Commit Graph

11892 Commits

Author SHA1 Message Date
Salvatore Bonaccorso 609f818472 mpi: Fix NULL ptr dereference in mpi_powm() (CVE-2016-8650) 2016-11-30 09:04:11 +01:00
Martin Michlmayr 1a0657ea1a [arm64] Enable ARCH_MVEBU and related options
Enable ARCH_MVEBU for 64-bit ARM.  While this isn't tested on hardware,
I did my best to enable all required options.
2016-11-29 16:11:47 -08:00
Martin Michlmayr 04624dfa7e [arm64] Enable more QCOM options
Enable BT_QCOMSMD, QCOM_EBI2, QCOM_TSENS, QCOM_WCNSS_PIL and
EXTCON_QCOM_SPMI_MISC.
2016-11-29 16:10:30 -08:00
Salvatore Bonaccorso f82ecfdc9e Update to 4.8.11 2016-11-29 20:30:13 +01:00
Salvatore Bonaccorso 3536d5d7a6 Update to 4.8.10 2016-11-28 21:10:27 +01:00
Salvatore Bonaccorso a559c41683 Update to 4.8.9 2016-11-26 17:37:18 +01:00
Salvatore Bonaccorso b69731a96b Add CVE reference for CVE-2016-9555 2016-11-23 06:21:23 +01:00
Ben Hutchings fa9e148da4 Update to 4.9-rc6 2016-11-21 23:52:49 +00:00
Uwe Kleine-König 0971da3b71 [armhf,armel] fix CRC generation for modules 2016-11-19 17:06:08 +01:00
Ben Hutchings 85deb5386a [x86] video: Disable X86_SYSFB, FB_SIMPLE (Closes: #822575) 2016-11-16 21:35:16 +00:00
Ben Hutchings 2d21aaf508 [arm64] Enable more drivers for X-Gene (Really closes: #840061) 2016-11-16 21:22:18 +00:00
Ben Hutchings 96f3d8b5c3 Revert "include/uapi/linux/atm_zatm.h: include linux/time.h" (Closes: #844491) 2016-11-16 21:18:15 +00:00
Salvatore Bonaccorso b7117071e0 fs: Avoid premature clearing of capabilities (CVE-2015-1350)
Closes: #770492
2016-11-16 19:23:06 +01:00
Salvatore Bonaccorso b048cc5a7c fs: Give dentry to inode_change_ok() instead of inode 2016-11-16 19:20:21 +01:00
Salvatore Bonaccorso 2e74b80287 fuse: Propagate dentry down to inode_change_ok() 2016-11-16 19:18:11 +01:00
Salvatore Bonaccorso 055cd5a2d1 ceph: Propagate dentry down to inode_change_ok() 2016-11-16 19:14:26 +01:00
Salvatore Bonaccorso 2683f37d06 xfs: Propagate dentry down to inode_change_ok() 2016-11-16 19:11:36 +01:00
Salvatore Bonaccorso b7d167eabc Fix changelog entry for removal of ABI reference
Gbp-Dch: Ignore
2016-11-16 18:53:10 +01:00
Salvatore Bonaccorso 17805e05b4 Bump ABI to 2 and remove ABI reference for 4.8.0-2 2016-11-16 18:51:15 +01:00
Salvatore Bonaccorso 26676cdca0 Update to 4.8.8 2016-11-15 22:32:40 +01:00
Ben Hutchings 6c0c9bcf78 Prepare to release linux (4.9~rc5-1~exp1). 2016-11-14 05:19:31 +00:00
Ben Hutchings 4764f3dc4e w1: Disable W1_MASTER_MATROX 2016-11-13 23:27:39 +00:00
Ben Hutchings abd19bbc53 Release linux (4.8.7-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJYKMjFAAoJEOe/yOyVhhEJOtIP/RIo9vUk0PusThnw4bYQTA8T
 x8UTEpGJ+tqWBRL+yv7Ff3A8qP2TRAvJW2xzqu1+4UwNYgCSTa8A20bJ6crGzN8X
 Y6J7nqWFuzWsB2SHsPvYI1m0Q9luNrQ+1vkohpH53u8FfJxuceHwP/tFj6ShMl8i
 bNUiftui2Sc82JUjUdiG2EpXlIJH+N3aO8+R5ER3qUqoiHxChrslSbh3Lg8T8Tcp
 ItwwLi6K9s3CjYCiDiZ54+BYYQRy+rmTRFpEmgac4v2+HqXrMKAR4D6EomqMl3r1
 wHQ/F/Tt1GMvYvJniKWJIJVeCzuZSBmaQrL+D7xkKVGrzMo7QGGW1xr3DzyV1alc
 Ugx4k2nDbPDGinrbkhJbuds02VDIl8vfrnUM1NCYZ2GrReD5jJPj6OcZvlXRbjZw
 gUL1j+3w1dCa71E2rufZK7DZnGw4MjR9Q0cAefbgWNzEFDNh3nXQEKpxleEMmT/C
 xXVR2cfUpOAr1J4vR++I7kAn9re9tw7UlX3JYqH8+ty6Lm+DxrzoGMxEd1bmxYm9
 yzIn4O8x6LK2B7NdHfRs1SJC4rWWy/3+2z+5SnFroGMem8ugDhB95Q3QFvQGe9Ga
 zw1T6+GlYF9oglzY87XcKY2oUQveL8A45pM2TF3HsgGbx7wziR2yymjWAk03w32Y
 uYbKvmpQsH/wNrOA8E8I
 =uDst
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.8.7-1'

