Ben Hutchings
5df992ba4d
integrity: Enable INTEGRITY_SIGNATURE, INTEGRITY_ASYMMETRIC_KEYS ( Closes : #869565 )
2017-08-12 22:13:33 +01:00
Ben Hutchings
33fb750f9d
media: Enable USB_RAINSHADOW_CEC as module (see #868511 )
2017-07-18 13:27:48 +01:00
Ben Hutchings
880703ae05
Clean up kconfig with the aid of kconfigeditor2
...
- Various obsolete drivers and broken features were removed in 4.12
- A few symbols were renamed
- A few symbols changed type from tristate to bool
2017-07-18 01:32:33 +01:00
Ben Hutchings
d6692c5a99
integrity: Delete ineffective kconfig assignments
...
We didn't enable INTEGRITY_SIGNATURE and INTEGRITY_ASYMMETRIC_KEYS,
which are dependencies for these. According to bug #865277 , we
should not enable them.
2017-07-17 01:38:00 +01:00
Ben Hutchings
81c2ab92a3
crypto: Enable CRYPTO_USER, CRYPTO_USER_API_RNG as modules ( Closes : #868291 )
2017-07-16 22:09:02 +01:00
Ben Hutchings
4f2e547171
media: Enable MEDIA_CEC_SUPPORT, VIDEO_VIVID_CEC; USB_PULSE8_CEC as module
...
Closes : #868511
2017-07-16 21:37:15 +01:00
Ben Hutchings
0119f2ad46
fs: Reenable HPFS_FS as module ( Closes : #864878 )
2017-06-18 21:01:55 +01:00
Ben Hutchings
44b570caef
block: Enable BLK_WBT, BLK_WBT_MQ ( Closes : #859570 )
2017-05-02 20:06:26 +01:00
Ben Hutchings
a4e087d3b1
Release linux (4.9.25-1).
...
-----BEGIN PGP SIGNATURE-----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=k/sj
-----END PGP SIGNATURE-----
Merge tag 'debian/4.9.25-1'
Drop the added patches, which are already in 4.11.
CONFIG_NFP_NETVF is replaced by CONFIG_NFP in 4.11.
2017-05-02 19:57:00 +01:00
Ben Hutchings
38ea360ed4
crypto: Change CRYPTO_SHA256 from module to built-in, as required by IMA
2017-05-02 16:21:36 +01:00
Ben Hutchings
c4f7fb8fd3
selinux: Set SECURITY_SELINUX_CHECKREQPROT_VALUE=0, per default
2017-05-02 05:22:00 +01:00
Ben Hutchings
97c9515edc
leds: Enable LEDS_GPIO as module for all configurations with GPIOs ( Closes : #860569 )
2017-05-02 05:19:00 +01:00
Ben Hutchings
62f19b9260
crypto: Enable CRYPTO_DEV_CHELSIO as module
2017-05-02 04:53:13 +01:00
Ben Hutchings
a315c25499
[x86] hwtracing: Enable INTEL_TH, INTEL_TH_PCI, INTEL_TH_GTH, INTEL_TH_MSU, INTEL_TH_PTI as modules
2017-05-02 04:53:13 +01:00
Ben Hutchings
f250ad6f7b
dma-buf: Explicitly disable SYNC_FILE
...
I think this is needed by Android userland, but then so are a lot of
other things we don't enable.
2017-05-02 04:53:13 +01:00
Ben Hutchings
675249285f
Explicitly set various symbols to their defaults
...
Mostly this disables a whole lot of drivers that should only be enabled
in specific configurations (if at all).
