45857ed86c
Enable SECURITY_DMESG_RESTRICT
...
Default on Debian, and seems to be reasonable for us since we also don't
allow access to the system journal by default.
2020-12-31 01:18:17 +00:00
b54786ee1f
5.10.4.arch1-1
2020-12-31 01:18:16 +00:00
ddeb06b257
Revert two config changes
...
As requested by Levente.
2020-12-22 01:33:12 +00:00
5ee180e682
5.10.2.arch1-1
2020-12-21 20:50:34 +00:00
2f63adc58f
Disable most of MTD
...
Besides some support for directly flashing BIOS chips which is marked as
DANGEROUS, these seem only useful on embedded devices.
Only leave the simulator and the MTD-on-block emulator.
2020-12-18 23:32:10 +00:00
a10b2065c8
Disable SFI
...
Only used on some exotic Intel smartphone platforms without ACPI.
2020-12-18 23:32:09 +00:00
994cbff510
Disable autosleep and wakelocks
...
Not useful without appropriate userspace, like Android.
2020-12-18 23:32:08 +00:00
d522f29651
Disable PCI endpoint support
...
We're only running on host devices.
2020-12-18 23:32:08 +00:00
554f6e5ad8
Disable CAIF
...
Seems to be for ST-Ericsson embedded modems.
2020-12-18 23:32:07 +00:00
4d3936f486
Disable VME and RapidIO
...
Seems to be exotic, industrial hardware.
2020-12-18 23:32:06 +00:00
09b5d73900
Disable USB gadget support
...
We're only running on host devices.
2020-12-18 23:32:05 +00:00
a661403002
Disable CONFIG_EXPERT
...
I'm not.
2020-12-18 23:32:05 +00:00
bd50d947c3
Disable SDR and test media drivers
...
Using the device type filter menu.
2020-12-18 23:32:04 +00:00
bf6633be3e
Disable Comedi
...
Big driver set in staging of little use.
2020-12-18 23:32:03 +00:00
0c99750850
Disable I3C, SPMI and HSI
...
Seems to be restricted to embedded stuff with integrated modems.
2020-12-18 23:32:02 +00:00
5a395d000c
Disable OpenFirmware support
...
This is a big chunk of drivers that doesn't seem to be useful to us.
2020-12-18 23:32:01 +00:00
56811c1973
Pick some configuration options from Fedora's default kernel
...
Mostly choices about which modules to build in, some more debugfs
entries and boot self-tests.
- Unset GART_IOMMU: Old IOMMU code, should be unused.
- Unset MICROCODE_OLD_INTERFACE: Option help emphatically asks not to
set this.
- Unset ARCH_MEMORY_PROBE: Manual memory hot-plug should be unused.
- Unset USB_DYNAMIC_MINORS: We had this set forever, but it doesn't
actually seem to be needed.
- Unset NTFS_FS: Please use ntfs-3g.
2020-12-18 23:32:00 +00:00
056e1229cd
Disable DCCP (still affected by CVE-2020-16119)
2020-12-18 17:58:35 +00:00
8c2a9a8da9
FS#68978 Enable SoundWire machine driver
2020-12-16 14:37:37 +00:00
e32e0ba50d
5.10.1.arch1-1
2020-12-15 21:22:15 +00:00
d0179d6259
5.9.14.arch1-1
2020-12-12 22:02:25 +00:00
fe6596ab57
5.9.11.arch2-1
2020-11-28 02:51:37 +00:00
87febd662a
5.9.4.arch1-1
2020-11-04 22:42:21 +00:00
2c8951be72
5.9.arch1-1
2020-10-12 21:06:00 +00:00
dc92454675
5.8.14.arch1-1: FS#68092 Restore HDA prealloc
2020-10-07 23:59:36 +00:00
ea62179998
5.8.6.arch1-1
2020-09-03 18:54:38 +00:00
09a3f454bd
5.8.5.arch1-1
