60b816f0e8
net/sched: Enable NET_CLS_MATCHALL, NET_ACT_IFE, NET_IFE_SKBMARK, NET_IFE_SKBPRIO as modules
2017-01-04 19:39:21 +00:00
ac48b8b17c
ipv6: Enable IPV6_ILA as module
2017-01-04 19:39:21 +00:00
acc71539d4
tcp: Enable TCP_CONG_NV as module
2017-01-04 19:39:20 +00:00
c417304ac9
inet: Enable INET_DIAG_DESTROY
2017-01-04 19:39:18 +00:00
5bdfbe981b
PCI: Enable PCIE_DPC (except for armel/versatile)
2017-01-04 15:08:00 +00:00
4dafc38558
Explicitly set various config symbols to their defaults
2017-01-04 15:08:00 +00:00
1f00b07780
Explicitly set various config symbols to their defaults
2017-01-02 03:37:41 +00:00
dc0857b075
cpufreq: Enable CPU_FREQ_GOV_SCHEDUTIL as module
2017-01-02 03:37:37 +00:00
943a798a07
IB: Enable INFINIBAND_RDMAVT as module
...
This is a new dependency of INFINIBAND_HFI1 and INFINIBAND_QIB.
Closes : #843792 )
2016-11-13 04:00:45 +00:00
18036575a7
HID: Enable HID_ALPS, HID_ASUS ( Closes : #843085 ), HID_CMEDIA as modules
2016-11-03 15:03:01 -06:00
0fc6a741fc
cpufreq: Re-enable CPU_FREQ_STAT, which can no longer be modular
2016-10-24 02:28:32 +01:00
f3b836ba7c
security,printk: Enable SECURITY_DMESG_RESTRICT
...
This prevents non-root users reading the kernel log by default (sysctl:
kernel.dmesg_restrict)
2016-10-07 03:04:47 +01:00
298af9afcc
Remove obsolete kconfig symbol GRKERNSEC=y
2016-10-07 02:57:38 +01:00
6573a2a7c7
security,perf: Replace GRKERNSEC_PERF_HARDEN patch with the version submitted upstream
...
This hasn't been *accepted* upstream, but maybe some day? It has gone
into AOSP.
2016-10-05 22:23:08 +01:00
357c2335a5
[arm*,powerpc*,s390x,sparc64,x86] Enable HARDENED_USERCOPY
...
This enables HARDENED_USERCOPY in the top-level config rather than
per-architecture, but it depends on a feature not yet implemented for
all architectures.
2016-10-05 22:05:04 +01:00
5ef50c5719
Enable SLAB_FREELIST_RANDOM
2016-10-05 22:01:38 +01:00
ef7e196951
[arm*,powerpc*,s390x,x86] Enable IO_STRICT_DEVMEM
...
This break dosemu and some old graphics drivers, and can be reverted
using the kernel parameter: iomem=relaxed
Again this is enabled in the top-level config, but it is only really
enabled for these architectures.
2016-10-01 22:42:58 +01:00
8e160e8d48
[arm*] Enable STRICT_DEVMEM
...
This enables STRICT_DEVMEM in the top-level config rather than per-
architecture, but the only additional kernel architectures that we
build and that support it are arm and arm64.
2016-10-01 22:18:20 +01:00
0e5f2ca52a
Enable BH1780 as module instead of SENSORS_BH1780
2016-09-07 21:33:23 +01:00
cce3a89e12
Update config for 4.8
2016-08-28 21:51:18 +01:00
68902cad17
Change RXKAD and SERIAL_8250_FINTEK from =m to =y
...
They are now options for other drivers.
2016-08-28 02:01:53 +01:00
0e156c15e3
fat: Mitigate the lack of UTF-8 case folding
...
FAT has to convert between Linux filenames ('iocharset' encoding,
should be UTF-8 today) and native filenames (UTF-16 for long names,
'codepage' encoding for short names). And it has to do case
folding in multiple encodings. Unfortunately Linux doesn't
implement case-folding for UTF-8, resulting in inconsistent name
lookup behaviour as shown in bug #833238 .
