9fa5f38a40
linux-headers: Avoid mixed implicit and normal rules in Makefile
...
Thanks to Thierry Herbelot; closes : #822666
2016-04-28 14:08:54 +02:00
9321f394c6
[sparc] Implement and wire up hotplug and modalias_show for vio
...
Thanks to Adrian Glaubitz; closes : #815977
2016-04-28 00:09:05 +02:00
7e79e9a13a
README.Debian: Change more URLs to use https: scheme
2016-04-25 00:52:47 +02:00
35602a868b
linux-source: Fix up module signing configuration in included kernel config files
...
Our signing certificate isn't included in the source tarball and would
be pointless to include in custom kernels. Custom kernels also won't
have a separate signing stage. So remove our settings for
CONFIG_MODULE_SIG_ALL, CONFIG_MODULE_SIG_KEY and
CONFIG_SYSTEM_TRUSTED_KEYS. This should cause custom kernels based on
the included configs to follow the upstream default for signing, which
is to use a new key pair for each build.
2016-04-25 00:48:09 +02:00
56d41759a0
Add module signature fix to the changelog
2016-04-23 20:52:24 +02:00
dff5585589
module: Invalidate signatures on force-loaded modules
2016-04-23 20:48:33 +02:00
5f6cfd0660
[x86] sound/soc/intel: Enable many more drivers ( Closes : #822267 )
2016-04-22 22:19:57 +02:00
8a0b066e92
Note closure of #821442
2016-04-22 16:46:48 +02:00
2d9dcd6be6
atl2: Disable unimplemented scatter/gather feature (CVE-2016-2117)
2016-04-22 08:10:30 +01:00
b20f5e22b0
[armel/marvell] dts: kirkwood: fix SD slot default configuration for OpenRD ( Closes : #811351 )
2016-04-22 08:06:49 +01:00
fe835b64b1
Update to 4.5.2
...
As this includes changes to header_ops and dentry_operations, bump
the ABI number to 2.
2016-04-22 08:05:48 +01:00
c5cec59895
[mips*] Emulate unaligned LDXC1 and SDXC1 instructions.
2016-04-22 00:01:29 +02:00
9c63adf133
[x86] USB: usbip: fix potential out-of-bounds write (CVE-2016-3955)
2016-04-19 16:30:27 +02:00
1a7a98e90e
Add ABI reference for 4.5.0-1
2016-04-16 02:49:49 +01:00
690df616c2
fs: Consolidate softdep declarations in each module
2016-04-14 20:40:33 +01:00
92f972094e
[x86] xen: suppress hugetlbfs in PV guests (CVE-2016-3961)
2016-04-14 20:57:52 +02:00
95034e0acb
Prepare to release linux (4.5.1-1).
2016-04-14 12:30:56 +01:00
2ed6f0e2f9
bug script: Add new taint flags including TAINT_UNSIGNED_MODULE
2016-04-14 03:47:00 +01:00
e49fde3f56
fs: Add '#include <linux/module.h>' where necessary in the crypto softdep patch
2016-04-14 00:35:10 +01:00
315743de11
[armhf] usb-modules: Add modules required for BeagleBoard-X15 ( Closes : #815848 )
...