Drop ABI maintenance and patches that are already upstream.
2016-11-13 21:52:47 +00:00
Ben Hutchings 9ab8cb710b [x86] efi: Prevent mixed mode boot corruption with CONFIG_VMAP_STACK=y 2016-11-13 21:00:47 +00:00
Ben Hutchings b15e0cf459 Update to 4.9-rc5 2016-11-13 20:35:21 +00:00
Ben Hutchings 993ab494e5 [amd64] Explicitly enable VMAP_STACK 2016-11-13 20:04:32 +00:00
Ben Hutchings 343333fea3 Prepare to release linux (4.8.7-1). 2016-11-13 04:38:09 +00:00
Ben Hutchings 772d6648d5 debian/control: Build-Depend on a recent debhelper instead of dh-systemd 2016-11-13 04:38:06 +00:00
Ben Hutchings 15da3c4884 [arm64] Enable more drivers for X-Gene (Closes: #840061) 2016-11-13 04:28:46 +00:00
Ben Hutchings f8420f98bc Delete some garbage from the upstream shortlog for 4.8.7 2016-11-13 04:01:19 +00:00
Ben Hutchings d54fa44e4e liblockdep-dev: Depend on same version of liblockdep
I don't know if we'll ever build it again, but in case we do let's get
this right.
2016-11-13 04:00:45 +00:00
Ben Hutchings e1b8f7e7ad libcpupower-dev: Depend on libcpupower1 (Closes: #840852) 2016-11-13 04:00:45 +00:00
Ben Hutchings 943a798a07 IB: Enable INFINIBAND_RDMAVT as module
This is a new dependency of INFINIBAND_HFI1 and INFINIBAND_QIB.
Closes: #843792)
2016-11-13 04:00:45 +00:00
Ben Hutchings d442f1a220 Note some bug closures for 4.8.6 and 4.8.7 2016-11-13 04:00:45 +00:00
Ben Hutchings ab58b8b5ed [x86] ethernet: Enable ENA_ETHERNET as module 2016-11-13 03:34:00 +00:00
Ben Hutchings 0fc64e32b2 [armel] Drop versatile flavour, which has been broken since version 4.5~rc4-1~exp1 2016-11-13 03:30:03 +00:00
Ben Hutchings eeb90d2453 tcp: Enable TCP_CONG_BBR as module 2016-11-13 03:26:49 +00:00
Ben Hutchings 88d5cdd0e7 Update kconfig for 4.9
- Various ancient SCSI drivers were removed; delete config for them
- r8723au was replaced by rtl8xxxu; enable the latter instead and for
  all architectures
- netfilter config symbols were renamed; enable the new ones
- Various other config symbols are obsolete; delete them
- Various other config symbols moved to different Kconfig files
2016-11-13 03:23:23 +00:00
Ben Hutchings 50b2cacda1 Ignore ABI changes in Atheros wireless modules 2016-11-12 16:09:21 +00:00
Salvatore Bonaccorso e8880932f8 Update to 4.8.7 2016-11-11 20:00:01 +01:00
Ben Hutchings 82c55764b5 kbuild: Update -fno-PIE patches to match upstream 2016-11-10 20:26:29 +00:00
Ben Hutchings aecf13fddd linux-perf: Exclude perf-read-vdso* from shared library dependency check
Fixes FTBFS on sparc64:

