Commit Graph

1839 Commits

Author SHA1 Message Date
Ben Hutchings 357c2335a5 [arm*,powerpc*,s390x,sparc64,x86] Enable HARDENED_USERCOPY
This enables HARDENED_USERCOPY in the top-level config rather than
per-architecture, but it depends on a feature not yet implemented for
all architectures.
2016-10-05 22:05:04 +01:00
Ben Hutchings 5ef50c5719 Enable SLAB_FREELIST_RANDOM 2016-10-05 22:01:38 +01:00
Ben Hutchings ef7e196951 [arm*,powerpc*,s390x,x86] Enable IO_STRICT_DEVMEM
This break dosemu and some old graphics drivers, and can be reverted
using the kernel parameter: iomem=relaxed

Again this is enabled in the top-level config, but it is only really
enabled for these architectures.
2016-10-01 22:42:58 +01:00
Ben Hutchings 8e160e8d48 [arm*] Enable STRICT_DEVMEM
This enables STRICT_DEVMEM in the top-level config rather than per-
architecture, but the only additional kernel architectures that we
build and that support it are arm and arm64.
2016-10-01 22:18:20 +01:00
Ben Hutchings 0e5f2ca52a Enable BH1780 as module instead of SENSORS_BH1780 2016-09-07 21:33:23 +01:00
Ben Hutchings cce3a89e12 Update config for 4.8 2016-08-28 21:51:18 +01:00
Ben Hutchings 68902cad17 Change RXKAD and SERIAL_8250_FINTEK from =m to =y
They are now options for other drivers.
2016-08-28 02:01:53 +01:00
Ben Hutchings 0e156c15e3 fat: Mitigate the lack of UTF-8 case folding
FAT has to convert between Linux filenames ('iocharset' encoding,
should be UTF-8 today) and native filenames (UTF-16 for long names,
'codepage' encoding for short names).  And it has to do case
folding in multiple encodings.  Unfortunately Linux doesn't
implement case-folding for UTF-8, resulting in inconsistent name
lookup behaviour as shown in bug #833238.

The 'utf8' option makes FAT assume the Linux filename encoding is
UTF-8, regardless of the 'iocharset' encoding.  Enabling this and
setting iocharset=ascii mitigates the problems by enabling case-
folding for the ASCII subset.

Make that the default by enabling FAT_DEFAULT_UTF8 and setting
FAT_DEFAULT_IOCHARSET to "ascii".
2016-08-26 02:31:50 +01:00
Ben Hutchings 0ddaf6aed3 cgroups: Enable memory controller by default 2016-07-29 12:23:32 +01:00
Ben Hutchings 7aa0b02a27 Clean up kconfig with the aid of kconfigeditor2
Re-enable various options disabled by name changes in 4.7.

