Jan Alexander Steffens (heftig)
dbc3bae65d
6.4.4.arch1-1
2023-07-19 21:18:58 +02:00
Jan Alexander Steffens (heftig)
c5977c275d
6.4.3.arch1-1
2023-07-11 07:12:29 +02:00
Jan Alexander Steffens (heftig)
982fe0b70f
6.4.2.arch1-1
2023-07-06 20:34:48 +02:00
Jan Alexander Steffens (heftig)
61f3316308
6.4.1.arch2-1
2023-07-04 10:38:57 +02:00
Jan Alexander Steffens (heftig)
da6a5eb9c6
6.4.1.arch1-1
2023-07-01 18:16:22 +02:00
Jan Alexander Steffens (heftig)
50de159117
6.4.arch1-1
2023-06-27 01:45:23 +02:00
Jan Alexander Steffens (heftig)
e7308a977d
6.3.8.arch1-1
2023-06-14 22:08:52 +02:00
Jan Alexander Steffens (heftig)
d5c0ffa8ee
config: Set audio POWER_SAVE_DEFAULTs to 10 seconds
...
For: https://bugs.archlinux.org/task/58668#comment202898
See: https://www.kernel.org/doc/html/latest/sound/designs/powersave.html
2023-06-11 03:24:30 +02:00
Jan Alexander Steffens (heftig)
25637d0b52
6.3.3.arch1-1
2023-05-21 17:34:33 +02:00
Jan Alexander Steffens (heftig)
db24e359fd
config: Disable INTEL_ATOMISP
...
The driver is unstable and causing crashes. Disabling it also unblocks
INTEL_ATOMISP2_PM, which is a dummy driver that only turns the camera
off.
Fixes: https://bugs.archlinux.org/task/78562
2023-05-21 02:13:56 +02:00
Jan Alexander Steffens (heftig)
ed63a28618
config: Enable XEN_FBDEV_FRONTEND
...
Fixes: https://bugs.archlinux.org/task/73669
2023-05-21 02:13:30 +02:00
Jan Alexander Steffens (heftig)
29f1bf4fd5
config: Regenerate with GCC 13
2023-05-21 02:13:10 +02:00
Jan Alexander Steffens
97c44713b0
6.3.arch1-1
2023-04-29 05:03:02 +00:00
Jan Alexander Steffens
47bdc05ad0
6.2.13.arch1-1
2023-04-26 21:30:26 +00:00
Jan Alexander Steffens
5b624ef70c
6.2.8.arch1-1
2023-03-22 23:31:54 +00:00
Jan Alexander Steffens
3456a38846
6.2.5.arch1-1
2023-03-11 15:59:13 +00:00
Jan Alexander Steffens
363d3a6f2c
6.2.3.arch1-1
2023-03-10 14:36:27 +00:00
Jan Alexander Steffens
079bdfa1e5
6.2.2.arch2-1
2023-03-08 04:44:31 +00:00
Jan Alexander Steffens
904444ed92
FS#77632: Enable EFI_HANDOVER_PROTOCOL
...
Required to boot with syslinux.
2023-03-06 03:21:29 +00:00
Jan Alexander Steffens
c137130912
6.2.1.arch1-1
2023-02-26 04:20:02 +00:00
Jan Alexander Steffens
cd7139ed1b
FS#77603: Disable SYSFB_SIMPLEFB
...
Still broken.
2023-02-26 04:20:00 +00:00
Jan Alexander Steffens
25432b7fe8
6.2.arch1-1
2023-02-20 23:06:14 +00:00
Jan Alexander Steffens
1248dbbdee
6.1.12.arch1-1
2023-02-14 23:15:43 +00:00
Jan Alexander Steffens
1de668fc39
6.1.8.arch1-1
2023-01-24 22:08:04 +00:00
Jan Alexander Steffens
ab269fce8c
6.1.6.arch1-1
2023-01-14 13:54:59 +00:00
Jan Alexander Steffens
c15fb537c5
6.1.arch1-1
2022-12-12 00:57:06 +00:00
Jan Alexander Steffens
239feb2636
6.0.11.arch1-1
2022-12-02 17:58:21 +00:00
Jan Alexander Steffens
5f2d83b1ed
6.0.10.arch2-1
2022-11-26 17:36:13 +00:00
Jan Alexander Steffens
78eba71a7a
Build in TCG_TPM, TCG_TIS and TCG_CRB
...
As requested by Christian, for systemd. These should match the built-in
TPM drivers of the Fedora kernel.
See: https://github.com/dracutdevs/dracut/issues/2066#issuecomment-1317957398
2022-11-26 17:36:10 +00:00
Jan Alexander Steffens
2da4cc9c72
6.0.5.arch1-1
2022-10-26 15:58:07 +00:00
Jan Alexander Steffens
239dac8549
6.0.3.arch2-1
2022-10-21 17:35:05 +00:00
Jan Alexander Steffens
790707e7bb
6.0.1.arch2-1
2022-10-13 20:22:47 +00:00
Jan Alexander Steffens
6dfa340b6d
6.0.arch1-1
2022-10-04 21:53:25 +00:00
Jan Alexander Steffens
2cb2c2a9ee
5.19.12.arch1-1
2022-09-28 13:57:43 +00:00
Jan Alexander Steffens
b355555335
5.19.11.arch1-1
2022-09-24 19:32:48 +00:00
Jan Alexander Steffens
07add5cd3c
Enable DM_VERITY_VERIFY_ROOTHASH_SIG_SECONDARY_KEYRING
...