Thanks to Vagrant Cascadian
2016-04-14 00:07:03 +01:00
debb03a542
Note that #817816 was fixed in 4.5.1
2016-04-14 00:05:26 +01:00
c37887e538
Re-group the patch series
2016-04-13 23:31:28 +01:00
a8c2d3c699
nbd: Create size change events for userspace ( Closes : #812487 )
2016-04-13 23:23:32 +01:00
e3395a2405
[armhf] watchdog: Enable S3C2410_WATCHDOG as module ( Closes : #819377 )
2016-04-13 23:12:44 +01:00
31a7d069fc
Clean up kconfig with kconfigeditor2
2016-04-13 23:11:32 +01:00
f782f13c81
[armhf] Add support for octa-core big.LITTLE systems including Exynos ( Closes : #819379 )
2016-04-13 23:11:02 +01:00
1d7f287b7a
[x86] ACPI / processor: Request native thermal interrupt handling via _OSC ( Closes : #817016 , #819336 )
2016-04-13 23:06:17 +01:00
f2cd4c8e5a
Re-enabling ZONE_DMA fixes the b44 and floppy drivers too ( Closes : #819385 , #820890 )
2016-04-13 23:06:00 +01:00
a6c63dfcf4
aufs: Update support patches to aufs4.5-20160328 ( Closes : #819748 )
2016-04-13 22:21:26 +01:00
df965c4112
fs: Add MODULE_SOFTDEP declarations for hard-coded crypto drivers ( Closes : #819725 )
2016-04-13 22:17:00 +01:00
aac56d9572
[x86] mm/32: Enable full randomization on i386 and X86_32 (CVE-2016-3672)
2016-04-13 21:26:06 +01:00
e01d7b854c
ipv4: Don't do expensive useless work during inetdev destroy (CVE-2016-3156)
2016-04-13 21:24:19 +01:00
3f1372dedd
Add more CVE IDs for 4.5.1
2016-04-13 21:22:24 +01:00
d0292c6f67
netfilter: x_tables: Fix parsing of IPT_SO_SET_REPLACE blobs (CVE-2016-3134)
2016-04-13 21:11:40 +01:00
c972e924a7
Prepare for unstable upload: set ABI to 1 and drop ~exp1 from the version
2016-04-13 20:53:11 +01:00
2b5668bad8
linux-support: Include udeb configuration from debian/installer
...
This will be used by the linux-signed package.
2016-04-13 20:53:05 +01:00
74940e0a05
Disable UNUSED_SYMBOLS; it is now itself unused
2016-04-13 20:52:59 +01:00
68c5c5997c
Merge remote-tracking branch 'alioth/sid'
...
Merge open changelog entry for 4.4.6-2 into our open changelog entry.
Refresh the new patches.
2016-04-13 20:52:01 +01:00
6e05e68d7a
Update to 4.5.1
2016-04-13 20:49:29 +01:00
dfd9a83664
[armhf/armmp] Enable DW_WATCHDOG as module
...
Enable DW_WATCHDOG as module, used on Firefly-RK3288.
Patch by Vagrant Cascadian.
(Closes : #820834 )
2016-04-13 22:37:43 +09:00
5c3489a433
[armel/marvell] Add DT support for "Buffalo/Revogear Kurobox Pro"
2016-04-08 08:33:27 +09:00
062efc4b3f
[mips*/octeon] Enable CRYPTO_MD5_OCTEON, CRYPTO_SHA1_OCTEON, CRYPTO_SHA256 and CRYPTO_SHA512_OCTEON.
2016-04-06 13:08:06 +02:00
4f0dd22673
[mips*/octeon] Bump CONFIG_NR_CPUS to 32 to accomodate recent Octeon III SoCs.
2016-04-06 12:27:15 +02:00
c068d48b25
[mips*/octeon] udeb: Add ahci_octeon and ahci_platform modules to sata-modules.
2016-04-06 00:06:31 +02:00
511d4cedbc
[mips*/octeon] Enable SPI_OCTEON.
2016-04-05 23:58:00 +02:00
54ab3395af
Group all securelevel and Secure Boot changes together, closing #820008
2016-04-05 14:03:57 +01:00
119c44d06d
Merge branch 'benh/secure-boot'
2016-04-05 13:59:42 +01:00
24993989ff
[mips*/octeon] Backport Octeon III CN7xxx interface detection from 4.7 queue.
2016-04-04 22:51:21 +02:00
7836b549be
[mips*/octeon] Backport OCTEON SATA controller support from 4.6-rc1. Enable AHCI_OCTEON.
2016-04-04 22:51:11 +02:00
d514efc4cc
[mipsel/mips/config.loongson-2f] Disable VIDEO_CX23885, VIDEO_IVTV, VIDEO_CX231XX, VIDEO_PVRUSB2 (fixes FTBFS).
...
