Commit Graph

2033 Commits

Author SHA1 Message Date
Christoph Anton Mitterer 52a8f5d992 Enable MORUS and AEGIS AEAD ciphers
Signed-off-by: Christoph Anton Mitterer <mail@christoph.anton.mitterer.name>
2018-12-13 05:43:02 +01:00
Ben Hutchings 1240fb3ac3 integrity: Disable INTEGRITY_TRUSTED_KEYRING (Closes: #865277) 2018-12-08 21:34:33 +00:00
Salvatore Bonaccorso fae4befcc9 Merge branch 'sid' 2018-12-08 15:02:01 +01:00
Uwe Kleine-König 983a169e24 Enable ATH10K_USB as a module 2018-11-30 10:39:33 +01:00
Vagrant Cascadian 5a64bc1733 debian/config/config: Enable Z3FOLD as a module. 2018-11-25 20:33:58 -08:00
Ben Hutchings 998b27af2f Explicitly set various config symbols to their default values
This covers many, but far from all, of the symbols currently not
explicitly set.
2018-11-11 19:16:10 +00:00
Romain Perier 88f44cb9eb Enable Diffie-Hellman operations on retained keys (Closes: #911998) 2018-11-02 19:28:44 +01:00
Uwe Kleine-König 83e21a57f8 Enable Orange filesystem 2018-10-24 12:08:29 +02:00
Uwe Kleine-König 85da926d38 Revert "wip" which was pushed by mistake
This reverts commit 331fdb5fb8.
2018-10-16 20:18:50 +02:00
Uwe Kleine-König 331fdb5fb8 wip 2018-10-16 08:44:27 +02:00
Ben Hutchings fb685c0833 xen: Enable XEN_SCRUB_PAGES_DEFAULT, replacing XEN_SCRUB_PAGES
This was renamed for no good reason in 4.19-rc4.
2018-10-15 19:06:16 +01:00
Uwe Kleine-König 5155663855 enable HID_NTI as a module 2018-10-05 09:29:27 +02:00
Uwe Kleine-König 509467b7a6 enable NET_SCH_CAKE as a module 2018-10-05 09:25:43 +02:00
Ben Hutchings b9378ce266 debian/config: Clean up with the help of kconfigeditor2
Various kconfig symbols have been renamed, removed, split or combined.
Update these files accordingly.
2018-08-27 18:34:45 +01:00
Ben Hutchings 456cbdd991 debian/config: Clean up using kconfigeditor2 2018-08-27 18:28:13 +01:00
Ben Hutchings 4a0a6042cb netfilter: Enable NF_TABLES_SET as module, replacing the multiple set type modules that were enabled before 4.18 2018-08-27 18:27:55 +01:00
Ben Hutchings d6c050378d Release linux (4.17.17-1).
-----BEGIN PGP SIGNATURE-----
 
 iQKmBAABCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlt4FyhfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89EitQQAJ4S3n+2azIKz50gfxon0dgS9ybXRxeb
 2Hk/FzBXqFduVhWe9vVuZdE4ko5QsQ8ht2HR726kcEkud8pFOh0pt/7Q67IQHbQN
 t/hD3C2C6M8pKhwBEwuSZtRqsruqv3qll95xbwIqW7AWP+/AODQltzgB0AplpC6a
 8ED1nCxutDI0WrzN76UcfYxa1slRJ9sRfh+KRWQSEsU+jCSP0aD0rArYVeppXGaR
 cAy5Xku7237hFdeIzlt6goHuvfDuSlbAxpuaF944TVFtmPYwe7W+S3rRSy0OtjQY
 WzdSsIKXlXVMkMJD4t3ybFUMOyHP/jT79Tem0kp8EBn8NcPjtnLJYLiODVR0PH3A
 5XOEzR3NLGspDxkEJWdq/7IsLL4a7wVLAYn5VbkRVzo2Jxp6IpSqPrFjYwdf/KMF
 PizvbJtHTQxGFk6jPdCG+DV9hBrMOzXedcqH24qZ4yr6xUOj5WICR3+9E57DYLwH
 oJzXef8BKhx4MdkDduduyWcyWJvlH2nBae2T+q+4mwfI/I+8PeyUDnSc7Hmzx1Cc
 feeeccvQPrhnu8HAE0RmfF1YhfyXXq3GQEt4MaV5Z2h6aAS1zxm1EhBueJMeaEhh
 i6oldiPDd2qHX9rZXYLvUx109qLyTiqxbzCgJCAF3s8Bk7P/Aj/0mDADo7d5V0TY
 KsXydFzhoiTZ
 =Qmdt
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.17.17-1'

