Commit Graph

1200 Commits

Author SHA1 Message Date
Jan Alexander Steffens e614e5b7d1 5.14.7.arch1-1 2021-09-22 22:31:58 +00:00
Jan Alexander Steffens a9ffd8d727 5.14.6.arch1-1 2021-09-18 17:33:29 +00:00
Jan Alexander Steffens af7ee19944 5.14.5.arch1-1 2021-09-16 11:55:43 +00:00
Jan Alexander Steffens 6842071bce 5.14.4.arch2-1 2021-09-16 10:44:38 +00:00
Jan Alexander Steffens 6f0e13bf09 5.14.4.arch1-1 2021-09-15 22:24:27 +00:00
Jan Alexander Steffens 2cedf65a5a 5.14.3.arch1-1 2021-09-12 21:33:52 +00:00
Jan Alexander Steffens f8c67d6d68 5.14.2.arch1-2 2021-09-09 10:30:53 +00:00
Jan Alexander Steffens 25de7a333b FS#72045: Disable WATCHDOG_HRTIMER_PRETIMEOUT 2021-09-09 10:30:52 +00:00
Jan Alexander Steffens eecbf9bbe1 5.14.2.arch1-1 2021-09-08 23:54:10 +00:00
Jan Alexander Steffens ca05999be5 Enable EDAC_IGEN6
This was overlooked.
2021-09-03 21:24:30 +00:00
Jan Alexander Steffens 18427d86c6 5.14.1.arch1-1 2021-09-03 21:04:16 +00:00
Jan Alexander Steffens d73ac85acb 5.13.13.arch1-1 2021-08-26 19:48:22 +00:00
Jan Alexander Steffens 738226335f 5.13.12.arch1-1 2021-08-18 21:30:22 +00:00
Jan Alexander Steffens c21ba89cc1 Set KFENCE_SAMPLE_INTERVAL back to 100
As requested by Levente. The power issues should be solved by now.
2021-08-18 21:30:21 +00:00
Jan Alexander Steffens fb8eb1c560 Enable RANDOMIZE_KSTACK_OFFSET_DEFAULT
Additional hardening at a minimal cost, as requested by Levente.
2021-08-18 21:30:17 +00:00
Jan Alexander Steffens 2552e0b041 5.13.10.arch1-1 2021-08-12 22:36:23 +00:00
Jan Alexander Steffens 5e6049790e 5.13.9.arch1-1 2021-08-08 12:14:43 +00:00
Jan Alexander Steffens 5e111e91cc 5.13.8.arch1-1 2021-08-04 18:46:16 +00:00
Jan Alexander Steffens 82e02793cb 5.13.7.arch1-1 2021-07-31 23:09:11 +00:00
Jan Alexander Steffens d352d2e4ff 5.13.6.arch1-1 2021-07-29 00:51:39 +00:00
Jan Alexander Steffens 86779bcfea 5.13.5.arch1-1 2021-07-26 01:55:01 +00:00
Jan Alexander Steffens 11f06f43c4 5.13.4.arch2-1 2021-07-22 21:18:45 +00:00
David Runge 2589876818 Upgrade to 5.13.4.arch1.
PKGBUILD:
Add C7E7849466FE2358343588377258734B41C31549 as additional recognized valid PGP
key, as heftig might not be able to prepare releases and package for a while.

config:
Consolidate with defaults for 5.13.4 based on previous config.
Update CONFIG_LSM to order landlock before lockdown and re-add bpf, as the
issue discussed in https://bugs.archlinux.org/task/71270 seems to have been a
user-error (using obsolete kernel parameters).
2021-07-20 17:34:49 +00:00
Jan Alexander Steffens fd38ec001c 5.13.1.arch1-1 2021-07-10 00:23:52 +00:00
Jan Alexander Steffens c156c63575 5.12.15.arch1-1 2021-07-08 06:51:34 +00:00
Jan Alexander Steffens 4aa90295a0 5.12.14.arch1-1 2021-07-01 07:57:45 +00:00
Jan Alexander Steffens 5b763178e4 FS#71392: Install IIO hid-sensors header 2021-07-01 07:57:43 +00:00
Jan Alexander Steffens e8d31cb4c2 5.12.13.arch1-2 2021-06-25 23:47:17 +00:00
Jan Alexander Steffens 65eddc1dfd FS#71325: Enable SPI_INTEL_SPI again 2021-06-25 23:47:16 +00:00
Jan Alexander Steffens 74cfa2eb0a Revert "Use our git"
This reverts commit 57840eab683583e89ba506800c08ee752937c586.

We're shutting down git.archlinux.org and don't want to move the linux
repo to gitlab due to its size.
2021-06-25 23:47:14 +00:00
Jan Alexander Steffens 9bff7b52e3 5.12.13.arch1-1 2021-06-23 17:14:01 +00:00
Jan Alexander Steffens 38bd62e40b FS#71296: Enable DEBUG_LIST 2021-06-20 19:20:20 +00:00
Jan Alexander Steffens 7403514fbe 5.12.12.arch1-1 2021-06-18 22:59:23 +00:00
Jan Alexander Steffens e7d5c4d89c 5.12.11.arch1-1 2021-06-16 22:13:35 +00:00
Jan Alexander Steffens d7bf404c33 FS#71270: Don't enable "bpf" LSM by default
It provides all possible hooks, which makes it harder to properly use
major LSMs. Using security= to enable a major LSM puts it at the end of
the list. Some functions (like security_getprocattr) only use the first
matching hook, thus prefer bpf.