This workaround the failed compilation of cx25840-core.c:
| {standard input}: Assembler messages:
| {standard input}:583: Error: branch out of range
| {standard input}:636: Error: branch out of range
| {standard input}:40094: Error: branch out of range
These are caused by the -Wa,-mfix-loongson2f-jump, which replaces the
"jalr t9" instruction by the "or t9, t9, 0x80000000; jalr t9"
instructions, thus causing an increase in code size.
This is probably the best way to workaround the FTBFS, especially given
that the loongson-2e/2f flavour are likely going to be removed for
stretch.
2016-04-04 22:20:30 +02:00
76de9f06e0
scripts: Fix X.509 PEM support in sign-file
...
DER format works but it's easier if we can use PEM everywhere.
2016-04-04 19:28:26 +01:00
7b9f22feef
debian_linux.gencontrol: Allow variable substitutions in control.source.in
...
linux-signed may need this feature.
2016-04-04 10:41:48 +01:00
516d9dac1d
debian/config: Add config variable to control module signing in linux-signed
...
- Enable it by default
- Disable it for armel/marvell since signature verification is not enabled.
- Disable it for mips and mipsel so linux-signed can be uploaded without
waiting for them to build
- Disable it for all architectures not in the main archive, as linux-signed
won't support them (at least, not initially).
We don't need a variable to control signing of the image, because
we should do that for all flavours that have CONFIG_EFI_STUB=y.
2016-04-04 10:41:48 +01:00
6e18d075e9
linux-kbuild: Add extract-cert and sign-file programs
2016-04-04 10:41:48 +01:00
23d1e0f3c2
debian/copyright: Note that extract-cert and sign-file are under LGPL 2.1
...
This is significant because they link with OpenSSL.
2016-04-04 10:41:48 +01:00
f880a7ff25
Fix config for module signing
...
Replace my pubkey with an X.509 (PEM encoded) certificate as actually
required. Add quotes around the filenames in kconfig.
2016-04-04 10:41:46 +01:00
a6aaaeb263
Note added build-dependency on openssl too
2016-04-04 02:04:53 +01:00
969431b952
certs: Set SYSTEM_TRUSTED_KEYS to my own personal key to support initial testing of signed modules
...
Also set MODULE_SIG_KEY to empty string to avoid including a build-
time generated key.
2016-04-03 13:12:23 +01:00
c955e35c32
modules: Enable MODULE_SIG and MODULE_SIG_SHA256
...
...but not MODULE_SIG_ALL as signatures will be packaged separately
2016-04-03 13:12:23 +01:00
7321950826
Add Matthew Garrett's securelevel patchset in preparation for Secure Boot support
2016-04-03 04:31:52 +01:00
ea7af96b4d
Merge branch 'benh/merge-linux-tools'
...
The primary reason not to build userland tools from src:linux was that
it allowed building with a minimal cross-toolchain and without the
target's glibc development files. In particular, the CI system at
kernel-archive.buildserver.net used such minimal cross-toolchains.
It is been a long time since kernel-archive.buildserver.net was
running, so the original reason for the separation no longer exists.
If we implement CI using similarly limited toolchains again, we can use
a build-profile to exclude userland builds, as these are now well
supported.
This merges the full history of both source packages together,
including in debian/changelog (which looks rather weird). The binary
packages resulting from this merge appear to be functionally the same,
though I can't be certain there's no regression.
2016-04-02 15:13:23 +01:00
b1e9b11e7a
[armel/marvell] Add DT support for "Synology DS112" and "Zyxel NSA320"
...
Thanks to Heinrich Schuchardt.
(Closes : #819393 )
2016-03-31 00:30:03 +09:00
e8347a4589
ntfs: Disable NTFS_RW ( Closes : #566356 )
...
ntfs-3g has much more complete write support.
2016-03-25 15:54:51 +00:00
fac738652d
[amd64] Re-enable ZONE_DMA and sound drivers that depend on it ( Closes : #814855 )
2016-03-25 13:47:58 +00:00
d3da98fed6
Cherry-pick ZONE_DEVICE changes from linux-next
2016-03-25 13:45:59 +00:00
cea35dbc2d
[armel/marvell] Change MTD_CFI_AMDSTD from module to built-in
...
