2013-07-01 06:29:13 +00:00
|
|
|
# Changes to support package build system
|
2012-06-03 23:29:42 +00:00
|
|
|
debian/version.patch
|
2015-05-12 18:52:20 +00:00
|
|
|
debian/uname-version-timestamp.patch
|
2012-06-03 23:29:42 +00:00
|
|
|
debian/kernelvariables.patch
|
2013-01-17 10:04:32 +00:00
|
|
|
debian/gitignore.patch
|
2018-03-15 19:09:15 +00:00
|
|
|
debian/ia64-hardcode-arch-script-output.patch
|
2013-07-01 06:29:13 +00:00
|
|
|
debian/mips-disable-werror.patch
|
|
|
|
debian/arch-sh4-fix-uimage-build.patch
|
|
|
|
debian/powerpcspe-omit-uimage.patch
|
|
|
|
features/all/Kbuild-kconfig-Verbose-version-of-listnewconfig.patch
|
2016-03-21 01:37:26 +00:00
|
|
|
debian/modpost-symbol-prefix.patch
|
|
|
|
debian/tools-perf-version.patch
|
|
|
|
debian/tools-perf-install.patch
|
2018-04-13 19:22:12 +00:00
|
|
|
debian/wireless-add-debian-wireless-regdb-certificates.patch
|
2018-04-18 06:34:17 +00:00
|
|
|
debian/parisc-fix-make-target.patch
|
2007-01-08 18:19:26 +00:00
|
|
|
|
2013-07-01 06:29:13 +00:00
|
|
|
# Fixes/improvements to firmware loading
|
2012-06-03 23:29:42 +00:00
|
|
|
features/all/drivers-media-dvb-usb-af9005-request_firmware.patch
|
2013-07-01 06:29:13 +00:00
|
|
|
debian/iwlwifi-do-not-request-unreleased-firmware.patch
|
|
|
|
bugfix/all/firmware_class-log-every-success-and-failure.patch
|
|
|
|
bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch
|
2018-03-14 19:09:56 +00:00
|
|
|
bugfix/all/radeon-amdgpu-firmware-is-required-for-drm-and-kms-on-r600-onward.patch
|
2018-03-14 18:59:27 +00:00
|
|
|
debian/firmware_class-refer-to-debian-wiki-firmware-page.patch
|
2007-10-25 22:17:50 +00:00
|
|
|
|
2015-06-16 22:42:42 +00:00
|
|
|
# Patches from aufs4 repository, imported with
|
|
|
|
# debian/patches/features/all/aufs4/gen-patch. These are only the
|
|
|
|
# changes needed to allow aufs to be built out-of-tree.
|
|
|
|
features/all/aufs4/aufs4-base.patch
|
|
|
|
features/all/aufs4/aufs4-mmap.patch
|
|
|
|
features/all/aufs4/aufs4-standalone.patch
|
|
|
|
|
2013-07-01 06:29:13 +00:00
|
|
|
# Change some defaults for security reasons
|
2012-06-03 23:29:42 +00:00
|
|
|
debian/af_802154-Disable-auto-loading-as-mitigation-against.patch
|
|
|
|
debian/rds-Disable-auto-loading-as-mitigation-against-local.patch
|
|
|
|
debian/decnet-Disable-auto-loading-as-mitigation-against-lo.patch
|
2017-02-16 19:11:26 +00:00
|
|
|
debian/dccp-disable-auto-loading-as-mitigation-against-local-exploits.patch
|
2013-07-01 06:29:13 +00:00
|
|
|
debian/fs-enable-link-security-restrictions-by-default.patch
|
2010-09-19 01:53:29 +00:00
|
|
|
|
2013-07-01 06:29:13 +00:00
|
|
|
# Set various features runtime-disabled by default
|
2012-06-03 23:29:42 +00:00
|
|
|
debian/sched-autogroup-disabled.patch
|
2013-07-01 06:29:13 +00:00
|
|
|
debian/yama-disable-by-default.patch
|
2014-03-06 22:55:18 +00:00
|
|
|
debian/add-sysctl-to-disallow-unprivileged-CLONE_NEWUSER-by-default.patch
|
2016-10-05 21:23:08 +00:00
|
|
|