Release linux (4.17.17-1).

- Drop "gpu: host1x: Fix compiler errors by converting to dma_addr_t"
  which is already in 4.18
- Drop ABI reference files and ABI number change
2018-08-27 14:15:27 +01:00
Ben Hutchings 35ab00b41b certs: Revert switch to production certificate
This reverts commit b91655bf3e and part
of commit 16dec97798.

The signing service is still using secure-boot-test-key-lfaraone and
we should make at least one more upload to be signed by it.
2018-08-18 19:59:32 +01:00
Romain Perier 46d40ea7a3 Enable CONFIG_SPI_SPIDEV (Closes: #904043)
Currently, CONFIG_SPI is enabled globally. The purpose of SPIDEV is to
allow userspace to access SPI in a generic way, when SPI is supported on
the target. For arches that don't support SPI or disable it explicitly,
like m68k, both features will be disabled.
2018-08-13 19:54:41 +02:00
Ben Hutchings b6e442c215 drivers/net/phy: Enable SFP as module (Closes: #906054) 2018-08-13 18:34:04 +01:00
Ben Hutchings 3a85fcdecf serdev: Enable SERIAL_DEV_BUS, SERIAL_DEV_CTRL_TTYPORT as built-in
...(except on armel)

This results in:

- bluetooth: Re-enable BT_HCIUART_{BCM,LL} (Closes: #906048)
2018-08-13 17:15:30 +01:00
Ben Hutchings b91655bf3e certs: Add certificate for production key used in Debian signing service 2018-08-02 13:11:02 +08:00
Ben Hutchings 16dec97798 certs: Remove certificates for test key used in Debian signing service and for my personal signing key 2018-08-02 13:08:57 +08:00
Ben Hutchings d2806c1d8d autofs: Enable AUTOFS_FS instead of AUTOFS4_FS
AUTOFS4_FS is now a compatibility symbol which selects AUTOFS_FS.
It will be removed in a later kernel release.
2018-07-03 18:43:23 +01:00
Ben Hutchings 7f113f9112 Release linux (4.17.3-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAls6toYACgkQ57/I7JWG
 EQnUyQ/9GCNcKyhvUX+JW534f1vCai0GujvXCgEBWyDuj0AXcgthJT27cs7kXUYH
 tCfL9xTikeUIgNR+JTWFnZSHIUKaQ8RJPdR4l1KyqdDxqrEx9BqdXRW0dzS4OtTQ
 jgnVLkEfCtllgXkEh6L+ZKZ3NRFKc6OcYFrWa+Q+ovk1mY23P5y5YyPuaV4j+cKI
 8M1pMYCxTGpy9+SncKEnWHD9hq1AsySe19Q/yd5WzhDMu6kLg61S+n/iiVZJA8lK
 qHmMEhtEbiQN+/79C3dgH8nDV5yceqPZxon2GmPrUXrLTM0cX2J3VZpNFOH4SCr8
 AZa1nzzD8UXNDHVVb91QpwMGQrmjAwuLQtJPOCrOnuS71ba+q2w5ylYgjbbs7AMn
 SJpakcYBKBYoMI7fk+qKRVneBIhPDEBWe6yf//XL7N+Nfsf02bkb5k81NPTF65dE
 RESMNI/wXjhFkCWjqxZQiJqvG2mvyTGFs4iEk7NWjFfyqRz4bFNP+SbMHfGwVI1u
 xnlK2e31h25kWuFuQjq6eVXg+jyWjagM1/aa4lI1H4j2Rk9iXVU/52wVZGatmUj0
 1zbqYL2noJpD46/Q4jtbatZu9TI+ynjr+mbmZYys8BfFMNKPjL2TavW7RNWARk/p
 VmgvS7qS5JmJz22LBGRU1S5aKbDhXmyt8IcJS9LCUwEU0yL+u4U=
 =n9qI
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.17.3-1'