As requested by Christian, for systemd.
2022-09-24 19:32:46 +00:00
Jan Alexander Steffens
f9f29d5a1b
5.19.6.arch1-1
2022-08-31 22:49:58 +00:00
Jan Alexander Steffens
a761030c6f
5.19.4.arch1-1
2022-08-25 18:22:09 +00:00
Jan Alexander Steffens
72311cf099
5.19.2.arch1-1
2022-08-17 14:28:21 +00:00
Jan Alexander Steffens
cab15f6f84
5.19.1.arch1-1
2022-08-11 16:00:06 +00:00
Jan Alexander Steffens
2db71c5777
Enable NO_HZ_FULL
...
There is reportedly no (longer) significant overhead to this when it is
not enabled at runtime, see
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804857#66
2022-08-06 22:11:33 +00:00
Jan Alexander Steffens
44548c4424
FS#74953: Reenable I8K
2022-08-06 22:11:31 +00:00
Jan Alexander Steffens
2e407d05f4
5.19.arch1-1
2022-08-06 14:08:01 +00:00
Jan Alexander Steffens
1e93cf5d3a
5.18.16.arch1-1
2022-08-03 12:00:00 +00:00
Jan Alexander Steffens
94d0ee92f2
FS#74975: Enable MEMTEST
2022-07-31 14:38:59 +00:00
Jan Alexander Steffens
0d5a58dc37
5.18.14.arch1-1
2022-07-23 12:28:24 +00:00
Jan Alexander Steffens
af075e3dca
5.18.6.arch1-1
2022-06-22 18:43:35 +00:00
Jan Alexander Steffens
5f3729800f
FS#75102: Add integrity to LSM
...
This only initializes a cache which is used by IMA. So it does nothing
useful. Still, we technically have the integrity LSM and this removes a
footgun should IMA ever get enabled.
2022-06-19 20:12:32 +00:00
Jan Alexander Steffens
2e8ca45bc9
FS#75102: Enable KEXEC_SIG
2022-06-19 20:12:32 +00:00
Jan Alexander Steffens
1eaae5d53f
FS#75102: Revert "Enable KEXEC_SIG and IMA"
...
Enabling IMA makes it impossible to load unsigned kernel modules when
secure boot is in use, and without shim in the boot you can't get the
kernel to trust a local key for module signing.
This reverts commit 6a241232a3275ef3e314b5b7167e13fffff71282.
2022-06-19 20:12:31 +00:00
Jan Alexander Steffens
0724b8895c
FS#75102: Enable KEXEC_SIG and IMA
2022-06-19 19:23:48 +00:00
Jan Alexander Steffens
b3c8c8615f
5.18.5.arch1-1
2022-06-16 21:18:19 +00:00
Jan Alexander Steffens
a0899d416d
Disable PECI
...
As requested by Levente. Only useful for kernels running on baseboard
management controllers.
2022-06-16 21:18:17 +00:00
Jan Alexander Steffens
218d2a950d
5.18.4.arch1-1
2022-06-15 23:42:51 +00:00
Jan Alexander Steffens
5bd573c89e
FS#75041: Enable INTEGRITY_MACHINE_KEYRING and related
2022-06-15 23:42:48 +00:00
Jan Alexander Steffens
e29a800771
5.18.3.arch1-1
2022-06-09 17:20:22 +00:00
Jan Alexander Steffens
3aa8dd1c85
5.18.1.arch1-1
2022-05-30 18:31:45 +00:00
Jan Alexander Steffens
f11429d842
FS#74888: Enable BLOCK_LEGACY_AUTOLOAD
...
Disabling this broke legacy mdraid setups.
See: https://lore.kernel.org/linux-block/20220503212848.5853-1-dmoulding@me.com/
2022-05-30 18:31:42 +00:00
Jan Alexander Steffens
1cc50e39e6
5.18.arch1-1
2022-05-24 22:34:17 +00:00
Jan Alexander Steffens
231862cf72
5.17.6.arch1-1
2022-05-10 23:31:11 +00:00
Jan Alexander Steffens
0c61251a1e
5.17.5.arch1-1
2022-04-27 21:57:26 +00:00
Jan Alexander Steffens
ee2af8ec43
5.17.4.arch1-1
2022-04-20 19:02:04 +00:00
Jan Alexander Steffens
2d3dd3bff0
5.17.2.arch1-1
2022-04-08 18:11:24 +00:00
Jan Alexander Steffens
d60d23d3e0
FS#74291: Reenable FRAMEBUFFER_CONSOLE_ROTATION
2022-04-01 16:10:30 +00:00
Jan Alexander Steffens
8dc941a8b3
FS#68021, FS#74271: Return nvme to a module
2022-03-30 20:34:27 +00:00
Jan Alexander Steffens
03fa74e628
FS#74203: Disable SYSFB_SIMPLEFB
2022-03-28 21:54:43 +00:00
Jan Alexander Steffens
432adf96db
5.17.arch1-1
2022-03-23 00:44:26 +00:00
Jan Alexander Steffens
997a6a8651
5.16.14.arch1-1
2022-03-11 18:29:09 +00:00
Jan Alexander Steffens
ccba33df68
Enable BPF_UNPRIV_DEFAULT_OFF
...