2021-06-16 22:13:34 +00:00
Jan Alexander Steffens 3f21513a71 5.12.10.arch1-1 2021-06-10 17:16:45 +00:00
Jan Alexander Steffens 9fe32edb60 5.12.9.arch1-1 2021-06-03 12:11:43 +00:00
Jan Alexander Steffens b7f14e1a69 5.12.8.arch1-1 2021-05-28 21:05:54 +00:00
Jan Alexander Steffens 99703861e1 FS#69505: Enable MTD_ROM 2021-05-27 19:39:55 +00:00
Jan Alexander Steffens b72d63df03 5.12.7.arch1-1 2021-05-26 22:45:28 +00:00
Jan Alexander Steffens 1da8e74711 5.12.6.arch1-1 2021-05-23 01:36:16 +00:00
Jan Alexander Steffens ea7ccabcad 5.12.5.arch1-1 2021-05-19 11:46:27 +00:00
Jan Alexander Steffens 3c493d93c4 5.12.4.arch2-1 2021-05-18 22:29:32 +00:00
Jan Alexander Steffens 04cd0126a3 5.12.4.arch1-2 2021-05-15 21:38:30 +00:00
Jan Alexander Steffens 2a8704f5e1 Set KFENCE_SAMPLE_INTERVAL to 0
Turns off KFENCE by default, as requested by Levente. There are power
use issues, see
https://lore.kernel.org/linux-mm/20210421105132.3965998-1-elver@google.com/
2021-05-15 21:38:29 +00:00
Jan Alexander Steffens 1646eced3b Enable DEBUG_INFO_DWARF4
Required for BTF to work with GCC 11.
2021-05-15 21:38:27 +00:00
Jan Alexander Steffens acb9384891 5.12.4.arch1-1 2021-05-14 14:20:31 +00:00
Jan Alexander Steffens 24c6f0d688 5.12.3.arch2-1 2021-05-13 20:01:56 +00:00
Jan Alexander Steffens 4b8cbaa097 5.12.3.arch1-2 2021-05-13 00:02:40 +00:00
Jan Alexander Steffens 1214e4e40a 5.12.3.arch1-1 2021-05-12 18:53:54 +00:00
Jan Alexander Steffens cc87e6b052 5.12.2.arch1-1 2021-05-07 16:08:11 +00:00
Jan Alexander Steffens db81b3eea9 FS#70742: Enable MTD_NAND_ECC_* 2021-05-07 16:08:09 +00:00
Jan Alexander Steffens 621ea2d08c 5.12.1.arch1-1 2021-05-02 13:41:41 +00:00
Jan Alexander Steffens 7f6df05917 Turn on KFENCE by default
As requested by Levente.
2021-05-02 13:41:40 +00:00
Jan Alexander Steffens b03b4f7e6f 5.12.arch1-1 2021-04-26 21:33:26 +00:00
Jan Alexander Steffens d71e920034 5.11.16.arch1-1 2021-04-21 20:39:28 +00:00
Jan Alexander Steffens 62782a577d FS#69181: Enable FB_UVESA 2021-04-21 20:39:27 +00:00
Jan Alexander Steffens 0d66f76ec1 FS#68698: Enable HID_SENSOR_CUSTOM_SENSOR 2021-04-21 20:39:26 +00:00
Jan Alexander Steffens 6f3f90e76b FS#69505: Enable MTD_RAM 2021-04-21 20:39:22 +00:00
Jan Alexander Steffens 3f3fcefaf5 5.11.15.arch1-2 2021-04-17 00:56:35 +00:00
Jan Alexander Steffens 85750f85be Revert "Enable LOAD_UEFI_KEYS"
It didn't help secure dkms modules like we thought it would.
2021-04-17 00:56:34 +00:00
Jan Alexander Steffens 4e15a9f945 5.11.15.arch1-1 2021-04-16 12:28:14 +00:00
Jan Alexander Steffens e0674e41ca 5.11.14.arch1-1 2021-04-14 12:48:08 +00:00
Jan Alexander Steffens 0ab80e4b19 5.11.13.arch3-1 2021-04-14 11:11:29 +00:00
Jan Alexander Steffens 47a3ddc4b0 5.11.13.arch2-1 2021-04-12 00:54:06 +00:00
Jan Alexander Steffens 46d00c9794 5.11.13.arch1-1 2021-04-10 21:25:36 +00:00
Jan Alexander Steffens 44305ad48b FS#70375: Disable BT_HS 2021-04-09 18:49:50 +00:00
Jan Alexander Steffens 3272234053 FS#70384: Return atkbd to a module 2021-04-09 14:49:24 +00:00
Jan Alexander Steffens eac563f39e 5.11.12.arch1-1 2021-04-07 22:37:33 +00:00
Jan Alexander Steffens 56380b3e43 FS#70299: Enable IDLE_PAGE_TRACKING 2021-04-05 12:50:09 +00:00
Jan Alexander Steffens e74e4210d3 5.11.11.arch1-1 2021-03-30 14:47:29 +00:00
Jan Alexander Steffens f99611e296 FS#69441: Revert "Disable USB gadget support" 2021-03-30 14:47:28 +00:00
Jan Alexander Steffens 320113849b 5.11.10.arch1-1 2021-03-26 00:56:43 +00:00
Jan Alexander Steffens ca32941726 5.11.9.arch1-1 2021-03-24 19:28:05 +00:00
Jan Alexander Steffens d014a88b5b FS#70140: Enable EFI_VARS_PSTORE_DEFAULT_DISABLE 2021-03-24 19:28:03 +00:00
Jan Alexander Steffens 364d5e5432 5.11.8.arch1-1 2021-03-21 02:30:21 +00:00
Jan Alexander Steffens 1cf3662d97 FS#70064: Set SND_HDA_PREALLOC_SIZE to 0
This is also the default in Fedora.