2020-08-27 20:01:26 +00:00
04d29ded1f
5.8.arch1-2: Enable MEM_SOFT_DIRTY (FS#67509) and USERFAULTFD (FS#62780)
2020-08-09 01:43:59 +00:00
3b798b5973
5.8.arch1-1
2020-08-03 20:08:49 +00:00
ad5bfbb468
5.7.11.arch1-1
2020-07-29 22:37:08 +00:00
44c212c848
FS#67421 Enable APPLETALK again by request
2020-07-29 22:37:07 +00:00
86fcfba038
5.7.6.arch1-1
2020-06-25 01:09:41 +00:00
2db27e8ef8
5.7.1.arch1-1
2020-06-07 13:06:32 +00:00
56cd81178e
5.7.arch1-1
2020-06-02 00:16:56 +00:00
331cab0a7d
5.6.15.arch1-1
2020-05-28 00:29:18 +00:00
6f75f24bf0
5.6.8.arch1-1
2020-04-29 17:50:10 +00:00
db2f694f61
5.6.5.arch2-1
2020-04-18 23:13:32 +00:00
135210db75
5.6.3.arch1-1
2020-04-08 08:45:18 +00:00
f4bf2c8d61
Put lockdown LSM into default initialization list
2020-04-06 22:36:28 +00:00
d917c0fbc9
5.6.2.arch1-2: FS#66076 disable EFI_DISABLE_PCI_DMA
2020-04-05 05:38:14 +00:00
7d58778a3e
5.6.arch1-1
2020-03-31 23:22:10 +00:00
1f9adc3a7c
5.5.13.arch2-1
2020-03-30 21:18:44 +00:00
eb56d25042
Compile-in ATA/SATA drivers
...
ATA/SATA are one of the widely used perepherials. It makes sense to compile it as a part
of the kernel binary.
2020-03-28 00:12:04 +00:00
810a79881a
FS#63260: Enable PAGE_POISONING
2020-02-22 21:30:47 +00:00
9a8a8558b5
FS#64861: Enable FONT_TER16x32
2020-02-21 21:34:57 +00:00
56d402493b
FS#65518: Enable SND_SOC_INTEL_SKYLAKE
2020-02-17 00:55:11 +00:00
90b69f3da5
Disable INTEL_IOMMU_DEFAULT_ON
...
Intel IOMMU support is still in a shitty state. What a shame.
2020-02-04 18:04:39 +00:00
5c532afbaa
5.5.1.arch1-1: Enable INTEL_IOMMU_DEFAULT_ON
...
IOMMU is important for security in systems using PCI bridges (e.g.
Thunderbolt, USB4) or other means of DMA from potentially untrusted
devices (e.g. FireWire). It's also used to safely pass devices into VMs.
Enable it by default. It can still be disabled at boot using
intel_iommu=off. intel_iommu=igfx_off is also available to exclude just
the iGPU.
2020-02-01 17:53:24 +00:00
727d1e1d47
5.5.arch1-1
2020-01-27 22:28:27 +00:00
9b0026f12a
5.4.15.arch1-1
2020-01-26 10:12:29 +00:00
2231922647
5.4.13.arch1-1
2020-01-17 23:41:56 +00:00
91d5b604de
FS#62384: Enable BPF_KPROBE_OVERRIDE
...
https://bugs.archlinux.org/task/62384
2020-01-17 23:41:55 +00:00
5ac0903843
5.4.7.arch1-1
2019-12-31 17:50:17 +00:00
f3603dadd9
Disable SND_HDA_INTEL_DETECT_DMIC
...
It's not ready; the drivers that are supposed to step in when
snd-hda-intel aborts probing aren't working yet. v5.5 will have a better
solution for driver selection, anyway.
2019-12-13 11:34:25 +00:00
3ead601c9d
5.4.1.arch1-1
2019-11-29 14:56:15 +00:00
196a2934c5
Disable RMI4_F54
...
Doesn't crash now, but still pretty useless.
- V4L device still confuses applications.
- Reading a sensor image makes the touchpad unusable as an input
device until it is power-cycled.
2019-11-27 20:28:02 +00:00
97381f5f19
Enable SND_HDA_INTEL_DETECT_DMIC
...
Now that we have SOF, let it handle systems with DMICs.
2019-11-27 20:28:01 +00:00
426a33d8ae
FS#63464: Disable misbehaving SOF drivers
...
