From bb8b6ebc94af8f41e1d52a4fea67cac8f104c754 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Milan=20P=2E=20Stani=C4=87?= Date: Tue, 21 Apr 2020 15:06:47 +0200 Subject: main/linux-lts: upgrade to 5.4.34 enable PKCS8 for architectures for which had it enabled. enable other default crypto options on architectures which had it disabled. --- main/linux-lts/APKBUILD | 28 ++++++++++++++-------------- main/linux-lts/config-lts.aarch64 | 2 +- main/linux-lts/config-lts.armv7 | 4 ++-- main/linux-lts/config-lts.mips | 27 ++++++++++++++++++++++----- main/linux-lts/config-lts.mips64 | 27 ++++++++++++++++++++++----- main/linux-lts/config-lts.ppc64le | 28 +++++++++++++++++++++------- main/linux-lts/config-lts.s390x | 24 +++++++++++++++--------- main/linux-lts/config-lts.x86 | 2 +- main/linux-lts/config-lts.x86_64 | 2 +- main/linux-lts/config-virt.aarch64 | 2 +- main/linux-lts/config-virt.armv7 | 2 +- main/linux-lts/config-virt.x86 | 2 +- main/linux-lts/config-virt.x86_64 | 2 +- 13 files changed, 103 insertions(+), 49 deletions(-) diff --git a/main/linux-lts/APKBUILD b/main/linux-lts/APKBUILD index 9690ac02a6..08f60c69f0 100644 --- a/main/linux-lts/APKBUILD +++ b/main/linux-lts/APKBUILD @@ -2,7 +2,7 @@ _flavor=lts pkgname=linux-${_flavor} -pkgver=5.4.33 +pkgver=5.4.34 case $pkgver in *.*.*) _kernver=${pkgver%.*};; *.*) _kernver=$pkgver;; @@ -223,16 +223,16 @@ _dev() { sha512sums="9f60f77e8ab972b9438ac648bed17551c8491d6585a5e85f694b2eaa4c623fbc61eb18419b2656b6795eac5deec0edaa04547fc6723fbda52256bd7f3486898f linux-5.4.tar.xz d19365fe94431008768c96a2c88955652f70b6df6677457ee55ee95246a64fdd2c6fed9b3bef37c29075178294a7fc91f148ead636382530ebfa822be4ad8c2f 0002-powerpc-config-defang-gcc-check-for-stack-protector-.patch -bc95b8e5ec78582d1d10132b3b5ff274cf656706ab4d3bf134175fc1129e957ffd7ca1bbffeff11db437c3cdb547a5e64233030383f461ac62af5dcd02cd483f config-lts.aarch64 -43a240f3d919a699250aef5f80775d620ccf53da038994f464cecf95d5531af0be60bb7639a25274f264f92bf11337967ae2590a99e8f33ac8458a051675035b config-lts.armv7 -4c27c1c684df788e163916ba2beab2e2eae590025603a82018e0507826e1207d1bbb3977debe73424cfce2a975a9fe2581102642653227c0e708107e6ca1bde7 config-lts.x86 -cf728062d4fd977b737cd829fee3c2eacfd7dad33ab45caf505ab5e982f69b3df1c1bda1eceddbb8593ca5ed5fc97fc6d1355b317520c51b5b4fc6c46b84ffca config-lts.x86_64 -b0542c282f28a689c94f7d8675e6037b1030c45af6be2db223d9cc8b3b5b9b7940133d9884309272277196a051eb59c2e4af26c753a07a8f691e2b38b4372904 config-lts.ppc64le -6a397db7959e3ffafdd9de0a00fae24c6b3cf1492dae6193dc8cf57f259687120598633ca92bb32530fd598687d0c8894a5eb97ec6ecb8d59d459da39f6775ca config-lts.s390x -af57a893bea550279224d5478c699ccea3e30944b3a036e6bac09b33aae7931258b7a7b8dd193d5bcbaf1ed4160d3ad24bdf36360f4050565887e516e4f3e623 