2021-03-21 02:30:20 +00:00
Jan Alexander Steffens 1c099ca397 5.11.7.arch1-1 2021-03-17 17:35:35 +00:00
Jan Alexander Steffens b4a2e977d4 FS#69992: Enable SND_SOC_INTEL_SKYLAKE_HDAUDIO_CODEC 2021-03-15 16:28:21 +00:00
Jan Alexander Steffens 7e6eb07df5 FS#69479: Disable BCM63XX drivers 2021-03-14 14:40:19 +00:00
Jan Alexander Steffens fc7f97fc30 FS#33958, FS#35753: Fix tomoyo settings 2021-03-14 14:40:17 +00:00
Jan Alexander Steffens 80415a58a9 5.11.6.arch1-1 2021-03-11 15:05:55 +00:00
Jan Alexander Steffens 44637ec6c7 5.11.5.arch1-1 2021-03-09 20:07:14 +00:00
Jan Alexander Steffens e280f34fb3 5.11.4.arch1-1 2021-03-07 18:34:36 +00:00
Jan Alexander Steffens 62f6c03f2c 5.11.3.arch1-1 2021-03-04 22:24:21 +00:00
Jan Alexander Steffens 1dca396562 5.11.2.arch1-1 2021-02-26 22:42:58 +00:00
Jan Alexander Steffens ec11f3e288 5.11.1.arch1-1 2021-02-23 14:47:16 +00:00
Jan Alexander Steffens ae5ce75f0d 5.11.arch2-1 2021-02-19 00:11:51 +00:00
Jan Alexander Steffens cc8cce72b9 5.11.arch1-1 2021-02-15 23:56:35 +00:00
Jan Alexander Steffens c3046f0b81 5.10.16.arch1-1 2021-02-13 21:20:45 +00:00
Jan Alexander Steffens ce690b2efd 5.10.15.arch1-1 2021-02-10 19:05:11 +00:00
Jan Alexander Steffens 3550611332 5.10.14.arch1-1 2021-02-07 23:17:50 +00:00
Jan Alexander Steffens d159b9a739 5.10.13.arch1-2 2021-02-06 11:45:09 +00:00
Jan Alexander Steffens 71c2279684 FS#69158: Return psmouse to a module 2021-02-04 19:32:19 +00:00
Jan Alexander Steffens 2630980304 5.10.13.arch1-1 2021-02-04 00:25:58 +00:00
Jan Alexander Steffens 7874717d9d FS#69479: Disable Lantiq and Rockchip drivers 2021-02-04 00:25:57 +00:00
Jan Alexander Steffens 861c5dfd04 Update security config
- Build in loadpin, but keep it disabled by default
- Enable bpf by default
2021-02-04 00:25:55 +00:00
Jan Alexander Steffens d04972b60c FS#69212: Reenable multimedia test drivers 2021-01-31 01:33:42 +00:00
Jan Alexander Steffens 9d28b37b79 5.10.12.arch1-1 2021-01-31 01:33:39 +00:00
Jan Alexander Steffens cf0be7beee 5.10.11.arch1-1 2021-01-27 15:42:47 +00:00
Jan Alexander Steffens 66b09ae393 5.10.10.arch1-1 2021-01-24 00:56:16 +00:00
Jan Alexander Steffens 460787f437 5.10.9.arch1-1 2021-01-19 23:33:14 +00:00
Jan Alexander Steffens 732488a858 5.10.8.arch1-1 2021-01-17 23:12:23 +00:00
Jan Alexander Steffens 0007db0e69 5.10.7.arch1-1 2021-01-13 13:01:40 +00:00
Jan Alexander Steffens c19564ecfa 5.10.6.arch1-1 2021-01-09 19:17:04 +00:00
Jan Alexander Steffens 29ab84e2ba 5.10.5.arch1-1 2021-01-07 12:05:32 +00:00
Jan Alexander Steffens 8ffb940e20 5.10.4.arch2-1 2021-01-01 06:17:42 +00:00
Jan Alexander Steffens 87cfb1a823 Reenable MTD_PHRAM
Can be used with syslinux's memdiskfind to mount a filesystem image.
2021-01-01 06:17:41 +00:00
Jan Alexander Steffens 45857ed86c Enable SECURITY_DMESG_RESTRICT
Default on Debian, and seems to be reasonable for us since we also don't
allow access to the system journal by default.
