Commit Graph

11769 Commits

Author SHA1 Message Date
Ben Hutchings a16ba74627 grsecurity: Delete empty stub Kconfig and Makefile
Whatever features we get from Grsecurity in future are almost certain
to come via KSPP, so these aren't going to be useful.
2016-10-05 22:26:02 +01:00
Ben Hutchings 6573a2a7c7 security,perf: Replace GRKERNSEC_PERF_HARDEN patch with the version submitted upstream
This hasn't been *accepted* upstream, but maybe some day?  It has gone
into AOSP.
2016-10-05 22:23:08 +01:00
Ben Hutchings 357c2335a5 [arm*,powerpc*,s390x,sparc64,x86] Enable HARDENED_USERCOPY
This enables HARDENED_USERCOPY in the top-level config rather than
per-architecture, but it depends on a feature not yet implemented for
all architectures.
2016-10-05 22:05:04 +01:00
Ben Hutchings 5ef50c5719 Enable SLAB_FREELIST_RANDOM 2016-10-05 22:01:38 +01:00
Ben Hutchings 0118390eaa [mips*] Enable RANDOMIZE_BASE 2016-10-05 21:13:04 +01:00
Ben Hutchings d77be8b789 Clean up kconfig using kconfigeditor2 2016-10-05 21:12:49 +01:00
Ben Hutchings a6562544cc Update to 4.8 2016-10-05 21:06:42 +01:00
Ben Hutchings ef7e196951 [arm*,powerpc*,s390x,x86] Enable IO_STRICT_DEVMEM
This break dosemu and some old graphics drivers, and can be reverted
using the kernel parameter: iomem=relaxed

Again this is enabled in the top-level config, but it is only really
enabled for these architectures.
2016-10-01 22:42:58 +01:00
Ben Hutchings 8e160e8d48 [arm*] Enable STRICT_DEVMEM
This enables STRICT_DEVMEM in the top-level config rather than per-
architecture, but the only additional kernel architectures that we
build and that support it are arm and arm64.
2016-10-01 22:18:20 +01:00
Ben Hutchings 2aced7818a [amd64] Enable LEGACY_VSYSCALL_NONE instead of LEGACY_VSYSCALL_EMULATE
This breaks (e)glibc 2.13 and earlier, and can be reverted using the kernel
parameter: vsyscall=emulate
2016-10-01 22:02:51 +01:00
Ben Hutchings 1c213f98f9 Prepare to release linux (4.8~rc8-1~exp1). 2016-09-26 04:27:06 +01:00
Ben Hutchings 978f935022 Update to 4.8-rc8 2016-09-26 04:27:02 +01:00
Ben Hutchings b2480a3dfe Release linux (4.7.5-1).
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJX6HXOAAoJEOe/yOyVhhEJA68QAJSLxpMHBbl9474Q/SPonncf
 S7NXiYZQuo7STq0uHUVxtOTpVKRc/7y793tdtpI3Ec6nZqilS+4uKq1QNAh7kj6n
 JwilTLkfbjRS4+VqEEHJtVfK/bjijEep943W+uv3foMXPzbJulgRNrf54nUOFA2n
 WY1ZfL6Dp+tvys49UrK+3lsuY/ZCLzpck3m0rScGYgalfnZo00ttPto29YZjVXrp
 7RZset950hvEvL7cD7GXi2pqoEcvV3AISOABgKU0U6VitS1E8wJHW1pDZvHgZDKO
 55lAdyyEsAE96J1RzKwPjyHTKDmr1v6AiqNxwviLndwoLflYHUbsZBx0H9pRE0Gi
 45IDQELGFToJ/4dDNijk3oyOsQaV06f0gYv+FqGnN33IWxrlz9oQ3PSWB6qA9dr5
 vBGG1tzoYFdManBwZvH5smD25Ckc3TK2UzMqJA1BIjRpCoajxfmZWcgfPH8Z9gwJ
 5giCQkEKCbbwAXmRwVCYDFp5t0DlnyiY0/IizunHUxFapl9B6SNRFPhJVbUCNV07
 /yzsRU+TcNnV1oGQE9+uWTIelUQmc5cvMiaIlW7fifrqPAKCCnk2imYI1Tx1jsVl
 VqLo1Jalt+iZGKsEt6I3ST6LX1k/QFkz7BmJ4Yz+NdwwN6/Jq5rufFxLWGdIYPdI
 N4PnNBVMK0ooLqbaatRO
 =PYYu
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.7.5-1'

Drop ABI maintenance patches.
2016-09-26 02:16:56 +01:00
Ben Hutchings f7d84f7a69 Prepare to release linux (4.7.5-1). 2016-09-26 01:48:21 +01:00
Ben Hutchings 7a0f81fe53 ext4: Fix checksum validation for inodes with small i_extra_isize
Closes: #838544, regression in 4.7.4
2016-09-25 22:00:56 +01:00
Ben Hutchings bdec0fe8f0 Update to 4.7.5 2016-09-25 03:05:35 +01:00
Ben Hutchings 1f0935b411 Regroup ABI maintenance patches 2016-09-25 01:33:49 +01:00
Ben Hutchings c0b958cd5f [powerpc,powerpcspe,ppc64] linux-image: Suppress automatic dbgsym packages
Currently on powerpc, powerpcspe and ppc64 we get an automatic dbgsym
package with symbols for the bootwrapper tools (addnote, hack-coff,
mktree).  We should either put them in linux-image-*-dbgsym or
nowhere.  For now, opt for nowhere.