2017-05-02 04:53:13 +01:00
Ben Hutchings
9728988386
IB: Enable INFINIBAND_HFI1, INFINIBAND_I40IW, INFINIBAND_QEDR, RDMA_RXE as modules
2017-05-02 04:26:32 +01:00
Ben Hutchings
fd24af5949
leds: Enable LEDS_TRIGGER_DISK, LEDS_TRIGGER_MTD, LEDS_TRIGGER_PANIC
2017-05-02 04:26:32 +01:00
Ben Hutchings
f965312c8e
USB/misc: Enable UCSI as module
2017-05-02 04:26:32 +01:00
Ben Hutchings
3f68b53e2c
usbip: Enable USBIP_VUDC as module
2017-05-02 04:26:32 +01:00
Ben Hutchings
6dafde3362
leds,USB: Enable USB_LEDS_TRIGGER_USBPORT as module
2017-05-02 04:26:32 +01:00
Ben Hutchings
f98a6c1701
HID: Enable HID_SENSOR_CUSTOM_SENSOR as module
2017-05-02 04:26:32 +01:00
Ben Hutchings
bb3cdfe4f6
hda: Set SND_HDA_PREALLOC_SIZE=2048 as recommended for PulseAudio
2017-05-02 04:26:32 +01:00
Ben Hutchings
6b9daaf87e
[x86] amdgpu,sound/soc: Enable DRM_AMD_ACP; enable SND_SOC_AMD_ACP as module
2017-05-02 04:26:32 +01:00
Ben Hutchings
5ed69967a2
media: Enable VIDEO_TW5864, VIDEO_TW686X as modules
2017-05-02 04:26:32 +01:00
Ben Hutchings
f3c3de0f60
integrity: Enable IMA and related kconfig symbols (except on armel/marvell)
...
Closes : #788290
Based on advice from Matthew Garrett.
2017-04-27 18:37:09 +01:00
Ben Hutchings
4e57833523
watchdog: Enable WATCHDOG_SYSFS
2017-04-25 23:16:40 +01:00
Ben Hutchings
2b2a89c35f
thermal: Explicitly disable GENERIC_ADC_THERMAL per default
2017-04-25 23:15:47 +01:00
Ben Hutchings
cc56cd8593
gpio: Explicitly set various symbols to their defaults
2017-04-25 22:58:43 +01:00
Ben Hutchings
8ab44aa518
[x86] gpio: Enable GPIO_AMDPT as module
2017-04-25 22:57:34 +01:00
Ben Hutchings
f3a2da345c
spi: Explicitly set various symbols to their defaults
2017-04-25 22:56:53 +01:00
Ben Hutchings
9ad676b26c
char: Explicitly enable DEVPORT per default
2017-04-25 22:53:32 +01:00
Ben Hutchings
fd23df3a24
serial/8250: Enable SERIAL_8250_MOXA as module
2017-04-25 22:50:51 +01:00
Ben Hutchings
79226c42bf
input: Enable TABLET_USB_PEGASUS as module
2017-04-25 22:48:26 +01:00
Ben Hutchings
c9034d73b4
drivers/input: Explicitly set various symbols to their defaults
2017-04-25 22:46:57 +01:00
Ben Hutchings
e4f8eedb77
net/phy: Enable MICROSEMI_PHY as module
2017-04-25 22:42:23 +01:00
Ben Hutchings
9ee3fb1151
ethernet: Enable NFP_NETVF as module
2017-04-25 22:41:37 +01:00
Ben Hutchings
6a09142123
drivers/net: Explicitly set various symbols to their defaults
2017-04-25 22:37:52 +01:00
Ben Hutchings
94b8328125
net/sched: Enable NET_ACT_SKBMOD as module
2017-04-25 22:23:51 +01:00
Ben Hutchings
45a93062df
6lowpan: Enable Generic Header Compression modules
2017-04-25 22:22:50 +01:00
Ben Hutchings
f6ab826219
PCI: Enable PCIE_PTM (except on armel/marvell)
2017-04-25 22:20:09 +01:00
Ben Hutchings
0905519af4
Clean up kconfig using kconfigeditor2
...
Rename or delete options that changed in 4.11.
2017-04-20 19:45:06 +01:00
Ben Hutchings
0e0b29ad5a
[arm64,x86] Replace securelevel patch set with lockdown patch set
...