Delete options completely removed in 4.7.
2016-07-20 04:13:49 +01:00
Ben Hutchings 50f9dba92e sched: Enable SCHEDSTATS (Closes: #796674) 2016-07-20 03:55:56 +01:00
Ben Hutchings 38ec618a21 fanotify: Enable FANOTIFY_ACCESS_PERMISSIONS (Closes: #690737)
Various free and proprietary AV products use this feature and users
apparently want it.  But punting access checks to userland seems like
an easy way to deadlock the system, and there will be nothing we can
do about that.  So warn and taint the kernel if this feature is
actually used.
2016-07-13 01:53:59 +01:00
Ben Hutchings cab1f743c8 Disable MODULE_SIG for architectures not supported by linux-signed 2016-06-06 18:12:47 +01:00
Ben Hutchings e41dc6a9cb 8139too: Use same configuration on all architectures
Enable 8139TOO_TUNE_TWISTER, 8139TOO_8129 and disable 8139TOO_PIO.
2016-05-23 21:43:19 +01:00
Ben Hutchings eaafcf8a39 Release linux (4.5.4-1).
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIVAwUAVzoWxue/yOyVhhEJAQrD5RAAnOQWbgH3JJ/48u366vvlvebkKdfgdUQw
 wyj+rfxCxWbb2i8iGh+gk4aN9FlNfmzUlPgA2esXJiCpjmZ+Ffj0aF8k7W4HkGPw
 /dX2tuBEj7NKQ6TLY1BK9rzs8DQKMRw7lQ7r+uLlt0o8MjKMJg0FaA1UteC09trB
 AXcSZdIeAtyPaMk1mBk3qcNsDMTIb/K3zk03sGy8HKwWgJJmHbcTm4/XWEzOOZUd
 HYInRPiK724qMoIG+BkI+oigvaXEvuxHKMfKWdryKHsIyvAu4l/1myeBk/xy65Cv
 /ga+NQQHJt8mfiWfleljKU9DC4wN/SQ5Nr9wzFC512TQfFVmu47BlIQPQWZ1oHjP
 FQom301HEFTKqZRTIqOU6IQ+TPSSHWPPvD8jmmRFXycasvDkP0t2RNuM3gbhwU3b
 9hui/YUlbzQUJOgWRitnRMk1jXtHLkQm8vRf7AIVXxT5+6u4EiZUvk6gNjg3Jz6h
 dHkkrgCWzZgYIdAvqa8OF2j2ejSQUcBW3yxpSnw0T9YOxo4IiF+Il/dxwSDSX5BI
 tBoNyzNH62yMOjGSQXcYOdr64KE1mjXpST+x1tRdU+n74ifP2CtA57o93WB6Gn5z
 wVAuVeGmEAbIl7EcHl5r6ZC58da5syTl0BZEbH9YM54eLlM+qyLOwM0vWAztuIa5
 ciXotUkDZrM=
 =oSkt
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.5.4-1'
2016-05-16 20:00:43 +01:00
Roger Shimizu 1f6b038c6f netfilter: Enable NF_DUP_NETDEV / NFT_DUP_NETDEV / NFT_FWD_NETDEV as module
Recommended by Arturo Borrero Gonzalez.
2016-05-13 19:26:17 +09:00
Ben Hutchings 16744a30b6 Update config for renaming/removal/replacement/merging/splitting of various symbols 2016-04-20 17:50:18 +01:00
Ben Hutchings 74940e0a05 Disable UNUSED_SYMBOLS; it is now itself unused 2016-04-13 20:52:59 +01:00
Ben Hutchings f880a7ff25 Fix config for module signing
Replace my pubkey with an X.509 (PEM encoded) certificate as actually
required.  Add quotes around the filenames in kconfig.
2016-04-04 10:41:46 +01:00
Ben Hutchings 969431b952 certs: Set SYSTEM_TRUSTED_KEYS to my own personal key to support initial testing of signed modules
Also set MODULE_SIG_KEY to empty string to avoid including a build-
time generated key.
2016-04-03 13:12:23 +01:00
Ben Hutchings c955e35c32 modules: Enable MODULE_SIG and MODULE_SIG_SHA256
...but not MODULE_SIG_ALL as signatures will be packaged separately
2016-04-03 13:12:23 +01:00
Ben Hutchings 7321950826 Add Matthew Garrett's securelevel patchset in preparation for Secure Boot support 2016-04-03 04:31:52 +01:00
Ben Hutchings e8347a4589 ntfs: Disable NTFS_RW (Closes: #566356)
ntfs-3g has much more complete write support.
2016-03-25 15:54:51 +00:00
Ben Hutchings c07a4d3987 Refresh config symbols for 4.5-rc4
Delete obsolete config symbols; rename/replace some as appropriate.
2016-02-15 17:50:19 +00:00
Roger Shimizu daf081c8a9 Enable TTY_PRINTK as module (Closes: #814540). 2016-02-14 00:37:52 +09:00
Ben Hutchings 2addfa5303 Really *really* enable NFT_REDIR_IPV4, NFT_REDIR_IPV6 as modules 2016-02-10 01:51:38 +00:00
Ben Hutchings aea9926d19 vfs,nvdimm: Really enable FS_DAX 2016-02-10 01:51:38 +00:00
Ben Hutchings abaed981d7 Enable many new config symbols
* bnx2x: Enable BNX2X_VXLAN
* cgroups: Enable CGROUP_PIDS
* crypto: Enable CRYPTO_CHACHA20, CRYPTO_POLY1305, CRYPTO_CHACHA20POLY1305,
  CRYPTO_USER_API_AEAD as modules
* [x86] crypto: Enable CRYPTO_DEV_QAT_DH895xCC as module