Move the dh_strip invocation from the install-base rule to the
install-image_... rule.  None of the other packages using install-base
should contain any executables.
2016-09-23 03:21:18 +01:00
Ben Hutchings 24358fda8e [hppa] tracing: Re-enable FTRACE 2016-09-23 00:53:08 +01:00
Ben Hutchings 9067a5df84 [hppa,mips*,powerpc*] linux-image: Strip debug symbols from vmlinux (really closes: #837588) 2016-09-23 00:51:50 +01:00
Ben Hutchings 656e46ab02 Update to 4.8-rc7 2016-09-22 03:25:31 +01:00
Ben Hutchings 04355bf580 [armhf] media: Enable VIDEO_V4L2_SUBDEV_API and VIDEO_OMAP3 as module
Originally done in 4.7.4-1 then reverted due to ABI breakage.
2016-09-22 01:19:37 +01:00
Ben Hutchings b37c595561 Release linux (4.7.4-2).
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJX4HvgAAoJEOe/yOyVhhEJq9cP/j1XO1dNpOXxq0JZod66K1sl
 JIC4LPZ3i+kiAD0amMZiAexAuCpqCDjinjVr/pAhEoAa79983tFoY9yWjDCAW+9H
 0j7Torb5wQ76BlyXCjSoaztcQmzQ1YiCvjIzk4hCJCcvqdTuA1MMr7+AbXAgi3xE
 Es/G7ai+7SK5suEYgsbliM2ndFFMtIDqgpvDVDFNBDt61m2RXKxw7SQwyItIx+Hn
 n7Aq/P+LP7BjMSP6nW6EafF/RidbAwq4x+FKqzGyZhVQV7c3YFbh0EA7lVcTDhC7
 A1ZbdeUjiFhUKchRPa56qf+eAI8sBEeU3Ga1mhpkxL8RkFKwvWmmB2J0tBE7KHgw
 WCy+8nPxnLAq3eVIkOcB3MuvNdM9DvvtQ7X5NjXnBIfq06OX4y+C+udMpafmegTG
 5YB3FVppFQNGZcOxeF9hCQspHGvBsTGRYoK3hxzx4AY94E1cakl08oZte4dHYALz
 GvP/tjbLH5i/g9djVNGtfZCHKMZbDq2QhD60GNwFoN/ssX4Q/L3q4N+eyJD9KoQM
 Bu44v1ZY7M13F4t5JUomjU2e5mze3opxEB2C7vIoyJfaUvtAWX/mn8SysDGdT0OJ
 zd8ow6IntzcL+mqxrarOPMenSt2yqoQ6WdkYkpF5aCTj2GJyAkU7dUWfWdKWtLM7
 yjuIvqRAcVzMU9XuU8uf
 =s0s4
 -----END PGP SIGNATURE-----

Merge tag 'debian/4.7.4-2'

- Drop ABI references and ABI maintenance patches
- Fix Kconfig symbols for omapdss sub-drivers, which were renamed for 4.8
2016-09-22 01:17:51 +01:00
Ben Hutchings 95d8991d55 Prepare to release linux (4.7.4-2). 2016-09-19 22:09:42 +01:00
Ben Hutchings 7c621c6961 [hppa] Ignore ABI changes caused by disabling CONFIG_FTRACE (fixes FTBFS) 2016-09-19 19:56:18 +01:00
Ben Hutchings 04accecc7b [armhf] media: Disable VIDEO_V4L2_SUBDEV_API and VIDEO_OMAP3 to avoid ABI change (fixes FTBFS) 2016-09-19 18:28:33 +01:00
Ben Hutchings 5a8adae35b [arm64] Revert "arm64: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO" (fixes FTBFS) 2016-09-19 18:10:01 +01:00
Ben Hutchings aaa85335e1 Prepare to release linux (4.7.4-1). 2016-09-18 14:56:02 +01:00
Ben Hutchings 35221d0e23 bug script: Stop describing TAINT_UNSIGNED_MODULE as expected 2016-09-18 14:46:25 +01:00
Ben Hutchings b8c6a37dd9 Wrap a long line in changelog 2016-09-17 00:24:47 +01:00
Ben Hutchings 25ac8ad209 [armhf] Enable drivers and options for OpenPandora console
POWER_AVS_OMAP as built-in; DISPLAY_CONNECTOR_ANALOG_TV,
DISPLAY_PANEL_TPO_TD043MTEA1, SENSORS_TWL4030_MADC, VIDEO_OMAP3,
BATTERY_TWL4030_MADC, BACKLIGHT_PANDORA, HDQ_MASTER_OMAP as modules;
OMAP2_DSS_DSI

