2013-07-01 06:29:13 +00:00
|
|
|
# Changes to support package build system
|
2012-06-03 23:29:42 +00:00
|
|
|
debian/version.patch
|
2015-05-12 18:52:20 +00:00
|
|
|
debian/uname-version-timestamp.patch
|
2012-06-03 23:29:42 +00:00
|
|
|
debian/kernelvariables.patch
|
2013-01-17 10:04:32 +00:00
|
|
|
debian/gitignore.patch
|
2013-07-01 06:29:13 +00:00
|
|
|
debian/mips-disable-werror.patch
|
|
|
|
debian/arch-sh4-fix-uimage-build.patch
|
|
|
|
debian/powerpcspe-omit-uimage.patch
|
|
|
|
features/all/Kbuild-kconfig-Verbose-version-of-listnewconfig.patch
|
2016-03-21 01:37:26 +00:00
|
|
|
debian/modpost-symbol-prefix.patch
|
|
|
|
debian/tools-perf-version.patch
|
|
|
|
debian/tools-perf-install.patch
|
2007-01-08 18:19:26 +00:00
|
|
|
|
2013-07-01 06:29:13 +00:00
|
|
|
# Fixes/improvements to firmware loading
|
2012-06-03 23:29:42 +00:00
|
|
|
features/all/drivers-media-dvb-usb-af9005-request_firmware.patch
|
2013-07-01 06:29:13 +00:00
|
|
|
debian/iwlwifi-do-not-request-unreleased-firmware.patch
|
|
|
|
bugfix/all/firmware_class-log-every-success-and-failure.patch
|
|
|
|
bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch
|
|
|
|
bugfix/all/radeon-firmware-is-required-for-drm-and-kms-on-r600-onward.patch
|
2007-10-25 22:17:50 +00:00
|
|
|
|
2015-06-16 22:42:42 +00:00
|
|
|
# Patches from aufs4 repository, imported with
|
|
|
|
# debian/patches/features/all/aufs4/gen-patch. These are only the
|
|
|
|
# changes needed to allow aufs to be built out-of-tree.
|
|
|
|
features/all/aufs4/aufs4-base.patch
|
|
|
|
features/all/aufs4/aufs4-mmap.patch
|
|
|
|
features/all/aufs4/aufs4-standalone.patch
|
|
|
|
|
2013-07-01 06:29:13 +00:00
|
|
|
# Change some defaults for security reasons
|
2012-06-03 23:29:42 +00:00
|
|
|
debian/af_802154-Disable-auto-loading-as-mitigation-against.patch
|
|
|
|
debian/rds-Disable-auto-loading-as-mitigation-against-local.patch
|
|
|
|
debian/decnet-Disable-auto-loading-as-mitigation-against-lo.patch
|
2013-07-01 06:29:13 +00:00
|
|
|
debian/fs-enable-link-security-restrictions-by-default.patch
|
2010-09-19 01:53:29 +00:00
|
|
|
|
2013-07-01 06:29:13 +00:00
|
|
|
# Set various features runtime-disabled by default
|
2012-06-03 23:29:42 +00:00
|
|
|
debian/sched-autogroup-disabled.patch
|
2015-02-10 01:13:04 +00:00
|
|
|
features/all/cgroups-Allow-memory-cgroup-support-to-be-included-b.patch
|
|
|
|
debian/cgroups-Document-the-Debian-memory-resource-controll.patch
|
2013-07-01 06:29:13 +00:00
|
|
|
debian/yama-disable-by-default.patch
|
2014-03-06 22:55:18 +00:00
|
|
|
debian/add-sysctl-to-disallow-unprivileged-CLONE_NEWUSER-by-default.patch
|
2012-07-26 01:04:02 +00:00
|
|
|
|
2014-03-06 22:55:18 +00:00
|
|
|
# Disable autoloading/probing of various drivers by default
|
2013-07-01 06:29:13 +00:00
|
|
|
debian/cdc_ncm-cdc_mbim-use-ncm-by-default.patch
|
2014-03-06 22:55:18 +00:00
|
|
|
debian/snd-pcsp-disable-autoload.patch
|
|
|
|
bugfix/x86/viafb-autoload-on-olpc-xo1.5-only.patch
|
2013-01-16 19:52:23 +00:00
|
|
|
|
2014-03-06 22:55:18 +00:00
|
|
|
# Arch bug fixes
|
2016-04-21 22:01:29 +00:00
|
|
|
bugfix/mips/MIPS-Allow-emulation-for-unaligned-LSDXC1-instructions.patch
|
2016-05-08 11:07:36 +00:00
|
|
|
bugfix/powerpc/powerpc-fix-sstep-compile-on-powerpcspe.patch
|
2016-05-29 21:05:54 +00:00
|
|
|
bugfix/arm/dwc3-exynos-fix-deferred-probing-storm.patch
|
2014-03-06 22:55:18 +00:00
|
|
|
|
2014-08-24 18:45:12 +00:00
|
|
|
# Arch features
|
2014-11-04 00:31:44 +00:00
|
|
|
