nordic-dev.net/nixpkgs
nordic-dev.net/nixpkgs
2
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-12-29 09:04:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
46ca914a5e
nixpkgs/pkgs/os-specific/linux/kernel/hardened/patches.json

39 lines
1.9 KiB
JSON
Raw Normal View History

linux_*_hardened: use linux-hardened patch set This is an updated version of the former upstream, https://github.com/AndroidHardeningArchive/linux-hardened, and provides a minimal set of additional hardening patches on top of upstream. The patch already incorporates many of our hardened profile defaults, and releases are timely (Linux 5.5.15 and 5.6.2 were released on 2020-04-02; linux-hardened patches for them came out on 2020-04-03 and 2020-04-04 respectively).
2020-04-04 21:47:13 +00:00
{
linux_*_hardened: index patches by major kernel version This will avoid breaking the build whenever a non-major kernel update happens. In the update script, we map each kernel version to the latest patch for the latest kernel version less than or equal to what we have packaged.
2020-04-23 17:43:44 +00:00
"4.14": {
linux/hardened/patches/4.14: 4.14.216.a -> 4.14.217-hardened1
2021-01-24 18:03:55 +00:00
"extra": "-hardened1",
linux/hardened/patches/4.14: 4.14.233-hardened1 -> 4.14.234-hardened1
2021-05-27 04:28:54 +00:00
"name": "linux-hardened-4.14.234-hardened1.patch",
"sha256": "1vdr3j62whc2xdy1l4imkp6axpwh7r3cjp0sgsld7l5331x19qh7",
"url": "https://github.com/anthraxx/linux-hardened/releases/download/4.14.234-hardened1/linux-hardened-4.14.234-hardened1.patch"
linux/hardened-patches/5.6.6: init at 5.6.6.a
2020-04-22 00:12:17 +00:00
},
linux_*_hardened: index patches by major kernel version This will avoid breaking the build whenever a non-major kernel update happens. In the update script, we map each kernel version to the latest patch for the latest kernel version less than or equal to what we have packaged.
2020-04-23 17:43:44 +00:00
"4.19": {
linux/hardened/patches/4.19: 4.19.169.a -> 4.19.170-hardened1
2021-01-24 18:03:58 +00:00
"extra": "-hardened1",
linux/hardened/patches/4.19: 4.19.191-hardened1 -> 4.19.192-hardened1
2021-05-27 04:28:56 +00:00
"name": "linux-hardened-4.19.192-hardened1.patch",
"sha256": "0gy4h73ygiqr6c9zbmfz4as18ldcnnzgc4qd2nss08m2x1cb1n76",
"url": "https://github.com/anthraxx/linux-hardened/releases/download/4.19.192-hardened1/linux-hardened-4.19.192-hardened1.patch"
linux/hardened-patches/4.19.117: init at 4.19.117.a
2020-04-22 00:12:28 +00:00
},
linux/hardened/patches/5.10: init at 5.10.4.a
2020-12-31 02:18:49 +00:00
"5.10": {
linux/hardened/patches/5.10: 5.10.9.a -> 5.10.10-hardened1
2021-01-24 18:04:01 +00:00
"extra": "-hardened1",
linux/hardened/patches/5.10: 5.10.39-hardened1 -> 5.10.40-hardened1
2021-05-27 04:28:57 +00:00
"name": "linux-hardened-5.10.40-hardened1.patch",
"sha256": "15nprqyw9whqghpnr39wpn54snxz49wdr4dq41dbmmqmrrlfyxnr",
"url": "https://github.com/anthraxx/linux-hardened/releases/download/5.10.40-hardened1/linux-hardened-5.10.40-hardened1.patch"
linux/hardened/patches/5.10: init at 5.10.4.a
2020-12-31 02:18:49 +00:00
},
linux/hardened/patches/5.11: init at 5.11.6-hardened1
2021-03-15 13:15:28 +00:00
"5.11": {
"extra": "-hardened1",
linux/hardened/patches/5.11: 5.11.21-hardened1 -> 5.11.22-hardened1
2021-05-24 16:54:49 +00:00
"name": "linux-hardened-5.11.22-hardened1.patch",
"sha256": "1lwf56pxyzqzjqw4k1qd93vi44abmbz6hqbalamz6ancxkb800hh",
"url": "https://github.com/anthraxx/linux-hardened/releases/download/5.11.22-hardened1/linux-hardened-5.11.22-hardened1.patch"
linux/hardened/patches/5.11: init at 5.11.6-hardened1
2021-03-15 13:15:28 +00:00
},
linux/hardened/patches/5.12: init at 5.12.6-hardened1
2021-05-26 06:07:00 +00:00
"5.12": {
"extra": "-hardened1",
"name": "linux-hardened-5.12.6-hardened1.patch",
"sha256": "0wy1r1awxw92rxfr8il1rri23lsizp4cilzvzw84d5w50jfix9dn",
"url": "https://github.com/anthraxx/linux-hardened/releases/download/5.12.6-hardened1/linux-hardened-5.12.6-hardened1.patch"
},
linux_*_hardened: index patches by major kernel version This will avoid breaking the build whenever a non-major kernel update happens. In the update script, we map each kernel version to the latest patch for the latest kernel version less than or equal to what we have packaged.
2020-04-23 17:43:44 +00:00
"5.4": {
linux/hardened/patches/5.4: 5.4.91.a -> 5.4.92-hardened1
2021-01-24 18:04:04 +00:00
"extra": "-hardened1",
linux/hardened/patches/5.4: 5.4.119-hardened1 -> 5.4.121-hardened1
2021-05-24 16:54:50 +00:00
"name": "linux-hardened-5.4.121-hardened1.patch",
"sha256": "0f7zx7vm8vfhpkjgrz3jqqns8pibjz1lk7nf0hayl23jy0qqymrs",
"url": "https://github.com/anthraxx/linux-hardened/releases/download/5.4.121-hardened1/linux-hardened-5.4.121-hardened1.patch"
linux_*_hardened: use linux-hardened patch set This is an updated version of the former upstream, https://github.com/AndroidHardeningArchive/linux-hardened, and provides a minimal set of additional hardening patches on top of upstream. The patch already incorporates many of our hardened profile defaults, and releases are timely (Linux 5.5.15 and 5.6.2 were released on 2020-04-02; linux-hardened patches for them came out on 2020-04-03 and 2020-04-04 respectively).
2020-04-04 21:47:13 +00:00
}
}
Reference in New Issue Copy Permalink