2020-12-31 01:18:17 +00:00
Jan Alexander Steffens b54786ee1f 5.10.4.arch1-1 2020-12-31 01:18:16 +00:00
Jan Alexander Steffens 66ead9f4aa 5.10.3.arch1-1 2020-12-27 12:02:15 +00:00
Jan Alexander Steffens ddeb06b257 Revert two config changes
As requested by Levente.
2020-12-22 01:33:12 +00:00
Jan Alexander Steffens 5ee180e682 5.10.2.arch1-1 2020-12-21 20:50:34 +00:00
Jan Alexander Steffens c6467751e8 Update sums 2020-12-18 23:32:11 +00:00
Jan Alexander Steffens 056e1229cd Disable DCCP (still affected by CVE-2020-16119) 2020-12-18 17:58:35 +00:00
Jan Alexander Steffens 8c2a9a8da9 FS#68978 Enable SoundWire machine driver 2020-12-16 14:37:37 +00:00
Jan Alexander Steffens e32e0ba50d 5.10.1.arch1-1 2020-12-15 21:22:15 +00:00
Jan Alexander Steffens d0179d6259 5.9.14.arch1-1 2020-12-12 22:02:25 +00:00
Jan Alexander Steffens 01bedab48a 5.9.13.arch1-1 2020-12-08 13:13:09 +00:00
Jan Alexander Steffens 7c79d74fff 5.9.12.arch1-1 2020-12-02 17:23:51 +00:00
Jan Alexander Steffens fe6596ab57 5.9.11.arch2-1 2020-11-28 02:51:37 +00:00
Jan Alexander Steffens 0b08d44ef8 5.9.11.arch1-1 2020-11-24 16:27:08 +00:00
Jan Alexander Steffens 85e1041b01 5.9.10.arch1-1 2020-11-22 15:26:46 +00:00
Jan Alexander Steffens 6be6ead80b 5.9.9.arch1-1 2020-11-18 20:51:25 +00:00
Jan Alexander Steffens 706a33e2de 5.9.8.arch1-1 2020-11-10 23:52:19 +00:00
Jan Alexander Steffens 141dd23c01 5.9.7.arch1-1 2020-11-10 15:00:15 +00:00
Jan Alexander Steffens 073b042f87 5.9.6.arch1-1 2020-11-05 21:49:56 +00:00
Jan Alexander Steffens 1bcde0c2d1 5.9.5.arch2-1 2020-11-05 15:05:22 +00:00
Jan Alexander Steffens 87febd662a 5.9.4.arch1-1 2020-11-04 22:42:21 +00:00
Jan Alexander Steffens 34b501df44 5.9.3.arch1-1 2020-11-01 14:53:55 +00:00
Jan Alexander Steffens dea8c573f1 5.9.2.arch1-1 2020-10-29 18:18:58 +00:00
Jan Alexander Steffens a9e6574b98 5.9.1.arch1-1 2020-10-17 14:45:48 +00:00
Jan Alexander Steffens 2c8951be72 5.9.arch1-1 2020-10-12 21:06:00 +00:00
Jan Alexander Steffens dc92454675 5.8.14.arch1-1: FS#68092 Restore HDA prealloc 2020-10-07 23:59:36 +00:00
Jan Alexander Steffens f6fda030c2 5.8.13.arch1-1 2020-10-01 21:59:37 +00:00
Jan Alexander Steffens 4ec9ebe04a 5.8.12.arch1-1 2020-09-26 23:12:41 +00:00
Jan Alexander Steffens 5433c11e0e 5.8.11.arch1-1 2020-09-24 17:38:11 +00:00
Jan Alexander Steffens d39b43e014 5.8.10.arch1-1 2020-09-17 18:56:28 +00:00
Jan Alexander Steffens 1a3aa2b5c6 5.8.9.arch2-1 2020-09-14 01:30:07 +00:00
Jan Alexander Steffens 7722de06ba 5.8.9.arch1-1 2020-09-13 23:34:48 +00:00
Jan Alexander Steffens abbabff91a 5.8.8.arch1-1 2020-09-09 20:07:15 +00:00
Jan Alexander Steffens 556fc02660 5.8.7.arch1-1 2020-09-05 13:22:51 +00:00
Jan Alexander Steffens ea62179998 5.8.6.arch1-1 2020-09-03 18:54:38 +00:00
Jan Alexander Steffens 09a3f454bd 5.8.5.arch1-1 2020-08-27 20:01:26 +00:00
Jan Alexander Steffens b69a10324d 5.8.4.arch1-1 2020-08-26 19:44:43 +00:00
Jan Alexander Steffens 7984c04fb1 5.8.3.arch1-1 2020-08-21 18:03:45 +00:00
Jan Alexander Steffens 0f4a2e284f 5.8.2.arch1-1 2020-08-20 21:40:15 +00:00
Jan Alexander Steffens 15b630a385 5.8.1.arch1-2 2020-08-16 19:01:58 +00:00
Jan Alexander Steffens ebf81a0b24 5.8.1.arch1-1 2020-08-12 19:43:08 +00:00