config-lts.mips64 -3b336e66b3239ff00d298d0344f7316f234aa7a455cdfcececa1cc4d7d81c8396e3b8660d4ec4baca9ae47f3beb830434631f6126eb69501c1b9b62a8354a7aa config-lts.mips -48ca44ccc9cf2767bf89a5ffffd6408c02151e74edb5710511d09296f3fed76d62ea4410a90c3b78b43f94f2274ca3232319405818d0946c3653ba8695e49bea config-virt.aarch64 -b5b7fdcde21107ede68308034d9e3ab048faa56841a1bfe5362ba3e5e663d0fa1be822e3c394be447c058c58aaa366d9c68d71b87f35c1b2fad0afec6c4b69b2 config-virt.armv7 -be0c66877e7d2d987744d52669086702424c0681653a0fc6ab4c487df3b090cdd9bbbedbfd0134e4a83231971d667ff4fb2f9b8d60394ce86653ffb2cbcb0283 config-virt.x86 -46f389ba3190c917ec5dde342524345561dc4d0c6e8e1ce4c320ffbb34799734f5999b40d0707068896f1a50dbe8f84b281d70e8fb23dc19fc84947f394029f7 config-virt.x86_64 -566829f94ccce6ee98fde8338b6fd58792422f1676ed72cad9dcdd2c0e79a7e50408b7b3a967829a96f98717ad39b35d6c9007cdf58c0c22a0d6592bddf354cd patch-5.4.33.xz" +1d06ba4480a547c33f16054d8e556e74b1fd0d9a03023f4e66560a9f282056ec5782ab0eb309ff7b551b52c24fbd453603678631f90713164b5cb11bdad005ff config-lts.aarch64 +76d29004ebe0d73566bd9a3d8ed177815f9340678fa1f4fb58999d701c8659aa779a51d2d5ed355dfae993728ecfddc7f89488946b5cd90f7e54d5f2af1feb4a config-lts.armv7 +fba2e913421fc4598b3fde368a9a403ae6aba7380aaf370681a0ce7881d2b2ae1468d9eb69c1a6883725d7a20983c59cac0ebd8338fd5c257c7e40edc521b828 config-lts.x86 +0c53a969414a079ac88f23a2a80da4666e7f0bb4b2417015fab2f783a10ab3037e4e7b2335c2b0b788b98345c63f80b313c2b1583edb7ecdf5c246bba625f0ff config-lts.x86_64 +b843b6965bd82354170615ad560774d1f3c4c397eb5f973c0739873ee7ee75701ab6da0535751f1f1a147cbbed227e604c72532072f992ed7b7779b44c4a3b69 config-lts.ppc64le +e6624e4ac64bd7bf44891db562620953404275e9fd09ff3b0553890e951f04a15f49af92b10b4694bc547b1d4bcad4958300589137a50596db98ee5adc3262bd config-lts.s390x +3809ae11d08ee672888e9545ff54dfb6c61a3bb4b8b0939a929fd6e728775ac270cd34a75647ade44467d8ebe626c4b32d14e4cbd8e2a49726c3141ddae53f22 config-lts.mips64 +90b3d7fcf83377bae5a839d286fd6c9ea20eefa5b4062cc99307837c80d0dd6eb6352057ccbcf9f9b95f4875eb77e3f883dc65eb1bdd34162e8a10df7f0c632e config-lts.mips +4603b18dcc2e56332ae343f85cb5be4b320d8ce70ce343a5471363a252b1ca7a5eb8cf8377fb9df98cd5d62806278431ddf955ab87ae79fba037dac9b1ce9ef1 config-virt.aarch64 +59a8c29db5761b5c4737c58ae3465b1398548250e885c70d99d3531ce9b6210114e511068a29503134e404ab33c4c2a6cb365809164d8dd0a9f207a2ae2a00b7 config-virt.armv7 +19c2176a81191d5bfc1adaf037e5f50a8cb20e5c8aa20a87e2364ffae75f62e6af28cad865e22fbb7b20aa698ce38f06b371fd7c1c6985b24a474b2531a27c0d config-virt.x86 +76d4fac5578035b34abaf4c0f74f469d252f992d305f83a6a87b8155574c2346efbefb7943d5ebe38641f2fbd4aee67808883fe6f03df1b758426e7b8e1303a8 config-virt.x86_64 +d4e276f2ae648446651dac5b0547dc42d3d7449ea6d629057f4071d6b9225dd9cd2be6ad01f786114acc4a789a62b59e8bc67b6b1e5480d4b4625258a501f4b4 patch-5.4.34.xz" diff --git a/main/linux-lts/config-lts.aarch64 b/main/linux-lts/config-lts.aarch64 index 34d44beb08..5ebea00b80 100644 --- a/main/linux-lts/config-lts.aarch64 +++ b/main/linux-lts/config-lts.aarch64 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/arm64 5.4.32 Kernel Configuration +# Linux/arm64 5.4.34 Kernel Configuration # # diff --git a/main/linux-lts/config-lts.armv7 b/main/linux-lts/config-lts.armv7 index cabc85b7a3..7b2e01b0b1 100644 --- a/main/linux-lts/config-lts.armv7 +++ b/main/linux-lts/config-lts.armv7 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/arm 5.4.32 Kernel Configuration +# Linux/arm 5.4.34 Kernel Configuration # # @@ -536,7 +536,7 @@ CONFIG_ARM_ERRATA_852423=y # # Bus support # -# CONFIG_ARM_ERRATA_814220 is not set +CONFIG_ARM_ERRATA_814220=y # end of Bus support # diff --git a/main/linux-lts/config-lts.mips b/main/linux-lts/config-lts.mips index 9bb66a9682..9bece7492e 100644 --- a/main/linux-lts/config-lts.mips +++ b/main/linux-lts/config-lts.mips @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/mips 5.4.32 Kernel Configuration +# Linux/mips 5.4.34 Kernel Configuration # # @@ -207,6 +207,7 @@ CONFIG_SLAB=y CONFIG_SLAB_MERGE_DEFAULT=y # CONFIG_SLAB_FREELIST_RANDOM is not set # CONFIG_SHUFFLE_PAGE_ALLOCATOR is not set +CONFIG_SYSTEM_DATA_VERIFICATION=y # CONFIG_PROFILING is not set # end of General setup @@ -577,6 +578,7 @@ CONFIG_MQ_IOSCHED_KYBER=y # CONFIG_IOSCHED_BFQ is not set # end of IO Schedulers +CONFIG_ASN1=y CONFIG_INLINE_SPIN_UNLOCK_IRQ=y CONFIG_INLINE_READ_UNLOCK=y CONFIG_INLINE_READ_UNLOCK_IRQ=y @@ -2756,6 +2758,7 @@ CONFIG_CRYPTO_RNG=m CONFIG_CRYPTO_RNG2=y CONFIG_CRYPTO_RNG_DEFAULT=m CONFIG_CRYPTO_AKCIPHER2=y +CONFIG_CRYPTO_AKCIPHER=y CONFIG_CRYPTO_KPP2=y CONFIG_CRYPTO_ACOMP2=y CONFIG_CRYPTO_MANAGER=y @@ -2773,7 +2776,7 @@ CONFIG_CRYPTO_AUTHENC=m # # Public-key cryptography # -# CONFIG_CRYPTO_RSA is not set +CONFIG_CRYPTO_RSA=y # CONFIG_CRYPTO_DH is not set # CONFIG_CRYPTO_ECDH is not set # CONFIG_CRYPTO_ECRDSA is not set @@ -2829,8 +2832,8 @@ CONFIG_CRYPTO_MICHAEL_MIC=m # CONFIG_CRYPTO_RMD256 is not set # CONFIG_CRYPTO_RMD320 is not set CONFIG_CRYPTO_SHA1=m -CONFIG_CRYPTO_LIB_SHA256=m -CONFIG_CRYPTO_SHA256=m +CONFIG_CRYPTO_LIB_SHA256=y +CONFIG_CRYPTO_SHA256=y CONFIG_CRYPTO_SHA512=m # CONFIG_CRYPTO_SHA3 is not set # CONFIG_CRYPTO_SM3 is not set @@ -2890,12 +2893,23 @@ CONFIG_CRYPTO_JITTERENTROPY=m # CONFIG_CRYPTO_USER_API_SKCIPHER is not set # CONFIG_CRYPTO_USER_API_RNG is not set # CONFIG_CRYPTO_USER_API_AEAD is not set +CONFIG_CRYPTO_HASH_INFO=y # CONFIG_CRYPTO_HW is not set -# CONFIG_ASYMMETRIC_KEY_TYPE is not set +CONFIG_ASYMMETRIC_KEY_TYPE=y +CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y +CONFIG_X509_CERTIFICATE_PARSER=y +CONFIG_PKCS8_PRIVATE_KEY_PARSER=m +CONFIG_PKCS7_MESSAGE_PARSER=y +# CONFIG_PKCS7_TEST_KEY is not set +# CONFIG_SIGNED_PE_FILE_VERIFICATION is not set # # Certificates for signature checking # +CONFIG_SYSTEM_TRUSTED_KEYRING=y +CONFIG_SYSTEM_TRUSTED_KEYS="" +# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set +# CONFIG_SECONDARY_TRUSTED_KEYRING is not set # CONFIG_SYSTEM_BLACKLIST_KEYRING is not set # end of Certificates for signature checking @@ -2952,8 +2966,11 @@ CONFIG_GLOB=y # CONFIG_GLOB_SELFTEST is not set CONFIG_NLATTR=y CONFIG_GENERIC_ATOMIC64=y +CONFIG_CLZ_TAB=y # CONFIG_IRQ_POLL is not set +CONFIG_MPILIB=y CONFIG_LIBFDT=y +CONFIG_OID_REGISTRY=y CONFIG_HAVE_GENERIC_VDSO=y CONFIG_GENERIC_GETTIMEOFDAY=y CONFIG_FONT_SUPPORT=y diff --git a/main/linux-lts/config-lts.mips64 b/main/linux-lts/config-lts.mips64 index 7225e721ee..68a89f7a6d 100644 --- a/main/linux-lts/config-lts.mips64 +++ b/main/linux-lts/config-lts.mips64 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/mips 5.4.32 Kernel Configuration +# Linux/mips 5.4.34 Kernel Configuration # # @@ -209,6 +209,7 @@ CONFIG_SLAB=y CONFIG_SLAB_MERGE_DEFAULT=y # CONFIG_SLAB_FREELIST_RANDOM is not set # CONFIG_SHUFFLE_PAGE_ALLOCATOR is not set +CONFIG_SYSTEM_DATA_VERIFICATION=y # CONFIG_PROFILING is not set # end of General setup @@ -584,6 +585,7 @@ CONFIG_MQ_IOSCHED_KYBER=y # CONFIG_IOSCHED_BFQ is not set # end of IO Schedulers +CONFIG_ASN1=y CONFIG_INLINE_SPIN_UNLOCK_IRQ=y CONFIG_INLINE_READ_UNLOCK=y CONFIG_INLINE_READ_UNLOCK_IRQ=y @@ -2779,6 +2781,7 @@ CONFIG_CRYPTO_RNG=m CONFIG_CRYPTO_RNG2=y CONFIG_CRYPTO_RNG_DEFAULT=m CONFIG_CRYPTO_AKCIPHER2=y +CONFIG_CRYPTO_AKCIPHER=y CONFIG_CRYPTO_KPP2=y CONFIG_CRYPTO_ACOMP2=y CONFIG_CRYPTO_MANAGER=y @@ -2796,7 +2799,7 @@ CONFIG_CRYPTO_AUTHENC=m # # Public-key cryptography # -# CONFIG_CRYPTO_RSA is not set +CONFIG_CRYPTO_RSA=y # CONFIG_CRYPTO_DH is not set # CONFIG_CRYPTO_ECDH is not set # CONFIG_CRYPTO_ECRDSA is not set @@ -2852,8 +2855,8 @@ CONFIG_CRYPTO_MICHAEL_MIC=m # CONFIG_CRYPTO_RMD256 is not set # CONFIG_CRYPTO_RMD320 is not set CONFIG_CRYPTO_SHA1=m -CONFIG_CRYPTO_LIB_SHA256=m -CONFIG_CRYPTO_SHA256=m +CONFIG_CRYPTO_LIB_SHA256=y +CONFIG_CRYPTO_SHA256=y CONFIG_CRYPTO_SHA512=m # CONFIG_CRYPTO_SHA3 is not set # CONFIG_CRYPTO_SM3 is not set @@ -2913,12 +2916,23 @@ CONFIG_CRYPTO_JITTERENTROPY=m # CONFIG_CRYPTO_USER_API_SKCIPHER is not set # CONFIG_CRYPTO_USER_API_RNG is not set # CONFIG_CRYPTO_USER_API_AEAD is not set +CONFIG_CRYPTO_HASH_INFO=y # CONFIG_CRYPTO_HW is not set -# CONFIG_ASYMMETRIC_KEY_TYPE is not set +CONFIG_ASYMMETRIC_KEY_TYPE=y +CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y +CONFIG_X509_CERTIFICATE_PARSER=y +CONFIG_PKCS8_PRIVATE_KEY_PARSER=m +CONFIG_PKCS7_MESSAGE_PARSER=y +# CONFIG_PKCS7_TEST_KEY is not set +# CONFIG_SIGNED_PE_FILE_VERIFICATION is not set # # Certificates for signature checking # +CONFIG_SYSTEM_TRUSTED_KEYRING=y +CONFIG_SYSTEM_TRUSTED_KEYS="" +# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set +# CONFIG_SECONDARY_TRUSTED_KEYRING is not set # CONFIG_SYSTEM_BLACKLIST_KEYRING is not set # end of Certificates for signature checking @@ -2976,8 +2990,11 @@ CONFIG_DQL=y CONFIG_GLOB=y # CONFIG_GLOB_SELFTEST is not set CONFIG_NLATTR=y +CONFIG_CLZ_TAB=y # CONFIG_IRQ_POLL is not set +CONFIG_MPILIB=y CONFIG_LIBFDT=y +CONFIG_OID_REGISTRY=y CONFIG_HAVE_GENERIC_VDSO=y CONFIG_GENERIC_GETTIMEOFDAY=y CONFIG_FONT_SUPPORT=y diff --git a/main/linux-lts/config-lts.ppc64le b/main/linux-lts/config-lts.ppc64le index 1b0d20282e..fbe0dc54e2 100644 --- a/main/linux-lts/config-lts.ppc64le +++ b/main/linux-lts/config-lts.ppc64le @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/powerpc 5.4.32 Kernel Configuration +# Linux/powerpc 5.4.34 Kernel Configuration # # @@ -219,6 +219,7 @@ CONFIG_SLAB_FREELIST_RANDOM=y # CONFIG_SLAB_FREELIST_HARDENED is not set # CONFIG_SHUFFLE_PAGE_ALLOCATOR is not set CONFIG_SLUB_CPU_PARTIAL=y +CONFIG_SYSTEM_DATA_VERIFICATION=y CONFIG_PROFILING=y CONFIG_TRACEPOINTS=y # end of General setup @@ -409,6 +410,7 @@ CONFIG_ARCH_ENABLE_MEMORY_HOTPLUG=y CONFIG_ARCH_ENABLE_MEMORY_HOTREMOVE=y CONFIG_PPC64_SUPPORTS_MEMORY_FAILURE=y CONFIG_KEXEC=y +# CONFIG_KEXEC_FILE is not set # CONFIG_RELOCATABLE is not set # CONFIG_CRASH_DUMP is not set # CONFIG_FA_DUMP is not set @@ -648,7 +650,7 @@ CONFIG_MQ_IOSCHED_KYBER=y CONFIG_PREEMPT_NOTIFIERS=y CONFIG_PADATA=y -CONFIG_ASN1=m +CONFIG_ASN1=y CONFIG_INLINE_SPIN_UNLOCK_IRQ=y CONFIG_INLINE_READ_UNLOCK=y CONFIG_INLINE_READ_UNLOCK_IRQ=y @@ -4104,6 +4106,7 @@ CONFIG_CRYPTO_RNG=m CONFIG_CRYPTO_RNG2=y CONFIG_CRYPTO_RNG_DEFAULT=m CONFIG_CRYPTO_AKCIPHER2=y +CONFIG_CRYPTO_AKCIPHER=y CONFIG_CRYPTO_KPP2=y CONFIG_CRYPTO_KPP=y CONFIG_CRYPTO_ACOMP2=y @@ -4123,7 +4126,7 @@ CONFIG_CRYPTO_ENGINE=m # # Public-key cryptography # -# CONFIG_CRYPTO_RSA is not set +CONFIG_CRYPTO_RSA=y CONFIG_CRYPTO_DH=y CONFIG_CRYPTO_ECC=m CONFIG_CRYPTO_ECDH=m @@ -4184,8 +4187,8 @@ CONFIG_CRYPTO_MICHAEL_MIC=m # CONFIG_CRYPTO_RMD320 is not set CONFIG_CRYPTO_SHA1=y # CONFIG_CRYPTO_SHA1_PPC is not set -CONFIG_CRYPTO_LIB_SHA256=m -CONFIG_CRYPTO_SHA256=m +CONFIG_CRYPTO_LIB_SHA256=y +CONFIG_CRYPTO_SHA256=y CONFIG_CRYPTO_SHA512=y CONFIG_CRYPTO_SHA3=m CONFIG_CRYPTO_SM3=m @@ -4247,6 +4250,7 @@ CONFIG_CRYPTO_USER_API_SKCIPHER=m CONFIG_CRYPTO_USER_API_RNG=m