Reading the changes made at
https://github.com/thesofproject/linux/pull/1382/files
2019-11-27 20:27:58 +00:00
d27c858681
5.4.arch1-1
2019-11-25 23:56:20 +00:00
c189ce4263
Enable INIT_ON_ALLOC_DEFAULT_ON
...
https://outflux.net/blog/archives/2019/11/14/security-things-in-linux-v5-3/
2019-11-18 21:33:26 +00:00
cad3b7156f
5.3.11.1-1
2019-11-12 23:21:40 +00:00
44420b8b15
Disable full dynticks
2019-11-03 14:24:59 +00:00
aa190d3c60
Disable some stray Freescale audio modules
2019-11-03 14:24:58 +00:00
35f8455e06
FS#64302: Disable Google SMI
...
Crashes on various non-Google Chromebooks and Coreboot-using laptops
like Librem and reflashed ThinkPads.
2019-11-03 10:45:25 +00:00
a53987ae76
FS#63464: Disable Sound Open Firmware
...
We don't ship any firmware files (yet) and the drivers can be loaded
in preference to the SST drivers, which we do have firmware for.
2019-11-02 08:23:45 +00:00
b204fb2896
Disable CONFIG_RMI4_F54
...
The V4L touch device created is buggy, causing userspace applications
(PipeWire) to behave badly and even kernel panics when running
v4l2-compliance -t 0 -s 1
2019-10-31 15:11:37 +00:00
3f306c2e10
FS#55784 enable google modules
2019-10-19 14:01:12 +00:00
964e000a29
5.3.2.arch2-1
2019-10-04 00:16:59 +00:00
be16067dd6
Enable SUNRPC_DISABLE_INSECURE_ENCTYPES
2019-10-03 14:51:04 +00:00
bd82bdc99a
5.3.arch1-1
2019-09-16 04:19:09 +00:00
92f97e2c06
5.2.10.arch1-1
2019-08-25 18:27:22 +00:00
ec7e9200bb
5.2.5.arch1-1
2019-07-31 09:05:53 +00:00
c75fb07643
FS#62432: Disable FW_LOADER_USER_HELPER
2019-07-30 21:04:09 +00:00
439e5a0af4
5.2.2.arch1-1: Disable stackleak; shows up in perf as 6-7% overhead
2019-07-21 19:43:40 +00:00
53d0c2511a
5.2.1.arch1-1
2019-07-14 21:46:06 +00:00
e77150c276
Enable stackleak
2019-07-10 15:18:09 +00:00
0471ab33d5
5.2.arch2-1
2019-07-09 04:10:19 +00:00
c8269e7394
Update config
2019-06-24 07:28:51 +00:00
6621446c2d
5.1.8.arch1-1
2019-06-09 21:32:47 +00:00
10505f2f9b
Disable integrity, enable safesetid, only load yama by default
2019-05-07 20:04:22 +00:00
78a111327b
5.1.arch1-1
2019-05-06 23:33:26 +00:00
f84d330b5f
5.0.10.arch1-1
2019-04-27 22:09:22 +00:00
b16b08b24a
FS#42910: Enable TOMOYO and SMACK
2019-04-09 21:53:11 +00:00
bcf602c7ae
5.0.arch1-1
2019-03-04 15:36:14 +00:00
6d64c139ef
4.20.3.arch1-1
2019-01-17 00:31:30 +00:00
fdbdebf5f1
4.20.1.arch1-1
2019-01-10 04:59:02 +00:00
4810e21851
4.20.arch1-1
2018-12-24 04:08:00 +00:00
03525e64df
FS#60879: Enable CONFIG_IEEE802154_HWSIM
2018-12-09 23:10:36 +00:00
bb9d85deef
4.19.7.arch1-1
2018-12-05 21:55:32 +00:00
21df49f85d
4.19.3.arch1-1
2018-11-22 07:41:48 +00:00
9036d47c87
FS#53288: Add GVRP
2018-11-20 22:04:33 +00:00
d00e2383fc
4.19.2.arch1-1
2018-11-13 22:29:23 +00:00
