Commit graph

2898 commits

Author SHA1 Message Date
Joachim Fasting 6eea9ac868
linux: add feature flag to indicate support for 32bit emulation
Motivated by the need to warn users trying to build configurations that depend
on being able to run 32bit apps on 64bit kernels.
2019-01-06 19:52:03 +01:00
Joachim Fasting d62086e6fc
hardened-config: allow slub/slab free poisoning 2019-01-05 14:07:36 +01:00
Joachim Fasting 11840f5c70
hardened-config: explain HARDENED_USERCOPY_FALLBACK n 2019-01-05 14:07:36 +01:00
Joachim Fasting dfd77a046d
hardened-config: ensure STRICT_KERNEL_RWX
This is y in the default config, but enable it explicitly here to catch
situations where it has been disabled (explicitly or implicitly).
2019-01-05 14:07:35 +01:00
Joachim Fasting 1801aad7b8
hardened-config: clarify MODIFY_LDT_SYSCALL
This likely never worked; MODIFY_LDT_SYSCALL depends on EXPERT; enabling
EXPERT however seems to introduce quite a few changes that would need to be
properly vetted.

The version guard is unnecessary, however, as this config has been supported
since 4.3.
2019-01-05 14:07:34 +01:00
Joachim Fasting abc8ed3fca
hardened-config: clarify readonly LSM hooks config
SECURITY_WRITABLE_HOOKS is implicitly controlled by SECURITY_SELINUX_DISABLE;
explicitly unsetting results in an error because the configfile builder fails
to detect that it has in fact been unset (reporting it as an unused option).
For now, leave WRITABLE_HOOKS as an "optional" config for documentation
purposes.
2019-01-05 14:07:33 +01:00
Joachim Fasting c68e8b05f0
Revert "linux-hardened: Disable GCC_PLUGIN_RANDSTRUCT"
This reverts commit 5dda1324be.

