Commit Graph

593 Commits

Author SHA1 Message Date
Reg Tiangha
da653b9c09
Temporarily disable CONFIG_PINCTRL_AMD to work around Ryzen kernel panics 2017-06-29 13:54:33 -06:00
Reg Tiangha
e8979b9eb3
Update to 4.9.35 2017-06-29 13:42:29 -06:00
Reg Tiangha
78bcad94a3
Remove XSA216 patch which is now merged into 4.9.35 2017-06-29 13:41:07 -06:00
Marek Marczykowski-Górecki
2a3d08c6b1
version 4.9.33-18 2017-06-20 03:13:32 +02:00
Marek Marczykowski-Górecki
98cd82b126
Apply XSA 216 patch 2017-06-20 02:03:38 +02:00
Reg Tiangha
33a7122238
Update to 4.9.33 2017-06-17 00:57:13 -06:00
Reg Tiangha
4980ea5488
Update to 4.9.32 2017-06-14 08:53:39 -06:00
Reg Tiangha
4fd408e530
Add missing dependancy 2017-06-07 12:06:31 -06:00
Reg Tiangha
4cafaec101
Update to 4.9.31 2017-06-07 11:58:39 -06:00
Reg Tiangha
98ffaf518e Merge pull request #2 from marmarek/devel-4.9
Synchronize packaging, integrate kernel-devel into kernel-qubes-vm
2017-06-03 15:22:20 -06:00
Marek Marczykowski-Górecki
77f8e8ef6d
rpm: include kernel headers in modules.img for VM
Distributing kernel-devel built for dom0 to VMs is major PITA, including
problems like copying between different build environments, inability to
install it in Debian etc.
Lets include kernel headers there by default, without any additional
package needed.

Fixes QubesOS/qubes-issues#2692
2017-06-03 22:19:08 +02:00
Reg Tiangha
eb818a6b7f
Revert CONFIG_SLUB_DEBUG_ON 2017-06-02 13:51:26 -06:00
Reg Tiangha
70294f9a0b
Disable CONFIG_DEBUG_WX as Xen having incorrect W+X mappings is a known issue. 2017-05-30 17:17:54 -06:00
Reg Tiangha
e7ee521891
Update to version 4.9.30 2017-05-25 12:01:13 -06:00
Marek Marczykowski-Górecki
268a2dd0ec
version 4.9.29-17 2017-05-25 03:52:56 +02:00
Marek Marczykowski-Górecki
6350c4ac0e
Merge remote-tracking branch 'qubesos/pr/8' into devel-4.9
* qubesos/pr/8:
  Switch to XZ compression to save on /boot disk space.
  Enable CONFIG_IWLWIFI_BCAST_FILTERING
  Disable CONFIG_IWLWIFI_PCIE_RTPM to work around wifi not coming up after sleep.
  Enable additional hardware support.
  Enable addtional USB hardware support.
  Enable additional network card support.
  Enable additional hardware support.
  Remove remaining VMware support.
  Update to 4.9.29
  Increase number of bits used for ASLR.
  Disable Remote debugging over FireWire early on boot.
  Enable CONFIG_SLUB_DEBUG_ON
2017-05-25 02:32:10 +02:00
Reg Tiangha
c31394bf6f
Switch to XZ compression to save on /boot disk space. 2017-05-21 14:53:17 -06:00
Reg Tiangha
63c7f01f3f
Enable CONFIG_IWLWIFI_BCAST_FILTERING 2017-05-21 12:30:43 -06:00
Reg Tiangha
326e572a8c
Disable CONFIG_IWLWIFI_PCIE_RTPM to work around wifi not coming up after sleep. 2017-05-21 11:11:20 -06:00
Reg Tiangha
b8cbebfa4b
Enable additional hardware support. 2017-05-21 08:31:47 -06:00
Reg Tiangha
8fd64bba2f
Enable addtional USB hardware support. 2017-05-21 08:04:33 -06:00
Reg Tiangha
67dce0cb22
Enable additional network card support. 2017-05-21 07:34:45 -06:00
Reg Tiangha
16d2efa7a4
Enable additional hardware support. 2017-05-20 14:46:07 -06:00
Reg Tiangha
87506818b0
Remove remaining VMware support. 2017-05-20 13:14:49 -06:00
Reg Tiangha
dcb2959536
Update to 4.9.29 2017-05-20 09:39:37 -06:00
Marek Marczykowski-Górecki
ead3bc9b66
Add kernel and initramfs to modules.img
QubesOS/qubes-issues#2822
2017-05-20 14:06:07 +02:00
Marek Marczykowski-Górecki
0923b4093b
Workaround for buggy dracut in Fedora 25
dracut --kmoddir is broken in dracut-044 (mangles module path inside
initramfs). This is already fixed upstream, but updated package still
haven't been uploaded to Fedora 25.
For now, postprocess the initramfs fixing the path.