features/mips/MIPS-increase-MAX-PHYSMEM-BITS-on-Loongson-3-only.patch
|
2015-02-10 01:13:04 +00:00
|
|
|
features/mips/MIPS-Loongson-3-Add-Loongson-LS3A-RS780E-1-way-machi.patch
|
2014-10-31 15:37:32 +00:00
|
|
|
features/mips/MIPS-octeon-Add-support-for-the-UBNT-E200-board.patch
|
2016-04-04 20:20:30 +00:00
|
|
|
features/mips/MIPS-Octeon-Add-Octeon-III-CN7xxx-interface-detection.patch
|
2016-05-13 16:54:45 +00:00
|
|
|
features/mips/MIPS-Octeon-detect-and-fix-byte-swapped-initramfs.patch
|
2014-09-12 13:44:38 +00:00
|
|
|
features/x86/x86-memtest-WARN-if-bad-RAM-found.patch
|
|
|
|
features/x86/x86-make-x32-syscall-support-conditional.patch
|
2016-03-30 15:30:03 +00:00
|
|
|
features/arm/device-tree/ARM-dts-kirkwood-add-kirkwood-ds112.dtb-to-Makefile.patch
|
|
|
|
features/arm/device-tree/ARM-dts-kirkwood-add-kirkwood-nsa320.dtb-to-Makefile.patch
|
2016-04-07 23:33:27 +00:00
|
|
|
features/arm/device-tree/ARM-dts-orion5x-add-device-tree-for-kurobox-pro.patch
|
2016-01-02 19:18:05 +00:00
|
|
|
|
2016-01-02 19:20:40 +00:00
|
|
|
# Miscellaneous bug fixes
|
|
|
|
bugfix/all/kbuild-use-nostdinc-in-compile-tests.patch
|
|
|
|
bugfix/all/disable-some-marvell-phys.patch
|
|
|
|
bugfix/all/rtsx_usb_ms-use-msleep_interruptible-in-polling-loop.patch
|
2016-04-13 22:31:28 +00:00
|
|
|
bugfix/all/fs-add-module_softdep-declarations-for-hard-coded-cr.patch
|
2016-04-28 15:17:53 +00:00
|
|
|
bugfix/all/module-invalidate-signatures-on-force-loaded-modules.patch
|
2016-05-16 02:33:38 +00:00
|
|
|
bugfix/all/videobuf2-core-fix-crash-after-fixing-cve-2016-4568.patch
|
2016-01-02 19:20:40 +00:00
|
|
|
|
|
|
|
# Miscellaneous features
|
|
|
|
|
|
|
|
# Hardening from grsecurity
|
|
|
|
features/all/grsecurity/grsecurity-kconfig.patch
|
|
|
|
# Disabled until we add code into the grsecurity/ directory
|
|
|
|
#features/all/grsecurity/grsecurity-kbuild.patch
|
|
|
|
features/all/grsecurity/grkernsec_perf_harden.patch
|
|
|
|
|
2016-04-03 03:04:45 +00:00
|
|
|
# Securelevel patchset from mjg59
|
|
|
|
features/all/securelevel/add-bsd-style-securelevel-support.patch
|
|
|
|
features/all/securelevel/enforce-module-signatures-when-securelevel-is-greate.patch
|
|
|
|
features/all/securelevel/pci-lock-down-bar-access-when-securelevel-is-enabled.patch
|
|
|
|
features/all/securelevel/x86-lock-down-io-port-access-when-securelevel-is-ena.patch
|
|
|
|
features/all/securelevel/restrict-dev-mem-and-dev-kmem-when-securelevel-is-se.patch
|
|
|
|
features/all/securelevel/acpi-limit-access-to-custom_method-if-securelevel-is.patch
|
|
|
|
features/all/securelevel/acpi-ignore-acpi_rsdp-kernel-parameter-when-securele.patch
|
|
|
|
features/all/securelevel/kexec-disable-at-runtime-if-securelevel-has-been-set.patch
|
|
|
|
features/all/securelevel/uswsusp-disable-when-securelevel-is-set.patch
|
|
|
|
features/all/securelevel/x86-restrict-msr-access-when-securelevel-is-set.patch
|
|
|
|
features/all/securelevel/asus-wmi-restrict-debugfs-interface-when-securelevel.patch
|
|
|
|
features/all/securelevel/add-option-to-automatically-set-securelevel-when-in-.patch
|
|
|
|
features/all/securelevel/efi-disable-secure-boot-if-shim-is-in-insecure-mode.patch
|
|
|
|
features/all/securelevel/hibernate-disable-when-securelevel-is-set.patch
|
|
|
|
features/all/securelevel/kexec-uefi-copy-secure_boot-flag-in-boot-params-acro.patch
|
|
|
|
features/all/securelevel/acpi-disable-acpi-table-override-if-securelevel-is-s.patch
|
|
|
|