* [amd64] crypto: Enable CRYPTO_CHACHA20_X86_64, CRYPTO_DES3_EDE_X86_64,
  CRYPTO_POLY1305_X86_64 as modules
* [x86] dmaengine: Enable INTEL_IDMA64 as module
* debug: Enable SCHED_STACK_END_CHECK
* dm-cache: Enable DM_CACHE_SMQ as module
* ethernet: Enable BNXT, QED, QEDE as modules
* hci_uart: Enable BT_HCIUART_QCA
* HID: Enable HID_CORSAIR, HID_GEMBIRD as modules
* [x86] hwmon: Enable SENSORS_I5500 as module
* [x86] IB: Enable INFINIBAND_USNIC as module
* iio/light: Enable ACPI_ALS as module
* [x86] input: Enable SURFACE_PRO3_BUTTON as module
* [x86] iommu: Enable INTEL_IOMMU_SVM
* ipvs: Enable IP_VS_OVF as module
* media: Enable DVB_NETUP_UNIDVB, USB_GSPCA_TOUPTEK,_VIDEO_DT3155 as modules
* [x86] mfd: Enable MFD_INTEL_LPSS_ACPI, MFD_INTEL_LPSS_PCI as modules
* [amd64] mic: Enable INTEL_MIC_X100_DMA, MIC_COSM, SCIF, SCIF_BUS as modules
* [powerpc*/*64*] misc: Enable GENWQE as module
* net: Enable LWTUNNEL, NET_L3_MASTER_DEV; and MPLS_IPTUNNEL, NET_VRF
  as modules
* [amd64] net: Enable FUJITSU_ES as module
* netfilter: Really enable NF_TABLES_NETDEV, NFT_REDIR_IPV4, NFT_REDIR_IPV6
  as modules
* net/phy: Enable AQUANTIA_PHY, DP83848_PHY, MICROCHIP_PHY, TERANETICS_PHY
  as modules
* net/sched: Really enable NET_CLS_FLOWER as module
* net/usb: Enable USB_LAN78XX, USB_NET_CH9200 as modules
* nfsd: Enable NFSD_PNFS
* [x86] pinctrl: Enable PINCTRL_BROXTON, PINCTRL_SUNRISEPOINT
* [x86] rfkill: Enable DELL_RBTN as module
* serial: Enable SERIAL_OF_PLATFORM as module
* sound/firewire: Enable SND_FIREWIRE_DIGI00X, SND_FIREWIRE_TASCAM as modules
* [x86] thermal: Enable INTEL_PCH_THERMAL, INTEL_SOC_DTS_THERMAL as modules
* [x86] Enable INTEL_PMC_IPC as module
2016-02-10 01:21:56 +00:00
Ben Hutchings e4d331b75f Explicitly enable/disable many config symbols per defaults 2016-02-10 00:56:01 +00:00
Ben Hutchings 7aef5117c3 Release linux (4.3.3-6).
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIVAwUAVp48e+e/yOyVhhEJAQovuQ//Qqsr1OgRXNSxEZ9x6Szj+4wlhcHwnCB/
 hgAU+Lhkic44oGuNy9Hu9gnsiEqgWtDAXF1ZKFa+6iNsHEunommB84qc6a9qrtJ7
 TGzKaqyXQmvrQj9j9u5/09nw3Bx+LqZqRtGGN6kBwyTUhP0ndg6xfHtSZXP6JAAf
 8AKb5hvef25x9E4ZA9d2VzsgMwgtg9utxlZj/5WGhC4BwbkV96RrZu+hqO1akqsp
 bPKmKER0HDGvIqOfJQYTqjLAY4LjTGMLZAfcPeLn7gzT5Io+cujqy1K3JnqxRaWM
 5/bauyFnMaTiaN+oeozTtjs2wkdr+4EljGu0+WJAsvK8rQ6/mVJsqEcx8ESwuYx7
 lch8NBERfG0mGCEcpn+J5hsye7w9LQHugT1eKdrxx8JA1aiamnfofYE6XGYhURkx
 j0p2A5wZnB0T1j52mEwwa7HtNY0mgCfvFy1z45zVeQDyGH/09a/ZDCJf7ildOOLu
 cPDjyw3dGAi7HpeM2EkMCzZa342PaNYR//vfBRLb6kgQjMLgVev9jdf/mv2mqsB8
 qIDC1AtI1Tl9b3CTRGZ9RIdGZ93UpiiKKSoLpRyowuZYLej0Zk8zSfsbPDhwPq0c
 F+JiMqIQDZh/ggC9rzGCDbntqNv9oYk3r2WuLalGZQhP7lPig5J5Dz2i221RGCyu
 MjbiTh1PG1I=
 =vF8G
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.3.3-6'
2016-01-19 13:44:04 +00:00
Ben Hutchings d56fab4480 gpio: Enable GPIO_SYSFS wherever GPIOLIB is enabled (Closes: #810085) 2016-01-08 19:36:09 +00:00
Ben Hutchings 32ad61f561 Release linux (4.3.1-1).
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIVAwUAVmzgsee/yOyVhhEJAQrUHg//ZxBZ/le+h8y8tz+fk8/0dUaUD9SRiG6j
 GdyRcCuvlg2L4nhaq/UOu5yMWOQEVjlaXWEFRHK6/gDpzMuxmHrAHu0d37+KtJoW
 CGojya8fsjYOGawB5aLnneSi9V+rnTuLJbg3pkljuqq761N9hH/Atgh1jJuqGQ9F
 ZoiAaJKuMfDDJm+h1lNCb/fgPF6zjMc1CiwJZZix8Nfj0H3umyM20hRKtonJ8La7
 +2EKqytNNfwYu5oo2wiyS60TA+uziMhbmSP9HE/GjC1fAeF9DXGQUbxLuJop7WJo
 FSV+WMMDw1zMgvhHIDZ92azOJ9XPX0NpGPLsxJxtwJCrNSNbtef/zXTsolb6bKvb
 5JNjs7hOtjvGnbcyJd8LzE0yRXTycJNFCpalVsl3rXix/ZkMY4M1GOzqFTCgl1Id
 7mDVbytDcAoPnU+lTHJUqZdhKN45bqmjFleVU74eKhkeVw+sQn+WGRdeV0cfAM5l
 jBPOsV1Sicw7kZU91MRifcvkA66RqKy2cj7Nh8PsaJrotd5jWrw6hFo5rgqLQEn0
 E0nbOxwnYzfeNUH/u+JJcOdAWJl33hFyN//6AO0HsS6xUimKDGKx3/JAfLK3kO+6
 Xi8HjFHJOZrVIyZ1YQzrZ/c5jbrW8SnZeAIpkOCFP/c1Hn/sQCPo8g9OC551MQK8
 G23wxWG7Ofc=
 =mZbu
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.3.1-1'

