Commit Graph

456 Commits

Author SHA1 Message Date
TredwellGit
e19681509b linux/hardened/patches/5.4: 5.4.170-hardened1 -> 5.4.171-hardened1 2022-01-14 02:25:10 +00:00
TredwellGit
ead5545be3 linux/hardened/patches/5.15: 5.15.12-hardened1 -> 5.15.14-hardened1 2022-01-14 02:25:01 +00:00
TredwellGit
f14a7feff2 linux/hardened/patches/5.10: 5.10.89-hardened1 -> 5.10.91-hardened1 2022-01-14 02:24:52 +00:00
TredwellGit
56224051e3 linux/hardened/patches/4.19: 4.19.224-hardened1 -> 4.19.225-hardened1 2022-01-14 02:24:42 +00:00
TredwellGit
230a6813d9 linux/hardened/patches/4.14: 4.14.261-hardened1 -> 4.14.262-hardened1 2022-01-14 02:24:34 +00:00
TredwellGit
a40d8182da linux/hardened/patches/5.4: 5.4.169-hardened1 -> 5.4.170-hardened1 2022-01-07 22:02:22 +00:00
TredwellGit
2fe8933a62 linux/hardened/patches/4.19: 4.19.223-hardened1 -> 4.19.224-hardened1 2022-01-07 22:02:15 +00:00
TredwellGit
99a4be5a2d linux/hardened/patches/4.14: 4.14.260-hardened1 -> 4.14.261-hardened1 2022-01-07 22:02:08 +00:00
TredwellGit
babb121da8 linux/hardened/patches/5.4: 5.4.167-hardened1 -> 5.4.169-hardened1 2022-01-04 22:49:05 +00:00
TredwellGit
5bea8cae1c linux/hardened/patches/5.15: 5.15.10-hardened1 -> 5.15.12-hardened1 2022-01-04 22:48:56 +00:00
TredwellGit
b23f71e805 linux/hardened/patches/5.10: 5.10.87-hardened1 -> 5.10.89-hardened1 2022-01-04 22:48:48 +00:00
TredwellGit
c389f9ace8 linux/hardened/patches/4.19: 4.19.221-hardened1 -> 4.19.223-hardened1 2022-01-04 22:48:40 +00:00
TredwellGit
aa88b7f3ec linux/hardened/patches/4.14: 4.14.258-hardened1 -> 4.14.260-hardened1 2022-01-04 22:48:27 +00:00
TredwellGit
8d4c056723 linux/hardened/patches/5.4: 5.4.164-hardened1 -> 5.4.167-hardened1 2021-12-17 23:09:47 +00:00
TredwellGit
f51d19746a linux/hardened/patches/5.15: 5.15.7-hardened1 -> 5.15.10-hardened1 2021-12-17 23:09:39 +00:00
TredwellGit
a900de3567 linux/hardened/patches/5.10: 5.10.84-hardened1 -> 5.10.87-hardened1 2021-12-17 23:09:32 +00:00
TredwellGit
8e317ff982 linux/hardened/patches/4.19: 4.19.220-hardened1 -> 4.19.221-hardened1 2021-12-17 23:09:25 +00:00
TredwellGit
d9fdc409d1 linux/hardened/patches/4.14: 4.14.257-hardened1 -> 4.14.258-hardened1 2021-12-17 23:09:18 +00:00
TredwellGit
dc7d9307ae linux/hardened/patches/5.4: 5.4.163-hardened1 -> 5.4.164-hardened1 2021-12-09 06:49:29 +00:00
TredwellGit
935a3eb77b linux/hardened/patches/5.15: 5.15.6-hardened1 -> 5.15.7-hardened1 2021-12-09 06:49:21 +00:00
TredwellGit
4e28ad8780 linux/hardened/patches/5.10: 5.10.83-hardened1 -> 5.10.84-hardened1 2021-12-09 06:49:12 +00:00
TredwellGit
ac0487fe56 linux/hardened/patches/4.19: 4.19.219-hardened1 -> 4.19.220-hardened1 2021-12-09 06:49:04 +00:00
TredwellGit
8448ac947f linux/hardened/patches/4.14: 4.14.256-hardened1 -> 4.14.257-hardened1 2021-12-09 06:48:56 +00:00
TredwellGit
04bbfd1b88 linux_5_14: remove
https://lwn.net/ml/linux-kernel/1637500331152110@kroah.com/
https://github.com/openzfs/zfs/issues/12786
2021-12-08 00:15:07 +00:00
TredwellGit
