Commit Graph

1402 Commits

Author SHA1 Message Date
Jan Alexander Steffens a2ad438aca 5.18.7.arch1-1 2022-06-25 20:55:59 +00:00
Jan Alexander Steffens af075e3dca 5.18.6.arch1-1 2022-06-22 18:43:35 +00:00
Jan Alexander Steffens 5f3729800f FS#75102: Add integrity to LSM
This only initializes a cache which is used by IMA. So it does nothing
useful. Still, we technically have the integrity LSM and this removes a
footgun should IMA ever get enabled.
2022-06-19 20:12:32 +00:00
Jan Alexander Steffens 2e8ca45bc9 FS#75102: Enable KEXEC_SIG 2022-06-19 20:12:32 +00:00
Jan Alexander Steffens 1eaae5d53f FS#75102: Revert "Enable KEXEC_SIG and IMA"
Enabling IMA makes it impossible to load unsigned kernel modules when
secure boot is in use, and without shim in the boot you can't get the
kernel to trust a local key for module signing.

This reverts commit 6a241232a3275ef3e314b5b7167e13fffff71282.
2022-06-19 20:12:31 +00:00
Jan Alexander Steffens 0724b8895c FS#75102: Enable KEXEC_SIG and IMA 2022-06-19 19:23:48 +00:00
Jan Alexander Steffens b72d91cb76 Build htmldocs in parallel
If you need clean build output, remove the docs build.
2022-06-19 19:23:47 +00:00
Jan Alexander Steffens b3c8c8615f 5.18.5.arch1-1 2022-06-16 21:18:19 +00:00
Jan Alexander Steffens a0899d416d Disable PECI
As requested by Levente. Only useful for kernels running on baseboard
management controllers.
2022-06-16 21:18:17 +00:00
Jan Alexander Steffens 218d2a950d 5.18.4.arch1-1 2022-06-15 23:42:51 +00:00
Jan Alexander Steffens 5bd573c89e FS#75041: Enable INTEGRITY_MACHINE_KEYRING and related 2022-06-15 23:42:48 +00:00
Jan Alexander Steffens e29a800771 5.18.3.arch1-1 2022-06-09 17:20:22 +00:00
Jan Alexander Steffens 2adaf032c5 5.18.2.arch1-1 2022-06-06 20:35:16 +00:00
Jan Alexander Steffens 3aa8dd1c85 5.18.1.arch1-1 2022-05-30 18:31:45 +00:00
Jan Alexander Steffens f11429d842 FS#74888: Enable BLOCK_LEGACY_AUTOLOAD
Disabling this broke legacy mdraid setups.

See: https://lore.kernel.org/linux-block/20220503212848.5853-1-dmoulding@me.com/
2022-05-30 18:31:42 +00:00
Jan Alexander Steffens 1cc50e39e6 5.18.arch1-1 2022-05-24 22:34:17 +00:00
Jan Alexander Steffens d55c08b891 5.17.9.arch1-1 2022-05-18 21:53:45 +00:00
Jan Alexander Steffens eb235bf7d5 5.17.8.arch1-1 2022-05-16 21:41:18 +00:00
Frederik Schwan c9f9cc83d6 gcc-12.1.0-2 rebuild 2022-05-15 05:14:41 +00:00
Jan Alexander Steffens 40f67dd1f4 5.17.7.arch1-1 2022-05-12 19:28:04 +00:00
Jan Alexander Steffens 231862cf72 5.17.6.arch1-1 2022-05-10 23:31:11 +00:00
Frederik Schwan b2101893db gcc-12.1.0 rebuild 2022-05-06 20:13:38 +00:00
Jan Alexander Steffens 0c61251a1e 5.17.5.arch1-1 2022-04-27 21:57:26 +00:00
Jan Alexander Steffens ee2af8ec43 5.17.4.arch1-1 2022-04-20 19:02:04 +00:00
Jan Alexander Steffens 3709e55626 5.17.3.arch1-1 2022-04-14 12:27:20 +00:00
Jan Alexander Steffens 7988a2548a 5.17.2.arch3-1 2022-04-10 11:47:49 +00:00
Jan Alexander Steffens 5dcd6e2fc5 5.17.2.arch2-1 2022-04-08 20:21:16 +00:00
Jan Alexander Steffens 2d3dd3bff0 5.17.2.arch1-1 2022-04-08 18:11:24 +00:00
Jan Alexander Steffens b6880b286a FS#72275: Don't package files created by depmod 2022-04-08 18:11:21 +00:00
Jan Alexander Steffens d60d23d3e0 FS#74291: Reenable FRAMEBUFFER_CONSOLE_ROTATION 2022-04-01 16:10:30 +00:00
Tobias Powalowski 5b6b1b8eec switch crda to wireless-regdb 2022-03-31 06:39:12 +00:00
Jan Alexander Steffens 8dc941a8b3 FS#68021, FS#74271: Return nvme to a module 2022-03-30 20:34:27 +00:00
Jan Alexander Steffens ba835a0fa6 5.17.1.arch1-1 2022-03-28 21:54:44 +00:00
Jan Alexander Steffens 03fa74e628 FS#74203: Disable SYSFB_SIMPLEFB 2022-03-28 21:54:43 +00:00
Jan Alexander Steffens 432adf96db 5.17.arch1-1 2022-03-23 00:44:26 +00:00
Jan Alexander Steffens e21cc89a76 5.16.16.arch1-1 2022-03-21 23:44:11 +00:00
Jan Alexander Steffens 22c5798bf1 5.16.15.arch1-1 2022-03-17 00:58:21 +00:00
Jan Alexander Steffens 997a6a8651 5.16.14.arch1-1 2022-03-11 18:29:09 +00:00
Jan Alexander Steffens ccba33df68 Enable BPF_UNPRIV_DEFAULT_OFF
This config was enabled by default in v5.15 and we should follow that.
2022-03-09 16:09:34 +00:00
Jan Alexander Steffens 4f1d39f328 5.16.13.arch1-1 2022-03-08 20:36:10 +00:00
Jan Alexander Steffens 455ae3c99a 5.16.12.arch1-1 2022-03-02 13:24:19 +00:00
Jan Alexander Steffens b4d8109660 5.16.11.arch1-2 2022-02-28 11:49:27 +00:00
Jan Alexander Steffens 19488bc439 5.16.11.arch1-1 2022-02-24 07:18:20 +00:00
Jan Alexander Steffens 49dd63df08 5.16.10.arch1-1 2022-02-16 20:15:19 +00:00
Jan Alexander Steffens 74147130fa 5.16.9.arch1-1 2022-02-11 23:14:13 +00:00
Jan Alexander Steffens a4414373de FS#73364: Enable DAMON 2022-02-11 23:14:12 +00:00
Jan Alexander Steffens 9babb28470 5.16.8.arch1-2 2022-02-09 20:03:15 +00:00
Jan Alexander Steffens eb92849ce1 5.16.8.arch1-1 2022-02-08 21:56:54 +00:00
Jan Alexander Steffens 659df960bd FS#72597: Disable ZERO_CALL_USED_REGS
Too much overhead.
2022-02-07 18:29:34 +00:00
Jan Alexander Steffens b49ec6f0be 5.16.7.arch1-1 2022-02-06 17:55:39 +00:00