features/all/security-perf-allow-further-restriction-of-perf_event_open.patch
|
2012-07-26 01:04:02 +00:00
|
|
|
|
2014-03-06 22:55:18 +00:00
|
|
|
# Disable autoloading/probing of various drivers by default
|
2013-07-01 06:29:13 +00:00
|
|
|
debian/cdc_ncm-cdc_mbim-use-ncm-by-default.patch
|
2014-03-06 22:55:18 +00:00
|
|
|
debian/snd-pcsp-disable-autoload.patch
|
|
|
|
bugfix/x86/viafb-autoload-on-olpc-xo1.5-only.patch
|
2017-03-18 20:47:20 +00:00
|
|
|
debian/fjes-disable-autoload.patch
|
2013-01-16 19:52:23 +00:00
|
|
|
|
2016-07-13 00:47:58 +00:00
|
|
|
# Taint if dangerous features are used
|
|
|
|
debian/fanotify-taint-on-use-of-fanotify_access_permissions.patch
|
2017-06-04 00:20:23 +00:00
|
|
|
debian/btrfs-warn-about-raid5-6-being-experimental-at-mount.patch
|
2016-07-13 00:47:58 +00:00
|
|
|
|
2017-03-16 03:13:13 +00:00
|
|
|
# Reduce noise for bug #852324
|
|
|
|
debian/amd64-don-t-warn-about-expected-w+x-pages-on-xen.patch
|
|
|
|
|
2014-03-06 22:55:18 +00:00
|
|
|
# Arch bug fixes
|
2017-02-18 00:38:36 +00:00
|
|
|
bugfix/arm/arm-dts-kirkwood-fix-sata-pinmux-ing-for-ts419.patch
|
2017-07-16 22:59:10 +00:00
|
|
|
bugfix/x86/platform-x86-ideapad-laptop-add-ideapad-310-15ikb-to.patch
|
|
|
|
bugfix/x86/platform-x86-ideapad-laptop-add-ideapad-v310-15isk-t.patch
|
|
|
|
bugfix/x86/platform-x86-ideapad-laptop-add-y520-15ikbn-to-no_hw.patch
|
|
|
|
bugfix/x86/platform-x86-ideapad-laptop-add-y720-15ikbn-to-no_hw.patch
|
|
|
|
bugfix/x86/platform-x86-ideapad-laptop-add-ideapad-v510-15ikb-t.patch
|
|
|
|
bugfix/x86/platform-x86-ideapad-laptop-add-several-models-to-no.patch
|
2017-07-22 00:21:31 +00:00
|
|
|
debian/revert-gpu-host1x-add-iommu-support.patch
|
2017-07-22 16:41:53 +00:00
|
|
|
bugfix/x86/perf-tools-fix-unwind-build-on-i386.patch
|
2017-08-19 21:37:50 +00:00
|
|
|
bugfix/sh/sh-boot-do-not-use-hyphen-in-exported-variable-name.patch
|
2017-11-29 23:28:43 +00:00
|
|
|
bugfix/x86/mmap-remember-the-map_fixed-flag-as-vm_fixed.patch
|
|
|
|
bugfix/x86/mmap-add-an-exception-to-the-stack-gap-for-hotspot-jvm.patch
|
2014-03-06 22:55:18 +00:00
|
|
|
|
2014-08-24 18:45:12 +00:00
|
|
|
# Arch features
|
2014-11-04 00:31:44 +00:00
|
|
|
features/mips/MIPS-increase-MAX-PHYSMEM-BITS-on-Loongson-3-only.patch
|
2015-02-10 01:13:04 +00:00
|
|
|
features/mips/MIPS-Loongson-3-Add-Loongson-LS3A-RS780E-1-way-machi.patch
|
2014-09-12 13:44:38 +00:00
|
|
|
features/x86/x86-memtest-WARN-if-bad-RAM-found.patch
|
|
|
|
features/x86/x86-make-x32-syscall-support-conditional.patch
|
2018-03-20 02:27:39 +00:00
|
|
|
# meson8b device-tree updates from next-20180316 to enable USB and Ethernet.
|
|
|
|
features/armhf/meson8/0001-ARM-dts-meson8b-grow-the-reset-controller-memory-zon.patch
|
|
|
|
features/armhf/meson8/0002-ARM-dts-meson8-add-the-reset-controller.patch
|
|
|
|
features/armhf/meson8/0003-ARM-dts-meson8-add-the-USB-reset-line.patch
|
|
|
|
features/armhf/meson8/0004-ARM-dts-meson8b-extend-ethernet-controller-descripti.patch