a93b636340 linux/hardened/patches/5.4: 5.4.160-hardened1 -> 5.4.163-hardened1 2021-12-08 00:15:07 +00:00
TredwellGit
a4a70dcab4 linux/hardened/patches/5.15: 5.15.3-hardened1 -> 5.15.6-hardened1 2021-12-08 00:15:07 +00:00
TredwellGit
55969e856c linux/hardened/patches/5.10: 5.10.80-hardened1 -> 5.10.83-hardened1 2021-12-08 00:15:07 +00:00
TredwellGit
cfd35502f6 linux/hardened/patches/4.19: 4.19.217-hardened1 -> 4.19.219-hardened1 2021-12-08 00:15:07 +00:00
TredwellGit
d2bfac4ff9 linux/hardened/patches/4.14: 4.14.255-hardened1 -> 4.14.256-hardened1 2021-12-08 00:15:07 +00:00
TredwellGit
170255c3a3 linux/hardened/patches/5.4: 5.4.159-hardened1 -> 5.4.160-hardened1 2021-11-18 21:12:07 +00:00
TredwellGit
6383327644 linux/hardened/patches/5.15: 5.15.2-hardened1 -> 5.15.3-hardened1 2021-11-18 21:11:59 +00:00
TredwellGit
cc0a75815d linux/hardened/patches/5.14: 5.14.18-hardened1 -> 5.14.20-hardened1 2021-11-18 21:11:53 +00:00
TredwellGit
51bd34b742 linux/hardened/patches/5.10: 5.10.78-hardened1 -> 5.10.80-hardened1 2021-11-18 21:11:46 +00:00
TredwellGit
c783c8d859 linux/hardened/patches/5.15: init at 5.15.2-hardened1 2021-11-15 19:38:09 +00:00
TredwellGit
db13d848fc linux/hardened/patches/5.4: 5.4.158-hardened1 -> 5.4.159-hardened1 2021-11-15 19:38:09 +00:00
TredwellGit
b868e78282 linux/hardened/patches/5.14: 5.14.17-hardened1 -> 5.14.18-hardened1 2021-11-15 19:38:09 +00:00
TredwellGit
57d9fd1791 linux/hardened/patches/4.19: 4.19.216-hardened1 -> 4.19.217-hardened1 2021-11-15 19:38:09 +00:00
TredwellGit
9b6fb581af linux/hardened/patches/4.14: 4.14.254-hardened1 -> 4.14.255-hardened1 2021-11-15 19:38:09 +00:00
TredwellGit
5bb24d504b linux/hardened/patches/5.4: 5.4.157-hardened1 -> 5.4.158-hardened1 2021-11-12 19:03:54 +00:00
TredwellGit
dd5de73eba linux/hardened/patches/5.14: 5.14.16-hardened1 -> 5.14.17-hardened1 2021-11-12 19:03:46 +00:00
TredwellGit
3b035cff60 linux/hardened/patches/5.10: 5.10.77-hardened1 -> 5.10.78-hardened1 2021-11-12 19:03:38 +00:00
TredwellGit
b5353b2905 linux/hardened/patches/4.19: 4.19.215-hardened1 -> 4.19.216-hardened1 2021-11-12 19:03:30 +00:00
TredwellGit
5564761e1e linux/hardened/patches/5.4: 5.4.155-hardened1 -> 5.4.157-hardened1 2021-11-05 17:26:18 +00:00
TredwellGit
ac29586638 linux/hardened/patches/5.14: 5.14.14-hardened1 -> 5.14.16-hardened1 2021-11-05 17:26:10 +00:00
TredwellGit
0b37e93d6b linux/hardened/patches/5.10: 5.10.75-hardened1 -> 5.10.77-hardened1 2021-11-05 17:26:02 +00:00
TredwellGit
d4efdd46c7 linux/hardened/patches/4.19: 4.19.213-hardened1 -> 4.19.215-hardened1 2021-11-05 17:25:53 +00:00
TredwellGit
6cbce22479 linux/hardened/patches/4.14: 4.14.252-hardened1 -> 4.14.254-hardened1 2021-11-05 17:25:45 +00:00
Maximilian Bosch
bb5aa0109b
linux: build hardened kernel with matching releases
Until now we merged kernel updates even if no hardened versions were
available yet. On one hand we don't want to delay patch-level updates,
on the other hand users of hardened kernels have frequent breakage now[1].