https://bugzilla.redhat.com/show_bug.cgi?id=1431317
https://github.com/dracutdevs/dracut/issues/194
QubesOS/qubes-issues#2574
2017-05-20 13:49:00 +02:00
Reg Tiangha
17c2e78557
Increase number of bits used for ASLR. 2017-05-17 23:08:33 -06:00
Reg Tiangha
7ea43a153f
Disable Remote debugging over FireWire early on boot. 2017-05-17 22:24:02 -06:00
Reg Tiangha
93dd0f6b78
Enable CONFIG_SLUB_DEBUG_ON 2017-05-17 00:48:36 -06:00
Reg Tiangha
8154e8756d Merge pull request #1 from marmarek/stable-4.9
Sync config + few bugfixes
2017-05-15 19:15:27 -06:00
Marek Marczykowski-Górecki
c743468eb3
version 4.9.28-16 2017-05-16 01:54:08 +02:00
Marek Marczykowski-Górecki
e1d289b0e5
rpm: add missing build dependency
CONFIG_GCC_PLUGIN_LATENT_ENTROPY require gcc-plugin-devel
2017-05-16 01:34:57 +02:00
Marek Marczykowski-Górecki
f37c8d3879
version 4.9.28-15 2017-05-16 01:01:41 +02:00
Marek Marczykowski-Górecki
a8f7518fd0
Merge remote-tracking branch 'rtiangha/stable-4.9' into devel-4.9
* rtiangha/stable-4.9:
  Update to 4.9.28.
  Add CONFIG_GCC_PLUGIN_LATENT_ENTROPY
2017-05-16 01:00:02 +02:00
Reg Tiangha
3364558d5f
Update to 4.9.28. 2017-05-14 10:14:33 -06:00
Reg Tiangha
297748affc
Add CONFIG_GCC_PLUGIN_LATENT_ENTROPY 2017-05-14 01:01:15 -06:00
Marek Marczykowski-Górecki
f2c3265ef1
Merge remote-tracking branch 'rtiangha/stable-4.9' into devel-4.9
* rtiangha/stable-4.9:
  Update to 4.9.27, implement more of KSPP's recommended settings, activate Intel preliminary hardware support by default for newer Intel graphic cards.
  Revert XSA 157 related commits; empty files accidentally uploaded and is already patched in upstream
  Update to version 4.9.26, remove support for KVM, VMware and Hyper-V hypervisors, which don't work in Qubes
  Remove XT keyboard support
  Enable AMD GPU Audio Coprocessor support
  Enable Debug SG Tables as per KSPP's recommendations (Apr 29, 2017)
  Activate additional driver support for various hardware.
  Remove Intem ME support
  Update to version 4.9.25
  Implement most of the Kernel Self Protection Project's recommended kernel settings (as of Apr 26, 2017)
  Implement most of the Kernel Self Protection Project's recommended kernel settings (as of Apr 26, 2017)
  Add in relevant XSA 157 security patches
  update to version 4.9.24
  Use https
  Update for 4.9.23, disable non-PC support, enable additional kernel memory protection mechanisms
  version 4.9.22-13
  version 4.8.17-12
  version 4.8.17-12
  Makefile: fix mirror address
2017-05-13 10:17:24 +02:00
Reg Tiangha
7212a98324
Update to 4.9.27, implement more of KSPP's recommended settings, activate Intel preliminary hardware support by default for newer Intel graphic cards. 2017-05-08 03:41:48 -06:00
Reg Tiangha
6004e2da8a
Revert XSA 157 related commits; empty files accidentally uploaded and is already patched in upstream 2017-05-07 10:33:09 -06:00
Reg Tiangha
4d05e0b93c
Update to version 4.9.26, remove support for KVM, VMware and Hyper-V hypervisors, which don't work in Qubes 2017-05-03 10:41:48 -06:00
Reg Tiangha
2fa23495b4
Remove XT keyboard support 2017-04-30 19:29:26 -06:00
Reg Tiangha
66197e850d
Enable AMD GPU Audio Coprocessor support 2017-04-30 18:47:27 -06:00
Reg Tiangha
5a30ec4901
Enable Debug SG Tables as per KSPP's recommendations (Apr 29, 2017) 2017-04-30 18:19:18 -06:00
Reg Tiangha
8aec124e7c
Activate additional driver support for various hardware. 2017-04-30 16:40:40 -06:00
Reg Tiangha
e0f8e9ca81
Remove Intem ME support 2017-04-28 07:00:19 -06:00
Reg Tiangha
1ea640950e
Update to version 4.9.25 2017-04-27 06:47:29 -06:00
Reg Tiangha
e3ec79a09b
Implement most of the Kernel Self Protection Project's recommended kernel settings (as of Apr 26, 2017) 2017-04-26 18:00:17 -06:00
Reg Tiangha
e74dcfef26
Implement most of the Kernel Self Protection Project's recommended kernel settings (as of Apr 26, 2017) 2017-04-26 17:05:46 -06:00
Reg Tiangha
f44fd8a1b1
Add in relevant XSA 157 security patches 2017-04-24 23:02:30 -06:00