|
|
|
|
features/armhf/meson8/0005-ARM-dts-meson8b-odroidc1-ethernet-support.patch
|
|
|
|
features/armhf/meson8/0006-ARM-dts-meson8b-add-the-I2C-clocks.patch
|
2018-04-10 20:14:24 +00:00
|
|
|
# Add sata support for Tegra210/Jetson-TX1 from mainline.
|
|
|
|
features/arm64/tegra210-sata/0001-ata-ahci_tegra-Update-initialization-sequence.patch
|
|
|
|
features/arm64/tegra210-sata/0002-ata-ahci_tegra-initialize-regulators-from-soc-struct.patch
|
|
|
|
features/arm64/tegra210-sata/0003-ata-ahci_tegra-disable-devslp-for-Tegra124.patch
|
|
|
|
features/arm64/tegra210-sata/0004-ata-ahci_tegra-disable-DIPM.patch
|
|
|
|
features/arm64/tegra210-sata/0005-ata-ahci_tegra-Add-AHCI-support-for-Tegra210.patch
|
|
|
|
features/arm64/tegra210-sata/0006-arm64-tegra-Add-SATA-node-for-Tegra210.patch
|
|
|
|
features/arm64/tegra210-sata/0007-arm64-tegra-Enable-AHCI-on-Jetson-TX1.patch
|
2018-04-14 03:34:07 +00:00
|
|
|
features/arm64/arm64-dts-allwinner-a64-add-simplefb-for-A64-SoC.patch
|
2016-01-02 19:18:05 +00:00
|
|
|
|
2016-01-02 19:20:40 +00:00
|
|
|
# Miscellaneous bug fixes
|
|
|
|
bugfix/all/kbuild-use-nostdinc-in-compile-tests.patch
|
|
|
|
bugfix/all/disable-some-marvell-phys.patch
|
2016-04-13 22:31:28 +00:00
|
|
|
bugfix/all/fs-add-module_softdep-declarations-for-hard-coded-cr.patch
|
2017-01-11 04:34:58 +00:00
|
|
|
bugfix/all/partially-revert-usb-kconfig-using-select-for-usb_co.patch
|
2017-03-04 02:19:07 +00:00
|
|
|
bugfix/all/kbuild-include-addtree-remove-quotes-before-matching-path.patch
|
2018-01-14 19:44:14 +00:00
|
|
|
debian/revert-objtool-fix-config_stack_validation-y-warning.patch
|
2018-03-15 19:07:24 +00:00
|
|
|
bugfix/all/i40e-build-for-64-bit-targets-only.patch
|
2016-01-02 19:20:40 +00:00
|
|
|
|
|
|
|
# Miscellaneous features
|
|
|
|
|
2017-04-20 01:38:29 +00:00
|
|
|
# Lockdown (formerly 'securelevel') patchset
|
2017-12-26 18:54:17 +00:00
|
|
|
features/all/lockdown/0001-Add-the-ability-to-lock-down-access-to-the-running-k.patch
|
|
|
|
features/all/lockdown/0002-Add-a-SysRq-option-to-lift-kernel-lockdown.patch
|
|
|
|
features/all/lockdown/0003-ima-require-secure_boot-rules-in-lockdown-mode.patch
|
|
|
|
features/all/lockdown/0004-Enforce-module-signatures-if-the-kernel-is-locked-do.patch
|
|
|
|
features/all/lockdown/0005-Restrict-dev-mem-kmem-port-when-the-kernel-is-locked.patch
|
|
|
|
features/all/lockdown/0006-kexec-Disable-at-runtime-if-the-kernel-is-locked-dow.patch
|
|
|
|
features/all/lockdown/0007-Copy-secure_boot-flag-in-boot-params-across-kexec-re.patch
|
|
|
|
features/all/lockdown/0008-kexec_file-Restrict-at-runtime-if-the-kernel-is-lock.patch
|
|
|
|
features/all/lockdown/0009-hibernate-Disable-when-the-kernel-is-locked-down.patch
|
|
|
|
features/all/lockdown/0010-uswsusp-Disable-when-the-kernel-is-locked-down.patch
|
|
|
|
features/all/lockdown/0011-PCI-Lock-down-BAR-access-when-the-kernel-is-locked-d.patch
|
|
|
|
features/all/lockdown/0012-x86-Lock-down-IO-port-access-when-the-kernel-is-lock.patch
|
|
|
|
features/all/lockdown/0013-x86-msr-Restrict-MSR-access-when-the-kernel-is-locke.patch