This change aims to provide a solution this issue:

* The hardened patchset now references the kernel version it's released
  for (including a sha256 hash for the fixed-output path of the source
  tarball).
* The `hardenedKernelFor`-function doesn't just append hardened patches
  now, but also overrides version & src to match the kernel version the
  patch was built & tested for.

Refs #140281

[1] https://hydra.nixos.org/job/nixos/trunk-combined/nixpkgs.linuxPackages_hardened.kernel.x86_64-linux/all
2021-10-20 23:51:52 +02:00
TredwellGit
75dbbe37be linux/hardened/patches/5.4: 5.4.152-hardened1 -> 5.4.154-hardened1 2021-10-20 11:40:40 +00:00
TredwellGit
cf9f5f74dd linux/hardened/patches/5.14: 5.14.11-hardened1 -> 5.14.13-hardened1 2021-10-20 11:40:39 +00:00
TredwellGit
e94db0f89c linux/hardened/patches/5.10: 5.10.72-hardened1 -> 5.10.74-hardened1 2021-10-20 11:40:38 +00:00
TredwellGit
a33fc5384b linux/hardened/patches/4.19: 4.19.210-hardened1 -> 4.19.212-hardened1 2021-10-20 11:40:37 +00:00
TredwellGit
cf0d47c505 linux/hardened/patches/4.14: 4.14.250-hardened1 -> 4.14.251-hardened1 2021-10-20 11:40:36 +00:00
TredwellGit
c7b05f54df linux/hardened/patches/5.4: 5.4.150-hardened1 -> 5.4.152-hardened1 2021-10-12 07:37:16 -04:00
TredwellGit
331bb5fcec linux/hardened/patches/5.14: 5.14.9-hardened1 -> 5.14.11-hardened1 2021-10-12 07:37:16 -04:00
TredwellGit
42dd28857d linux/hardened/patches/5.10: 5.10.70-hardened1 -> 5.10.72-hardened1 2021-10-12 07:37:16 -04:00
TredwellGit
8df94e6d31 linux/hardened/patches/4.19: 4.19.208-hardened1 -> 4.19.210-hardened1 2021-10-12 07:37:16 -04:00
TredwellGit
6e94404dc3 linux/hardened/patches/4.14: 4.14.248-hardened1 -> 4.14.250-hardened1 2021-10-12 07:37:16 -04:00
TredwellGit
642ca73937 linux/hardened/patches/5.4: 5.4.149-hardened1 -> 5.4.150-hardened1 2021-10-01 04:17:10 +00:00
TredwellGit
dd93aec4c4 linux/hardened/patches/5.14: 5.14.8-hardened1 -> 5.14.9-hardened1 2021-10-01 04:17:09 +00:00
TredwellGit
f178ff4a04 linux/hardened/patches/5.10: 5.10.69-hardened1 -> 5.10.70-hardened1 2021-10-01 04:17:08 +00:00
Maximilian Bosch
7d890267d1
Merge pull request #139665 from Ma27/drop-linux-5.13
linux_5_13: drop
2021-09-29 13:10:10 +02:00
Maximilian Bosch
01eb8ec98a
linux_5_13: drop
5.13.19 was the last 5.13 release and the version is now EOL[1].

