Commit Graph

2850 Commits

Author SHA1 Message Date
Bastian Köcher
a90fc6d3ef linux: Adds patch for fixing wifi on raspberry pi 2019-01-09 11:18:09 +01:00
Joachim Fasting
865f7a14b4
Revert "Revert "linux-hardened: Disable GCC_PLUGIN_RANDSTRUCT""
This reverts commit c68e8b05f0.

RANDSTRUCT currently fails to work with out-of-tree modules, as
evinced by
c68e8b05f0 (commitcomment-31850284)
and https://github.com/NixOS/nixpkgs/issues/53522.

Specifically, loading out-of-tree modules results in modsym version
mismatches, as in
   spl: version magic '4.20.0 SMP mod_unload modversions RANDSTRUCT_PLUGIN
from the issue above.

A working hypothesis is that the randstruct seed is not carried over when
building out-of-tree modules but more investigation is needed here.

Closes https://github.com/NixOS/nixpkgs/issues/53522
2019-01-07 19:50:12 +01:00
Tim Steinbach
97aba92bcd
linux: 4.20-rc7 -> 5.0-rc1 2019-01-07 07:57:38 -05:00
Joachim Fasting
d62086e6fc
hardened-config: allow slub/slab free poisoning 2019-01-05 14:07:36 +01:00
Joachim Fasting
11840f5c70
hardened-config: explain HARDENED_USERCOPY_FALLBACK n 2019-01-05 14:07:36 +01:00
Joachim Fasting
dfd77a046d
hardened-config: ensure STRICT_KERNEL_RWX
This is y in the default config, but enable it explicitly here to catch
situations where it has been disabled (explicitly or implicitly).
2019-01-05 14:07:35 +01:00
Joachim Fasting
1801aad7b8
hardened-config: clarify MODIFY_LDT_SYSCALL
This likely never worked; MODIFY_LDT_SYSCALL depends on EXPERT; enabling
EXPERT however seems to introduce quite a few changes that would need to be
properly vetted.

The version guard is unnecessary, however, as this config has been supported
since 4.3.
2019-01-05 14:07:34 +01:00
Joachim Fasting
abc8ed3fca
hardened-config: clarify readonly LSM hooks config
SECURITY_WRITABLE_HOOKS is implicitly controlled by SECURITY_SELINUX_DISABLE;
explicitly unsetting results in an error because the configfile builder fails
to detect that it has in fact been unset (reporting it as an unused option).
For now, leave WRITABLE_HOOKS as an "optional" config for documentation
purposes.
2019-01-05 14:07:33 +01:00
Joachim Fasting
c68e8b05f0
Revert "linux-hardened: Disable GCC_PLUGIN_RANDSTRUCT"
This reverts commit 5dda1324be.

