Go to file
Peter Jones 5804b72d81 Update MODSIGN fixes with dhowell's first round of feedback.
Related: rhbz#1497559

Signed-off-by: Peter Jones <pjones@redhat.com>
2018-01-09 17:11:18 -05:00
baseconfig Disable CONFIG_RESET_ATTACK_MITIGATION (rhbz 1532058) 2018-01-08 14:41:35 -08:00
configs Change method of configuration generation 2016-12-06 12:07:10 -08:00
debugconfig Linux v4.14.4 rebase 2017-12-08 09:47:02 -05:00
scripts Linux v4.12.3 2017-07-24 16:25:32 -05:00
.gitignore add kernel-4* to .gitignore 2015-03-13 12:54:51 -04:00
0001-Input-gpio_keys-Allow-suppression-of-input-events-fo.patch Linux v4.13.3 2017-09-21 12:10:35 -07:00
0001-Make-get_cert_list-not-complain-about-cert-lists-tha.patch Update MODSIGN fixes with dhowell's first round of feedback. 2018-01-09 17:11:18 -05:00
0001-iio-Use-event-header-from-kernel-tree.patch Fix for incorrect return checking in cpupower (rhbz 1374212) 2016-09-14 09:42:37 -07:00
0001-platform-x86-dell-laptop-Filter-out-spurious-keyboar.patch Linux v4.14.12 2018-01-05 09:30:57 -06:00
0001-usb-usbtest-fix-NULL-pointer-dereference.patch Fix CVE-2017-16532 and CVE-2017-16538 2017-11-08 08:11:42 -06:00
0002-Add-efi_status_to_str-and-rework-efi_status_to_err.patch Update MODSIGN fixes with dhowell's first round of feedback. 2018-01-09 17:11:18 -05:00
0002-Input-soc_button_array-Suppress-power-button-presses.patch Linux v4.13.3 2017-09-21 12:10:35 -07:00
0003-Make-get_cert_list-use-efi_status_to_str-to-print-er.patch Update MODSIGN fixes with dhowell's first round of feedback. 2018-01-09 17:11:18 -05:00
0010-Input-silead-Add-support-for-capactive-home-button-f.patch Linux v4.12.3 2017-07-24 16:25:32 -05:00
ARM-tegra-usb-no-reset.patch Linux v4.1-11235-gc63f887bdae8 2015-06-29 11:24:25 -04:00
Add-EFI-signature-data-types.patch Linux v4.12.3 2017-07-24 16:25:32 -05:00
Add-an-EFI-signature-blob-parser-and-key-loader.patch Linux v4.12.3 2017-07-24 16:25:32 -05:00
Add-option-to-automatically-enforce-module-signature.patch Refresh SB patchset to fix bisectability issue 2016-10-27 10:49:53 -04:00
CVE-2017-7645.patch Linux v4.14.4 rebase 2017-12-08 09:47:02 -05:00
Fix-for-module-sig-verification.patch Fixes for qxl and module sig 2017-08-03 16:33:07 -05:00
HID-rmi-Check-that-a-device-is-a-RMI-device-before-c.patch Re-fix null pointer dereference when a USB device detached (rhbz 1462175) 2017-12-11 12:42:22 -05:00
Input-synaptics-pin-3-touches-when-the-firmware-repo.patch Linux v4.2-rc2 2015-07-13 10:53:53 -04:00
KEYS-Allow-unrestricted-boot-time-addition-of-keys-t.patch Linux v4.12.3 2017-07-24 16:25:32 -05:00
Kbuild-Add-an-option-to-enable-GCC-VTA.patch Linux v4.2-rc2 2015-07-13 10:53:53 -04:00
MODSIGN-Import-certificates-from-UEFI-Secure-Boot.patch Linux v4.12.3 2017-07-24 16:25:32 -05:00