CONFIG_CRYPTO_USER_API_AEAD=m # CONFIG_CRYPTO_STATS is not set +CONFIG_CRYPTO_HASH_INFO=y CONFIG_CRYPTO_HW=y CONFIG_CRYPTO_DEV_NX=y CONFIG_CRYPTO_DEV_NX_COMPRESS=y @@ -4260,11 +4264,21 @@ CONFIG_CRYPTO_DEV_NX_COMPRESS_POWERNV=y CONFIG_CRYPTO_DEV_VIRTIO=m # CONFIG_CRYPTO_DEV_SAFEXCEL is not set # CONFIG_CRYPTO_DEV_CCREE is not set -# CONFIG_ASYMMETRIC_KEY_TYPE is not set +CONFIG_ASYMMETRIC_KEY_TYPE=y +CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y +CONFIG_X509_CERTIFICATE_PARSER=y +CONFIG_PKCS8_PRIVATE_KEY_PARSER=m +CONFIG_PKCS7_MESSAGE_PARSER=y +# CONFIG_PKCS7_TEST_KEY is not set +# CONFIG_SIGNED_PE_FILE_VERIFICATION is not set # # Certificates for signature checking # +CONFIG_SYSTEM_TRUSTED_KEYRING=y +CONFIG_SYSTEM_TRUSTED_KEYS="" +# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set +# CONFIG_SECONDARY_TRUSTED_KEYRING is not set # CONFIG_SYSTEM_BLACKLIST_KEYRING is not set # end of Certificates for signature checking @@ -4358,7 +4372,7 @@ CONFIG_IRQ_POLL=y CONFIG_MPILIB=y CONFIG_DIMLIB=y CONFIG_LIBFDT=y -CONFIG_OID_REGISTRY=m +CONFIG_OID_REGISTRY=y CONFIG_FONT_SUPPORT=y # CONFIG_FONTS is not set CONFIG_FONT_8x8=y diff --git a/main/linux-lts/config-lts.s390x b/main/linux-lts/config-lts.s390x index da5a9eb694..27d771b1c1 100644 --- a/main/linux-lts/config-lts.s390x +++ b/main/linux-lts/config-lts.s390x @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/s390 5.4.32 Kernel Configuration +# Linux/s390 5.4.34 Kernel Configuration # # @@ -224,6 +224,7 @@ CONFIG_SLAB_FREELIST_RANDOM=y # CONFIG_SLAB_FREELIST_HARDENED is not set # CONFIG_SHUFFLE_PAGE_ALLOCATOR is not set CONFIG_SLUB_CPU_PARTIAL=y +CONFIG_SYSTEM_DATA_VERIFICATION=y CONFIG_PROFILING=y CONFIG_TRACEPOINTS=y # end of General setup @@ -557,7 +558,7 @@ CONFIG_MQ_IOSCHED_KYBER=y CONFIG_PREEMPT_NOTIFIERS=y CONFIG_PADATA=y -CONFIG_ASN1=m +CONFIG_ASN1=y CONFIG_ARCH_INLINE_SPIN_TRYLOCK=y CONFIG_ARCH_INLINE_SPIN_TRYLOCK_BH=y CONFIG_ARCH_INLINE_SPIN_LOCK=y @@ -3045,7 +3046,7 @@ CONFIG_CRYPTO_RNG=y CONFIG_CRYPTO_RNG2=y CONFIG_CRYPTO_RNG_DEFAULT=y CONFIG_CRYPTO_AKCIPHER2=y -CONFIG_CRYPTO_AKCIPHER=m +CONFIG_CRYPTO_AKCIPHER=y CONFIG_CRYPTO_KPP2=y CONFIG_CRYPTO_KPP=y CONFIG_CRYPTO_ACOMP2=y @@ -3065,7 +3066,7 @@ CONFIG_CRYPTO_ENGINE=m # # Public-key cryptography # -# CONFIG_CRYPTO_RSA is not set +CONFIG_CRYPTO_RSA=y CONFIG_CRYPTO_DH=y CONFIG_CRYPTO_ECC=m CONFIG_CRYPTO_ECDH=m @@ -3205,16 +3206,21 @@ CONFIG_CRYPTO_CRC32_S390=m CONFIG_CRYPTO_DEV_VIRTIO=m # CONFIG_CRYPTO_DEV_SAFEXCEL is not set CONFIG_ASYMMETRIC_KEY_TYPE=y -CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=m +CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y # CONFIG_ASYMMETRIC_TPM_KEY_SUBTYPE is not set -CONFIG_X509_CERTIFICATE_PARSER=m +CONFIG_X509_CERTIFICATE_PARSER=y # CONFIG_PKCS8_PRIVATE_KEY_PARSER is not set -CONFIG_PKCS7_MESSAGE_PARSER=m +CONFIG_PKCS7_MESSAGE_PARSER=y +# CONFIG_PKCS7_TEST_KEY is not set +# CONFIG_SIGNED_PE_FILE_VERIFICATION is not set # # Certificates for signature checking # -# CONFIG_SYSTEM_TRUSTED_KEYRING is not set +CONFIG_SYSTEM_TRUSTED_KEYRING=y +CONFIG_SYSTEM_TRUSTED_KEYS="" +# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set +# CONFIG_SECONDARY_TRUSTED_KEYRING is not set # CONFIG_SYSTEM_BLACKLIST_KEYRING is not set # end of Certificates for signature checking @@ -3302,7 +3308,7 @@ CONFIG_CLZ_TAB=y CONFIG_IRQ_POLL=y CONFIG_MPILIB=y CONFIG_DIMLIB=y -CONFIG_OID_REGISTRY=m +CONFIG_OID_REGISTRY=y CONFIG_SG_POOL=y CONFIG_ARCH_STACKWALK=y CONFIG_SBITMAP=y diff --git a/main/linux-lts/config-lts.x86 b/main/linux-lts/config-lts.x86 index 36eb762f83..7f242b74c8 100644 --- a/main/linux-lts/config-lts.x86 +++ b/main/linux-lts/config-lts.x86 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 5.4.32 Kernel Configuration +# Linux/x86 5.4.34 Kernel Configuration # # diff --git a/main/linux-lts/config-lts.x86_64 b/main/linux-lts/config-lts.x86_64 index 2c1ad037fa..63bbfe2aa4 100644 --- a/main/linux-lts/config-lts.x86_64 +++ b/main/linux-lts/config-lts.x86_64 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 5.4.32 Kernel Configuration +# Linux/x86_64 5.4.34 Kernel Configuration # # diff --git a/main/linux-lts/config-virt.aarch64 b/main/linux-lts/config-virt.aarch64 index a711faa1b8..03117c5c78 100644 --- a/main/linux-lts/config-virt.aarch64 +++ b/main/linux-lts/config-virt.aarch64 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/arm64 5.4.32 Kernel Configuration +# Linux/arm64 5.4.34 Kernel Configuration # # diff --git a/main/linux-lts/config-virt.armv7 b/main/linux-lts/config-virt.armv7 index fdb56a783c..e441e18a98 100644 --- a/main/linux-lts/config-virt.armv7 +++ b/main/linux-lts/config-virt.armv7 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/arm 5.4.32 Kernel Configuration +# Linux/arm 5.4.34 Kernel Configuration # # diff --git a/main/linux-lts/config-virt.x86 b/main/linux-lts/config-virt.x86 index 6b37f0be43..f64f2f408d 100644 --- a/main/linux-lts/config-virt.x86 +++ b/main/linux-lts/config-virt.x86 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 5.4.32 Kernel Configuration +# Linux/x86 5.4.34 Kernel Configuration # # diff --git a/main/linux-lts/config-virt.x86_64 b/main/linux-lts/config-virt.x86_64 index 67f5afe6ff..cd666b4d93 100644 --- a/main/linux-lts/config-virt.x86_64 +++ b/main/linux-lts/config-virt.x86_64 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86_64 5.4.32 Kernel Configuration +# Linux/x86_64 5.4.34 Kernel Configuration # # -- cgit v1.2.3