-30 19:13:09 +00:00
595a15167b
5.14.8.arch1-1
2021-09-26 20:22:35 +00:00
045bfb719c
FS#72195: Disable FB_HYPERV
2021-09-26 20:22:33 +00:00
e614e5b7d1
5.14.7.arch1-1
2021-09-22 22:31:58 +00:00
a9ffd8d727
5.14.6.arch1-1
2021-09-18 17:33:29 +00:00
af7ee19944
5.14.5.arch1-1
2021-09-16 11:55:43 +00:00
6842071bce
5.14.4.arch2-1
2021-09-16 10:44:38 +00:00
6f0e13bf09
5.14.4.arch1-1
2021-09-15 22:24:27 +00:00
2cedf65a5a
5.14.3.arch1-1
2021-09-12 21:33:52 +00:00
f8c67d6d68
5.14.2.arch1-2
2021-09-09 10:30:53 +00:00
25de7a333b
FS#72045: Disable WATCHDOG_HRTIMER_PRETIMEOUT
2021-09-09 10:30:52 +00:00
eecbf9bbe1
5.14.2.arch1-1
2021-09-08 23:54:10 +00:00
ca05999be5
Enable EDAC_IGEN6
...
This was overlooked.
2021-09-03 21:24:30 +00:00
18427d86c6
5.14.1.arch1-1
2021-09-03 21:04:16 +00:00
d73ac85acb
5.13.13.arch1-1
2021-08-26 19:48:22 +00:00
738226335f
5.13.12.arch1-1
2021-08-18 21:30:22 +00:00
c21ba89cc1
Set KFENCE_SAMPLE_INTERVAL back to 100
...
As requested by Levente. The power issues should be solved by now.
2021-08-18 21:30:21 +00:00
fb8eb1c560
Enable RANDOMIZE_KSTACK_OFFSET_DEFAULT
...
Additional hardening at a minimal cost, as requested by Levente.
2021-08-18 21:30:17 +00:00
2552e0b041
5.13.10.arch1-1
2021-08-12 22:36:23 +00:00
5e6049790e
5.13.9.arch1-1
2021-08-08 12:14:43 +00:00
5e111e91cc
5.13.8.arch1-1
2021-08-04 18:46:16 +00:00
82e02793cb
5.13.7.arch1-1
2021-07-31 23:09:11 +00:00
d352d2e4ff
5.13.6.arch1-1
2021-07-29 00:51:39 +00:00
86779bcfea
5.13.5.arch1-1
2021-07-26 01:55:01 +00:00
11f06f43c4
5.13.4.arch2-1
2021-07-22 21:18:45 +00:00
2589876818
Upgrade to 5.13.4.arch1.
...
PKGBUILD:
Add C7E7849466FE2358343588377258734B41C31549 as additional recognized valid PGP
key, as heftig might not be able to prepare releases and package for a while.
config:
Consolidate with defaults for 5.13.4 based on previous config.
Update CONFIG_LSM to order landlock before lockdown and re-add bpf, as the
issue discussed in https://bugs.archlinux.org/task/71270 seems to have been a
user-error (using obsolete kernel parameters).
2021-07-20 17:34:49 +00:00
fd38ec001c
5.13.1.arch1-1
2021-07-10 00:23:52 +00:00
c156c63575
5.12.15.arch1-1
2021-07-08 06:51:34 +00:00
4aa90295a0
5.12.14.arch1-1
2021-07-01 07:57:45 +00:00
5b763178e4
FS#71392: Install IIO hid-sensors header
2021-07-01 07:57:43 +00:00
e8d31cb4c2
5.12.13.arch1-2
2021-06-25 23:47:17 +00:00
65eddc1dfd
FS#71325: Enable SPI_INTEL_SPI again
2021-06-25 23:47:16 +00:00
74cfa2eb0a
Revert "Use our git"
...
This reverts commit 57840eab683583e89ba506800c08ee752937c586.
We're shutting down git.archlinux.org and don't want to move the linux
repo to gitlab due to its size.
