debian-packaging
/
linux
8
0
Fork 0
Code Releases Activity

Note Lukas Wunner's forward-porting work in patches

This commit is contained in:
Ben Hutchings 2017-04-20 00:48:59 +01:00
parent 40f397ca1a
commit 85c3a1be4d
5 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
debian/patches/bugfix/all/fs-add-module_softdep-declarations-for-hard-coded-cr.patch vendored
View File

@ -8,6 +8,7 @@ This helps initramfs builders and other tools to find the full
dependencies of a module.
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
[Lukas Wunner: Forward-ported to 4.11: drop parts applied upstream]
---
--- a/fs/btrfs/super.c
+++ b/fs/btrfs/super.c

1
debian/patches/features/all/securelevel/acpi-disable-acpi-table-override-if-securelevel-is-s.patch vendored
View File

@ -16,6 +16,7 @@ do not allow ACPI tables to be overridden if securelevel is set.
Signed-off-by: Linn Crosetto <linn@hpe.com>
[bwh: Forward-ported to 4.7: ACPI override code moved to drivers/acpi/tables.c]
[bwh: Forward-ported to 4.9: adjust context]
[Lukas Wunner: Forward-ported to 4.11: secure_boot field is now quad-state]
---
arch/x86/kernel/setup.c | 12 ++++++------
drivers/acpi/tables.c | 6 ++++++

3
debian/patches/features/all/securelevel/add-option-to-automatically-set-securelevel-when-in-.patch vendored
View File

@ -11,6 +11,9 @@ code at runtime. Add a configuration option that enforces this automatically
when enabled.
Signed-off-by: Matthew Garrett <mjg59@srcf.ucam.org>
[Lukas Wunner: Forward-ported to 4.11:
- Drop parts applied upstream
- secure_boot field is now quad-state]
---
arch/x86/Kconfig | 13 +++++++++++++
arch/x86/kernel/setup.c | 7 +++++++

1
debian/patches/features/all/securelevel/arm64-add-kernel-config-option-to-set-securelevel-wh.patch vendored
View File

@ -11,6 +11,7 @@ kernel using the FDT.
Signed-off-by: Linn Crosetto <linn@hpe.com>
[bwh: Forward-ported to 4.10: adjust context]
[Lukas Wunner: Forward-ported to 4.11: drop parts applied upstream]
---
v2:

1
debian/patches/features/all/securelevel/enable-cold-boot-attack-mitigation.patch vendored
View File

@ -3,6 +3,7 @@ Date: Tue, 12 Jan 2016 12:51:27 -0800
Subject: [18/18] Enable cold boot attack mitigation
Origin: https://github.com/mjg59/linux/commit/02d999574936dd234a508c0112a0200c135a5c34
[Lukas Wunner: Forward-ported to 4.11: adjust context]
---
arch/x86/boot/compressed/eboot.c | 22 ++++++++++++++++++++++
1 file changed, 22 insertions(+)