Presumably this was done to work around build errors or something but it
works fine now.
2019-01-05 14:07:21 +01:00
Pierre Bourdon 0f7ca26a48
kernel/hardened-config.nix: add STACKLEAK plugin on 4.20+ 2019-01-04 22:24:50 +01:00
Pierre Bourdon 9dc0d94896
kernel/hardened-config.nix: re-enable GCC plugins 2019-01-04 22:24:50 +01:00
Pierre Bourdon c789f642f0
kernel/generic.nix: provide required dependencies for GCC plugins builds 2019-01-04 22:24:50 +01:00
Benno Fünfstück 7817aa3641
linux-rpi: set correct hydraPlatforms (#53325) 2019-01-03 22:42:14 +01:00
Joachim F 88c516dd55
Merge pull request #52606 from lopsided98/linux-hardkernel-update
linux_hardkernel_4_14: 4.14.85-152 -> 4.14.87-153
2019-01-02 18:16:47 +00:00
Tim Steinbach d6805baded
linux: 4.19.12 -> 4.19.13 2018-12-30 09:57:54 -05:00
Tim Steinbach 226eb52715
linux: 4.14.90 -> 4.14.91 2018-12-30 09:57:54 -05:00
Tim Steinbach a7bd7a38ea
linux: 4.9.147 -> 4.9.148 2018-12-30 09:57:53 -05:00
Ivan Kozik 1c8fea18e2 kernel/patches.nix: remove hard tabs 2018-12-28 09:06:56 +01:00
Samuel Dionne-Riel 889ef35303 linuxPackages_4_{19,20}: works around bug with overlayfs.
See: https://github.com/NixOS/nixpkgs/issues/48828#issuecomment-445208626
2018-12-26 22:51:31 +00:00
Tim Steinbach 24cdaa7b48
linux-libre: 15715 -> 15814 2018-12-24 12:33:24 -05:00
Tim Steinbach 8f9c2f9726
linux: Add 4.20 2018-12-24 12:33:24 -05:00
Tim Steinbach af6c117fac
linux: 4.19.11 -> 4.19.12 2018-12-21 09:11:02 -05:00
Tim Steinbach dea57f15e9
linux: 4.14.89 -> 4.14.90 2018-12-21 09:10:54 -05:00
Tim Steinbach a5f447e16a
linux: 4.9.146 -> 4.9.147 2018-12-21 09:10:45 -05:00
Tim Steinbach 54ce2e016b
linux: 4.4.168 -> 4.4.169 2018-12-21 09:10:24 -05:00
Tim Steinbach 98ac5710bd
kernel-config: CIFS_POSIX no longer exists 2018-12-21 09:10:17 -05:00
Ben Wolsieffer 2b02350d39 linux_hardkernel_4_14: 4.14.85-152 -> 4.14.87-153 2018-12-20 21:15:07 -05:00
Tim Steinbach 1b84b9f725
linux: 4.19.10 -> 4.19.11 2018-12-20 10:46:17 -05:00
Tim Steinbach 4d14879081
linux: 4.4.167 -> 4.4.168 2018-12-18 09:12:34 -05:00
Tim Steinbach 31ddf1f136
linux: 4.19.9 -> 4.19.10 2018-12-17 09:19:41 -05:00
Tim Steinbach c5234d7dbd
linux: 4.14.88 -> 4.14.89 2018-12-17 09:19:41 -05:00
Tim Steinbach 53c490a7ee
linux: 4.9.145 -> 4.9.146 2018-12-17 09:19:41 -05:00
Edmund Wu cb6c9af457
linux_testing: 4.20-rc6 -> 4.20-rc7 2018-12-16 22:09:03 -05:00
Tim Steinbach 5a15ab7b5d
linux: 4.19.8 -> 4.19.9 2018-12-13 06:58:15 -05:00
Tim Steinbach f335fa6d74
linux: 4.14.87 -> 4.14.88 2018-12-13 06:58:07 -05:00
Tim Steinbach 1f92bdcd94
linux: 4.9.144 -> 4.9.145 2018-12-13 06:57:58 -05:00
Tim Steinbach adf8cdd67d
linux: 4.4.166 -> 4.4.167 2018-12-13 06:57:42 -05:00
Tim Steinbach c89cbdcd48
linux: 4.20-rc5 -> 4.20-rc6 2018-12-11 11:11:34 -05:00
Alyssa Ross 017390185a
Merge pull request #51817 from qolii/linux_hardkernel_4_14_78__4_14_85
linux_hardkernel_4_14: 4.14.78-150 -> 4.14.85.152
2018-12-10 17:08:37 +00:00
Patrick Hilhorst ffd47d5b16
Revert "linux: inside nix-shell, allow make menuconfig" 2018-12-10 15:50:36 +01:00
qoli f6172b634d linux_hardkernel_4_14: 4.14.78-150 -> 4.14.85.152 2018-12-10 00:17:08 -08:00
Tim Steinbach 02f8d66efa
linux: 4.19.7 -> 4.19.8 2018-12-08 10:26:09 -05:00
Tim Steinbach e4da78c349
linux: 4.14.86 -> 4.14.87 2018-12-08 10:26:09 -05:00
Tim Steinbach c7ea265e8e
linux: 4.9.143 -> 4.9.144 2018-12-08 10:26:09 -05:00