MODSIGN-Support-not-importing-certs-from-db.patch Linux v4.12.3 2017-07-24 16:25:32 -05:00
Makefile Change method of configuration generation 2016-12-06 12:07:10 -08:00
PCI-aspm-deal-with-missing-root-ports-in-link-state-handling.patch Linux v4.14.4 rebase 2017-12-08 09:47:02 -05:00
PatchList.txt drop old watchdog patch 2017-01-31 16:47:17 +00:00
README.txt Linux v4.12.3 2017-07-24 16:25:32 -05:00
TODO re-enable RCU_FAST_NO_HZ, enable NO_HZ_FULL on x86_64 2014-09-17 13:10:12 -05:00
allwinner-net-emac.patch Linux v4.14.7 2017-12-18 07:41:06 -06:00
arm-exynos-fix-usb3.patch Linux v4.14.4 rebase 2017-12-08 09:47:02 -05:00
arm-imx6-hummingboard2.patch Linux v4.12.3 2017-07-24 16:25:32 -05:00
arm-revert-mmc-omap_hsmmc-Use-dma_request_chan-for-reque.patch Some OMAP4 fixes, ARM64 fix for NUMA 2016-11-02 14:50:43 +00:00
arm64-Add-option-of-13-for-FORCE_MAX_ZONEORDER.patch Enable sound SoC on aarch64, Update some ARM patches to latest upstream, small cleanups 2017-04-26 11:33:46 +01:00
arm64-Revert-allwinner-a64-pine64-Use-dcdc1-regulato.patch Linux v4.14.4 rebase 2017-12-08 09:47:02 -05:00
arm64-socionext-96b-enablement.patch Linux v4.14.5 2017-12-11 10:49:39 -05:00
ath9k-rx-dma-stop-check.patch Linux v4.1-rc2-79-g0e1dc4274828 2015-05-07 09:22:47 -04:00
bcm283x-dma-mapping-skip-USB-devices-when-configuring-DMA-during-probe.patch Linux v4.13.3 2017-09-21 12:10:35 -07:00
bcm2837-bluetooth-support.patch Linux v4.14.4 rebase 2017-12-08 09:47:02 -05:00
build_configs.sh Linux v4.14.4 rebase 2017-12-08 09:47:02 -05:00
cgroup-for-4.15-fixes-cgroup-fix-css_task_iter-crash-on-CSS_TASK_ITER_PROC.patch Linux v4.14.11 2018-01-03 07:18:57 -06:00
check_configs.awk Add script to check config generation 2016-12-22 14:11:05 -08:00
config_generation Linux v4.14.4 rebase 2017-12-08 09:47:02 -05:00
cpupower.config Create the kernel-tools package. WHEE 2011-08-17 21:19:57 -04:00
cpupower.service Create the kernel-tools package. WHEE 2011-08-17 21:19:57 -04:00
crash-driver.patch Add patch from Dave Anderson to fix live system crash analysis on Aarch64 2016-11-22 08:35:07 -05:00
criu-no-expert.patch Linux v4.2-rc1 2015-07-06 16:34:35 -04:00
dccp-CVE-2017-8824-use-after-free-in-DCCP-code.patch Fix CVE-2017-8824 (rhbz 1519591 1520764) 2017-12-12 13:45:27 -05:00
die-floppy-die.patch Linux v4.1-rc2-79-g0e1dc4274828 2015-05-07 09:22:47 -04:00
disable-i8042-check-on-apple-mac.patch Linux v4.2-9700-g7d9071a09502 2015-09-08 08:34:33 -04:00
drm-cma-reduce-dmesg-logs.patch Linux v4.14.4 rebase 2017-12-08 09:47:02 -05:00
drm-i915-Boost-GPU-clocks-if-we-miss-the-pageflip-s-vblank.patch Linux v4.14.4 rebase 2017-12-08 09:47:02 -05:00
drm-i915-hush-check-crtc-state.patch Linux v4.13.3 2017-09-21 12:10:35 -07:00