This config was enabled by default in v5.15 and we should follow that.
2022-03-09 16:09:34 +00:00
Jan Alexander Steffens
4f1d39f328
5.16.13.arch1-1
2022-03-08 20:36:10 +00:00
Jan Alexander Steffens
74147130fa
5.16.9.arch1-1
2022-02-11 23:14:13 +00:00
Jan Alexander Steffens
a4414373de
FS#73364: Enable DAMON
2022-02-11 23:14:12 +00:00
Jan Alexander Steffens
eb92849ce1
5.16.8.arch1-1
2022-02-08 21:56:54 +00:00
Jan Alexander Steffens
659df960bd
FS#72597: Disable ZERO_CALL_USED_REGS
...
Too much overhead.
2022-02-07 18:29:34 +00:00
Jan Alexander Steffens
6376eaf60e
5.16.arch1-1
2022-01-10 21:15:58 +00:00
Jan Alexander Steffens
992dd34d40
5.15.12.arch1-1
2021-12-29 13:06:04 +00:00
Jan Alexander Steffens
38f90fdbe5
5.15.9.arch1-1
2021-12-17 00:17:27 +00:00
Jan Alexander Steffens
f6654f361c
FS#69505: Replace MTD_RAM with MTD_MTDRAM
...
The latter is what was actually wanted.
2021-12-16 03:14:31 +00:00
Jan Alexander Steffens
6fdf85f792
5.15.5.arch1-1
2021-11-25 22:53:04 +00:00
Jan Alexander Steffens
90addb77b2
5.15.3.arch1-1
2021-11-18 22:55:52 +00:00
Jan Alexander Steffens
87b96ed160
5.15.2.arch1-1
2021-11-12 20:28:54 +00:00
Jan Alexander Steffens
741b99dce1
FS#72645: Disable SYSFB_SIMPLEFB
2021-11-12 20:28:52 +00:00
Jan Alexander Steffens
e55609718b
FS#72658: Reenable built-in FB drivers
2021-11-09 17:09:57 +00:00
Jan Alexander Steffens
911177d3df
Disable WERROR
...
Also leaks into external module builds.
2021-11-03 23:30:53 +00:00
Jan Alexander Steffens
78d0321a90
Set SYSFB_SIMPLEFB=y and SIMPLEDRM=y, disable legacy FB drivers
2021-11-03 23:30:52 +00:00
Jan Alexander Steffens
62812fc5b4
5.15.arch1-1
2021-11-03 23:30:51 +00:00
Jan Alexander Steffens
2072b4db95
5.14.12.arch1-1
2021-10-13 17:35:24 +00:00
Jan Alexander Steffens
4325d1b2ad
5.14.10.arch1-1
2021-10-07 20:32:54 +00:00
Jan Alexander Steffens
2ef0ab9184
Disable SND_INTEL_BYT_PREFER_SOF
...
As requested by Jelle.
2021-10-06 22:08:56 +00:00
Jan Alexander Steffens
595a15167b
5.14.8.arch1-1
2021-09-26 20:22:35 +00:00
Jan Alexander Steffens
045bfb719c
FS#72195: Disable FB_HYPERV
2021-09-26 20:22:33 +00:00
Jan Alexander Steffens
6f0e13bf09
5.14.4.arch1-1
2021-09-15 22:24:27 +00:00
Jan Alexander Steffens
25de7a333b
FS#72045: Disable WATCHDOG_HRTIMER_PRETIMEOUT
2021-09-09 10:30:52 +00:00
Jan Alexander Steffens
ca05999be5
Enable EDAC_IGEN6
...
This was overlooked.
2021-09-03 21:24:30 +00:00
Jan Alexander Steffens
18427d86c6
5.14.1.arch1-1
2021-09-03 21:04:16 +00:00
Jan Alexander Steffens
d73ac85acb
5.13.13.arch1-1
2021-08-26 19:48:22 +00:00
Jan Alexander Steffens
738226335f
5.13.12.arch1-1
2021-08-18 21:30:22 +00:00
Jan Alexander Steffens
c21ba89cc1
Set KFENCE_SAMPLE_INTERVAL back to 100
...
As requested by Levente. The power issues should be solved by now.
2021-08-18 21:30:21 +00:00
Jan Alexander Steffens
fb8eb1c560
Enable RANDOMIZE_KSTACK_OFFSET_DEFAULT
...
Additional hardening at a minimal cost, as requested by Levente.
2021-08-18 21:30:17 +00:00
Jan Alexander Steffens
5e6049790e
5.13.9.arch1-1
2021-08-08 12:14:43 +00:00