All new patches are already included in 4.4-rc4.
Keep abiname as 'trunk'.
2015-12-13 03:56:14 +00:00
Ben Hutchings 0eb4bd660e sched: Enable CFS_BANDWIDTH (Closes: #802746) 2015-12-13 00:34:45 +00:00
Ben Hutchings 0f2fe8b81a Enable CC_STACKPROTECTOR_STRONG (Closes: #805652) 2015-12-13 00:34:39 +00:00
Ben Hutchings f6ee96a5ac Clean up config for 4.4
Done with kconfigeditor2/process.py followed by renaming/deleting
symbols according to the upstream changes.
2015-12-10 18:46:19 +00:00
Ben Hutchings 859321a4df wireless: Enable WL_MEDIATEK, MT7601U as module 2015-11-19 00:27:44 +00:00
Ben Hutchings fe7c9f03f8 tests: Enable kernel modules used by selftests 2015-10-31 22:04:13 +00:00
Ben Hutchings dc44f47681 netfilter: Enable NFT_DUP_IPV4, NFT_DUP_IPV6 as modules (Closes: #803370) 2015-10-29 21:27:17 +00:00
Ben Hutchings 02fdeb292b Release linux (4.2.5-1).
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIVAwUAVjAU8ee/yOyVhhEJAQo2sA//dfO7oH83XcApXVgNz6P4ASMdTazyJWAP
 QIgO1trx81MRE1OWIyOfqUWyorD+Qu8FVR7yTj6BWufX3QkobBK47oQ6Ynk4axde
 wYGDC5gVQKHEhDQWHUgyz2rqhQ92h6h4MFOrOe0gDUjPaStwC/HvB6J4jU9RRznB
 S/6lMr74xOQmnVjcX//HFH8OT498MeFoY04NG77OkBRn4f/E1DhZIp5N3//cVzEk
 A8oj1HlW4FhCAHekA5yqBGYvfr0X5m5t5Z8Ax4MJCwM2Hb3JLO7Ev0sjpPevHriY
 w+Vqj4MB1Sk76TFzr74KI4Z+EKeTYQNpCLb6Q81ua068CMII/ppMTA1gEGVPjfsQ
 E+OPFl0V+zQGMid/wwLLvp7RhVUiw2IQgvq6JrVlwNCOBgMsJFcMRD1HlA6B4fAO
 W2VgvjSGsYOTSEU7Ks8Oy0NR4ZHsBG3L19QHhfKcFY0aiweJ6XHLvSTS7QXGbqCy
 WzqSOy1eWbglj4jvH/9sOdtwdMlxHusSPXExSecknGITadqqE17Vy1hr1LGqsyvm
 qTGHWzc0unI3fF9bTg6HVC/h1bnihBIq5mJZBydc67jxDXPHuCBAs1bB63IiUQcu
 EeZadxsg7zs4hnZS91HrH71WdRo8oprhb7qzG3yLPErf6VFQ3Bkdg+wppr+cGy3b
 g31igQ6emOw=
 =CExD
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.2.5-1'