Because orion5x-based Buffalo Linkstation devices still need it
(Closes : #818598 )
2016-03-24 08:21:40 +09:00
df9fdb5217
debian/rules.real: Define VERSION in tool builds again
...
The perf and lockdep makefiles use it in filenames.
2016-03-21 14:01:38 +00:00
f24971b257
Rename and regroup patches from linux-tools
...
Move patches specific to Debian packaging under debian/, and bug fixes that
could go upstream belong under bugfix/. Put them in two separate groups in
the series.
2016-03-21 03:14:46 +00:00
1138bda5ff
Clean up tools build rules
...
* Rename the make macro from submake to make-tools
* Rename debian/stamps/build to debian/stamps/build-tools
* Build them all under debian/build/build-tools/
2016-03-21 03:14:46 +00:00
a5f7516c0c
Merge linux-tools source package into linux ( Closes : #550379 , #573483 , #816500 )
...
* Drop redundant gitignore.patch from linux-tools
* Rename linux-tools' debian/templates/control.main.in to
debian/templates/control.tools.in
* Combine changelogs, putting all entries for each upstream release
cycle in chronological order
* Combine rules and gencontrol.py code
2016-03-21 01:32:16 +00:00
f095f43522
Use dpkg makefile to define architecture variables
2016-03-20 22:24:13 +00:00
c37225742b
debian/copyright: Move GPL-2 boilerplate to its own paragraph
...
It is apparently valid to refer to licenses by short name alone only
if the full text is placed in a standalone License paragraph, not as
part of an earlier Files paragraph.
2016-03-20 22:10:45 +00:00
8f3922a3c7
Fix architecture filtering to use DEB_HOST_ARCH not DEB_BUILD_ARCH
...
Should make cross-builds work properly.
2016-03-20 22:00:15 +00:00
e7ca0e5b69
debian/rules.real: Add initial empty rules for {binary,build}-{arch-arch,indep}
...
We add dependencies to them later depending on the source package config.
2016-03-20 21:55:06 +00:00
d7b31e0e23
debian/rules.real: Rename build-arch and setup-flavour rules for consistency
2016-03-20 21:51:13 +00:00
eaff86e9e2
gencontrol.py: Change substitute_file() from local function to method
...
We will need to use it in multiple methods of Gencontrol.
2016-03-20 21:39:38 +00:00
4263a6e85d
Prepare to release linux-tools (4.5-1~exp1).
2016-03-20 21:20:22 +00:00
fd89731014
linux-perf: Fix use of uninitialized variables
2016-03-20 21:20:16 +00:00
6e0082081c
Add cpupower package build directories to .gitignore
2016-03-20 20:09:28 +00:00
85aba07cc0
Simplify make rules for cpupower
2016-03-20 20:08:08 +00:00
4fe6a76379
Release linux-tools (4.4.6-1).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQIVAwUAVu737ue/yOyVhhEJAQqyag/+IUmrQLhgB05KxMZ8oRwmEF/PJPF0hKCu
ZfvPiEO2nS1vQO5ulKp3dkfWWAJbC4BCDO7HAiYjM8J/JUbfb7VrvqgU2LyaEjev
jpzUhDHD61jO1nTS0s3NKBInOSzn+jCcDSCEFlvzTQzsV5XbLI7cazIW+L29fR+X
sIJpUzIqMi3UgcbpTx3CfTbodvQ/K7AI9lPN0NIDak7DWtMOUBrUBgTotDY0s+68
yTD7oiUVdS4nL/BVwKXurSDIPXOnTio5JwmDwqEW1LRXq3Y6IgZKFsGSqmZva19q
ZZ+T8885/ek116hUhVHF6Cxj24y6LErd+uxJO+J/K52r5Vgw/VwD+pbZBoiSrsmM
IlqAwDRahNzWO5QU5IWUfPjcsVeye+RKv6EuYoqf43MiltRTdOys154ZesShd95H
PzjaYQw//DzcnQbxW0wE/GGbTEQKGUgHpw5+2ZRaZ3GE9eExRqKO1ZJhL8Miu8ys
Y3GJOHBASYq3pXtzpYPlJTAVluKsHScB9VtpXSFcrbwR2Mhqv1k4ZBwFUMh0Dgtb
BEseEAw/VZQoTsbwR4ZwVwXvw+rFMe21FoVmn0ZM8WsrCqNeN7PQ/QG5CsD+R75N
tJOMwWfgt5U/JP0ChtOAnywiRKAo52SdBDmyxh4c2qsdFcR6Un2B70Q5A1gY8B2+
+of7tBDFL8Q=
=sw9T
-----END PGP SIGNATURE-----
Merge tag 'debian/4.4.6-1'
Move debian/build/tools/power/cpupower/Makefile to
debian/rules.d/tools/power/cpupower/Makefile where it belongs now.