Jan Alexander Steffens 04d29ded1f 5.8.arch1-2: Enable MEM_SOFT_DIRTY (FS#67509) and USERFAULTFD (FS#62780) 2020-08-09 01:43:59 +00:00
Jan Alexander Steffens 3b798b5973 5.8.arch1-1 2020-08-03 20:08:49 +00:00
Jan Alexander Steffens 6f2434369d 5.7.12.arch1-1 2020-07-31 18:33:21 +00:00
Jan Alexander Steffens ad5bfbb468 5.7.11.arch1-1 2020-07-29 22:37:08 +00:00
Jan Alexander Steffens ab2cd357d4 5.7.10.arch1-1 2020-07-22 20:52:26 +00:00
Jan Alexander Steffens 7aeb19a664 5.7.9.arch1-1 2020-07-16 20:52:28 +00:00
Jan Alexander Steffens d45dd6cdc9 5.7.8.arch1-1 2020-07-09 18:51:38 +00:00
Jan Alexander Steffens fbec51332d 5.7.7.arch1-1 2020-07-01 16:03:39 +00:00
Jan Alexander Steffens 86fcfba038 5.7.6.arch1-1 2020-06-25 01:09:41 +00:00
Jan Alexander Steffens 9ae891e5fc 5.7.5.arch1-1 2020-06-22 09:09:14 +00:00
Jan Alexander Steffens bc168a108d 5.7.4.arch1-1 2020-06-18 16:57:35 +00:00
Jan Alexander Steffens c55f0296cc 5.7.3.arch1-1 2020-06-17 21:58:44 +00:00
Jan Alexander Steffens 9b95df05fa 5.7.2.arch1-1 2020-06-11 00:16:02 +00:00
Jan Alexander Steffens 2db27e8ef8 5.7.1.arch1-1 2020-06-07 13:06:32 +00:00
Jan Alexander Steffens 56cd81178e 5.7.arch1-1 2020-06-02 00:16:56 +00:00
Jan Alexander Steffens 331cab0a7d 5.6.15.arch1-1 2020-05-28 00:29:18 +00:00
Jan Alexander Steffens f87576020f 5.6.14.arch1-1 2020-05-20 22:55:57 +00:00
Jan Alexander Steffens f7d374d6e8 5.6.13.arch1-1 2020-05-14 07:42:59 +00:00
Jan Alexander Steffens bdeb8288ed 5.6.12.arch1-1 2020-05-10 11:30:48 +00:00
Jan Alexander Steffens ad905cb867 5.6.11.arch3-1: more GCC 10 fixes 2020-05-09 19:59:19 +00:00
Jan Alexander Steffens 8b3b703617 5.6.11.arch2-1: GCC 10 2020-05-08 20:35:46 +00:00
Jan Alexander Steffens c7ae8d746e 5.6.11.arch1-1 2020-05-06 19:23:33 +00:00
Jan Alexander Steffens 1773e7347a 5.6.10.arch1-1 2020-05-02 20:43:17 +00:00
Jan Alexander Steffens 3472c2c41f 5.6.9.arch1-1 2020-05-02 13:07:14 +00:00
Jan Alexander Steffens 6f75f24bf0 5.6.8.arch1-1 2020-04-29 17:50:10 +00:00
Jan Alexander Steffens 483474f304 5.6.7.arch1-1 2020-04-23 10:01:48 +00:00
Jan Alexander Steffens 027c7d74cd 5.6.6.arch1-1 2020-04-21 11:48:37 +00:00
Jan Alexander Steffens 08678233d5 5.6.5.arch3-1 2020-04-19 14:19:56 +00:00
Jan Alexander Steffens db2f694f61 5.6.5.arch2-1 2020-04-18 23:13:32 +00:00
Jan Alexander Steffens abda2df350 5.6.5.arch1-1 2020-04-17 21:46:53 +00:00
Jan Alexander Steffens a230db8755 5.6.4.arch1-1 2020-04-13 13:19:35 +00:00
Jan Alexander Steffens 135210db75 5.6.3.arch1-1 2020-04-08 08:45:18 +00:00
Jan Alexander Steffens f4bf2c8d61 Put lockdown LSM into default initialization list 2020-04-06 22:36:28 +00:00
Jan Alexander Steffens d917c0fbc9 5.6.2.arch1-2: FS#66076 disable EFI_DISABLE_PCI_DMA 2020-04-05 05:38:14 +00:00
Jan Alexander Steffens d9b4fe6d6d 5.6.2.arch1-1 2020-04-05 03:03:58 +00:00
Jan Alexander Steffens 7d58778a3e 5.6.arch1-1 2020-03-31 23:22:10 +00:00
Jan Alexander Steffens 1f9adc3a7c 5.5.13.arch2-1 2020-03-30 21:18:44 +00:00
Anatol Pomozov eb56d25042 Compile-in ATA/SATA drivers
ATA/SATA are one of the widely used perepherials. It makes sense to compile it as a part
of the kernel binary.
