Group all securelevel and Secure Boot changes together, closing #820008

This commit is contained in:
Ben Hutchings 2016-04-05 14:03:54 +01:00
parent 119c44d06d
commit 54ab3395af
1 changed files with 7 additions and 6 deletions

13
debian/changelog vendored
View File

@ -9,16 +9,17 @@ linux (4.5-1~exp2) UNRELEASED; urgency=medium
write support
* Merge linux-tools source package into linux
(Closes: #550379, #573483, #816500)
* Add Matthew Garrett's securelevel patchset in preparation for Secure Boot
support (see Documentation/security/securelevel.txt)
* modules: Enable MODULE_SIG and MODULE_SIG_SHA256, but not MODULE_SIG_ALL
as signatures will be packaged separately
* Add support for securelevel and prepare for Secure Boot (Closes: #820008):
- Add Matthew Garrett's securelevel patchset (see
Documentation/security/securelevel.txt)
- modules: Enable MODULE_SIG and MODULE_SIG_SHA256, but not MODULE_SIG_ALL
as signatures will be packaged separately
- debian/control: Add build-dependencies on libssl-dev, openssl
- debian/copyright: Note that extract-cert and sign-file are under LGPL 2.1
- linux-kbuild: Add extract-cert and sign-file programs
- scripts: Fix X.509 PEM support in sign-file
* certs: Set SYSTEM_TRUSTED_KEYS to my own personal certificate to support
initial testing of signed modules
- certs: Set SYSTEM_TRUSTED_KEYS to my own personal certificate to support
initial testing of signed modules
[ Aurelien Jarno ]
* [mipsel/mips/config.loongson-2f] Disable VIDEO_CX23885, VIDEO_IVTV,