2016-03-20 20:07:25 +00:00
6e8c2c9ccd
Prepare to release linux-tools (4.4.6-1).
2016-03-20 19:08:47 +00:00
cb4117a268
debian/copyright: Move GPL-2 boilerplate to its own paragraph
...
It is apparently valid to refer to licenses by short name alone only
if the full text is placed in a standalone License paragraph, not as
part of an earlier Files paragraph.
2016-03-20 19:08:47 +00:00
466e99f397
linux-perf: Override lintian errors for perf-read-vdso{,x}32 in 64-bit packages
2016-03-20 19:08:47 +00:00
cf4f32ccd1
debian/control: Update policy version to 3.9.7; no changes required
2016-03-20 16:06:01 +00:00
6996e3594c
Fix header format and add Forwarded fields for cpupower patches
2016-03-20 16:04:38 +00:00
ef781efeb9
W: linux-tools source: debhelper-but-no-misc-depends libcpupower-dev
2016-03-20 16:04:38 +00:00
96559e9c4c
Build tools from power/cpupower
...
They'll eventually replace cpufrequtils and libcpufreq{0,-dev} so the
structure of the packages is the same.
2016-03-20 15:49:21 +00:00
8c0226951b
Update to 4.4.6
2016-03-20 15:40:05 +00:00
545a89a7a3
Update to 4.5
2016-03-20 15:33:22 +00:00
9bbc2cf793
Prepare to release linux (4.5-1~exp1).
2016-03-20 12:06:57 +00:00
5c1a796192
[x86] vmxnet3: fix lock imbalance in vmxnet3_tq_xmit() (regression in 4.5)
2016-03-20 11:38:22 +00:00
4838ffaa0a
Clean up armhf config with kconfigeditor2
2016-03-20 01:46:42 +00:00
968b97dacd
[x86] Enable RANDOMIZE_BASE (kASLR) ( Closes : #816067 )
...
Briefly mention need to use a kernel parameter.
2016-03-20 01:45:53 +00:00
386c2986a1
[x86] amdgpu: Enable DRM_AMD_POWERPLAY ( Closes : #818174 )
2016-03-20 01:45:34 +00:00
a8bcbc8801
[x86] input: Enable ASUS_WIRELESS as module ( Closes : #818487 )
2016-03-20 01:28:20 +00:00
42fd34bcd1
Release linux (4.4.6-1).
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=5Nfc
-----END PGP SIGNATURE-----
Merge tag 'debian/4.4.6-1'
2016-03-20 01:15:39 +00:00
962c3c4a6f
[x86] iopl/64: properly context-switch IOPL on Xen PV (CVE-2016-3157)
2016-03-17 18:21:13 +01:00
5b884b50ae
Prepare to release linux (4.4.6-1).
2016-03-17 01:25:23 +00:00
6a9bf9b4b4
changelog: Fix some architecture prefixes
2016-03-17 01:25:18 +00:00
Ben Hutchings
Aurelien Jarno
Salvatore Bonaccorso
Roger Shimizu
Mattia Dongili