Drop the new patches, which are already in 4.3-rc7.

Drop the CONFIG_GENEVE_CORE change, because this symbol went away again.
2015-10-28 09:55:07 +09:00
Ben Hutchings a2db815fa1 Enable many new drivers and other features 2015-10-28 05:46:45 +09:00
Ben Hutchings 0bac3c0306 net: Enable LIQUIDIO as module 2015-10-19 21:16:33 +01:00
Ben Hutchings 6f97f31c49 media: Enable various drivers as modules 2015-10-19 21:16:33 +01:00
Ben Hutchings 74a655e99e Release linux (4.2.3-1).
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIVAwUAVhQlHee/yOyVhhEJAQp14g//bgpNy9R1+sRM/tDsNhW3H331YOLlLnf5
 1F6VXgzHnDspblgJctDmYAFKIujRNO/Rn1qDXJzh6bRrHnehnH/kJmu8fXk7zbHz
 zT35/HhPIDQV04OTIne+6Pj56iMAneplPhoxtfEPUbLsqzcS9xriTIU3Hv+U7i4a
 y7hfw5lYjbNFdkeJ91VmBFF6U2usmYYPFxokua4vFNsBAStayhoq0ozbaWCePMwn
 V+tgR4GxlbPNvlfTMmEVITTM1M3wXLc9Gq87yEVwLVooshu0yQEmYD3KE87nLLAa
 9zUpH5xK05EKZEPFDtLIcLa3JIB36BfNGqPLICGnw6EesHBU2ywGTDmQlQSd262W
 byhbBMEMrCOQYkL53oMPXjBK5Sf+QuXlbaV+EOXUaolKS0qS+ss/ceip799RHa/F
 JrEYJCLbboML6+2uE47cXugnEz2aYkDeiFygC4qTYxZAbGd6udZpsRVQTpjrhhoK
 B+FPxwK8r5OX6OG6TOfr3XqmAeifTLn7g0IwQ5xqILO/6II/aZI6YvwF7DOrJx3+
 0k6T+RwhSjy55l/8nCZnsbFQvxbYbVON7eQk5TNkting9CDHmWNzE5bTo0sUzWFt
 ajrtrWQ34Z98a30GqMWPT8vPjgQx6Jos1XHzGa379W/jyArqe2QAedSfauWIszez
 e4BdJBFD1YY=
 =C10r
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.2.3-1'

Drop ABI reference files and ABI fixes.
2015-10-06 22:16:11 +01:00
Ben Hutchings 7fa9f31f93 Move config for VMware paravirtual drivers to kernelarch-x86
These currently can't be enabled, and certainly wouldn't be useful,
on any other architecture.
2015-10-04 02:50:39 +01:00
Ben Hutchings 0762a217c3 [!x86] net: Disable VMXNET3, only useful in VMware x86 virtual machines 2015-10-04 02:50:33 +01:00
Ben Hutchings f3b997378d i2c: Enable I2C_CHARDEV as a module in all configurations with I2C support (Closes: #800597) 2015-10-03 02:10:53 +01:00
Ben Hutchings 9214813ef3 SCSI: Set SCSI_DH=y, as it's now a bool option for the SCSI core
udeb: Remove scsi_dh from scsi-core-modules
2015-09-27 21:02:51 +01:00
Ben Hutchings 297b345f7c Rename, move or delete obsolete Kconfig definitions as appropriate 2015-09-27 19:15:51 +01:00
Ben Hutchings a186aca8f8 Disable CRAMFS; it was obsoleted by squashfs and initramfs 2015-09-27 18:48:06 +01:00
Ben Hutchings a94e67cc3f mm: Change ZBUD back to built-in
It's not really useful as a module.  Currently we get the following
error messages on boot:

zpool: no driver for type zbud
zswap: zbud zpool not available
zswap: zpool creation failed
2015-09-24 02:46:27 +01:00