Group all securelevel and Secure Boot changes together, closing #820008
This commit is contained in:
parent
119c44d06d
commit
54ab3395af
|
@ -9,16 +9,17 @@ linux (4.5-1~exp2) UNRELEASED; urgency=medium
|
|||
write support
|
||||
* Merge linux-tools source package into linux
|
||||
(Closes: #550379, #573483, #816500)
|
||||
* Add Matthew Garrett's securelevel patchset in preparation for Secure Boot
|
||||
support (see Documentation/security/securelevel.txt)
|
||||
* modules: Enable MODULE_SIG and MODULE_SIG_SHA256, but not MODULE_SIG_ALL
|
||||
as signatures will be packaged separately
|
||||
* Add support for securelevel and prepare for Secure Boot (Closes: #820008):
|
||||
- Add Matthew Garrett's securelevel patchset (see
|
||||
Documentation/security/securelevel.txt)
|
||||
- modules: Enable MODULE_SIG and MODULE_SIG_SHA256, but not MODULE_SIG_ALL
|
||||
as signatures will be packaged separately
|
||||
- debian/control: Add build-dependencies on libssl-dev, openssl
|
||||
- debian/copyright: Note that extract-cert and sign-file are under LGPL 2.1
|
||||
- linux-kbuild: Add extract-cert and sign-file programs
|
||||
- scripts: Fix X.509 PEM support in sign-file
|
||||
* certs: Set SYSTEM_TRUSTED_KEYS to my own personal certificate to support
|
||||
initial testing of signed modules
|
||||
- certs: Set SYSTEM_TRUSTED_KEYS to my own personal certificate to support
|
||||
initial testing of signed modules
|
||||
|
||||
[ Aurelien Jarno ]
|
||||
* [mipsel/mips/config.loongson-2f] Disable VIDEO_CX23885, VIDEO_IVTV,
|
||||
|
|
Loading…
Reference in New Issue