0e0b29ad5a
[arm64,x86] Replace securelevel patch set with lockdown patch set
...
Matthew stopped maintaining the securelevel patch set, and David
Howells has taken it up under the new name 'lockdown'. This is
taken from:
https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git#efi-lock-down
commits ddb99e118e37f324a4be65a411bb60ae62795cf9..0240fa7c7c948b19d57c0163d57e55296277ff3c
Rebase the three patches not included there (cold boot mitigation,
arm64 SB integration, MTD RAM restrictions).
Update our kconfig for the renaming.
2017-04-20 02:38:34 +01:00
9ee9c719d0
Enable BUG_ON_DATA_CORRUPTION
...
This means errors detected by DEBUG_LIST result in BUG rather than WARN.
2017-03-31 00:33:12 +01:00
500ce0c9cd
netfilter: Enable NF_SOCKET_IPV4, NF_SOCKET_IPV6 as modules ( Closes : #858897 )
2017-03-31 00:02:01 +01:00
c4b4fdd561
Clean up kconfig using kconfigeditor2
2017-03-31 00:01:00 +01:00
459f0a48e4
Release linux (4.9.18-1).
...
-----BEGIN PGP SIGNATURE-----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=ONVb
-----END PGP SIGNATURE-----
Merge tag 'debian/4.9.18-1'
Drop ABI reference files.
Refresh/drop patches as needed.
2017-03-30 14:16:47 +01:00
49c2b92937
time: Disable TIMER_STATS (CVE-2017-5967)
...
The upstream "fix" for this is to remove the feature, as it is
redundant with tracing. I'd be quite happy to do that, but it
introduces several conflicts with the PREEMPT_RT patch series.
Unless and until those are resolved in 4.9-stable and 4.9-rt, disable
it in our kconfig and add a dependency on BROKEN to ensure it's
disabled in custom kernels too.
2017-02-26 21:05:05 +00:00
8c94f719fa
Release linux (4.9.10-1).
...
-----BEGIN PGP SIGNATURE-----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=rRkU
-----END PGP SIGNATURE-----
Merge tag 'debian/4.9.10-1'
Drop changes to aufs.
2017-02-22 20:57:36 +00:00
b476f54cc9
net: Enable SFC_FALCON as module; SFC_FALCON_MTD
2017-01-30 16:28:55 +00:00
f988285e04
netfilter: Fix kconfig values for NF_CT_PROTO_{DCCP,SCTP,UDPLITE}
...
These are now boolean options for the nf_conntrack module, rather than
tristates for separate modules.
2017-01-28 03:42:12 +00:00
6adadc8ec6
Release linux (4.9.6-2).
...
-----BEGIN PGP SIGNATURE-----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=C8FJ
-----END PGP SIGNATURE-----
Merge tag 'debian/4.9.6-2'
2017-01-28 01:19:31 +00:00
bb91742cb9
[arm64,armhf,x86] usb: gadget: Enable configfs and mot useful legacy functions
...
If CONFIG_USB_GADGET is selected, enable all configfs functions as
modules and most popular legacy modules (ethernet and serial).
g_nokia left as armhf specific (Nokia N900 tradition)
[benh: Changed subject line]
2017-01-27 21:10:08 +00:00
3479225d03
Clean up kconfig using kconfigeditor2
...
Rename or delete options that changed in 4.10.
2017-01-24 21:03:51 +00:00
6dea280bae
fs: Disable LOGFS, as it is unmaintained and will be removed in 4.10
2017-01-24 20:49:30 +00:00
b30786ada7
[arm64] video: Change FB from module to built-in
...
Currently we don't explicitly set CONFIG_FB for arm64, and the only
reason it's enabled as a module is that the DRM drivers (which are
built as modules) select it. We *do* explicitly set CONFIG_FB=y on
almost all other architectures and flavours.
Simplify this by setting CONFIG_FB=y at the top level and overriding
where needed (not arm64).
2017-01-24 05:22:28 +00:00
6e04c10615
drivers/input: Enable TOUCHSCREEN_GOODIX as module
...
Closes : #851821
2017-01-21 16:56:44 +09:00
b5bf17149c
drm: Enable DRM_LEGACY
...
This is a new dependency (in 4.9) for DRM drivers that don't include KMS.