Matthew stopped maintaining the securelevel patch set, and David
Howells has taken it up under the new name 'lockdown'. This is
taken from:
https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git#efi-lock-down
commits ddb99e118e37f324a4be65a411bb60ae62795cf9..0240fa7c7c948b19d57c0163d57e55296277ff3c
Rebase the three patches not included there (cold boot mitigation,
arm64 SB integration, MTD RAM restrictions).
Update our kconfig for the renaming.
2017-04-20 02:38:34 +01:00
Ben Hutchings
9ee9c719d0
Enable BUG_ON_DATA_CORRUPTION
...
This means errors detected by DEBUG_LIST result in BUG rather than WARN.
2017-03-31 00:33:12 +01:00
Ben Hutchings
500ce0c9cd
netfilter: Enable NF_SOCKET_IPV4, NF_SOCKET_IPV6 as modules ( Closes : #858897 )
2017-03-31 00:02:01 +01:00
Ben Hutchings
c4b4fdd561
Clean up kconfig using kconfigeditor2
2017-03-31 00:01:00 +01:00
Ben Hutchings
473a9f83a2
w1: Really enable W1_MASTER_GPIO as module ( Closes : #858975 )
2017-03-30 18:27:54 +01:00
Ben Hutchings
459f0a48e4
Release linux (4.9.18-1).
...
-----BEGIN PGP SIGNATURE-----
iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAljcf5EACgkQ57/I7JWG
EQmFcQ/8DoBxenUbNW5cY+YbwBKsjuBb8Q6gnqQLOX/JtOJ8MtpQ1t2QQPvMYdXJ
PTcNZAKm8mrsWJxos9WsUHjkdrfuLAsMTisC5FvDkE6myBt++GH3gRtKCT0A2nep
ZU17YeHYfcqv6UK90Jg0p+xAKQEEqKZrryP7fvb8oX5wOORwlLMxBScErftbB/vV
hBvwybq7gfA/4KxDTnWgadpidg16/67ZgKd0EoSsbCpFAJble/hRroMwzKUSzFW+
2yFxrmUNFoIXddoDtORNNdK0nM6b2MKeWKjmndknz4QehlayZWCg1+mEjp7A7Wqp
9naONqhQWMibARGkDl5Y7SZ9/XJXjPmDFXi3EIbhrWMN2TUkzUN14A1YHw+M9p5Q
9UbnpI6eDxjvlezcPjqucIM0ywFwljBrDsQXfGsR6ogQbYvA7nJ0dK63/EXzvl1U
UGUBwHtDhLHxtv85/JsUqq9/UVGbZjcHvyEfmE1mvbMcNxkSLSewt+jd78h7xIyL
tOZP24ARPKqcQ1detou47o8cMmwTqVl6xu08w83xin2Xux+UlYFTtI/LVws3oYNb
F3uEzIgtJbu7ENxCkY5RmIJG9qRJZJ2f6dnpLLld6D52paD5OYNrk1NShtf/Dp+r
zjJoiIRTcO9fPatjl07Y2eDeFeo2SKoD+Xd/5nGDoytE6JiDEXg=
=ONVb
-----END PGP SIGNATURE-----
Merge tag 'debian/4.9.18-1'
Drop ABI reference files.
Refresh/drop patches as needed.
2017-03-30 14:16:47 +01:00
Ben Hutchings
49c2b92937
time: Disable TIMER_STATS (CVE-2017-5967)
...
The upstream "fix" for this is to remove the feature, as it is
redundant with tracing. I'd be quite happy to do that, but it
introduces several conflicts with the PREEMPT_RT patch series.
Unless and until those are resolved in 4.9-stable and 4.9-rt, disable
it in our kconfig and add a dependency on BROKEN to ensure it's
disabled in custom kernels too.
2017-02-26 21:05:05 +00:00
Ben Hutchings
8c94f719fa
Release linux (4.9.10-1).
...
-----BEGIN PGP SIGNATURE-----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=rRkU
-----END PGP SIGNATURE-----
Merge tag 'debian/4.9.10-1'
Drop changes to aufs.
2017-02-22 20:57:36 +00:00