Presumably this was done to work around build errors or something but it
works fine now.
2019-01-05 14:07:21 +01:00
Pierre Bourdon
0f7ca26a48
kernel/hardened-config.nix: add STACKLEAK plugin on 4.20+ 2019-01-04 22:24:50 +01:00
Pierre Bourdon
9dc0d94896
kernel/hardened-config.nix: re-enable GCC plugins 2019-01-04 22:24:50 +01:00
Pierre Bourdon
c789f642f0
kernel/generic.nix: provide required dependencies for GCC plugins builds 2019-01-04 22:24:50 +01:00
Benno Fünfstück
7817aa3641
linux-rpi: set correct hydraPlatforms (#53325) 2019-01-03 22:42:14 +01:00
Joachim F
88c516dd55
Merge pull request #52606 from lopsided98/linux-hardkernel-update
linux_hardkernel_4_14: 4.14.85-152 -> 4.14.87-153
2019-01-02 18:16:47 +00:00
Tim Steinbach
d6805baded
linux: 4.19.12 -> 4.19.13 2018-12-30 09:57:54 -05:00
Tim Steinbach
226eb52715
linux: 4.14.90 -> 4.14.91 2018-12-30 09:57:54 -05:00
Tim Steinbach
a7bd7a38ea
linux: 4.9.147 -> 4.9.148 2018-12-30 09:57:53 -05:00
Ivan Kozik
1c8fea18e2 kernel/patches.nix: remove hard tabs 2018-12-28 09:06:56 +01:00
Samuel Dionne-Riel
889ef35303 linuxPackages_4_{19,20}: works around bug with overlayfs.
See: https://github.com/NixOS/nixpkgs/issues/48828#issuecomment-445208626
2018-12-26 22:51:31 +00:00
Tim Steinbach
24cdaa7b48
linux-libre: 15715 -> 15814 2018-12-24 12:33:24 -05:00
Tim Steinbach
8f9c2f9726
linux: Add 4.20 2018-12-24 12:33:24 -05:00
Tim Steinbach
af6c117fac
linux: 4.19.11 -> 4.19.12 2018-12-21 09:11:02 -05:00
Tim Steinbach
dea57f15e9
linux: 4.14.89 -> 4.14.90 2018-12-21 09:10:54 -05:00
Tim Steinbach
a5f447e16a
linux: 4.9.146 -> 4.9.147 2018-12-21 09:10:45 -05:00
Tim Steinbach
54ce2e016b
linux: 4.4.168 -> 4.4.169 2018-12-21 09:10:24 -05:00
Tim Steinbach
98ac5710bd
kernel-config: CIFS_POSIX no longer exists 2018-12-21 09:10:17 -05:00
Ben Wolsieffer
2b02350d39 linux_hardkernel_4_14: 4.14.85-152 -> 4.14.87-153 2018-12-20 21:15:07 -05:00
Tim Steinbach
1b84b9f725
linux: 4.19.10 -> 4.19.11 2018-12-20 10:46:17 -05:00
Tim Steinbach
4d14879081
linux: 4.4.167 -> 4.4.168 2018-12-18 09:12:34 -05:00
Tim Steinbach
31ddf1f136
linux: 4.19.9 -> 4.19.10 2018-12-17 09:19:41 -05:00
Tim Steinbach
c5234d7dbd
linux: 4.14.88 -> 4.14.89 2018-12-17 09:19:41 -05:00
Tim Steinbach
53c490a7ee
linux: 4.9.145 -> 4.9.146 2018-12-17 09:19:41 -05:00
Edmund Wu
cb6c9af457
linux_testing: 4.20-rc6 -> 4.20-rc7 2018-12-16 22:09:03 -05:00
Tim Steinbach
5a15ab7b5d
linux: 4.19.8 -> 4.19.9 2018-12-13 06:58:15 -05:00
Tim Steinbach
f335fa6d74
linux: 4.14.87 -> 4.14.88 2018-12-13 06:58:07 -05:00
Tim Steinbach
1f92bdcd94
linux: 4.9.144 -> 4.9.145 2018-12-13 06:57:58 -05:00
Tim Steinbach
adf8cdd67d
linux: 4.4.166 -> 4.4.167 2018-12-13 06:57:42 -05:00
Tim Steinbach
c89cbdcd48
linux: 4.20-rc5 -> 4.20-rc6 2018-12-11 11:11:34 -05:00
Alyssa Ross
017390185a
Merge pull request #51817 from qolii/linux_hardkernel_4_14_78__4_14_85
linux_hardkernel_4_14: 4.14.78-150 -> 4.14.85.152
2018-12-10 17:08:37 +00:00
Patrick Hilhorst
ffd47d5b16
Revert "linux: inside nix-shell, allow make menuconfig" 2018-12-10 15:50:36 +01:00
qoli
f6172b634d linux_hardkernel_4_14: 4.14.78-150 -> 4.14.85.152 2018-12-10 00:17:08 -08:00
Tim Steinbach
02f8d66efa
linux: 4.19.7 -> 4.19.8 2018-12-08 10:26:09 -05:00
Tim Steinbach
e4da78c349
linux: 4.14.86 -> 4.14.87 2018-12-08 10:26:09 -05:00
Tim Steinbach
c7ea265e8e
linux: 4.9.143 -> 4.9.144 2018-12-08 10:26:09 -05:00
Tim Steinbach
808d52ee05
linux: 4.19.6 -> 4.19.7 2018-12-05 17:34:29 -05:00
Tim Steinbach
e945771e4c
linux: 4.14.85 -> 4.14.86 2018-12-05 17:34:13 -05:00
Tim Steinbach
1f7266cbbb
linux: 4.9.142 -> 4.9.143 2018-12-05 17:33:36 -05:00
Alyssa Ross
fa749ac858
linux_latest-libre: document finding latest rev
https://github.com/NixOS/nixpkgs/pull/51403#issuecomment-444064006
2018-12-04 12:08:30 +00:00
Tim Steinbach
3b2bf761df
linux: 4.20-rc4 -> 4.20-rc5 2018-12-03 07:43:04 -05:00
Jörg Thalheim
3ba88670ab
linux_latest-libre: update patchset for kernel version 2018-12-02 18:54:57 +00:00