    dpkg-shlibdeps: error: no dependency information found for /usr/lib32/libc.so.6 (used by debian/linux-perf-4.9/usr/lib/perf_4.9-core/perf-read-vdso32)
    Hint: check if the library actually comes from a package.
    dh_shlibdeps: dpkg-shlibdeps -Tdebian/linux-perf-4.9.substvars debian/linux-perf-4.9/usr/bin/perf_4.9 debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_xen.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_hrtimer.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_jbd2.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_function.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_mac80211.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_sched_switch.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_kvm.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_cfg80211.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_scsi.so debian/linux-perf-4.9/usr/lib/traceevent_4.9/plugins/plugin_kmem.so debian/linux-perf-4.9/usr/lib/perf_4.9-core/perf-read-vdso32 returned exit code 2
2016-11-07 23:42:33 +00:00
Ben Hutchings 11740f3768 [hppa] Update build-dependencies for 64-bit kernel (fixes FTBFS) 2016-11-07 23:37:37 +00:00
Salvatore Bonaccorso d99e060fe3 [x86] kvm: Check memopp before dereference (CVE-2016-8630) 2016-11-06 17:54:35 +01:00
Aurelien Jarno 83309d3e08 [arm64] Enable VIRTUALIZATION and KVM. 2016-11-05 23:24:14 +01:00
Aurelien Jarno 0f6628f57c Enable MAC802154, IEEE802154_ADF7242, IEEE802154_AT86RF230, IEEE802154_ATUSB, IEEE802154_CC2520 and IEEE802154_MRF24J40. 2016-11-05 23:18:39 +01:00
Ben Hutchings 790f2d1ab5 perf: Disable use of libcrypto (Closes: #843199) 2016-11-04 15:41:12 -06:00
Ben Hutchings 0384bbbffa Prepare to release linux (4.9~rc3-1~exp1). 2016-11-03 16:51:55 -06:00
Ben Hutchings 7aecddec04 [amd64] kbuild: Add -fno-PIE to scripts/gcc-x86_64-has-stack-protector.sh 2016-11-03 16:51:48 -06:00
Ben Hutchings 25e532ff97 debian/control: Fix build-dependency on openssl to work with new versions...
The new versions have Multi-Arch: allowed, and surprisingly dpkg doesn't
consider them to satisfy a dependency on openssl:native.  Change the
build-dependency into an alternative satisfiable by both old and new
versions. (Closes: #839145)

(cherry picked from commit 8e552ff10c)
2016-11-03 16:14:59 -06:00
Ben Hutchings d882885835 cpupower: Fix checks for CPU existence (Closes: #843071) 2016-11-03 16:11:35 -06:00
Ben Hutchings 18036575a7 HID: Enable HID_ALPS, HID_ASUS (Closes: #843085), HID_CMEDIA as modules 2016-11-03 15:03:01 -06:00
Ben Hutchings e904868241 Clean up kconfig using kconfigeditor2 2016-11-03 15:02:01 -06:00
Ben Hutchings 6159bcf693 Revert "Revert "Compile with gcc-6 on all architectures" and "Properly update to gcc-6""
This reverts commit 6f85def7ca.  It
should be OK to use gcc-6 now that we pass the -fno-PIE option where
necessary.
2016-11-03 13:33:44 -06:00
Ben Hutchings 586b6ef20b kbuild: add -fno-PIE (Closes: #841368) 2016-11-03 13:32:07 -06:00
Ben Hutchings c6318ee2ee Update to 4.9-rc3 2016-11-03 13:04:20 -06:00
Ben Hutchings 4975a766e7 [rt] Update to 4.8.6-rt5 2016-11-03 12:16:32 -06:00
Ben Hutchings 0acd08301d Update to 4.8.6 2016-11-03 12:08:20 -06:00
Ben Hutchings fc1f701c56 Add ABI reference for 4.8.0-1 2016-11-03 12:08:06 -06:00
Ben Hutchings 8e552ff10c debian/control: Fix build-dependency on openssl to work with new versions...
The new versions have Multi-Arch: allowed, and surprisingly dpkg doesn't
consider them to satisfy a dependency on openssl:native.  Change the
build-dependency into an alternative satisfiable by both old and new
versions. (Closes: #839145)
2016-11-02 12:21:30 -06:00
Ben Hutchings c391b26e8f debian/rules.real: Update install-doc rule for change to Sphinx HTML output
I can't see when or why this changed, but the HTML (and related) files
are now being generated in Documentation/output and not an html
subdirectory of that.
2016-11-01 09:39:36 -06:00
Ben Hutchings 4ac6860c3b Update to 4.9-rc2
Drop/refresh patches as appropriate.
2016-11-01 09:39:31 -06:00
Ben Hutchings 4c9bb889ce Prepare to release linux (4.8.5-1). 2016-10-28 20:34:09 +01:00
Ben Hutchings 64e2286fbd Update to 4.8.5
Drop patches applied upstream and move changelog text for the bugs
under the stable update.
2016-10-28 20:31:36 +01:00
Ben Hutchings a5f9f74d46 Set ABI to 1 and version to 4.8.4-1 2016-10-28 20:20:49 +01:00
Ben Hutchings e34c6c01c6 [x86] Input: elantech - add Fujitsu Lifebook E556 to force crc_enabled (Closes: #835160) 2016-10-28 20:18:08 +01:00
Ben Hutchings 4456cb3bc3 [x86] Input: i8042 - skip selftest on ASUS laptops 2016-10-28 20:16:42 +01:00
Ben Hutchings d9f03c486b netfilter: xt_NFLOG: fix unexpected truncated packet (Closes: #841261) 2016-10-28 20:16:09 +01:00
Salvatore Bonaccorso f86bc88075 [x86] boot/smp: Don't try to poke disabled/non-existent APIC
Closes: #841850
2016-10-26 09:17:48 +02:00
Ben Hutchings 8d9687d592 kconfig: Renumber SYMBOL_NEW, fixing regression of allnoconfig (Closes: #841357) 2016-10-24 02:34:51 +01:00
Ben Hutchings 20ade9991b [armhf] dts: imx53: add support for USB armory board (Closes: #840137) 2016-10-24 02:31:45 +01:00
Ben Hutchings 0fc6a741fc cpufreq: Re-enable CPU_FREQ_STAT, which can no longer be modular 2016-10-24 02:28:32 +01:00
Ben Hutchings fdd49c2465 cpufreq: Delete redundant kconfig settings 2016-10-24 02:28:20 +01:00
Ben Hutchings 261ee0b56f Prepare to release linux (4.8.4-1~exp1). 2016-10-23 17:21:13 +01:00
Ben Hutchings a84c9d1a67 [rt] Drop fixes included in 4.8.4, again 2016-10-23 17:20:52 +01:00
Ben Hutchings 004996eaf0 [rt] Update to 4.8.2-rt2 2016-10-23 04:47:23 +01:00
Ben Hutchings 68bef0cc04 Release linux (4.7.8-1).
-----BEGIN PGP SIGNATURE-----
 
