Jeremy Cline
ac89b4ad91
Fix up the lockdown sysrq patch
...
Signed-off-by: Jeremy Cline <jcline@redhat.com>
2019-10-02 16:40:12 -04:00
Laura Abbott
4cbd7a3c09
Linux v5.2-10808-g9637d517347e
2019-07-16 08:59:21 -04:00
Jeremy Cline
228a4ee828
Fix rbhz 1658675 again
...
This patch got dropped with the latest rebase to upstream's version of
the lockdown patches.
2019-06-06 19:03:26 +00:00
Justin M. Forbes
ead55fdbc7
Linux v5.2-rc3-37-g156c05917e09
2019-06-06 11:22:11 -05:00
Jeremy Cline
26a34633c2
Fix up the kexec IMA patch
2019-04-15 18:43:41 +00:00
Jeremy Cline
4b5e4234be
Rebase the kernel lockdown patch set
...
Use the latest version of the kernel lockdown patch set. This includes a
few configuration renames:
CONFIG_KEXEC_VERIFY_SIG became CONFIG_KEXEC_SIG and
CONFIG_KEXEC_SIG_FORCE was added. CONFIG_KEXEC_SIG_FORCE=n because the
"kexec_file: Restrict at runtime if the kernel is locked down" patch
enforces the signature requirement when the kernel is locked down.
CONFIG_LOCK_DOWN_MANDATORY got renamed to CONFIG_LOCK_DOWN_KERNEL_FORCE
and remains false as LOCK_DOWN_IN_EFI_SECURE_BOOT covers enabling it for
EFI Secure Boot users.
Finally, the SysRq patches got dropped for the present.
2019-04-15 12:15:16 -04:00
Jeremy Cline
6c72c6753e
Linux v5.0-7001-g610cd4eadec4
2019-03-08 16:38:03 +00:00
Jeremy Cline
ece6441001
Linux v5.0-6399-gf90d64483ebd
2019-03-07 20:30:13 +00:00
Justin M. Forbes
dc45afc7d9
lockdown update for S390
2019-01-10 08:38:14 -06:00
Laura Abbott
dd000cd2fd
Linux v4.20-10911-g645ff1e8e704
...
Dropped part of the efi-lockdown patchset for IMA until
conflicts get resolved.
2019-01-03 08:28:18 -08:00
Laura Abbott
c97d3b0f76
Linux v4.20-9163-g195303136f19
2018-12-30 09:30:50 -08:00
Justin M. Forbes
b5c40a84c0
Remove bpf restriction for now, revisit (rhbz 1622986)
2018-08-28 15:39:51 -05:00
Jeremy Cline
cb11f4de83
Linux v4.18-8895-g1f7a4c73a739
2018-08-18 13:52:10 +01:00
Jeremy Cline
a23ced99bd
Linux v4.18-7873-gf91e654474d4
2018-08-16 14:56:49 +01:00
Laura Abbott
c60d15178c
Linux v4.18-rc1
2018-06-18 09:44:24 -07:00
Laura Abbott
5f1fb0c45a
Linux v4.17-11782-gbe779f03d563
2018-06-13 10:54:20 -07:00
Laura Abbott
4b8512e91a
Linux v4.17-7997-g68abbe729567
2018-06-08 11:37:45 -07:00
Laura Abbott
9382c1533b
Linux v4.17-6625-g1c8c5a9d38f6
2018-06-07 14:52:18 -07:00
Laura Abbott
037431cf90
Linux v4.17-3754-g135c5504a600
2018-06-06 09:56:34 -07:00
Justin M. Forbes
8cf006311d
Linux v4.17-rc1
2018-04-16 11:04:31 -05:00
Justin M. Forbes
df0ed2af7a
Linux v4.16-11766-ge241e3f2bf97
2018-04-12 11:56:50 -05:00
Justin M. Forbes
5bf5e37a74
Linux v4.16-9576-g38c23685b273
2018-04-06 12:00:21 -05:00
Justin M. Forbes
71c4e801d3
Linux v4.16-2520-g642e7fd23353
2018-04-03 12:18:00 -05:00
Jeremy Cline
a253e4dfca
Fix efi-lockdown.patch for upstream BPF change
...
Commit 0fa4fe85f472 ("bpf: skip unnecessary capability check") switched
the if statement around.
Signed-off-by: Jeremy Cline <jeremy@jcline.org>
2018-03-23 09:27:44 -04:00
Justin M. Forbes
f20e0a3b66
Update efi-lockdown patch with current.
2018-03-12 08:46:00 -05:00
Justin M. Forbes
bf681f6a5b
Linux v4.15-11704-ga2e5790d8416
2018-02-07 09:13:24 -06:00
Laura Abbott
8221dd34f7
Linux v4.14-12375-g2dcd9c71c1ff
2017-11-17 17:10:07 -08:00
Laura Abbott
e1d147112d
Linux v4.14-4050-g37cb8e1f8e10
2017-11-15 09:40:48 -08:00
Justin M. Forbes
006f5ba402
Linux v4.14-rc6-50-g567825502730
2017-10-26 15:56:39 -05:00
Justin M. Forbes
135abd0c28
Linux v4.14-rc5-94-g9a27ded2195a
2017-10-20 16:22:53 -05:00
Justin M. Forbes
59566d9a2c
Linux v4.14-rc5-31-g73d3393ada4f
2017-10-19 15:49:02 -05:00
Justin M. Forbes
21e4b83380
Linux v4.13-11197-gf007cad159e9
2017-09-11 13:05:08 -05:00
Justin M. Forbes
7c0c57cc12
Linux v4.13-4257-ge7d0c41ecc2e
2017-09-06 13:29:50 -05:00
Justin M. Forbes
bd32781ec2
Linux v4.11-11413-g2868b25
2017-05-09 10:45:07 -05:00
Justin M. Forbes
a3e7d7abc0
Linux v4.11-1464-gd3b5d35
2017-05-02 14:04:44 -05:00
Laura Abbott
c796f87d68
Linux v4.10-6476-gbc49a78
2017-02-23 09:21:58 -08:00
Justin M. Forbes
cd3596bbfc
Update efi-lockdown for 4.11 merge
2017-02-21 11:48:46 -06:00
Justin M. Forbes
411d3b79f7
Linux v4.10-rc4
2017-01-16 10:06:57 -06:00
Justin M. Forbes
962ea4f047
Linux v4.9-7150-gcdb98c2
2016-12-14 12:50:48 -06:00