b1f5dbdf27
4.19.1.arch1-1
2018-11-04 17:56:31 +00:00
b966f6d713
FS#60614: Enable Block-MQ by default
2018-11-04 16:36:58 +00:00
757573dfbc
FS#57408: Reenable 16-bit support
2018-11-03 08:52:15 +00:00
cf354551c2
Disable RANDOM_TRUST_CPU and IOMMU_DEBUGFS
2018-10-29 21:35:18 +00:00
19c2451141
FS#60520 Enable LEDS_SYSCON
2018-10-26 19:04:33 +00:00
4ce5aa26d4
4.19.arch1-1
2018-10-26 18:46:07 +00:00
aac6d414e3
FS#46505 Minimal config for USB serial console support
2018-10-26 12:06:56 +00:00
6e7f717f02
4.18.16.arch1-1: Build in VFIO for FS#46505
2018-10-20 22:05:36 +00:00
c11f879fad
FS#46505: USB Serial console support; build in USB keyboard support
2018-09-27 00:45:46 +00:00
3a29867f82
4.18.8.arch1-1
2018-09-15 22:53:00 +00:00
81fa94f9fc
Add module signatures (but don't require)
2018-09-12 17:25:54 +00:00
6b918f8941
FS#59833: Disable BPFILTER
2018-09-03 19:15:29 +00:00
2e347a387f
Revert "Enable TXT, SELinux and AppArmor"
...
All of these require significant userspace support. SELinux in
particular requires linking against its library in numerous places,
including coreutils. This makes making them available in the kernel of
dubious value. Still, AppArmor and SELinux are available in
linux-hardened for those who want it.
This reverts commit 8215d0422d37317bd154497a2240ebbdd14c131d.
2018-09-03 19:15:26 +00:00
304ce7dbcb
FS#59824: build in PC RTC driver
2018-08-31 07:05:30 +00:00
8ff0dbd8eb
Enable TXT, SELinux and AppArmor
2018-08-26 09:25:52 +00:00
30e994930b
4.18.1.arch1-1
2018-08-16 06:57:20 +00:00
7fa10dea65
4.18.arch1-1
2018-08-13 12:41:17 +00:00
38e2423534
4.17.11-1: Move to git sources
2018-07-29 11:29:04 +00:00
f80d73be85
4.17.6-1
2018-07-11 21:23:47 +00:00
13f5fbf302
4.17-1
2018-06-04 21:58:16 +00:00
133e8566cc
4.16.10-1
2018-05-21 09:24:48 +00:00
208c34716c
4.16.9-1
2018-05-17 06:33:03 +00:00
bfe3236573
FS#58486 Disable MPX
2018-05-08 04:18:37 +00:00
8d69ea3172
FS#58323: Increase max NUMA nodes back to 32
...
Turns out people do try to run Arch on systems with more than 4 nodes.
2018-04-25 22:05:52 +00:00
8f6da2420c
4.16.2-2
2018-04-17 20:06:12 +00:00
c590a2e0be
FS#58183 build in Intel pinctrl drivers
2018-04-13 17:43:59 +00:00
1b036bd1c2
4.16.1-1
2018-04-11 20:40:42 +00:00
fb064678ce
4.16-1
2018-04-03 01:22:17 +00:00
e180e6ba02
4.15.5-1
2018-02-22 23:04:15 +00:00
3ac6ae819e
Disable non-generic, non-virtual FB drivers again
2018-02-22 06:07:42 +00:00
4a8cfbddc5
Pick some config options from Ubuntu
2018-02-14 23:57:00 +00:00
a9645d5933
Re-enable CONFIG_X86_VSYSCALL_EMULATION in the future build
2018-02-13 21:23:06 +00:00
4ff6895d2a
4.15.2-2
2018-02-08 20:21:03 +00:00
c8244b9f85
4.15.1-4
2018-02-07 20:12:17 +00:00
66d86aa447
4.15.1-3