The 'utf8' option makes FAT assume the Linux filename encoding is
UTF-8, regardless of the 'iocharset' encoding. Enabling this and
setting iocharset=ascii mitigates the problems by enabling case-
folding for the ASCII subset.
Make that the default by enabling FAT_DEFAULT_UTF8 and setting
FAT_DEFAULT_IOCHARSET to "ascii".
2016-08-26 02:31:50 +01:00
0ddaf6aed3
cgroups: Enable memory controller by default
2016-07-29 12:23:32 +01:00
7aa0b02a27
Clean up kconfig with the aid of kconfigeditor2
...
Re-enable various options disabled by name changes in 4.7.
Delete options completely removed in 4.7.
2016-07-20 04:13:49 +01:00
50f9dba92e
sched: Enable SCHEDSTATS ( Closes : #796674 )
2016-07-20 03:55:56 +01:00
38ec618a21
fanotify: Enable FANOTIFY_ACCESS_PERMISSIONS ( Closes : #690737 )
...
Various free and proprietary AV products use this feature and users
apparently want it. But punting access checks to userland seems like
an easy way to deadlock the system, and there will be nothing we can
do about that. So warn and taint the kernel if this feature is
actually used.
2016-07-13 01:53:59 +01:00
cab1f743c8
Disable MODULE_SIG for architectures not supported by linux-signed
2016-06-06 18:12:47 +01:00
e41dc6a9cb
8139too: Use same configuration on all architectures
...
Enable 8139TOO_TUNE_TWISTER, 8139TOO_8129 and disable 8139TOO_PIO.
2016-05-23 21:43:19 +01:00
eaafcf8a39
Release linux (4.5.4-1).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=oSkt
-----END PGP SIGNATURE-----
Merge tag 'debian/4.5.4-1'
2016-05-16 20:00:43 +01:00
1f6b038c6f
netfilter: Enable NF_DUP_NETDEV / NFT_DUP_NETDEV / NFT_FWD_NETDEV as module
...
Recommended by Arturo Borrero Gonzalez.
2016-05-13 19:26:17 +09:00
16744a30b6
Update config for renaming/removal/replacement/merging/splitting of various symbols
2016-04-20 17:50:18 +01:00
74940e0a05
Disable UNUSED_SYMBOLS; it is now itself unused
2016-04-13 20:52:59 +01:00
f880a7ff25
Fix config for module signing
...
Replace my pubkey with an X.509 (PEM encoded) certificate as actually
required. Add quotes around the filenames in kconfig.
2016-04-04 10:41:46 +01:00
969431b952
certs: Set SYSTEM_TRUSTED_KEYS to my own personal key to support initial testing of signed modules
...
Also set MODULE_SIG_KEY to empty string to avoid including a build-
time generated key.
2016-04-03 13:12:23 +01:00
c955e35c32
modules: Enable MODULE_SIG and MODULE_SIG_SHA256
...
...but not MODULE_SIG_ALL as signatures will be packaged separately
2016-04-03 13:12:23 +01:00
7321950826
Add Matthew Garrett's securelevel patchset in preparation for Secure Boot support
2016-04-03 04:31:52 +01:00
e8347a4589
ntfs: Disable NTFS_RW ( Closes : #566356 )
...
ntfs-3g has much more complete write support.
2016-03-25 15:54:51 +00:00
c07a4d3987
Refresh config symbols for 4.5-rc4
...
Delete obsolete config symbols; rename/replace some as appropriate.
2016-02-15 17:50:19 +00:00
daf081c8a9
Enable TTY_PRINTK as module ( Closes : #814540 ).
2016-02-14 00:37:52 +09:00
2addfa5303
Really *really* enable NFT_REDIR_IPV4, NFT_REDIR_IPV6 as modules
2016-02-10 01:51:38 +00:00
aea9926d19
vfs,nvdimm: Really enable FS_DAX
2016-02-10 01:51:38 +00:00
abaed981d7
Enable many new config symbols
...