2020-03-28 00:12:04 +00:00
Jan Alexander Steffens 953681d1db 5.5.13.arch1-1 2020-03-25 16:44:43 +00:00
Jan Alexander Steffens 97d2a28e50 5.5.12.arch1-1 2020-03-25 13:36:26 +00:00
Jan Alexander Steffens 86a9b9c577 5.5.11.arch1-1 2020-03-22 17:21:53 +00:00
Jan Alexander Steffens 8e3b84e2bc 5.5.10.arch1-1 2020-03-18 09:31:26 +00:00
Jan Alexander Steffens a904f44931 5.5.9.arch1-2 2020-03-13 00:20:46 +00:00
Jan Alexander Steffens f355c90931 5.5.9.arch1-1 2020-03-12 18:28:13 +00:00
Jan Alexander Steffens 268ca060df 5.5.8.arch1-1 2020-03-06 02:28:37 +00:00
Jan Alexander Steffens 5fc2308ca6 5.5.7.arch1-1 2020-02-29 20:03:07 +00:00
Jan Alexander Steffens 6b44efb06a 5.5.6.arch1-1 2020-02-24 13:19:45 +00:00
Jan Alexander Steffens 810a79881a FS#63260: Enable PAGE_POISONING 2020-02-22 21:30:47 +00:00
Jan Alexander Steffens 543acd23d3 FS#64279 Build htmldocs separately 2020-02-22 00:43:56 +00:00
Jan Alexander Steffens 9a8a8558b5 FS#64861: Enable FONT_TER16x32 2020-02-21 21:34:57 +00:00
Jan Alexander Steffens f3876c3918 5.5.5.arch1-1 2020-02-20 19:44:01 +00:00
Jan Alexander Steffens 56d402493b FS#65518: Enable SND_SOC_INTEL_SKYLAKE 2020-02-17 00:55:11 +00:00
Jan Alexander Steffens fdee70098e 5.5.4.arch1-1 2020-02-15 01:11:44 +00:00
Jan Alexander Steffens ad7a817852 5.5.3.arch1-1 2020-02-11 16:24:12 +00:00
Jan Alexander Steffens 1d2a4124ff 5.5.2.arch2-2: gcc release -2 2020-02-05 22:36:56 +00:00
Jan Alexander Steffens 386892a1ef 5.5.2.arch2-1: new toolchain 2020-02-05 09:57:01 +00:00
Jan Alexander Steffens 32666e1c86 5.5.2.arch1-1 2020-02-04 19:44:58 +00:00
Jan Alexander Steffens 0895ab7437 5.5.1.arch2-1 2020-02-04 18:04:41 +00:00
Jan Alexander Steffens 90b69f3da5 Disable INTEL_IOMMU_DEFAULT_ON
Intel IOMMU support is still in a shitty state. What a shame.
2020-02-04 18:04:39 +00:00
Jan Alexander Steffens 5c532afbaa 5.5.1.arch1-1: Enable INTEL_IOMMU_DEFAULT_ON
IOMMU is important for security in systems using PCI bridges (e.g.
Thunderbolt, USB4) or other means of DMA from potentially untrusted
devices (e.g. FireWire). It's also used to safely pass devices into VMs.

Enable it by default. It can still be disabled at boot using
intel_iommu=off. intel_iommu=igfx_off is also available to exclude just
the iGPU.
2020-02-01 17:53:24 +00:00
Jan Alexander Steffens 727d1e1d47 5.5.arch1-1 2020-01-27 22:28:27 +00:00
Jan Alexander Steffens 9b0026f12a 5.4.15.arch1-1 2020-01-26 10:12:29 +00:00
Jan Alexander Steffens 76b830c740 5.4.14.arch1-1 2020-01-23 10:46:25 +00:00
Jan Alexander Steffens 2231922647 5.4.13.arch1-1 2020-01-17 23:41:56 +00:00
Jan Alexander Steffens 91d5b604de FS#62384: Enable BPF_KPROBE_OVERRIDE
https://bugs.archlinux.org/task/62384
2020-01-17 23:41:55 +00:00
Jan Alexander Steffens d106759d8b 5.4.12.arch1-1 2020-01-15 06:53:23 +00:00
Jan Alexander Steffens 7eba9021b0 5.4.11.arch1-1 2020-01-12 12:53:49 +00:00
Jan Alexander Steffens 82ffbb90fb 5.4.10.arch1-1 2020-01-09 14:24:15 +00:00
Jan Alexander Steffens c1d93c3940 5.4.8.arch1-1 2020-01-05 00:15:40 +00:00
Jan Alexander Steffens 5ac0903843 5.4.7.arch1-1 2019-12-31 17:50:17 +00:00
Jan Alexander Steffens 2e75b6eae8 5.4.6.arch3-1 2019-12-24 05:19:44 +00:00
Jan Alexander Steffens 81acb691ce 5.4.6.arch2-1 2019-12-24 03:05:40 +00:00
Jan Alexander Steffens 03f2d38060 5.4.6.arch1-1 2019-12-21 17:06:17 +00:00
Jan Alexander Steffens 8da6888066 5.4.5.arch1-1 2019-12-18 20:10:23 +00:00
Jan Alexander Steffens 82824d9db4 5.4.4.arch1-1 2019-12-18 00:18:38 +00:00
Jan Alexander Steffens 2b1504741e 5.4.3.arch1-1 2019-12-13 11:34:26 +00:00
Jan Alexander Steffens f3603dadd9 Disable SND_HDA_INTEL_DETECT_DMIC
It's not ready; the drivers that are supposed to step in when
snd-hda-intel aborts probing aren't working yet. v5.5 will have a better
solution for driver selection, anyway.