 iQKPBAABCgB5BQJYB7RuXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
 ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ0NjQ0NDA5ODA4QzE3MUUwNTUzMURERUUw
 NTRDQjhGMzEzNDNDRjQ0EhxjYXJuaWxAZGViaWFuLm9yZwAKCRAFTLjzE0PPRKbv
 EACPw/ltBkYlQohcTxO+Jwg6Pj9J2UAcuQeDBsRLxOONLEcfChUtB6YbWnjpP4n7
 PBjFl1oXFlRL2AIp8yJJDNyLRApNHaIJ5Rw15OU0XBZi61iFkMhvZHtFUJI0VifU
 40otIo4/IAgWfYjcIl445m13bS21XzaYkT5hDmKihp1975gBP51LyVXtMPvYC2HO
 2grpj37HbDEhKfXSxPDG++ID20VrHOyKVNnfyzg9lOe0oNRT36j5i1QJtqQPekh1
 gWx98W/QqVpmeyRV1xvFjit2AzjwrIyp8H22wlN5IOG0HXitOrEA0AiQi1pjcMM0
 3O6wRmWTiOoiMiCQEQ+O+92U+uALTG0ssq/9rubAW70CieiQLKmQBZiSoY3JVDfl
 AojNP89QIx273w2aGQpZUY/RJnFWFy3fdh+c8wuLbTGkV3cCwXTd1VpNvi1EVKKK
 SjFytKI3AGLAihXiThbICSiynqsRKdh7ypWzoCF5OxdURk9/HXSOYpk0Ieuqze+R
 niLpETsVpfZCSHjjlG/7oaPAdGEqTm1BZ8a36HmzuByGftARwZ0XqaSUMsbOJC+n
 nZrljSt1migRNKcONPuAvVucOjtI6Bj52Azdq2KutQiKZt1Kie9jLSA32/VNT6u5
 xCRtMNQnatFCUqdJm5pI0pnUgdpL9nykbggY/g0uPBJfEg==
 =6RXa
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.7.8-1'
2016-10-23 04:43:12 +01:00
Ben Hutchings bc7a3c1c03 Update to 4.8.4
[rt] Drop fixes included in 4.8.4
2016-10-23 04:38:17 +01:00
Ben Hutchings 6f85def7ca Revert "Compile with gcc-6 on all architectures" and "Properly update to gcc-6"
This reverts commits d7eadea702 and
5dbd80758c.  gcc-6 currently can't
compile the kernel on amd64 due to conflicts the way it enables PIE by
default.
2016-10-23 04:35:42 +01:00
Salvatore Bonaccorso 9586076613 Prepare to release linux (4.7.8-1). 2016-10-19 17:58:10 +02:00
Salvatore Bonaccorso c5c7172244 mm: remove gup_flags FOLL_WRITE games from __get_user_pages() (CVE-2016-5195) 2016-10-19 17:56:02 +02:00
Salvatore Bonaccorso bcfd608039 Update to 4.7.8 2016-10-17 21:26:34 +02:00
Aurelien Jarno e7a457a218 [arm64] Enable SERIAL_8250_EXTENDED, SERIAL_8250_SHARE_IRQ and SERIAL_8250_BCM2835AUX, needed for Raspberry Pi 3. 2016-10-14 07:23:06 +02:00
Salvatore Bonaccorso 82d68fe753 KEYS: Fix short sprintf buffer in /proc/keys show function (CVE-2016-7042) 2016-10-13 22:50:12 +02:00
Ben Hutchings ae695bc66b scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer() (CVE-2016-7425) 2016-10-13 00:24:49 +01:00
Ben Hutchings efccbd4eb2 posix_acl: Clear SGID bit when setting file permissions (CVE-2016-7097) 2016-10-13 00:23:11 +01:00
Ben Hutchings c27b72f255 net: add recursion limit to GRO (CVE-2016-7039) 2016-10-13 00:17:03 +01:00
Ben Hutchings 2456c48897 Update to 4.7.7
Ignore ABI change in CAN.
2016-10-11 23:18:44 +01:00
Ben Hutchings 49bfd9c5b2 aufs: Update support patchest to aufs4.8-20161010 (no functional change) 2016-10-11 20:02:43 +01:00
Ben Hutchings 387dbb7803 [rt] Update to 4.8-rt1 and re-enable 2016-10-11 19:58:48 +01:00
Aurelien Jarno b2080e6bd9 [mips*] Enable RELOCATABLE, required to enabled RANDOMIZE_BASE. 2016-10-10 20:53:23 +02:00
Ben Hutchings 5dbd80758c Properly update to gcc-6 2016-10-07 21:08:05 +01:00
Ben Hutchings d288d4c41c Update to 4.8.1 2016-10-07 21:04:31 +01:00
Ben Hutchings 6429254d8f Release linux (4.7.6-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJX9/r9AAoJEOe/yOyVhhEJaFIQANHw/AYqMiP/0fnT8TRl1ISq
 1jK7KhHKs4h7O+f4r/D31FLUAC+YVhpAqw4aHCiTwg9fjVULLcxaX91AAtpdliGm
 NhWPT7/p8S6SiLTZtVxEb8MAzNqTnN4UdoBMdetWvHYSD/zq5U/BSWCTmm5pOu+X
 E6mzwHdkgzUF/Wnt3bmmSmU415BG4nW6xIroYfH3DDSoj1pkxSW9BUhIv2L5mY25
 emjFyXMqYRKJ93CBbCewNy0sLiL1V94P0r8HIdo2JDQg1QecYnYtV0AC/2kZODhm
 9l3OyB6Dp20y5ib+t6/+4WqvmXl6XrvvjZMtHXsyv44gC1j7e0ChrXbsYk//4Lpo
 FgQ8IYaNLskPEXyjzNHhwt61i0BIfZmKSJ17ldkgofAmt+Wa1926jFih5twFu5fj