2018-02-07 02:04:04 +00:00
dfe3385d53
4.15.1-2
2018-02-04 23:56:53 +00:00
4d3aeddeb1
4.15.1-1
2018-02-04 03:48:24 +00:00
77f03fcad0
4.15-1
2018-01-29 05:32:00 +00:00
837bc45331
4.14.14-1
2018-01-19 18:50:16 +00:00
540a56c51a
4.14.11-1
2018-01-03 07:21:25 +00:00
5bc96756cc
4.14.9-1
2017-12-26 00:24:55 +00:00
dfd455a453
4.14.6-1
2017-12-14 21:53:24 +00:00
f6d7e8335b
4.14.4-3: Audit is not useful without the userspace to configure it
2017-12-08 10:53:48 +00:00
91b3783f7e
4.14.4-2
2017-12-07 21:38:43 +00:00
ca748c5be3
4.14-1
2017-11-18 15:57:38 +00:00
7aaba75fcd
4.10-1
2017-02-26 16:39:46 +00:00
83345a2f82
Update config
2017-01-24 11:54:14 +00:00
f2b1c64484
Enable all generations in amdgpu
2017-01-12 08:17:54 +00:00
9d9b3f18fa
Canonicalize configs
2016-12-26 00:20:19 +00:00
a3e56a695f
reenable AMDGPU_SI, HWLAT_TRACER
2016-12-25 18:42:18 +00:00
af6fe02a4f
sync in heftig changes from last config, leave amdgpu_si disabled
2016-12-25 18:06:20 +00:00
0d3c06a13e
bump to 4.9 series
2016-12-22 07:07:19 +00:00
fece07295a
Prepare 4.9
2016-12-21 19:02:35 +00:00
a79aec2abe
bump to latest version
2016-11-21 11:50:08 +00:00
b76da4e229
#41463 enable RANDOMIZE_BASE=Y
2016-11-17 18:28:21 +00:00
4726a02eed
#49927 enable EXT4_ENCRYPTION
2016-10-11 07:42:36 +00:00
d91951684d
disable CONFIG_IWLWIFI_PCIE_RTPM https://bugzilla.kernel.org/show_bug.cgi?id=172411
2016-10-06 15:02:17 +00:00
4897492a7a
bump to 4.8 major version
2016-10-03 16:26:23 +00:00
a18f0d15d0
add SERIAL_8250_EXTENDED
2016-09-08 07:28:57 +00:00
b35dccec7e
add PSTORE_RAM=y DPM_WATCHDOG=y
2016-09-08 07:18:22 +00:00
8905f34d5c
restore CRYSTAL_COVE and LYNXPOINT
2016-09-08 07:15:20 +00:00
5af61b0cbc
restore SOC_INTEL configs
2016-09-07 15:42:48 +00:00
4c21f83623
more config changes
2016-09-07 14:59:49 +00:00
17898500cd
bump to 4.7.3, changed some GPIO options
2016-09-07 14:15:44 +00:00
fe8e19e1a5
build PINCTRL into kernel
2016-09-07 14:07:40 +00:00
f36f318917
add KEYBOARD_GPIO=m
2016-09-05 07:41:48 +00:00
a7e5aa5d63
Some more config changes
...
- Build in pcie-dpc, which has no alias to load automatically.
- Renable RXKAD, which used to be its own module but is now part of af_rxrpc.
- Enable some additional hardware offloading in the qede driver.
- Build the MMC pwrseq modules, which used to be built into the MMC core.
- Build the EFI capsule loader module, which can be used for firmware upgrades.
2016-08-17 15:22:50 +00:00
7c8e500d8d
enabled CONFIG_SYNC_FILE
2016-08-12 05:44:05 +00:00
52497cb3f1
fix config for INTEL_MPX
2016-08-08 20:32:23 +00:00
f3df9cab7c
bump to new major release
2016-08-07 04:45:04 +00:00
6d10eba205
Compile-in Lynxpoint gpio driver
...
The driver does not work well if compiled as a module.