2019-12-13 11:34:25 +00:00
Jan Alexander Steffens 72e584c261 5.4.2.arch1-1 2019-12-05 14:44:50 +00:00
Jan Alexander Steffens 3ead601c9d 5.4.1.arch1-1 2019-11-29 14:56:15 +00:00
Jan Alexander Steffens 196a2934c5 Disable RMI4_F54
Doesn't crash now, but still pretty useless.
  - V4L device still confuses applications.
  - Reading a sensor image makes the touchpad unusable as an input
    device until it is power-cycled.
2019-11-27 20:28:02 +00:00
Jan Alexander Steffens 97381f5f19 Enable SND_HDA_INTEL_DETECT_DMIC
Now that we have SOF, let it handle systems with DMICs.
2019-11-27 20:28:01 +00:00
Jan Alexander Steffens 426a33d8ae FS#63464: Disable misbehaving SOF drivers
Reading the changes made at
https://github.com/thesofproject/linux/pull/1382/files
2019-11-27 20:27:58 +00:00
Jan Alexander Steffens d27c858681 5.4.arch1-1 2019-11-25 23:56:20 +00:00
Jan Alexander Steffens 59bfce8dfb 5.3.13.1-1 2019-11-24 10:48:33 +00:00
Jan Alexander Steffens 55cc8e46b2 5.3.12.1-1 2019-11-20 20:29:19 +00:00
Jan Alexander Steffens c189ce4263 Enable INIT_ON_ALLOC_DEFAULT_ON
https://outflux.net/blog/archives/2019/11/14/security-things-in-linux-v5-3/
2019-11-18 21:33:26 +00:00
Jan Alexander Steffens cad3b7156f 5.3.11.1-1 2019-11-12 23:21:40 +00:00
Jan Alexander Steffens 069aef7db3 5.3.10.1-1 2019-11-10 12:15:37 +00:00
Jan Alexander Steffens f5bf538e52 5.3.9.1-1 2019-11-06 14:16:18 +00:00
Jan Alexander Steffens f15e18814a Remove all dotfiles from the docs 2019-11-06 12:30:48 +00:00
Jan Alexander Steffens 50486f6ac1 Update pkgdesc 2019-11-06 12:30:47 +00:00
Jan Alexander Steffens 51fb75705c Rename _srcver to _srctag and move the 'v' into it 2019-11-06 12:30:46 +00:00
Jan Alexander Steffens 0a1031132c Use a more readable timestamp 2019-11-05 19:39:30 +00:00
Jan Alexander Steffens 44420b8b15 Disable full dynticks 2019-11-03 14:24:59 +00:00
Jan Alexander Steffens aa190d3c60 Disable some stray Freescale audio modules 2019-11-03 14:24:58 +00:00
Jan Alexander Steffens 35f8455e06 FS#64302: Disable Google SMI
Crashes on various non-Google Chromebooks and Coreboot-using laptops
like Librem and reflashed ThinkPads.
2019-11-03 10:45:25 +00:00
Jan Alexander Steffens a53987ae76 FS#63464: Disable Sound Open Firmware
We don't ship any firmware files (yet) and the drivers can be loaded
in preference to the SST drivers, which we do have firmware for.
2019-11-02 08:23:45 +00:00
Jan Alexander Steffens b204fb2896 Disable CONFIG_RMI4_F54
The V4L touch device created is buggy, causing userspace applications
(PipeWire) to behave badly and even kernel panics when running

    v4l2-compliance -t 0 -s 1
2019-10-31 15:11:37 +00:00
Jan Alexander Steffens 88cc595d11 5.3.8.1-1: Changes for new kmod and mkinitcpio hooks 2019-10-29 15:13:05 +00:00
Jan Alexander Steffens dcfb5e03cb 5.3.7.arch1-2: gcc rebuild 2019-10-25 13:34:47 +00:00
Jan Alexander Steffens 3f306c2e10 FS#55784 enable google modules 2019-10-19 14:01:12 +00:00
Jan Alexander Steffens 7f6d8f62e6 5.3.7.arch1-1 2019-10-18 00:42:21 +00:00
Jan Alexander Steffens 63f3e95b8a 5.3.6.arch1-1: removal of extramodules-ARCH 2019-10-11 19:17:40 +00:00
Jan Alexander Steffens 3e302bf52a 5.3.5.arch1-1 2019-10-07 19:29:12 +00:00
Jan Alexander Steffens abfd9fa0c4 .tmp_versions (aka MODVERDIR) was dropped in 5.3 2019-10-07 19:29:12 +00:00
Jan Alexander Steffens 5944df9027 Drop base group 2019-10-07 19:29:07 +00:00
Jan Alexander Steffens fa64c7292f 5.3.4.arch1-1 2019-10-05 14:05:45 +00:00