 pMkkxlJUZU7QKxEtuhC7bSOzRzoXjb+xx21Zgenhc89GamagRAKncFbRlJ6K+4pS
 SMVlnXuLC0MHlUnAxZQ/N7hdhS235UxSFBp3qyOrYDWmjxyXkItyRfd7SKeSk3Vx
 ZikpGlvsvExvyzrjTdyLwBmlyj2I+XZxGxOT2pe4EYb1xxLXUTBAqU1Ycsd8XjC3
 lUqTn3r29PYeXRYC9eUsJryLJjejdkTIssM5Y9hhoi9KjMnLptRS7tJAeCO+C8QF
 Qyhb3De7DCWrkcl8YSJI
 =fl9b
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.7.6-1'
2016-10-07 21:04:15 +01:00
Ben Hutchings 8645d4069f bug script: Optionally use sudo to read a restricted kernel log
If kernel.dmesg_restrict is enabled (which it now will be by default)
and sudo is installed, ask whether to use sudo.  If this is denied or
fails then fall back to writing a placeholder in the bug report.
2016-10-07 03:11:08 +01:00
Ben Hutchings f3b836ba7c security,printk: Enable SECURITY_DMESG_RESTRICT
This prevents non-root users reading the kernel log by default (sysctl:
kernel.dmesg_restrict)
2016-10-07 03:04:47 +01:00
Ben Hutchings 298af9afcc Remove obsolete kconfig symbol GRKERNSEC=y 2016-10-07 02:57:38 +01:00
Ben Hutchings d7eadea702 Compile with gcc-6 on all architectures 2016-10-07 02:33:25 +01:00
Ben Hutchings b597bdebea [powerpc*/*64*] Enable OPAL_PRD, MTD, MTD_POWERNV_FLASH as modules
Closes: #838604, #838605
2016-10-07 02:30:49 +01:00
Ben Hutchings 4c6ac698fb Prepare to release linux (4.7.6-1). 2016-10-07 02:11:51 +01:00
Ben Hutchings ec2dc97fc9 mm: memcontrol: use special workqueue for creating per-memcg caches 2016-10-07 00:59:09 +01:00
Ben Hutchings 34bf1f9c3f [amd64] Enable RANDOMIZE_MEMORY 2016-10-05 22:38:43 +01:00
Ben Hutchings a16ba74627 grsecurity: Delete empty stub Kconfig and Makefile
Whatever features we get from Grsecurity in future are almost certain
to come via KSPP, so these aren't going to be useful.
2016-10-05 22:26:02 +01:00
Ben Hutchings 6573a2a7c7 security,perf: Replace GRKERNSEC_PERF_HARDEN patch with the version submitted upstream
This hasn't been *accepted* upstream, but maybe some day?  It has gone
into AOSP.
2016-10-05 22:23:08 +01:00
Ben Hutchings 357c2335a5 [arm*,powerpc*,s390x,sparc64,x86] Enable HARDENED_USERCOPY
This enables HARDENED_USERCOPY in the top-level config rather than
per-architecture, but it depends on a feature not yet implemented for
all architectures.
2016-10-05 22:05:04 +01:00
Ben Hutchings 5ef50c5719 Enable SLAB_FREELIST_RANDOM 2016-10-05 22:01:38 +01:00
Ben Hutchings 0118390eaa [mips*] Enable RANDOMIZE_BASE 2016-10-05 21:13:04 +01:00
Ben Hutchings d77be8b789 Clean up kconfig using kconfigeditor2 2016-10-05 21:12:49 +01:00
Ben Hutchings a6562544cc Update to 4.8 2016-10-05 21:06:42 +01:00
Ben Hutchings 224b1e126d [armhf] Enable driver for SolidRun ClearFog: USB_XHCI_MVEBU as module 2016-10-02 16:34:25 +01:00
Ben Hutchings 78f97bb258 Add of_mdio fixes to make device tree fixed-link definitions work properly 2016-10-02 16:26:16 +01:00
Ben Hutchings c418b49b09 Ignore ABI changes to private functions in 4.7.6 2016-10-02 16:23:50 +01:00
Ben Hutchings 5e04e30299 Add bug number for KiBi's installer fix 2016-10-02 02:50:12 +01:00
Ben Hutchings 0fadb11944 Update to 4.7.6 2016-10-02 02:46:17 +01:00
Ben Hutchings ac65dbd50d udeb: Move nls_utf8 from fat-modules to kernel-image
Many other filesystems need it but vfat no longer does.  It calls
built-in UTF-8 functions directly, while nominally using nls_ascii
as its I/O charset.
2016-10-02 02:19:16 +01:00
Ben Hutchings b324a81a22 udeb: Fold core-modules into kernel-image
So many module packages depend on core-modules already that almost
every installer image includes it.