2017-01-11 04:15:25 +00:00
9fa54aaa83
Explicitly set various config symbols to their defaults
2017-01-11 04:07:16 +00:00
ddef39bbd1
cxgb4: Enable CHELSIO_T4_FCOE
2017-01-11 04:07:16 +00:00
12fe2ee262
net: Enable MACSEC as module
2017-01-11 04:07:16 +00:00
7d782712b9
target: Enable ISCSI_TARGET_CXGB4 as module
2017-01-11 04:07:16 +00:00
b9dec29dfb
SCSI: Enable SCSI_SMARTPQI as module
2017-01-11 04:07:16 +00:00
0be187c8a3
net: Enable NET_DEVLINK as module
2017-01-11 04:07:15 +00:00
6e618742b2
rxrpc: Enable AF_RXRPC_IPV6
2017-01-11 02:39:16 +00:00
8af88a5cba
hci_uart: Enable BT_HCIUART_MRVL
2017-01-11 02:39:16 +00:00
f967694f22
vsock: Enable VSOCKETS, VHOST_VSOCK, VIRTIO_VSOCKETS as modules
2017-01-11 02:39:09 +00:00
0277842acf
net/sched: Enable NET_ACT_TUNNEL_KEY, NET_IFE_SKBTCINDEX as modules
2017-01-11 02:23:45 +00:00
84eba65d8d
netfilter: Enable NFT_NUMGEN, NFT_QUOTA as modules
2017-01-11 02:10:10 +00:00
e5b976c268
cpufreq: Change CPU_FREQ_GOV_SCHEDUTIL to built-in
...
It can't be modular in 4.9.
2017-01-07 03:40:03 +00:00
8c35b862a7
net: Enable GTP as module ( Closes : #846913 )
2017-01-05 03:30:49 +00:00
7aee63d8bc
Enable drivers requested in #847017
...
* [x86] iio,HID: Enable INTEL_ISH_HID as module
* hwmon,watchdog: Enable SENSORS_FTSTEUTATES as module
2017-01-05 03:29:38 +00:00
359bc84534
ieee802154: Enable IEEE802154_FAKELB as module
2017-01-05 03:09:11 +00:00
f08186c06a
mm: Enable PAGE_POISONING ( Closes : #849450 ), PAGE_POISONING_NO_SANITY
...
...except on armel/marvell
2017-01-05 03:01:05 +00:00
3131927f49
Enable USERFAULTFD (except on armel/marvell)
2017-01-05 01:45:08 +00:00
97ab9059a9
Release linux (4.8.15-2).
...
-----BEGIN PGP SIGNATURE-----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=AxAX
-----END PGP SIGNATURE-----
Merge tag 'debian/4.8.15-2'
2017-01-05 00:01:00 +00:00
8ad41fe983
nvme: Enable NVME_RDMA, NVME_TARGET, NVME_TARGET_RDMA as modules
2017-01-04 19:39:21 +00:00
5fdbe9768e
hci_uart: Enable BT_HCIUART_AG6XX
2017-01-04 19:39:21 +00:00
60b816f0e8
net/sched: Enable NET_CLS_MATCHALL, NET_ACT_IFE, NET_IFE_SKBMARK, NET_IFE_SKBPRIO as modules
2017-01-04 19:39:21 +00:00
ac48b8b17c
ipv6: Enable IPV6_ILA as module
2017-01-04 19:39:21 +00:00
acc71539d4
tcp: Enable TCP_CONG_NV as module
2017-01-04 19:39:20 +00:00
c417304ac9
inet: Enable INET_DIAG_DESTROY
2017-01-04 19:39:18 +00:00
5bdfbe981b
PCI: Enable PCIE_DPC (except for armel/versatile)
2017-01-04 15:08:00 +00:00
4dafc38558
Explicitly set various config symbols to their defaults
2017-01-04 15:08:00 +00:00
1f00b07780
Explicitly set various config symbols to their defaults
2017-01-02 03:37:41 +00:00
dc0857b075
cpufreq: Enable CPU_FREQ_GOV_SCHEDUTIL as module
2017-01-02 03:37:37 +00:00
4764f3dc4e
w1: Disable W1_MASTER_MATROX
2016-11-13 23:27:39 +00:00
abd19bbc53
Release linux (4.8.7-1).
...
-----BEGIN PGP SIGNATURE-----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=uDst
-----END PGP SIGNATURE-----
Merge tag 'debian/4.8.7-1'
Drop ABI maintenance and patches that are already upstream.
2016-11-13 21:52:47 +00:00
993ab494e5
[amd64] Explicitly enable VMAP_STACK
2016-11-13 20:04:32 +00:00
943a798a07
IB: Enable INFINIBAND_RDMAVT as module
...
This is a new dependency of INFINIBAND_HFI1 and INFINIBAND_QIB.
Closes : #843792 )
2016-11-13 04:00:45 +00:00
ab58b8b5ed
[x86] ethernet: Enable ENA_ETHERNET as module
2016-11-13 03:34:00 +00:00
eeb90d2453
tcp: Enable TCP_CONG_BBR as module
2016-11-13 03:26:49 +00:00
Ben Hutchings
Riku Voipio
Roger Shimizu