|
|
|
|
features/all/lockdown/0014-asus-wmi-Restrict-debugfs-interface-when-the-kernel-.patch
|
|
|
|
features/all/lockdown/0015-ACPI-Limit-access-to-custom_method-when-the-kernel-i.patch
|
|
|
|
features/all/lockdown/0016-acpi-Ignore-acpi_rsdp-kernel-param-when-the-kernel-h.patch
|
|
|
|
features/all/lockdown/0017-acpi-Disable-ACPI-table-override-if-the-kernel-is-lo.patch
|
|
|
|
features/all/lockdown/0018-acpi-Disable-APEI-error-injection-if-the-kernel-is-l.patch
|
|
|
|
features/all/lockdown/0019-scsi-Lock-down-the-eata-driver.patch
|
|
|
|
features/all/lockdown/0020-Prohibit-PCMCIA-CIS-storage-when-the-kernel-is-locke.patch
|
|
|
|
features/all/lockdown/0021-Lock-down-TIOCSSERIAL.patch
|
|
|
|
features/all/lockdown/0022-Lock-down-module-params-that-specify-hardware-parame.patch
|
|
|
|
features/all/lockdown/0023-x86-mmiotrace-Lock-down-the-testmmiotrace-module.patch
|
|
|
|
features/all/lockdown/0024-debugfs-Disallow-use-of-debugfs-files-when-the-kerne.patch
|
|
|
|
features/all/lockdown/0025-Lock-down-proc-kcore.patch
|
|
|
|
features/all/lockdown/0026-Lock-down-kprobes.patch
|
|
|
|
features/all/lockdown/0027-bpf-Restrict-kernel-image-access-functions-when-the-.patch
|
|
|
|
features/all/lockdown/0028-efi-Add-an-EFI_SECURE_BOOT-flag-to-indicate-secure-b.patch
|
|
|
|
features/all/lockdown/0029-efi-Lock-down-the-kernel-if-booted-in-secure-boot-mo.patch
|
2017-04-20 01:38:29 +00:00
|
|
|
# some missing pieces
|
|
|
|
features/all/lockdown/enable-cold-boot-attack-mitigation.patch
|
|
|
|
features/all/lockdown/mtd-disable-slram-and-phram-when-locked-down.patch
|
|
|
|
features/all/lockdown/arm64-add-kernel-config-option-to-lock-down-when.patch
|
2016-04-03 03:04:45 +00:00
|
|
|
|
2016-01-02 19:18:05 +00:00
|
|
|
# Security fixes
|
2016-02-16 02:50:51 +00:00
|
|
|
debian/i386-686-pae-pci-set-pci-nobios-by-default.patch
|
2016-03-20 22:25:02 +00:00
|
|
|
|
2016-12-02 00:19:09 +00:00
|
|
|
# Fix exported symbol versions
|
2016-12-02 23:13:17 +00:00
|
|
|
bugfix/all/module-disable-matching-missing-version-crc.patch
|
2016-12-02 00:19:09 +00:00
|
|
|
|
2016-03-21 01:37:26 +00:00
|
|
|
# Tools bug fixes
|
|
|
|
bugfix/all/usbip-document-tcp-wrappers.patch
|
|
|
|
bugfix/all/kbuild-fix-recordmcount-dependency.patch
|
|
|
|
bugfix/all/tools-perf-man-date.patch
|
|
|
|
bugfix/all/tools-perf-remove-shebangs.patch
|
|
|
|
bugfix/all/tools-lib-traceevent-use-ldflags.patch
|
|
|
|
bugfix/x86/revert-perf-build-fix-libunwind-feature-detection-on.patch
|
|
|
|
bugfix/all/tools-build-remove-bpf-run-time-check-at-build-time.patch
|
2016-06-09 23:10:18 +00:00
|
|
|
bugfix/all/cpupower-bump-soname-version.patch
|
2016-11-03 22:11:35 +00:00
|
|
|
bugfix/all/cpupower-fix-checks-for-cpu-existence.patch
|
2018-02-11 08:51:44 +00:00
|
|
|
bugfix/all/lockdep-stub-nmi-watchdog-reset.patch
|
2018-03-12 01:46:05 +00:00
|
|
|
bugfix/arm64/ARM64-dts-meson-reduce-odroid-c2-eMMC-maximum-rate.patch
|
2017-12-11 21:05:28 +00:00
|
|
|
|
2017-10-26 09:12:11 +00:00
|
|
|
# ABI maintenance
|