The only obvious exceptions are the sh4 installer builds, as there
was no core-modules package on sh4.  For consistency, include the
default set of modules in its kernel-image package now.
2016-10-02 02:16:10 +01:00
Ben Hutchings 04774ae4fa udeb: Remove dependencies on nonexistent nls-core-modules packages
These dependencies are deleted by kernel-wedge automatically, but let's
not leave such misleading references around.
2016-10-02 01:51:06 +01:00
Cyril Brulebois b4bacd23c4 Add nls_ascii to the fat-modules udeb.
See commit 0e156c15e3 for the details
about utf8 vs. ascii iocharset for FAT. This fixes a regression with
EFI-related mounts within the Debian Installer.

Signed-off-by: Cyril Brulebois <kibi@debian.org>
2016-10-02 01:09:25 +01:00
Ben Hutchings f925c51d8a linux-image: Exclude vmlinux from stripping by dh_strip (fixes FTBFS on hppa) 2016-10-02 00:46:13 +01:00
Ben Hutchings ef7e196951 [arm*,powerpc*,s390x,x86] Enable IO_STRICT_DEVMEM
This break dosemu and some old graphics drivers, and can be reverted
using the kernel parameter: iomem=relaxed

Again this is enabled in the top-level config, but it is only really
enabled for these architectures.
2016-10-01 22:42:58 +01:00
Ben Hutchings 8e160e8d48 [arm*] Enable STRICT_DEVMEM
This enables STRICT_DEVMEM in the top-level config rather than per-
architecture, but the only additional kernel architectures that we
build and that support it are arm and arm64.
2016-10-01 22:18:20 +01:00
Ben Hutchings 2aced7818a [amd64] Enable LEGACY_VSYSCALL_NONE instead of LEGACY_VSYSCALL_EMULATE
This breaks (e)glibc 2.13 and earlier, and can be reverted using the kernel
parameter: vsyscall=emulate
2016-10-01 22:02:51 +01:00
Ben Hutchings be7e4761f8 debian/bin/gencontrol.py: Fix cross-build-dependencies if invoked under dpkg-buildpackage
By default dpkg-architecture lets the current environment override the
architecture specified by the -a option.  We mustn't let that happen
here as we are considering all architectures.  Use the -f option to
force use of our specified architecture.
2016-09-26 22:31:21 +01:00
Ben Hutchings 1c213f98f9 Prepare to release linux (4.8~rc8-1~exp1). 2016-09-26 04:27:06 +01:00
Ben Hutchings 978f935022 Update to 4.8-rc8 2016-09-26 04:27:02 +01:00
Ben Hutchings b2480a3dfe Release linux (4.7.5-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJX6HXOAAoJEOe/yOyVhhEJA68QAJSLxpMHBbl9474Q/SPonncf
 S7NXiYZQuo7STq0uHUVxtOTpVKRc/7y793tdtpI3Ec6nZqilS+4uKq1QNAh7kj6n
 JwilTLkfbjRS4+VqEEHJtVfK/bjijEep943W+uv3foMXPzbJulgRNrf54nUOFA2n
 WY1ZfL6Dp+tvys49UrK+3lsuY/ZCLzpck3m0rScGYgalfnZo00ttPto29YZjVXrp
 7RZset950hvEvL7cD7GXi2pqoEcvV3AISOABgKU0U6VitS1E8wJHW1pDZvHgZDKO
 55lAdyyEsAE96J1RzKwPjyHTKDmr1v6AiqNxwviLndwoLflYHUbsZBx0H9pRE0Gi
 45IDQELGFToJ/4dDNijk3oyOsQaV06f0gYv+FqGnN33IWxrlz9oQ3PSWB6qA9dr5