features/all/securelevel/acpi-disable-apei-error-injection-if-securelevel-is-.patch
|
|
|
|
features/all/securelevel/enable-cold-boot-attack-mitigation.patch
|
2016-06-03 00:15:37 +00:00
|
|
|
features/all/securelevel/mtd-disable-slram-and-phram-when-securelevel-is-enabled.patch
|
2016-04-03 03:04:45 +00:00
|
|
|
|
2016-01-02 19:18:05 +00:00
|
|
|
# Security fixes
|
2015-12-27 06:19:08 +00:00
|
|
|
bugfix/all/ptrace-being-capable-wrt-a-process-requires-mapped-uids-gids.patch
|
2016-02-16 02:50:51 +00:00
|
|
|
debian/i386-686-pae-pci-set-pci-nobios-by-default.patch
|
2016-05-16 19:02:37 +00:00
|
|
|
bugfix/all/media-videobuf2-v4l2-verify-planes-array-in-buffer-d.patch
|
2016-05-21 14:46:12 +00:00
|
|
|
bugfix/all/tipc-check-nl-sock-before-parsing-nested-attributes.patch
|
2016-05-27 15:20:32 +00:00
|
|
|
bugfix/x86/kvm-vmx-more-complete-state-update-on-apicv-on-off.patch
|
|
|
|
bugfix/all/usb-usbfs-fix-potential-infoleak-in-devio.patch
|
|
|
|
bugfix/all/alsa-timer-fix-leak-in-sndrv_timer_ioctl_params.patch
|
|
|
|
bugfix/all/alsa-timer-fix-leak-in-events-via-snd_timer_user_cca.patch
|
|
|
|
bugfix/all/alsa-timer-fix-leak-in-events-via-snd_timer_user_tin.patch
|
2016-06-11 05:06:31 +00:00
|
|
|
bugfix/all/proc-prevent-stacking-filesystems-on-top.patch
|
|
|
|
bugfix/all/ecryptfs-forbid-opening-files-without-mmap-handler.patch
|
|
|
|
bugfix/all/sched-panic-on-corrupted-stack-end.patch
|
2016-06-11 05:18:28 +00:00
|
|
|
bugfix/all/tipc-fix-an-infoleak-in-tipc_nl_compat_link_dump.patch
|
2016-06-11 05:25:07 +00:00
|
|
|
bugfix/all/rds-fix-an-infoleak-in-rds_inc_info_copy.patch
|
2016-03-20 22:25:02 +00:00
|
|
|
|
2016-06-16 11:37:35 +00:00
|
|
|
# ABI maintenance
|
2016-06-17 00:50:50 +00:00
|
|
|
debian/mips-siginfo-fix-abi-change-in-4.6.2.patch
|
|
|
|
debian/mips-libgcc-fix-abi-change-in-4.6.2.patch
|
2016-06-16 11:37:35 +00:00
|
|
|
|
2016-03-21 01:37:26 +00:00
|
|
|
# Tools bug fixes
|
|
|
|
bugfix/all/usbip-document-tcp-wrappers.patch
|
|
|
|
bugfix/all/kbuild-fix-recordmcount-dependency.patch
|
|
|
|
bugfix/all/usbip-include-uninstalled-linux-usbip-h.patch
|
|
|
|
bugfix/all/tools-perf-man-date.patch
|
|
|
|
bugfix/all/lockdep-fix-oot-build.patch
|
|
|
|
bugfix/all/lockdep-fix-soname.patch
|
|
|
|
bugfix/all/tools-perf-remove-shebangs.patch
|
|
|
|
bugfix/all/tools-lib-traceevent-use-ldflags.patch
|
|
|
|
bugfix/all/tools-lib-lockdep-use-ldflags.patch
|
|
|
|
bugfix/x86/tools-hv-fix-fortify-format-warning.patch
|
|
|
|
bugfix/x86/revert-perf-build-fix-libunwind-feature-detection-on.patch
|
|
|
|
bugfix/alpha/alpha-uapi-add-support-for-__sane_userspace_types__.patch
|
|
|
|
bugfix/x86/revert-perf-tools-x86-build-perf-on-older-user-space.patch
|
|
|
|
bugfix/all/tools-build-remove-bpf-run-time-check-at-build-time.patch
|
|
|
|
bugfix/all/power-cpupower-fix-manpages-NAME.patch
|
|
|
|
bugfix/all/tools-lib-traceevent-fix-use-of-uninitialized-variables.patch
|
2016-04-04 18:28:26 +00:00
|
|
|
bugfix/all/scripts-fix-x.509-pem-support-in-sign-file.patch
|
2016-06-13 13:00:39 +00:00
|
|
|
bugfix/all/liblockdep-fix-undefined-symbol-prandom_u32.patch
|
|
|
|
bugfix/all/liblockdep-reduce-max_lock_depth-to-avoid-overflowin.patch
|
|
|
|
bugfix/all/liblockdep-define-the-array_size-macro.patch
|
|
|
|
bugfix/all/liblockdep-enable-wall-by-default.patch
|
|
|
|
bugfix/all/liblockdep-fix-unused-value-warnings.patch
|
|
|
|
bugfix/all/liblockdep-fix-set-but-not-used-warnings.patch
|
|
|
|
bugfix/all/liblockdep-fix-defined-but-not-used-warning-for-init.patch
|