Tim Steinbach 808d52ee05
linux: 4.19.6 -> 4.19.7 2018-12-05 17:34:29 -05:00
Tim Steinbach e945771e4c
linux: 4.14.85 -> 4.14.86 2018-12-05 17:34:13 -05:00
Tim Steinbach 1f7266cbbb
linux: 4.9.142 -> 4.9.143 2018-12-05 17:33:36 -05:00
Alyssa Ross fa749ac858
linux_latest-libre: document finding latest rev
https://github.com/NixOS/nixpkgs/pull/51403#issuecomment-444064006
2018-12-04 12:08:30 +00:00
Tim Steinbach 3b2bf761df
linux: 4.20-rc4 -> 4.20-rc5 2018-12-03 07:43:04 -05:00
Jörg Thalheim 3ba88670ab
linux_latest-libre: update patchset for kernel version 2018-12-02 18:54:57 +00:00
Tim Steinbach d97f3cb647
kernel: 4.19.5 -> 4.19.6 2018-12-01 11:20:38 -05:00
Tim Steinbach 8f23a4616f
kernel: 4.14.84 -> 4.14.85 2018-12-01 11:20:38 -05:00
Tim Steinbach 182a6557e3
kernel: 4.9.141 -> 4.9.142 2018-12-01 11:20:38 -05:00
Tim Steinbach 995004634f
kernel: 4.4.165 -> 4.4.166 2018-12-01 11:20:38 -05:00
Tim Steinbach ff4bf6067e
kernel: Remove 4.18.x
4.18 series is EOL
2018-12-01 11:20:38 -05:00
Jörg Thalheim e7a9fc2fca
Merge pull request #49470 from grahamc/enable-mlx5core-by-default
kernel: enable MLX5_CORE_EN when possible
2018-11-30 17:55:45 +00:00
Frederik Rietdijk 9db2421d1f Merge master into staging-next 2018-11-29 08:12:56 +01:00
Tim Steinbach ef3f3067a1
linux: 4.19.4 -> 4.19.5 2018-11-27 16:19:58 -05:00
Tim Steinbach 23ef674701
linux: 4.14.83 -> 4.14.84 2018-11-27 16:19:58 -05:00
Tim Steinbach 3739bf46d5
linux: 4.9.140 -> 4.9.141 2018-11-27 16:19:58 -05:00
Tim Steinbach 784230c0fc
linux: 4.4.164 -> 4.4.165 2018-11-27 16:19:57 -05:00
Vladimír Čunát a5de78b7d7
Merge branch 'master' into staging-next 2018-11-26 10:28:00 +01:00
Tim Steinbach bff473b034
linux: 4.20-rc3 -> 4.20-rc4 2018-11-25 20:02:48 -05:00
Benno Fünfstück b5cce32ea9 linux_rpi: enable aarch64 build on hydra 2018-11-26 00:20:43 +01:00
Frederik Rietdijk e41154d1ab Merge master into staging-next 2018-11-24 10:43:33 +01:00
Tim Steinbach 13e38d8180
linux: 4.19.3 -> 4.19.4 2018-11-23 08:33:53 -05:00
Tim Steinbach 86f9ac22e2
linux: 4.14.82 -> 4.14.83 2018-11-23 08:33:45 -05:00
Tim Steinbach 5879586e01
linux: 4.9.138 -> 4.9.140 2018-11-23 08:33:32 -05:00
Frederik Rietdijk c31cb577ae Merge master into staging-next 2018-11-22 09:57:08 +01:00
Tim Steinbach 8f11b37a95
linux: 4.19.2 -> 4.19.3 2018-11-21 09:53:26 -05:00
Tim Steinbach ff82d7c786
linux: 4.18.19 -> 4.18.20 2018-11-21 09:53:07 -05:00
Tim Steinbach 3667a91b78
linux: 4.14.81 -> 4.14.82 2018-11-21 09:52:59 -05:00
Tim Steinbach 0e7dafe8c0
linux: 4.9.137 -> 4.9.138 2018-11-21 09:52:49 -05:00
Tim Steinbach e822b9680b
linux: 4.4.163 -> 4.4.164 2018-11-21 09:52:38 -05:00
Frederik Rietdijk aabf1a93bc Merge staging-next into staging 2018-11-20 11:51:11 +01:00
Edmund Wu 3ae0407d3c linux_testing: 4.20-rc2 -> 4.20-rc3 2018-11-19 14:23:16 +00:00
Frederik Rietdijk 0d0d7dcd06 Merge staging-next into staging 2018-11-18 10:41:34 +01:00
Tim Steinbach 248dfd2842
linux: 4.19.1 -> 4.19.2 2018-11-13 14:35:57 -05:00
Tim Steinbach a3cbaf2507
linux: 4.18.18 -> 4.18.19 2018-11-13 14:35:57 -05:00
Tim Steinbach 88e7ac48c7
linux: 4.14.80 -> 4.14.81 2018-11-13 14:35:57 -05:00
Tim Steinbach 72435f7685
linux: 4.9.136 -> 4.9.137 2018-11-13 14:35:57 -05:00
Matthew Bauer 76c956be5c treewide: disable pie in more places
Some packages don’t work correctly with pie. Here I disable it for:

- busybox
- linux kernel
- kexectools

I also get rid of the Musl conditional for disabling pie in GCC and
Binutils. Some day we might want to enable PIE without Musl and it
will be useful to have the *just* work with our compiler and linkers.
2018-11-13 07:03:31 -06:00
Orivej Desh 08d98b2e38 linux: enable CGROUP_HUGETLB, CGROUP_PERF, CGROUP_RDMA (#50225)
These options were added in:

NAMESPACES 2.6.25
CGROUP_DEVICE 2.6.26
CGROUP_HUGETLB 3.6
CGROUP_PERF 2.6.39
CGROUP_RDMA 4.11
2018-11-13 01:13:00 +00:00
Tim Steinbach 55cad35506
linux: 4.20-rc1 -> 4.20-rc2 2018-11-11 22:08:16 -05:00
Tim Steinbach 464737ebbb
linux: 4.4.162 -> 4.4.163 2018-11-10 16:12:38 -05:00
Tim Steinbach ab77043c56
linux: 4.9.135 -> 4.9.136 2018-11-10 16:12:38 -05:00
Tim Steinbach a862492bf1
linux: 4.14.79 -> 4.14.80 2018-11-10 16:12:38 -05:00
Tim Steinbach 318393ec66
linux: 4.18.17 -> 4.18.18 2018-11-10 16:12:38 -05:00
Jan Malakhovski 67a5c0da41 tree-wide: fix all revs of fetchsvn 2018-11-08 05:29:47 +00:00
Shea Levy 329bf4c3e1 linux-riscv: Remove.
risc-v changes are now upstream.

See #49490
2018-11-06 09:42:45 -05:00
Tim Steinbach 4745250bd3
linux: 4.19-rc8 -> 4.20-rc1 2018-11-05 07:09:41 -05:00
Tim Steinbach 3e1ca4f176
linux: 4.19 -> 4.19.1 2018-11-04 11:41:34 -05:00
Tim Steinbach 260aa8089d
linux: 4.18.16 -> 4.18.17 2018-11-04 11:41:34 -05:00
Tim Steinbach 26f3e8a367
linux: 4.14.78 -> 4.14.79 2018-11-04 11:41:34 -05:00
Jörg Thalheim e9f2267f8f
Merge pull request #49710 from Mic92/linux-samus
linux-samus: remove
2018-11-04 11:39:09 +00:00
Jörg Thalheim e84291bd23
linux-samus: remove
The package is out-of-date and has no maintainer.
I don't own a chromebook device and therefore don't know
if an mainline kernel could be used instead.
cc @lheckemann @zohl
2018-11-03 20:57:58 +00:00
Jörg Thalheim da1f78bd2b
linux_beagleboard: remove
The package is out-of-date and has no maintainer.
It should be now possible to just mainline kernel.
Support for that could be added by copying the right dtb file in our linux_rpi kernel.
I do not have the hardware to test this.

cc @dezgeg @dhess
2018-11-03 20:49:52 +00:00
qolii a2d39a802d linux-hardkernel: 4.14.73-149 -> 4.14.78-150 (#49535) 2018-10-31 22:05:02 +01:00
Graham Christensen d65b39a805 kernel: enable MLX5_CORE_EN when possible
Hydra's builders from Packet.net use this option a lot, causing
lots of slow deploys.
2018-10-30 17:29:37 +01:00
Joachim F c67ccd34c0
Merge pull request #47909 from teto/menuconfig
linux: inside nix-shell, allow make menuconfig
2018-10-23 14:47:11 +00:00
Tim Steinbach 2bb68c7017
linux: Add 4.19 2018-10-22 09:40:22 -04:00
Tim Steinbach 154f457bc3
linux: 4.18.15 -> 4.18.16 2018-10-20 11:16:21 -04:00