Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | main/linux-vanilla: enable NF_SOCKET | Natanael Copa | 2018-04-23 | 1 | -2/+3 |
| | | | | fixes #8778 | ||||
* | main/linux-vanilla: fix armhf config | Natanael Copa | 2018-03-22 | 1 | -2/+3 |
| | |||||
* | main/linux-vanilla: enable audit | Natanael Copa | 2018-02-05 | 1 | -1/+5 |
| | | | | fixes #8401 | ||||
* | main/linux-vanilla: upgrade to 4.14.13 | William Pitcock | 2018-01-10 | 1 | -211/+495 |
| | |||||
* | main/linux-vanilla: Update 4.9.73 --> 4.9.75 (Fix for Meltdown) | Marian Buschsieweke | 2018-01-07 | 1 | -0/+1 |
| | | | | | | | | | | | | | | | | | | | | | | | | | This commit updates to kernel version 4.9.75 and enables CONFIG_PAGE_TABLE_ISOLATION for x86, x86_64 and aarch64. For all other architectures, CONFIG_PAGE_TABLE_ISOLATION is disabled. CONFIG_PAGE_TABLE_ISOLATION mitigates the Meltdown security flaw almost all Intel CPUs and some ARM CPUs are suspect to [1,2]. (This patch does not solve the Spectre security threat [2], which affects also non-Intel CPUs [3].) I believe this commit will cause some discussion, especially the following points seem worth discussing: a) CONFIG_PAGE_TABLE_ISOLATION has a performance impact on syscalls, which can slow down specific applications significantly. AMD users might benefit from a kernel without KPTI (unless Meltdown turns out to affect them as well) b) Is disabling this feature a reasonable choice for CPU architectures different from x86, x86_64 and aarch64? [1]: https://meltdownattack.com/#faq-systems-meltdown [2]: http://kroah.com/log/blog/2018/01/06/meltdown-status/ [3]: https://meltdownattack.com/#faq-systems-spectre | ||||
* | main/linux-vanilla: fix armhf config | Timo Teräs | 2017-11-21 | 1 | -1/+2 |
| | |||||
* | main/linux-* and main/squashfs-tools: normalize squashfs compression options | Jack Schmidt | 2017-11-20 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | This commit brings kernel and userspace into agreement about squashfs compression algorithms: zlib, xz, lzo, and lz4 (except on S/390 and PPC64LE). Some kernels has LZO, some had LZ4, some had both. Userspace had LZO, but not LZ4. XZ and LZO were added to squashfs-tools in commit 151deb4c2fe91078c30c588de3fe9e411849a52f Most compression options were added to kernels through default configs: * LZO had been enabled in RPI, RPI2, S/390, PPC64le, and squashfs-tools. * LZ4 had been enabled in x86, x86_64, aarch64, armhf, rpi, rpi2. Default linux kernel config does not currently include LZ4 for S/390 or PPC64le, so I did not change their config. XZ and ZLIB are in everything. | ||||
* | main/linux-vanilla: upgrade to 4.9.54 | Natanael Copa | 2017-10-09 | 1 | -0/+1 |
| | |||||
* | main/linux-vanilla: fix armhf build | Natanael Copa | 2017-03-13 | 1 | -2/+2 |
| | |||||
* | main/linux-vanilla: upgrade to 4.9.14 | Natanael Copa | 2017-03-13 | 1 | -177/+572 |
| | |||||
* | main/linux-vanilla: enable Yama (provides some protections like grsecurity) | William Pitcock | 2017-01-31 | 1 | -1/+12 |
| | |||||
* | main/linux-vanilla: enable rtsx pci and efifb | Timo Teräs | 2016-11-24 | 1 | -3/+5 |
| | | | | | ref #5191 ref #6486 | ||||
* | main/linux-vanilla: enable drivers for cubieboards | Natanael Copa | 2016-07-28 | 1 | -4/+51 |
| | | | | synchronize with linux-grsec config | ||||
* | main/linux-vanilla: disable sysctl syscall | Natanael Copa | 2016-06-01 | 1 | -1/+1 |
| | | | | its obsolete | ||||
* | main/linux-vanilla: upgrade do 4.4.6 | Natanael Copa | 2016-04-04 | 1 | -104/+360 |
| | |||||
* | main/linux-vanilla: Enable strong stackprotector | Sören Tempel | 2016-01-27 | 1 | -3/+3 |
| | |||||
* | main/linux-vanilla: enable coda fs | Natanael Copa | 2015-11-24 | 1 | -1/+1 |
| | | | | ref #4887 | ||||
* | main/linux-vanilla: upgrade to 4.1.11 | Timo Teräs | 2015-10-25 | 1 | -2/+3 |
| | | | | fix armhf config also to have CONNECTOR=y and PROC_EVENTS=y | ||||
* | main/linux-vanilla: fix arm config | Natanael Copa | 2015-10-06 | 1 | -310/+4242 |
| | | | | | something went wrong in the armhf config during update We have also enabled CONFIG_DEVTMPFS_MOUNT=y | ||||
* | main/linux-vanilla: upgrade to 4.1.10 | Natanael Copa | 2015-10-06 | 1 | -4113/+346 |
| | |||||
* | main/linux-vanilla: rename kernel config file | Natanael Copa | 2015-10-05 | 1 | -0/+4973 |