* bnx2x: Enable BNX2X_VXLAN
* cgroups: Enable CGROUP_PIDS
* crypto: Enable CRYPTO_CHACHA20, CRYPTO_POLY1305, CRYPTO_CHACHA20POLY1305,
CRYPTO_USER_API_AEAD as modules
* [x86] crypto: Enable CRYPTO_DEV_QAT_DH895xCC as module
* [amd64] crypto: Enable CRYPTO_CHACHA20_X86_64, CRYPTO_DES3_EDE_X86_64,
CRYPTO_POLY1305_X86_64 as modules
* [x86] dmaengine: Enable INTEL_IDMA64 as module
* debug: Enable SCHED_STACK_END_CHECK
* dm-cache: Enable DM_CACHE_SMQ as module
* ethernet: Enable BNXT, QED, QEDE as modules
* hci_uart: Enable BT_HCIUART_QCA
* HID: Enable HID_CORSAIR, HID_GEMBIRD as modules
* [x86] hwmon: Enable SENSORS_I5500 as module
* [x86] IB: Enable INFINIBAND_USNIC as module
* iio/light: Enable ACPI_ALS as module
* [x86] input: Enable SURFACE_PRO3_BUTTON as module
* [x86] iommu: Enable INTEL_IOMMU_SVM
* ipvs: Enable IP_VS_OVF as module
* media: Enable DVB_NETUP_UNIDVB, USB_GSPCA_TOUPTEK,_VIDEO_DT3155 as modules
* [x86] mfd: Enable MFD_INTEL_LPSS_ACPI, MFD_INTEL_LPSS_PCI as modules
* [amd64] mic: Enable INTEL_MIC_X100_DMA, MIC_COSM, SCIF, SCIF_BUS as modules
* [powerpc*/*64*] misc: Enable GENWQE as module
* net: Enable LWTUNNEL, NET_L3_MASTER_DEV; and MPLS_IPTUNNEL, NET_VRF
as modules
* [amd64] net: Enable FUJITSU_ES as module
* netfilter: Really enable NF_TABLES_NETDEV, NFT_REDIR_IPV4, NFT_REDIR_IPV6
as modules
* net/phy: Enable AQUANTIA_PHY, DP83848_PHY, MICROCHIP_PHY, TERANETICS_PHY
as modules
* net/sched: Really enable NET_CLS_FLOWER as module
* net/usb: Enable USB_LAN78XX, USB_NET_CH9200 as modules
* nfsd: Enable NFSD_PNFS
* [x86] pinctrl: Enable PINCTRL_BROXTON, PINCTRL_SUNRISEPOINT
* [x86] rfkill: Enable DELL_RBTN as module
* serial: Enable SERIAL_OF_PLATFORM as module
* sound/firewire: Enable SND_FIREWIRE_DIGI00X, SND_FIREWIRE_TASCAM as modules
* [x86] thermal: Enable INTEL_PCH_THERMAL, INTEL_SOC_DTS_THERMAL as modules
* [x86] Enable INTEL_PMC_IPC as module
2016-02-10 01:21:56 +00:00
e4d331b75f
Explicitly enable/disable many config symbols per defaults
2016-02-10 00:56:01 +00:00
7aef5117c3
Release linux (4.3.3-6).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQIVAwUAVp48e+e/yOyVhhEJAQovuQ//Qqsr1OgRXNSxEZ9x6Szj+4wlhcHwnCB/
hgAU+Lhkic44oGuNy9Hu9gnsiEqgWtDAXF1ZKFa+6iNsHEunommB84qc6a9qrtJ7
