Age | Commit message (Collapse) | Author |
|
Signed-off-by: John Rigby <john.rigby@linaro.org>
|
|
Signed-off-by: John Rigby <john.rigby@linaro.org>
|
|
This will need to be adjusted later
Signed-off-by: John Rigby <john.rigby@linaro.org>
|
|
Some of the dt patches are missing from upstream at the moment
Signed-off-by: John Rigby <john.rigby@linaro.org>
|
|
Started with upstream kernel defconfigs for each platform
then turned on minimal options to satisfy Ubuntu enforce
script.
Signed-off-by: John Rigby <john.rigby@linaro.org>
|
|
Ignore: yes
Signed-off-by: John Rigby <john.rigby@linaro.org>
|
|
Starting Oneiric series
Signed-off-by: John Rigby <john.rigby@linaro.org>
|
|
Signed-off-by: John Rigby <john.rigby@linaro.org>
|
|
Since documentation is not built
Signed-off-by: John Rigby <john.rigby@linaro.org>
|
|
Signed-off-by: Shawn Guo <shawn.guo@linaro.org>
|
|
Signed-off-by: John Rigby <john.rigby@linaro.org>
|
|
Cross compiling the binaries in scripts/* is not possible
because various makefiles assume that $(obj)/whatever is
executable on the build host.
This patch introduces a new variable called KBUILD_SCRIPTROOT
that points to script/binaries to use while cross compiling.
Usage:
Build scripts for the build host:
make O=path/to/buildhost/buildscripts \
silentoldconfig prepare scripts
Then cross build script for target:
make O=path/to/target/buildscripts \
HOSTCC=$CROSS_COMPILE \
KBUILD_SCRIPTROOT=path/to/buildhost/buildscripts
silentoldconfig prepare scripts
This patch does not use KBUILD_SCRIPTROOT for all script invocations
it only redefines the following if KBUILD_SCRIPTROOT is defined.
scripts/Makefile.build
scripts/basic/fixdep --> $(KBUILD_SCRIPTROOT)/scripts/basic/fixdep
scripts/kconfig/Makefile
$(obj)/conf --> $(KBUILD_SCRIPTROOT)/scripts/kconfig/conf
scripts/mod/Makefile
$(obj)mk_elfconfig --> $(KBUILD_SCRIPTROOT)/scripts/mod/mk_elfconfig
Signed-off-by: John Rigby <john.rigby@linaro.org>
|
|
Remove coreutils and fileutils depends:
fileutils is a virtual package provided by coreutils
coreutils is essential
Add debconf to Pre-Depends
Fix long description line for linux-headers package
Fix nic-shared-modules description
Fix copyright file
Add dh_strip to scripts rules
Signed-off-by: John Rigby <john.rigby@linaro.org>
|
|
Signed-off-by: John Rigby <john.rigby@linaro.org>
|
|
add debian.linaro from from linaro-2.6.35-1008.15
patch debian to point to debian.linaro instead of debian.master
Signed-off-by: John Rigby <john.rigby@linaro.org>
|
|
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
This reverts commit 599ed7f20879bb8345f486ba076680e7db30d490.
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
Plugging for IOs to block devices was changed to an explicit, per task
base. This converts the module to the new framework, fixing the compile
failure.
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
This reverts commit 30d4de46515dc36a50429fb1e2776225c9028930.
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
Per the Ubuntu config review at UDS-O, make CONFIG_VIDEO_OUTPUT_CONTROL
consistent amongst all arch's and flavours.
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
Per the Ubuntu config review at UDS-O, make CONFIG_MDIO_BITBANG consistent
amongst all arch's and flavours. Per our policy, this should be enabled
as a module.
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
BugLink: http://bugs.launchpad.net/bugs/770679
Signed-off-by: Robert Nelson <robertcnelson@gmail.com>
Signed-off-by: Ricardo Salveti de Araujo <ricardo.salveti@canonical.com>
Acked-by: Leann Ogasawara <leann.ogasawara@canonical.com>
Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
|
|
Beagle xM rev C has nEN_USB_PWR inverted again, so we need
proper check for revision C.
BugLink: http://bugs.launchpad.net/bugs/770679
Signed-off-by: Robert Nelson <robertcnelson@gmail.com>
Signed-off-by: Ricardo Salveti de Araujo <ricardo.salveti@canonical.com>
Acked-by: Leann Ogasawara <leann.ogasawara@canonical.com>
Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
|
|
The xM B uses a DM3730 ES1.1 over the ES1.0 on xM A's, no other board changes.
BugLink: http://bugs.launchpad.net/bugs/770679
Signed-off-by: Robert Nelson <robertcnelson@gmail.com>
Signed-off-by: Ricardo Salveti de Araujo <ricardo.salveti@canonical.com>
Acked-by: Leann Ogasawara <leann.ogasawara@canonical.com>
Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
|
|
This code is originally from Ingo Molnar, with some later rebasing and
fixes to respect all the randomization-disabling knobs. It provides
address randomization algorithm when NX emulation is in use in 32-bit
processes. Kees Cook pushed the brk area further away in the case of PIE
binaries landing their brk inside the CS limit.
Signed-off-by: Kees Cook <kees.cook@canonical.com>
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
This is old code with some cruft, all originally by Ingo Molnar with
much later rebasing by Fedora folks and at least one arcane fix by
Roland McGrath a few years ago. No longer uses exec-shield sysctl,
merged with disable_nx. Kees Cook fixed boottime NX reporting for various
corner cases.