[1] https://lwn.net/Articles/869747/
2021-09-27 23:29:53 +02:00
TredwellGit
a92a208a9d linux/hardened/patches/5.4: 5.4.148-hardened1 -> 5.4.149-hardened1 2021-09-27 20:00:41 +00:00
TredwellGit
05ed561fb6 linux/hardened/patches/5.14: 5.14.7-hardened1 -> 5.14.8-hardened1 2021-09-27 20:00:40 +00:00
TredwellGit
c4ea02fc5c linux/hardened/patches/5.10: 5.10.68-hardened1 -> 5.10.69-hardened1 2021-09-27 20:00:39 +00:00
TredwellGit
9e78068b04 linux/hardened/patches/4.19: 4.19.207-hardened1 -> 4.19.208-hardened1 2021-09-27 20:00:38 +00:00
TredwellGit
1e05c4eae9 linux/hardened/patches/4.14: 4.14.247-hardened1 -> 4.14.248-hardened1 2021-09-27 20:00:37 +00:00
TredwellGit
bb21f231cf linux/hardened/patches/5.4: 5.4.147-hardened1 -> 5.4.148-hardened1 2021-09-26 17:03:30 +00:00
TredwellGit
5b71d92f9a linux/hardened/patches/5.14: 5.14.6-hardened1 -> 5.14.7-hardened1 2021-09-26 17:03:29 +00:00
TredwellGit
34fe5d827c linux/hardened/patches/5.10: 5.10.67-hardened1 -> 5.10.68-hardened1 2021-09-26 17:03:28 +00:00
TredwellGit
b754a3c355 linux/hardened/patches/4.19: 4.19.206-hardened1 -> 4.19.207-hardened1 2021-09-26 17:03:27 +00:00
TredwellGit
7b29a72e54 linux/hardened/patches/4.14: 4.14.246-hardened1 -> 4.14.247-hardened1 2021-09-26 17:03:26 +00:00
TredwellGit
b8b772a1da linux/hardened/patches/5.14: 5.14.5-hardened1 -> 5.14.6-hardened1 2021-09-20 21:41:39 +00:00
TredwellGit
a41022ed40 linux/hardened/patches/5.13: 5.13.18-hardened1 -> 5.13.19-hardened1 2021-09-20 21:41:38 +00:00
TredwellGit
4a9ffb82ae linux/hardened/patches/5.10: 5.10.66-hardened1 -> 5.10.67-hardened1 2021-09-20 21:41:37 +00:00
ajs124
36e21638f5 linux/hardened/patches/5.4: 5.4.146-hardened1 -> 5.4.147-hardened1 2021-09-17 09:02:31 -04:00
ajs124
9f34448a98 linux/hardened/patches/5.14: 5.14.4-hardened1 -> 5.14.5-hardened1 2021-09-17 09:02:31 -04:00
ajs124
7c04d2e390 linux/hardened/patches/5.13: 5.13.17-hardened1 -> 5.13.18-hardened1 2021-09-17 09:02:31 -04:00
ajs124
031afe4faa linux/hardened/patches/5.10: 5.10.65-hardened1 -> 5.10.66-hardened1 2021-09-17 09:02:31 -04:00
TredwellGit
00c500e9fc linux/hardened/patches/5.4: 5.4.144-hardened1 -> 5.4.146-hardened1 2021-09-16 14:06:36 +00:00
TredwellGit
60b7113164 linux/hardened/patches/5.14: 5.14.2-hardened1 -> 5.14.4-hardened1 2021-09-16 14:06:35 +00:00
TredwellGit
a8de1dcd2b linux/hardened/patches/5.13: 5.13.15-hardened1 -> 5.13.17-hardened1 2021-09-16 14:06:34 +00:00
TredwellGit
48e902a2ef linux/hardened/patches/5.10: 5.10.63-hardened1 -> 5.10.65-hardened1 2021-09-16 14:06:33 +00:00
Tim Steinbach
820d68d2dc
linux/hardened/patches/5.14: init at 5.14.2-hardened1 2021-09-10 05:20:10 -04:00
Tim Steinbach
02b5c3b291
linux/hardened/patches/5.13: 5.13.14-hardened1 -> 5.13.15-hardened1 2021-09-10 05:20:09 -04:00
Tim Steinbach
3fe64b3728
linux/hardened/patches/5.10: 5.10.62-hardened1 -> 5.10.63-hardened1 2021-09-10 05:20:08 -04:00
Bernardo Meurer
abfa8098ac
linux_5_13_hardened: 5.13.13 -> 5.13.14 2021-09-07 11:30:36 -07:00
Bernardo Meurer
1aba1d891f
linux_5_10_hardened: 5.10.61 -> 5.10.62 2021-09-07 11:30:35 -07:00
Bernardo Meurer
8169d9283e
linux_5_4_hardened: 5.4.143 -> 5.4.144 2021-09-07 11:30:34 -07:00
Bernardo Meurer
1c0e5d13a9
linux_4_19_hardened: 4.19.205 -> 4.19.206 2021-09-07 11:29:21 -07:00
Bernardo Meurer
17681be1d3
linux_4_14_hardened: 4.14.245 -> 4.14.246 2021-09-07 11:28:38 -07:00
TredwellGit
4d8a8abb33 linux/hardened/patches/5.4: 5.4.142-hardened1 -> 5.4.143-hardened1 2021-08-27 12:24:08 -04:00
TredwellGit
2c9124efdb linux/hardened/patches/5.13: init at 5.13.13-hardened1 2021-08-27 12:24:08 -04:00
TredwellGit
2114075986 linux/hardened/patches/5.10: 5.10.60-hardened1 -> 5.10.61-hardened1 2021-08-27 12:24:08 -04:00
TredwellGit
3e58b9716e linux/hardened/patches/4.19: 4.19.204-hardened1 -> 4.19.205-hardened1 2021-08-27 12:24:08 -04:00
TredwellGit
fec4358b1e linux/hardened/patches/4.14: 4.14.244-hardened1 -> 4.14.245-hardened1 2021-08-27 12:24:08 -04:00
ajs124
5659733165 linuxPackages_5_4_hardened: 5.4.141 -> 5.4.142 2021-08-21 13:15:24 +02:00
ajs124
883db296a2 linuxPackages_5_10_hardened: 5.10.59 -> 5.10.60 2021-08-21 13:15:10 +02:00
ajs124
b9b1fc1b38 linuxPackages_5_4_hardened: 5.4.139 -> 5.4.141 2021-08-21 00:08:24 +02:00