 vBGG1tzoYFdManBwZvH5smD25Ckc3TK2UzMqJA1BIjRpCoajxfmZWcgfPH8Z9gwJ
 5giCQkEKCbbwAXmRwVCYDFp5t0DlnyiY0/IizunHUxFapl9B6SNRFPhJVbUCNV07
 /yzsRU+TcNnV1oGQE9+uWTIelUQmc5cvMiaIlW7fifrqPAKCCnk2imYI1Tx1jsVl
 VqLo1Jalt+iZGKsEt6I3ST6LX1k/QFkz7BmJ4Yz+NdwwN6/Jq5rufFxLWGdIYPdI
 N4PnNBVMK0ooLqbaatRO
 =PYYu
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.7.5-1'

Drop ABI maintenance patches.
2016-09-26 02:16:56 +01:00
Ben Hutchings f7d84f7a69 Prepare to release linux (4.7.5-1). 2016-09-26 01:48:21 +01:00
Ben Hutchings 7a0f81fe53 ext4: Fix checksum validation for inodes with small i_extra_isize
Closes: #838544, regression in 4.7.4
2016-09-25 22:00:56 +01:00
Ben Hutchings bdec0fe8f0 Update to 4.7.5 2016-09-25 03:05:35 +01:00
Ben Hutchings 1f0935b411 Regroup ABI maintenance patches 2016-09-25 01:33:49 +01:00
Ben Hutchings c0b958cd5f [powerpc,powerpcspe,ppc64] linux-image: Suppress automatic dbgsym packages
Currently on powerpc, powerpcspe and ppc64 we get an automatic dbgsym
package with symbols for the bootwrapper tools (addnote, hack-coff,
mktree).  We should either put them in linux-image-*-dbgsym or
nowhere.  For now, opt for nowhere.

Move the dh_strip invocation from the install-base rule to the
install-image_... rule.  None of the other packages using install-base
should contain any executables.
2016-09-23 03:21:18 +01:00
Ben Hutchings 24358fda8e [hppa] tracing: Re-enable FTRACE 2016-09-23 00:53:08 +01:00
Ben Hutchings 9067a5df84 [hppa,mips*,powerpc*] linux-image: Strip debug symbols from vmlinux (really closes: #837588) 2016-09-23 00:51:50 +01:00
Ben Hutchings 656e46ab02 Update to 4.8-rc7 2016-09-22 03:25:31 +01:00
Ben Hutchings 04355bf580 [armhf] media: Enable VIDEO_V4L2_SUBDEV_API and VIDEO_OMAP3 as module
Originally done in 4.7.4-1 then reverted due to ABI breakage.
2016-09-22 01:19:37 +01:00
Ben Hutchings b37c595561 Release linux (4.7.4-2).
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJX4HvgAAoJEOe/yOyVhhEJq9cP/j1XO1dNpOXxq0JZod66K1sl
 JIC4LPZ3i+kiAD0amMZiAexAuCpqCDjinjVr/pAhEoAa79983tFoY9yWjDCAW+9H
 0j7Torb5wQ76BlyXCjSoaztcQmzQ1YiCvjIzk4hCJCcvqdTuA1MMr7+AbXAgi3xE
 Es/G7ai+7SK5suEYgsbliM2ndFFMtIDqgpvDVDFNBDt61m2RXKxw7SQwyItIx+Hn
 n7Aq/P+LP7BjMSP6nW6EafF/RidbAwq4x+FKqzGyZhVQV7c3YFbh0EA7lVcTDhC7
 A1ZbdeUjiFhUKchRPa56qf+eAI8sBEeU3Ga1mhpkxL8RkFKwvWmmB2J0tBE7KHgw
 WCy+8nPxnLAq3eVIkOcB3MuvNdM9DvvtQ7X5NjXnBIfq06OX4y+C+udMpafmegTG
 5YB3FVppFQNGZcOxeF9hCQspHGvBsTGRYoK3hxzx4AY94E1cakl08oZte4dHYALz
 GvP/tjbLH5i/g9djVNGtfZCHKMZbDq2QhD60GNwFoN/ssX4Q/L3q4N+eyJD9KoQM
 Bu44v1ZY7M13F4t5JUomjU2e5mze3opxEB2C7vIoyJfaUvtAWX/mn8SysDGdT0OJ
 zd8ow6IntzcL+mqxrarOPMenSt2yqoQ6WdkYkpF5aCTj2GJyAkU7dUWfWdKWtLM7
 yjuIvqRAcVzMU9XuU8uf
 =s0s4
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.7.4-2'