Release linux (4.17.3-1).
2018-07-03 00:45:29 +01:00
Ben Hutchings b20d268c2a Update config for 4.18 using kconfigeditor2
- Various config symbols were removed, renamed or split
- HOTPLUG_PCI_SHPC is now boolean, so set it to built-in
- The stack protector config symbols were changed to two booleans
  with different names
2018-07-02 17:51:27 +01:00
Ben Hutchings 6fcfc170b9 dm: Enable DM_INTEGRITY as module (except on armel) (Closes: #896649) 2018-07-01 03:49:54 +01:00
Ben Hutchings 5df1ad8e8b Clean up kconfig with kconfigeditor2
Drop one long-obsolete and one automatic symbol that were wrongly
added recently.
2018-06-22 17:55:54 +01:00
Ben Hutchings 5316cb1c19 [amd64,arm64,armhf] android: Build modules to support Anbox (Closes: #901492) 2018-06-22 17:47:56 +01:00
Bastian Blank 793d0ba52e Release linux (4.16.16-1)
-----BEGIN PGP SIGNATURE-----
 
 iQFFBAABCgAvFiEER3HMN63jdS1rqjxLbZOIhYpp/lEFAlspVJURHHdhbGRpQGRl
 Ymlhbi5vcmcACgkQbZOIhYpp/lFk8ggAvgwAw3CSdFCGSLvd8cBjZa2mqpxqOILN
 BbuXT0qRTibN19qtjeHvk0SQUQuBBIoP9DVGu0j1UIBfpQcVsEg+tM2FTqrPI5DT
 1LPdMcOEyNpD9FlmEljd7lkjetyils/0T87+hHXxhBP2d2DkuUjcaY1t09+6kKW0
 A2XXeEGeJmDbLEuY7R/WxGHsT20nvvLD0on5691mF8yW7wLDavekwGk9JJlFjOID
 XkwxAj2nFVDCWB6hmi1ETGYahmnFXgK1kX2X0lTAi6FM1mql4oha6LNxQSYc8hAd
 03nWnzwh+BmsAJjapp1PkkGEj7SHw9AHl8EUS+cqaAzigB4LjSPffw==
 =4gVf
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.16.16-1'

Release linux (4.16.16-1)
2018-06-19 21:50:55 +02:00
Yves-Alexis Perez f569e56cd1 enable REFCOUNT_FULL only on x86 2018-05-21 14:44:26 +02:00
Yves-Alexis Perez 674ae81ed9 use "is not set" syntax 2018-05-21 14:41:01 +02:00
Hideki Yamane ccef5427ca Improve Laptop Battery Life (Closes: #898629)
I've found Fedora28 tries to improve battery life on laptop.
See https://docs.fedoraproject.org/f28/release-notes/sysadmin/Kernel.html#sect-kernel-battery

There are three points.