TGzKaqyXQmvrQj9j9u5/09nw3Bx+LqZqRtGGN6kBwyTUhP0ndg6xfHtSZXP6JAAf
8AKb5hvef25x9E4ZA9d2VzsgMwgtg9utxlZj/5WGhC4BwbkV96RrZu+hqO1akqsp
bPKmKER0HDGvIqOfJQYTqjLAY4LjTGMLZAfcPeLn7gzT5Io+cujqy1K3JnqxRaWM
5/bauyFnMaTiaN+oeozTtjs2wkdr+4EljGu0+WJAsvK8rQ6/mVJsqEcx8ESwuYx7
lch8NBERfG0mGCEcpn+J5hsye7w9LQHugT1eKdrxx8JA1aiamnfofYE6XGYhURkx
j0p2A5wZnB0T1j52mEwwa7HtNY0mgCfvFy1z45zVeQDyGH/09a/ZDCJf7ildOOLu
cPDjyw3dGAi7HpeM2EkMCzZa342PaNYR//vfBRLb6kgQjMLgVev9jdf/mv2mqsB8
qIDC1AtI1Tl9b3CTRGZ9RIdGZ93UpiiKKSoLpRyowuZYLej0Zk8zSfsbPDhwPq0c
F+JiMqIQDZh/ggC9rzGCDbntqNv9oYk3r2WuLalGZQhP7lPig5J5Dz2i221RGCyu
MjbiTh1PG1I=
=vF8G
-----END PGP SIGNATURE-----
Merge tag 'debian/4.3.3-6'
2016-01-19 13:44:04 +00:00
d56fab4480
gpio: Enable GPIO_SYSFS wherever GPIOLIB is enabled ( Closes : #810085 )
2016-01-08 19:36:09 +00:00
32ad61f561
Release linux (4.3.1-1).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQIVAwUAVmzgsee/yOyVhhEJAQrUHg//ZxBZ/le+h8y8tz+fk8/0dUaUD9SRiG6j
GdyRcCuvlg2L4nhaq/UOu5yMWOQEVjlaXWEFRHK6/gDpzMuxmHrAHu0d37+KtJoW
CGojya8fsjYOGawB5aLnneSi9V+rnTuLJbg3pkljuqq761N9hH/Atgh1jJuqGQ9F
ZoiAaJKuMfDDJm+h1lNCb/fgPF6zjMc1CiwJZZix8Nfj0H3umyM20hRKtonJ8La7
+2EKqytNNfwYu5oo2wiyS60TA+uziMhbmSP9HE/GjC1fAeF9DXGQUbxLuJop7WJo
FSV+WMMDw1zMgvhHIDZ92azOJ9XPX0NpGPLsxJxtwJCrNSNbtef/zXTsolb6bKvb
5JNjs7hOtjvGnbcyJd8LzE0yRXTycJNFCpalVsl3rXix/ZkMY4M1GOzqFTCgl1Id
7mDVbytDcAoPnU+lTHJUqZdhKN45bqmjFleVU74eKhkeVw+sQn+WGRdeV0cfAM5l
jBPOsV1Sicw7kZU91MRifcvkA66RqKy2cj7Nh8PsaJrotd5jWrw6hFo5rgqLQEn0
E0nbOxwnYzfeNUH/u+JJcOdAWJl33hFyN//6AO0HsS6xUimKDGKx3/JAfLK3kO+6
Xi8HjFHJOZrVIyZ1YQzrZ/c5jbrW8SnZeAIpkOCFP/c1Hn/sQCPo8g9OC551MQK8
G23wxWG7Ofc=
=mZbu
-----END PGP SIGNATURE-----
Merge tag 'debian/4.3.1-1'
All new patches are already included in 4.4-rc4.
Keep abiname as 'trunk'.
2015-12-13 03:56:14 +00:00
0eb4bd660e
sched: Enable CFS_BANDWIDTH ( Closes : #802746 )
2015-12-13 00:34:45 +00:00
0f2fe8b81a
Enable CC_STACKPROTECTOR_STRONG ( Closes : #805652 )
2015-12-13 00:34:39 +00:00
f6ee96a5ac
Clean up config for 4.4
...
Done with kconfigeditor2/process.py followed by renaming/deleting
symbols according to the upstream changes.
2015-12-10 18:46:19 +00:00
859321a4df
wireless: Enable WL_MEDIATEK, MT7601U as module
2015-11-19 00:27:44 +00:00
Ben Hutchings
Roger Shimizu