- Drop ABI references and ABI maintenance patches
- Fix Kconfig symbols for omapdss sub-drivers, which were renamed for 4.8
2016-09-22 01:17:51 +01:00
Ben Hutchings 95d8991d55 Prepare to release linux (4.7.4-2). 2016-09-19 22:09:42 +01:00
Ben Hutchings 7c621c6961 [hppa] Ignore ABI changes caused by disabling CONFIG_FTRACE (fixes FTBFS) 2016-09-19 19:56:18 +01:00
Ben Hutchings 04accecc7b [armhf] media: Disable VIDEO_V4L2_SUBDEV_API and VIDEO_OMAP3 to avoid ABI change (fixes FTBFS) 2016-09-19 18:28:33 +01:00
Ben Hutchings 5a8adae35b [arm64] Revert "arm64: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO" (fixes FTBFS) 2016-09-19 18:10:01 +01:00
Ben Hutchings aaa85335e1 Prepare to release linux (4.7.4-1). 2016-09-18 14:56:02 +01:00
Ben Hutchings 35221d0e23 bug script: Stop describing TAINT_UNSIGNED_MODULE as expected 2016-09-18 14:46:25 +01:00
Ben Hutchings b8c6a37dd9 Wrap a long line in changelog 2016-09-17 00:24:47 +01:00
Ben Hutchings 25ac8ad209 [armhf] Enable drivers and options for OpenPandora console
POWER_AVS_OMAP as built-in; DISPLAY_CONNECTOR_ANALOG_TV,
DISPLAY_PANEL_TPO_TD043MTEA1, SENSORS_TWL4030_MADC, VIDEO_OMAP3,
BATTERY_TWL4030_MADC, BACKLIGHT_PANDORA, HDQ_MASTER_OMAP as modules;
OMAP2_DSS_DSI

Closes: #835893, thanks to Vagrant Cascadian
2016-09-17 00:22:55 +01:00
Ben Hutchings ec2a255f35 [armhf] dsa: Enable drivers for Lamobo R1 (aka BPi-R1)
B53, B53_MDIO_DRIVER as modules

Closes: #836231, thanks to Vagrant Cascadian
2016-09-17 00:12:49 +01:00
Ben Hutchings 96e33a9436 [armhf] Enable drivers for ASUS Chromebook C201 (veyron-speedy)
MFD_RK808, POWER_AVS, POWER_RESET_GPIO_RESTART, RTC_DRV_RK808,
ROCKCHIP_PM_DOMAINS as built-in; DRM_PANEL_SIMPLE, ROCKCHIP_ANALOGIX_DP,
ROCKCHIP_DW_MIPI_DSI, I2C_CROS_EC_TUNNEL, KEYBOARD_CROS_EC, OUSE_ELAN_I2C,
MFD_CROS_EC, MFD_CROS_EC_SPI, MFD_RK808, PHY_ROCKCHIP_EMMC, PHY_ROCKCHIP_DP,
BATTERY_SBS, CHARGER_GPIO, REGULATOR_RK808, BACKLIGHT_PWM as modules

Closes: #836251, thanks to Vagrant Cascadian
2016-09-17 00:06:43 +01:00
Ben Hutchings 550ac5c6dc linux-image: postrm: Make failure of rmdir on purge non-fatal (Closes: #836282) 2016-09-16 23:49:36 +01:00
Ben Hutchings fca831a4d1 [armhf] udeb: Replace dwmac-socfpga with dwmac-altr-socfpga in nic-modules
Closes: #837110, thanks to Vagrant Cascadian
2016-09-16 23:29:04 +01:00
Ben Hutchings 45fbf5a22f [armhf] Enable drivers for Novena
MFD_STMPE as built-in; DRM_PANEL_SIMPLE, MMA8452, TOUCHSCREEN_STMPE,
BATTERY_SBS, BACKLIGHT_PWM, SND_SOC_IMX_ES8328 as modules

Closes: #837627, thanks to Vagrant Cascadian
2016-09-16 23:25:11 +01:00
Ben Hutchings 2d327101d1 [arm64] mm: Limit TASK_SIZE_64 for compatibility 2016-09-16 16:40:35 +01:00