  1. A new SATA link-powermanagement-policy has been written which mirrors
     Windows defaults: med_power_with_dipm, this has been merged for kernel
     4.15, as part of this change this new policy will be the default on all
     Intel mobile chipsets. This saves aprox. 1.0 - 1.5 Watts of power on an
     idle laptop.
  2. Enable Intel HDA codec power-saving by default with a 1 second timeout.
     This saves aprox. 0.4 Watts of power on an idle laptop.
  3. Enable USB autosuspend for USB bluetooth receivers by default. If all
     other USB devices on the laptop also have USB auto-suspend enabled
     (which typically is true) this saves aprox. 0.4 Watts of power on an idle
     laptop.
2018-05-20 20:21:34 +09:00
Yves-Alexis Perez ab436fc35b hardening: enable REFCOUNT_FULL and FORTIFY_SOURCE, disabled HARDENED_USERCOPY_FALLBACK 2018-05-19 11:26:45 +02:00
Ben Hutchings e2a9c8d8a2 dm: Enable DM_MQ_DEFAULT. This can be reverted using the kernel parameter: dm_mod.use_blk_mq=n 2018-05-10 01:46:15 +01:00
Ben Hutchings 049487d882 SCSI: Enable SCSI_MQ_DEFAULT. This can be reverted using the kernel parameter: scsi_mod.use_blk_mq=n 2018-05-10 01:45:30 +01:00
Ben Hutchings 812a34ef9d Clean up configuration with kconfigeditor2 2018-05-10 01:42:22 +01:00
Ben Hutchings 81d6f91e25 Clean up kconfig for 4.17
- Various ancient SCSI drivers were removed
- BT_HCIBTUART and INFINIBAND_CXGB3_DEBUG were removed
- OMAP_DM_TIMER is now an automatic symbol
- Marvell NAND driver was rewritten, so we enable MTD_NAND_MARVELL
  instead of MTD_NAND_PXA3xx
- Various netfilter symbols are now boolean instead of tristate
2018-04-20 01:39:47 +01:00
Ben Hutchings fcb558d168 Merge branch 'sid'
- Drop patches already in 4.16
- Overwrite changes on master to debian/installer, which were also
  applied on sid and then changed
- [x86] Fix up dell_smbios configuration; now it's a single driver
  selected by DELL_SMBIOS, with DELL_SMBIOS_{SMM,WMI} being boolean
  options
- Clean up configuration with kconfigeditor2
2018-04-19 14:43:33 +01:00
Ben Hutchings 8bf0fade16 [amd64] net: Enable AQTION as module
I'm enabling it in the top-level config, but currently it has
'depends on X86_64' so it will only be built for amd64.

References: https://lists.debian.org/CAMVG2svxkO42pr7VgjFxv1o5hiw9-1cAgBuhyEem1foTH2M6zw@mail.gmail.com
2018-04-19 00:23:00 +01:00
Ben Hutchings a529c97bc1 block: Enable BLK_SED_OPAL (except on armel) 2018-04-19 00:11:59 +01:00
Ben Hutchings b776a2b257 squashfs: Enable SQUASHFS_ZSTD (Closes: #883410) 2018-04-19 00:03:22 +01:00
Ben Hutchings 9926a8790e w1: Enable all "slave" device drivers (Closes: #895340) 2018-04-18 23:39:48 +01:00
Ben Hutchings 0fefb6932b SCSI: Enable SCSI_SYM53C8XX_2 as module on all architectures (Closes: #895532) 2018-04-18 23:27:21 +01:00
Ben Hutchings 82596c5122 integrity: Disable IMA until it works properly with lockdown
Enabing CONFIG_IMA, CONFIG_MODULE_SIG and lockdown currently breaks module
loading with finit_module().
2018-04-08 14:43:46 +02:00
Ben Hutchings ef9c7e11c5 certs: Add certificate for test key used in Debian signing service 2018-04-08 14:39:52 +02:00
Ben Hutchings a25eb38372 debian/config: Rename [build]signed-modules setting to signed-code
This setting controls code signing in general, not just modules.
2018-04-08 10:30:49 +02:00
Sjoerd Simons db401171be Enable CONFIG_DRM_DP_AUX_CHARDEV (Closes: #890235)
Signed-off-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
2018-04-06 16:34:32 +02:00
Ben Hutchings 0eab78b1fd [ia64] Revert "Remove all support for ia64"
This reverts commit ace247de5b.
Refresh the "Hardcode arch script output" patch.

Closes: #886693
2018-03-15 20:22:30 +00:00
Ben Hutchings 75e764ee6a Refresh config using kconfigeditor2
Various symbols were removed, renamed or changed from tristate to
boolean.
2018-03-12 02:55:12 +00:00