fb8eb1c560
Enable RANDOMIZE_KSTACK_OFFSET_DEFAULT
...
Additional hardening at a minimal cost, as requested by Levente.
2021-08-18 21:30:17 +00:00
2552e0b041
5.13.10.arch1-1
2021-08-12 22:36:23 +00:00
5e6049790e
5.13.9.arch1-1
2021-08-08 12:14:43 +00:00
5e111e91cc
5.13.8.arch1-1
2021-08-04 18:46:16 +00:00
82e02793cb
5.13.7.arch1-1
2021-07-31 23:09:11 +00:00
d352d2e4ff
5.13.6.arch1-1
2021-07-29 00:51:39 +00:00
86779bcfea
5.13.5.arch1-1
2021-07-26 01:55:01 +00:00
11f06f43c4
5.13.4.arch2-1
2021-07-22 21:18:45 +00:00
2589876818
Upgrade to 5.13.4.arch1.
...
PKGBUILD:
Add C7E7849466FE2358343588377258734B41C31549 as additional recognized valid PGP
key, as heftig might not be able to prepare releases and package for a while.
config:
Consolidate with defaults for 5.13.4 based on previous config.
Update CONFIG_LSM to order landlock before lockdown and re-add bpf, as the
issue discussed in https://bugs.archlinux.org/task/71270 seems to have been a
user-error (using obsolete kernel parameters).
2021-07-20 17:34:49 +00:00
fd38ec001c
5.13.1.arch1-1
2021-07-10 00:23:52 +00:00
c156c63575
5.12.15.arch1-1
2021-07-08 06:51:34 +00:00
4aa90295a0
5.12.14.arch1-1
2021-07-01 07:57:45 +00:00
5b763178e4
FS#71392: Install IIO hid-sensors header
2021-07-01 07:57:43 +00:00
e8d31cb4c2
5.12.13.arch1-2
2021-06-25 23:47:17 +00:00
65eddc1dfd
FS#71325: Enable SPI_INTEL_SPI again
2021-06-25 23:47:16 +00:00
74cfa2eb0a
Revert "Use our git"
...
This reverts commit 57840eab683583e89ba506800c08ee752937c586.
We're shutting down git.archlinux.org and don't want to move the linux
repo to gitlab due to its size.
2021-06-25 23:47:14 +00:00
9bff7b52e3
5.12.13.arch1-1
2021-06-23 17:14:01 +00:00
38bd62e40b
FS#71296: Enable DEBUG_LIST
2021-06-20 19:20:20 +00:00
7403514fbe
5.12.12.arch1-1
2021-06-18 22:59:23 +00:00
e7d5c4d89c
5.12.11.arch1-1
2021-06-16 22:13:35 +00:00
d7bf404c33
FS#71270: Don't enable "bpf" LSM by default
...
It provides all possible hooks, which makes it harder to properly use
major LSMs. Using security= to enable a major LSM puts it at the end of
the list. Some functions (like security_getprocattr) only use the first
matching hook, thus prefer bpf.
2021-06-16 22:13:34 +00:00
3f21513a71
5.12.10.arch1-1
2021-06-10 17:16:45 +00:00
9fe32edb60
5.12.9.arch1-1
2021-06-03 12:11:43 +00:00
b7f14e1a69
5.12.8.arch1-1
2021-05-28 21:05:54 +00:00
99703861e1
FS#69505: Enable MTD_ROM
2021-05-27 19:39:55 +00:00
b72d63df03
5.12.7.arch1-1
2021-05-26 22:45:28 +00:00
1da8e74711
5.12.6.arch1-1
2021-05-23 01:36:16 +00:00
ea7ccabcad
5.12.5.arch1-1
2021-05-19 11:46:27 +00:00
3c493d93c4
5.12.4.arch2-1
2021-05-18 22:29:32 +00:00
04cd0126a3
5.12.4.arch1-2
2021-05-15 21:38:30 +00:00
2a8704f5e1
Set KFENCE_SAMPLE_INTERVAL to 0
...
Turns off KFENCE by default, as requested by Levente. There are power
use issues, see
https://lore.kernel.org/linux-mm/20210421105132.3965998-1-elver@google.com/
2021-05-15 21:38:29 +00:00
1646eced3b
Enable DEBUG_INFO_DWARF4
...
Required for BTF to work with GCC 11.
2021-05-15 21:38:27 +00:00
acb9384891
5.12.4.arch1-1
2021-05-14 14:20:31 +00:00
24c6f0d688
5.12.3.arch2-1
2021-05-13 20:01:56 +00:00
4b8cbaa097
5.12.3.arch1-2
2021-05-13 00:02:40 +00:00
1214e4e40a
5.12.3.arch1-1
2021-05-12 18:53:54 +00:00
cc87e6b052
5.12.2.arch1-1
2021-05-07 16:08:11 +00:00
db81b3eea9
FS#70742: Enable MTD_NAND_ECC_*
2021-05-07 16:08:09 +00:00
621ea2d08c
5.12.1.arch1-1
2021-05-02 13:41:41 +00:00
7f6df05917
Turn on KFENCE by default
...
As requested by Levente.
2021-05-02 13:41:40 +00:00
b03b4f7e6f
5.12.arch1-1
2021-04-26 21:33:26 +00:00
d71e920034
5.11.16.arch1-1
2021-04-21 20:39:28 +00:00
62782a577d
FS#69181: Enable FB_UVESA
2021-04-21 20:39:27 +00:00
0d66f76ec1
FS#68698: Enable HID_SENSOR_CUSTOM_SENSOR
2021-04-21 20:39:26 +00:00
6f3f90e76b
FS#69505: Enable MTD_RAM
2021-04-21 20:39:22 +00:00
3f3fcefaf5
5.11.15.arch1-2
2021-04-17 00:56:35 +00:00
85750f85be
Revert "Enable LOAD_UEFI_KEYS"
...
It didn't help secure dkms modules like we thought it would.
2021-04-17 00:56:34 +00:00
4e15a9f945
5.11.15.arch1-1
2021-04-16 12:28:14 +00:00
e0674e41ca
5.11.14.arch1-1
2021-04-14 12:48:08 +00:00
0ab80e4b19
5.11.13.arch3-1
2021-04-14 11:11:29 +00:00
Jan Alexander Steffens
David Runge