Signed-off-by: Kees Cook <kees.cook@canonical.com>
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
Add support to debug S3 early resume by flashing the keyboard
LEDs three times in the realmode path. This is useful to allow
one to determine if S3 hangs occur in the BIOS or during the early
resume phase.
Add kernel parameter acpi_sleep=s3_leds to enable the s3 debugging
option. This can also be enabled by writing 8 to
/proc/sys/kernel/acpi_video_flags.
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Acked-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
Per the Ubuntu config review at UDS-O, make CONFIG_BRCMFMAC consistent
amongst all arch's and flavours.
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
Ignore: yes
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
Signed-off-by: Andy Whitcroft <apw@canonical.com>
|
|
BugLink: http://bugs.launchpad.net/bugs/778043
Move to enabling a write-combining MTRR by default, this then matches
the uvesafb module.
Acked-by: Leann Ogasawara <leann.ogasawara@canonical.com>
Acked-by: Brad Figg <brad.figg@canonical.com>
Signed-off-by: Andy Whitcroft <apw@canonical.com>
|
|
BugLink: http://bugs.launchpad.net/bugs/778043
As noted by the reporter the mtrr kernel command line option is actually a
positive numeric not a boolean, move the module parameter we add to match.
Acked-by: Leann Ogasawara <leann.ogasawara@canonical.com>
Acked-by: Brad Figg <brad.figg@canonical.com>
Signed-off-by: Andy Whitcroft <apw@canonical.com>
|
|
Per the UDS-O config review, enable CONFIG_INPUT_APANEL=m per our Ubuntu
config policy. Only affects i386 and amd64.
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
Per the Ubuntu config review at UDS-O, make CONFIG_LLC2 consistent
amongst all arch's and flavours.
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
Ignore: yes
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
The config review session at UDS-O in Budapest revealed we'd enabled a
debug oriented option for no apparent reason. Disable for now as that
is our usual policy regarding debugging options.
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
Ignore: yes
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
We've purposely disabled fsam7400, onmibook, and rfkill. Disable the
module check to pass the build.
Ignore: yes
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
Per UDS-O discussions, it is unsure why we are still carrying this
driver. The plan is to disable during the O development cycle and
see if anyone notices. If no one objects, we'll drop the driver
completely in the P LTS release.
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
Per UDS-O discussions, it is unsure why we are still carrying this
driver. The plan is to disable during the O development cycle and see
if anyone notices. If no one objects, we'll drop the driver completely
in the P LTS release.
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
Per UDS-O discussions, it is unsure why we are still carrying this
driver. The plan is to disable during the O development cycle and see
if anyone notices. If no one objects, we'll drop the driver completely
in the P LTS release.
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
This reverts commit ad33fc22e6d9b1ad1a2251e3958951cf96f3c08c.
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
This reverts commit a1f2c9b2777fd8cb2e7422fc4ff65a389ac2ce51.
Signed-off-by: Leann Ogasawara <leann.ogasawara@canonical.com>
|
|
This patch forces the LSM to always chain through the Yama LSM
regardless of which LSM is selected as the primary LSM.
Signed-off-by: Kees Cook <kees.cook@canonical.com>
Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
|
|
Some application suites have external crash handlers that depend
on being able to use ptrace to generate crash reports (KDE, Wine,
Chromium, Firefox, etc). Since the inferior process has a defined
application-specific relationship with the debugger, allow the inferior
to express that relationship by declaring who can call PTRACE_ATTACH
against it. The inferior can use prctl() with PR_SET_PTRACER to allow a
specific PID and its descendants to perform the ptrace instead of only
a direct ancestor.
Signed-off-by: Kees Cook <kees.cook@canonical.com>
---
v2:
- kmalloc, spinlock init, and doc typo corrections from Tetsuo Handa.
- make sure to replace if possible on add, thanks to Eric Paris.
v3:
- make sure to use thread group leader when searching for exceptions.
v4:
- make sure to use thread group leader when creating exceptions.
v5:
- make sure to use thread group leader when deleting exceptions.
Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
|
|
The current LSM interface to cred_free is not sufficient for allowing
an LSM to track the life and death of a task. This patch adds the
task_free hook so that an LSM can clean up resources on task death.
Signed-off-by: Kees Cook <kees.cook@canonical.com>
Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
|
|
This adds the Yama Linux Security Module to collect several security
features (symlink, hardlink, and ptrace restrictions) that have existed
in various forms over the years and have been carried outside the mainline
kernel by other Linux distributions like Openwall and grsecurity.
Signed-off-by: Kees Cook <kees.cook@canonical.com>
---
v2:
- add rcu locking, thanks to Tetsuo Handa.
- add Documentation/Yama.txt for summary of features.
v3:
- drop needless cap_ callbacks.
- fix usage of get_task_comm.
- drop CONFIG_ of sysctl defaults, as recommended by Andi Kleen.
- require SYSCTL.
v4:
- drop accidentally included fs/exec.c chunk.
v5:
- resend, with ptrace relationship interface
v6:
- merge with 2.6.39, thanks to Andy Whitcroft
Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
|
|
Signed-off-by: Andy Whitcroft <apw@canonical.com>
|