Closes: #835893, thanks to Vagrant Cascadian
2016-09-17 00:22:55 +01:00
Ben Hutchings ec2a255f35 [armhf] dsa: Enable drivers for Lamobo R1 (aka BPi-R1)
B53, B53_MDIO_DRIVER as modules

Closes: #836231, thanks to Vagrant Cascadian
2016-09-17 00:12:49 +01:00
Ben Hutchings 96e33a9436 [armhf] Enable drivers for ASUS Chromebook C201 (veyron-speedy)
MFD_RK808, POWER_AVS, POWER_RESET_GPIO_RESTART, RTC_DRV_RK808,
ROCKCHIP_PM_DOMAINS as built-in; DRM_PANEL_SIMPLE, ROCKCHIP_ANALOGIX_DP,
ROCKCHIP_DW_MIPI_DSI, I2C_CROS_EC_TUNNEL, KEYBOARD_CROS_EC, OUSE_ELAN_I2C,
MFD_CROS_EC, MFD_CROS_EC_SPI, MFD_RK808, PHY_ROCKCHIP_EMMC, PHY_ROCKCHIP_DP,
BATTERY_SBS, CHARGER_GPIO, REGULATOR_RK808, BACKLIGHT_PWM as modules

Closes: #836251, thanks to Vagrant Cascadian
2016-09-17 00:06:43 +01:00
Ben Hutchings 550ac5c6dc linux-image: postrm: Make failure of rmdir on purge non-fatal (Closes: #836282) 2016-09-16 23:49:36 +01:00
Ben Hutchings fca831a4d1 [armhf] udeb: Replace dwmac-socfpga with dwmac-altr-socfpga in nic-modules
Closes: #837110, thanks to Vagrant Cascadian
2016-09-16 23:29:04 +01:00
Ben Hutchings 45fbf5a22f [armhf] Enable drivers for Novena
MFD_STMPE as built-in; DRM_PANEL_SIMPLE, MMA8452, TOUCHSCREEN_STMPE,
BATTERY_SBS, BACKLIGHT_PWM, SND_SOC_IMX_ES8328 as modules

Closes: #837627, thanks to Vagrant Cascadian
2016-09-16 23:25:11 +01:00
Ben Hutchings 2d327101d1 [arm64] mm: Limit TASK_SIZE_64 for compatibility 2016-09-16 16:40:35 +01:00
Ben Hutchings 888d6ec092 linux-doc: Exclude Sphinx support code and Makefiles 2016-09-16 16:40:35 +01:00
Ben Hutchings 51f0aa4b84 linux-headers: Stop including unused arch/*/kernel/asm-offsets.s files 2016-09-16 16:40:35 +01:00
Ben Hutchings 725eaac2b5 Set -fdebug-prefix-map=... in compiler options for kernel and userland
For userland we already got this through dpkg-buildflags, but it uses
the current directory rather than the source package's top directory
as the default 'old' path.  Set DEB_BUILD_PATH to fix this.
2016-09-16 16:40:35 +01:00
Ben Hutchings ab1ec6c094 linux-source: Exclude Python bytecode generated when running Sphinx 2016-09-16 16:40:32 +01:00
Ben Hutchings ec5c662dbf Add Héctor's recent changes to the changelog 2016-09-16 16:40:07 +01:00
Ben Hutchings 5e2573002f Update to 4.7.4 2016-09-15 20:27:23 +01:00
Ben Hutchings 900cf04cac xen-linux-system: Relax dependency on linux-image to allow for version suffix added by linux-signed
I don't know what the suffix is going to be next time we need to add
it, but it will sort lower than the '+deb' suffix added for stable
security updates.
2016-09-15 17:06:43 +01:00
Ben Hutchings 22a9e16882 liblockdep-dev: Add dependency on liblockdep<version> (Closes: #837710) 2016-09-13 20:33:06 +01:00
Ben Hutchings ab1157972f [powerpcspe] xmon: Don't use ld on 32-bit (Closes: #836741) 2016-09-12 20:38:54 +01:00
Ben Hutchings 1dda9dd218 [hppa] Disable FTRACE due to huge size cost (Closes: #837588) 2016-09-12 20:28:04 +01:00
Héctor Orón Martínez 259c745774 [arm64] restrict virtual address size to 48 bit
For ACPI boot on ARM64, initramfs must be contained in the first
32 GB of the virtual address space.

Initramfs relocation code seems to place it out of bounds, restricting
size of the virtual address space seems to workaround the issue.

(Closes: #834505)

Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
2016-09-12 13:19:36 +02:00
Héctor Orón Martínez 94622c6106 [arm64] enable ACPI on ARM64
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
2016-09-12 13:18:20 +02:00
Ben Hutchings 09db94d1de [arm64] pinctrl: Enable PINCTRL_SINGLE as built-in, needed for HiKey SoCs 2016-09-10 01:20:05 +01:00