Jan Alexander Steffens 964e000a29 5.3.2.arch2-1 2019-10-04 00:16:59 +00:00
Jan Alexander Steffens be16067dd6 Enable SUNRPC_DISABLE_INSECURE_ENCTYPES 2019-10-03 14:51:04 +00:00
Jan Alexander Steffens 1d31b2e9a7 5.3.2.arch1-1 2019-10-01 08:15:52 +00:00
Jan Alexander Steffens 459ca63ba1 5.3.1.arch1-1 2019-09-21 11:55:15 +00:00
Jan Alexander Steffens bd82bdc99a 5.3.arch1-1 2019-09-16 04:19:09 +00:00
Jan Alexander Steffens e5427c3766 5.2.14.arch2-1 2019-09-12 11:30:14 +00:00
Jan Alexander Steffens fb70c8b707 5.2.14.arch1-1 2019-09-10 18:35:42 +00:00
Jan Alexander Steffens 7e1a83f951 5.2.13.arch1-1 2019-09-06 22:49:04 +00:00
Jan Alexander Steffens 90bb282f44 5.2.11.arch1-1 2019-08-29 08:36:50 +00:00
Jan Alexander Steffens 92f97e2c06 5.2.10.arch1-1 2019-08-25 18:27:22 +00:00
Jan Alexander Steffens 8e4727a949 5.2.9.arch1-1 2019-08-16 11:52:16 +00:00
Jan Alexander Steffens 985d9718d5 5.2.8.arch1-1 2019-08-09 21:57:03 +00:00
Jan Alexander Steffens beb43151ff 5.2.7.arch1-1 2019-08-07 06:10:19 +00:00
Jan Alexander Steffens 87901caa08 5.2.6.arch1-1 2019-08-04 15:19:22 +00:00
Jan Alexander Steffens ec7e9200bb 5.2.5.arch1-1 2019-07-31 09:05:53 +00:00
Jan Alexander Steffens c75fb07643 FS#62432: Disable FW_LOADER_USER_HELPER 2019-07-30 21:04:09 +00:00
Jan Alexander Steffens 5506b0f0ba 5.2.4.arch1-1 2019-07-28 11:14:09 +00:00
Jan Alexander Steffens 11b0a33e9c 5.2.3.arch1-1 2019-07-26 08:35:18 +00:00
Jan Alexander Steffens 439e5a0af4 5.2.2.arch1-1: Disable stackleak; shows up in perf as 6-7% overhead 2019-07-21 19:43:40 +00:00
Jan Alexander Steffens 53d0c2511a 5.2.1.arch1-1 2019-07-14 21:46:06 +00:00
Jan Alexander Steffens e77150c276 Enable stackleak 2019-07-10 15:18:09 +00:00
Jan Alexander Steffens 0471ab33d5 5.2.arch2-1 2019-07-09 04:10:19 +00:00
Jan Alexander Steffens 900b5ef2ae 5.1.16.arch1-1 2019-07-03 21:10:13 +00:00
Jan Alexander Steffens 9807c7310f 5.1.15.arch1-1 2019-06-25 07:26:32 +00:00
Jan Alexander Steffens c8269e7394 Update config 2019-06-24 07:28:51 +00:00
Jan Alexander Steffens 772e4b80ca 5.1.14.arch1-1 2019-06-22 18:59:48 +00:00
Jan Alexander Steffens eb811dba04 5.1.12.arch1-1 2019-06-19 11:26:25 +00:00
Jan Alexander Steffens ba5f8f7c09 5.1.11.arch1-1 2019-06-18 04:05:28 +00:00
Jan Alexander Steffens c37deb1824 5.1.10.arch1-1 2019-06-15 23:58:02 +00:00
Jan Alexander Steffens 31e769d81c 5.1.9.arch1-1 2019-06-11 19:51:35 +00:00
Jan Alexander Steffens 6621446c2d 5.1.8.arch1-1 2019-06-09 21:32:47 +00:00
Jan Alexander Steffens 1e4f39a1bf 5.1.7.arch1-1 2019-06-04 16:51:55 +00:00
Jan Alexander Steffens e4b9cbe32c 5.1.6.arch1-1 2019-06-01 03:09:20 +00:00
Jan Alexander Steffens 8b38521a3a 5.1.5.arch1-2 2019-05-27 04:36:29 +00:00
Jan Alexander Steffens 4374e1a82c 5.1.5.arch1-1 2019-05-25 21:24:16 +00:00
Jan Alexander Steffens 36a6aa8c9b 5.1.4.arch1-1 2019-05-22 12:05:50 +00:00
Jan Alexander Steffens cafb13e936 5.1.3.arch2-1 2019-05-22 00:18:32 +00:00
Jan Alexander Steffens 7346697334 5.1.3.arch1-1 2019-05-17 07:09:24 +00:00
Jan Alexander Steffens e290a19e5c 5.1.2.arch1-1 2019-05-15 06:33:53 +00:00
Jan Alexander Steffens be8523fe94 5.1.1.arch1-1 2019-05-11 14:01:14 +00:00
Jan Alexander Steffens 10505f2f9b Disable integrity, enable safesetid, only load yama by default 2019-05-07 20:04:22 +00:00
Jan Alexander Steffens 78a111327b 5.1.arch1-1 2019-05-06 23:33:26 +00:00
Jan Alexander Steffens f77c905fa7 5.0.13.arch1-1 2019-05-05 19:10:38 +00:00
Jan Alexander Steffens fbbcaeb99e 5.0.12.arch2-1 2019-05-04 22:19:57 +00:00