| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
| |
remove unused ppc config
|
| |
|
| |
|
|
|
|
| |
(cherry picked from commit 1acebd080f9b9681277319f4f80bafdbf3867615)
|
|
|
|
|
|
|
|
|
| |
also enable CONFIG_RANDOM_TRUST_CPU
https://askubuntu.com/questions/1070433/will-ubuntu-enable-random-trust-cpu-in-the-kernel-and-what-would-be-the-effect/1071196#1071196
fixes #9960
(cherry picked from commit e67c2f8bcb163695a5917e059a2c7ba46726ee89)
|
|
|
|
|
|
| |
The config option is required for busybox's mdev to work, or we'll get ".../lib/rc/sh/openrc-run.sh: line 21: can't create /proc/sys/kernel/hotplug: nonexistent directory" on boot.
(cherry picked from commit 3c109eb5f41acef557f1d4dc2e8b90e4ba610ac9)
|
|
|
|
|
|
|
|
|
| |
CONFIG_KERNEL_NOBP should be off if CONFIG_EXPOLINE_AUTO is selected
NOBP has been the first line of defense and is basically outdated by
now
(cherry picked from commit 212401a4ca0b7294979c648980da1fa20438fff9)
|
|
|
|
| |
(cherry picked from commit affc173481ca6bc814aa1e89b0ef54fd741207a5)
|
|
|
|
|
|
| |
zkey in s390-tools requires pkey module
(cherry picked from commit 3ca3ebf41448a6d91983eed4b61d85dae7e0ac1b)
|
|
|
|
|
|
| |
fixes #10044
(cherry picked from commit 9856ed281551d7ec3fd9a6ae34cbaaf6c4fa0a94)
|
| |
|
|
|
|
|
|
|
| |
build fix for s390x
commit 6e179d64126b909f0b288fa63cdbf07c531e9b1d allows either nobp or
expolines
|
|
|
|
| |
fixes #8778
|
|
|
|
| |
note that BPF_SYSCALL is disabled on other architectures
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This commit updates to kernel version 4.9.75 and enables
CONFIG_PAGE_TABLE_ISOLATION for x86, x86_64 and aarch64. For all
other architectures, CONFIG_PAGE_TABLE_ISOLATION is disabled.
CONFIG_PAGE_TABLE_ISOLATION mitigates the Meltdown security flaw
almost all Intel CPUs and some ARM CPUs are suspect to [1,2].
(This patch does not solve the Spectre security threat [2], which
affects also non-Intel CPUs [3].)
I believe this commit will cause some discussion, especially the
following points seem worth discussing:
a) CONFIG_PAGE_TABLE_ISOLATION has a performance impact on
syscalls, which can slow down specific applications
significantly. AMD users might benefit from a kernel without
KPTI (unless Meltdown turns out to affect them as well)
b) Is disabling this feature a reasonable choice for CPU
architectures different from x86, x86_64 and aarch64?
[1]: https://meltdownattack.com/#faq-systems-meltdown
[2]: http://kroah.com/log/blog/2018/01/06/meltdown-status/
[3]: https://meltdownattack.com/#faq-systems-spectre
|
| |
|
|
Add CONFIG_SECURITY_YAMA. Update to 4.9.15.
[TT: Minor changes in config]
|