2021-06-25 23:47:14 +00:00
9bff7b52e3
5.12.13.arch1-1
2021-06-23 17:14:01 +00:00
38bd62e40b
FS#71296: Enable DEBUG_LIST
2021-06-20 19:20:20 +00:00
7403514fbe
5.12.12.arch1-1
2021-06-18 22:59:23 +00:00
e7d5c4d89c
5.12.11.arch1-1
2021-06-16 22:13:35 +00:00
d7bf404c33
FS#71270: Don't enable "bpf" LSM by default
...
It provides all possible hooks, which makes it harder to properly use
major LSMs. Using security= to enable a major LSM puts it at the end of
the list. Some functions (like security_getprocattr) only use the first
matching hook, thus prefer bpf.
2021-06-16 22:13:34 +00:00
3f21513a71
5.12.10.arch1-1
2021-06-10 17:16:45 +00:00
9fe32edb60
5.12.9.arch1-1
2021-06-03 12:11:43 +00:00
b7f14e1a69
5.12.8.arch1-1
2021-05-28 21:05:54 +00:00
99703861e1
FS#69505: Enable MTD_ROM
2021-05-27 19:39:55 +00:00
b72d63df03
5.12.7.arch1-1
2021-05-26 22:45:28 +00:00
1da8e74711
5.12.6.arch1-1
2021-05-23 01:36:16 +00:00
ea7ccabcad
5.12.5.arch1-1
2021-05-19 11:46:27 +00:00
3c493d93c4
5.12.4.arch2-1
2021-05-18 22:29:32 +00:00
04cd0126a3
5.12.4.arch1-2
2021-05-15 21:38:30 +00:00
2a8704f5e1
Set KFENCE_SAMPLE_INTERVAL to 0
...
Turns off KFENCE by default, as requested by Levente. There are power
use issues, see
https://lore.kernel.org/linux-mm/20210421105132.3965998-1-elver@google.com/
2021-05-15 21:38:29 +00:00
1646eced3b
Enable DEBUG_INFO_DWARF4
...
Required for BTF to work with GCC 11.
2021-05-15 21:38:27 +00:00
acb9384891
5.12.4.arch1-1
2021-05-14 14:20:31 +00:00
24c6f0d688
5.12.3.arch2-1
2021-05-13 20:01:56 +00:00
4b8cbaa097
5.12.3.arch1-2
2021-05-13 00:02:40 +00:00
1214e4e40a
5.12.3.arch1-1
2021-05-12 18:53:54 +00:00
cc87e6b052
5.12.2.arch1-1
2021-05-07 16:08:11 +00:00
db81b3eea9
FS#70742: Enable MTD_NAND_ECC_*
2021-05-07 16:08:09 +00:00
621ea2d08c
5.12.1.arch1-1
2021-05-02 13:41:41 +00:00
7f6df05917
Turn on KFENCE by default
...
As requested by Levente.
2021-05-02 13:41:40 +00:00
b03b4f7e6f
5.12.arch1-1
2021-04-26 21:33:26 +00:00
d71e920034
5.11.16.arch1-1
2021-04-21 20:39:28 +00:00
62782a577d
FS#69181: Enable FB_UVESA
2021-04-21 20:39:27 +00:00
0d66f76ec1
FS#68698: Enable HID_SENSOR_CUSTOM_SENSOR
2021-04-21 20:39:26 +00:00
6f3f90e76b
FS#69505: Enable MTD_RAM
2021-04-21 20:39:22 +00:00
3f3fcefaf5
5.11.15.arch1-2
2021-04-17 00:56:35 +00:00
85750f85be
Revert "Enable LOAD_UEFI_KEYS"
...
It didn't help secure dkms modules like we thought it would.