It can randomly crash on insertion/removal.
gpio maintainer suggests to turn the driver into bool [1]
[1] http://permalink.gmane.org/gmane.linux.kernel.gpio/16637
2016-05-16 20:59:48 +00:00
e2b296765d
bump to 4.6 series
2016-05-16 08:48:30 +00:00
8e5b98e0c4
bump to latest version
2016-04-21 16:06:16 +00:00
ced23c23fe
fix #48936
2016-04-14 16:04:30 +00:00
a5213685ab
bump to 4.5 series
2016-03-15 08:02:46 +00:00
1ee10099fa
#47849 fix debug output
2016-02-01 07:03:55 +00:00
86985ac3d2
bump to 4.4 release
2016-01-13 19:52:26 +00:00
7a59aa92b4
config fix #47442
2016-01-13 16:16:43 +00:00
7e9be1ad3c
config fix #47402,#47710
2016-01-13 16:13:17 +00:00
13ddd1b7da
fixup configs
2015-12-10 07:57:23 +00:00
f385f60fa2
#46316 add CONFIG_MTD_PCMCIA=m
2015-12-10 07:51:08 +00:00
d8a83e08d9
#47066 add CONFIG_MTD_UBI_BLOCK=Y
2015-12-10 07:38:40 +00:00
f8a3a18c11
#46488 add CONFIG_SENSORS_NCT7904=m
2015-12-10 07:16:32 +00:00
77cd986bff
#47008 add CONFIG_BPF_SYSCALL=Y
2015-12-10 07:13:00 +00:00
edb438add1
bump to 4.3 release
2015-11-02 17:38:34 +00:00
706ca8cd86
#46714 update MROUTE options for IPV4 and IPV6
2015-10-15 06:23:53 +00:00
7511430aa7
FS#46197 FW_LOADER_USER_HELPER_FALLBACK must remain disabled
2015-09-04 12:56:50 +00:00
df74165c10
disable FW_LOADER_USER_HELPER #46197
2015-09-04 12:48:59 +00:00
31d825916b
add CAN subsystem #43209
2015-09-03 14:13:41 +00:00
b615c3a2d2
add CONFIG_CRASH_DUMP=y #41608 , add CONFIG_CORE_DUMP_DEFAULT_ELF_HEADERS=y #45299
2015-09-03 14:00:24 +00:00
849c4fea8b
add CONFIG_ACPI_I2C_OPREGION=y #44582
2015-09-03 13:42:21 +00:00
45c597bf9c
initial 4.2 config bump
2015-09-03 13:01:14 +00:00
40c027197d
New upstream release.
...
- Enable CONFIG_CROS_EC_CHARDEV and CONFIG_CROS_EC_LPC (FS#45688).
2015-08-03 22:01:33 +00:00
24b3fcd46b
New upstream release.
2015-07-04 13:31:14 +00:00
d728873a67
add SND_SOC, SND_SOC_INTEL_SST, SND_SOC_INTEL_HASWELL_MACH, SND_SOC_INTEL_BYT_RT5640_MACH, SND_SOC_INTEL_BYT_MAX98090_MACH #44274
2015-05-20 07:53:26 +00:00
0b4dc28cdf
add CONFIG_TCP_MD5SIG #44596
2015-05-20 07:27:28 +00:00
f0e0a74944
add CONFIG_THERMAL_HWMON #45014
2015-05-20 07:14:24 +00:00
bd43e3f846
reenable CONFIG_MEMCG_KMEM
2015-05-05 12:45:34 +00:00
59742136da
enable CONFIG_VIRTIO_PCI_LEGACY=y
2015-04-14 06:02:15 +00:00
19bce3481e
bump to 4.0
2015-04-13 07:17:47 +00:00
d5feae5228
bump to 3.19
2015-02-09 06:28:33 +00:00
247edf89b5
fix #43527
2015-02-08 19:21:44 +00:00
521dc46640
start preparing 3.19
2015-02-08 19:15:09 +00:00
4e1943b664
bump to 3.18
2014-12-17 14:10:12 +00:00
3985372a92
disable RTC_DRV_EFI
2014-11-17 08:56:41 +00:00
a03493825b
readd DELL_RBU
2014-10-15 07:30:52 +00:00
c389fa5f1c
enable early microcode updates
2014-10-12 12:15:08 +00:00
70a41aa42a
bump to 3.17 series
2014-10-06 16:07:52 +00:00
Jan Alexander Steffens
Anatol Pomozov
Bartłomiej Piotrowski
Tobias Powalowski
Evangelos Foutras
Thomas Bächler