2021-04-17 00:56:34 +00:00
4e15a9f945
5.11.15.arch1-1
2021-04-16 12:28:14 +00:00
e0674e41ca
5.11.14.arch1-1
2021-04-14 12:48:08 +00:00
0ab80e4b19
5.11.13.arch3-1
2021-04-14 11:11:29 +00:00
47a3ddc4b0
5.11.13.arch2-1
2021-04-12 00:54:06 +00:00
46d00c9794
5.11.13.arch1-1
2021-04-10 21:25:36 +00:00
44305ad48b
FS#70375: Disable BT_HS
2021-04-09 18:49:50 +00:00
3272234053
FS#70384: Return atkbd to a module
2021-04-09 14:49:24 +00:00
eac563f39e
5.11.12.arch1-1
2021-04-07 22:37:33 +00:00
56380b3e43
FS#70299: Enable IDLE_PAGE_TRACKING
2021-04-05 12:50:09 +00:00
e74e4210d3
5.11.11.arch1-1
2021-03-30 14:47:29 +00:00
f99611e296
FS#69441: Revert "Disable USB gadget support"
2021-03-30 14:47:28 +00:00
320113849b
5.11.10.arch1-1
2021-03-26 00:56:43 +00:00
ca32941726
5.11.9.arch1-1
2021-03-24 19:28:05 +00:00
d014a88b5b
FS#70140: Enable EFI_VARS_PSTORE_DEFAULT_DISABLE
2021-03-24 19:28:03 +00:00
364d5e5432
5.11.8.arch1-1
2021-03-21 02:30:21 +00:00
1cf3662d97
FS#70064: Set SND_HDA_PREALLOC_SIZE to 0
...
This is also the default in Fedora.
2021-03-21 02:30:20 +00:00
1c099ca397
5.11.7.arch1-1
2021-03-17 17:35:35 +00:00
b4a2e977d4
FS#69992: Enable SND_SOC_INTEL_SKYLAKE_HDAUDIO_CODEC
2021-03-15 16:28:21 +00:00
7e6eb07df5
FS#69479: Disable BCM63XX drivers
2021-03-14 14:40:19 +00:00
fc7f97fc30
FS#33958, FS#35753: Fix tomoyo settings
2021-03-14 14:40:17 +00:00
80415a58a9
5.11.6.arch1-1
2021-03-11 15:05:55 +00:00
44637ec6c7
5.11.5.arch1-1
2021-03-09 20:07:14 +00:00
e280f34fb3
5.11.4.arch1-1
2021-03-07 18:34:36 +00:00
62f6c03f2c
5.11.3.arch1-1
2021-03-04 22:24:21 +00:00
1dca396562
5.11.2.arch1-1
2021-02-26 22:42:58 +00:00
ec11f3e288
5.11.1.arch1-1
2021-02-23 14:47:16 +00:00
ae5ce75f0d
5.11.arch2-1
2021-02-19 00:11:51 +00:00
cc8cce72b9
5.11.arch1-1
2021-02-15 23:56:35 +00:00
c3046f0b81
5.10.16.arch1-1
2021-02-13 21:20:45 +00:00
ce690b2efd
5.10.15.arch1-1
2021-02-10 19:05:11 +00:00
3550611332
5.10.14.arch1-1
2021-02-07 23:17:50 +00:00
d159b9a739
5.10.13.arch1-2
2021-02-06 11:45:09 +00:00
71c2279684
FS#69158: Return psmouse to a module
2021-02-04 19:32:19 +00:00
2630980304
5.10.13.arch1-1
2021-02-04 00:25:58 +00:00
7874717d9d
FS#69479: Disable Lantiq and Rockchip drivers
2021-02-04 00:25:57 +00:00
861c5dfd04
Update security config
...
- Build in loadpin, but keep it disabled by default
- Enable bpf by default
2021-02-04 00:25:55 +00:00
d04972b60c
FS#69212: Reenable multimedia test drivers
2021-01-31 01:33:42 +00:00
9d28b37b79
5.10.12.arch1-1
2021-01-31 01:33:39 +00:00
cf0be7beee
5.10.11.arch1-1
2021-01-27 15:42:47 +00:00
66b09ae393
5.10.10.arch1-1
2021-01-24 00:56:16 +00:00
460787f437
5.10.9.arch1-1
2021-01-19 23:33:14 +00:00
732488a858
5.10.8.arch1-1
2021-01-17 23:12:23 +00:00
0007db0e69
5.10.7.arch1-1
2021-01-13 13:01:40 +00:00
c19564ecfa
5.10.6.arch1-1
2021-01-09 19:17:04 +00:00
29ab84e2ba
5.10.5.arch1-1
2021-01-07 12:05:32 +00:00
8ffb940e20
5.10.4.arch2-1
2021-01-01 06:17:42 +00:00
87cfb1a823
Reenable MTD_PHRAM
...
Can be used with syslinux's memdiskfind to mount a filesystem image.
2021-01-01 06:17:41 +00:00
Jan Alexander Steffens
Frederik Schwan
Tobias Powalowski
David Runge