e1000e-Fix-e1000_check_for_copper_link_ich8lan-return-value..patch Backport fix e1000_check_for_copper_link_ich8lan return value 2017-12-20 10:45:14 -05:00
efi-Add-EFI_SECURE_BOOT-bit.patch Refresh SB patchset to fix bisectability issue 2016-10-27 10:49:53 -04:00
efi-Add-SHIM-and-image-security-database-GUID-defini.patch Linux v4.14.4 rebase 2017-12-08 09:47:02 -05:00
efi-Disable-secure-boot-if-shim-is-in-insecure-mode.patch Refresh SB patchset to fix bisectability issue 2016-10-27 10:49:53 -04:00
efi-lockdown.patch Linux v4.14.4 rebase 2017-12-08 09:47:02 -05:00
filter-aarch64.sh Linux v4.13.3 2017-09-21 12:10:35 -07:00
filter-armv7hl.sh Fix the filters for the 4.14 rebase 2017-12-08 15:12:25 -05:00
filter-i686.sh Linux v4.12.3 2017-07-24 16:25:32 -05:00
filter-modules.sh Fix the filters for the 4.14 rebase 2017-12-08 15:12:25 -05:00
filter-ppc64.sh filter qedi iscsi driver 2016-12-27 03:52:58 +00:00
filter-ppc64le.sh filter qedi iscsi driver 2016-12-27 03:52:58 +00:00
filter-s390x.sh Rename kernel-drivers to kernel-modules 2014-05-01 21:10:48 -04:00
filter-x86_64.sh Rename kernel-drivers to kernel-modules 2014-05-01 21:10:48 -04:00
firmware-Drop-WARN-from-usermodehelper_read_trylock-.patch Linux v4.2-rc2 2015-07-13 10:53:53 -04:00
generate_all_configs.sh Change method of configuration generation 2016-12-06 12:07:10 -08:00
generate_debug_configs.sh Change method of configuration generation 2016-12-06 12:07:10 -08:00
gitrev Linux v4.11-rc8-87-g8b5d11e 2017-04-28 08:11:15 -07:00
input-kill-stupid-messages.patch Linux v4.1-rc2-79-g0e1dc4274828 2015-05-07 09:22:47 -04:00
input-rmi4-remove-the-need-for-artifical-IRQ.patch Linux v4.12.3 2017-07-24 16:25:32 -05:00
kbuild-AFTER_LINK.patch Linux v4.9-rc1 2016-10-17 09:49:33 -07:00
kernel-aarch64-debug.config Disable CONFIG_RESET_ATTACK_MITIGATION (rhbz 1532058) 2018-01-08 14:41:35 -08:00
kernel-aarch64.config Disable CONFIG_RESET_ATTACK_MITIGATION (rhbz 1532058) 2018-01-08 14:41:35 -08:00
kernel-armv7hl-debug.config Disable CONFIG_RESET_ATTACK_MITIGATION (rhbz 1532058) 2018-01-08 14:41:35 -08:00
kernel-armv7hl-lpae-debug.config Disable CONFIG_RESET_ATTACK_MITIGATION (rhbz 1532058) 2018-01-08 14:41:35 -08:00
kernel-armv7hl-lpae.config Disable CONFIG_RESET_ATTACK_MITIGATION (rhbz 1532058) 2018-01-08 14:41:35 -08:00
kernel-armv7hl.config Disable CONFIG_RESET_ATTACK_MITIGATION (rhbz 1532058) 2018-01-08 14:41:35 -08:00
kernel-i686-PAE.config Disable CONFIG_RESET_ATTACK_MITIGATION (rhbz 1532058) 2018-01-08 14:41:35 -08:00
kernel-i686-PAEdebug.config Disable CONFIG_RESET_ATTACK_MITIGATION (rhbz 1532058) 2018-01-08 14:41:35 -08:00
kernel-i686-debug.config Disable CONFIG_RESET_ATTACK_MITIGATION (rhbz 1532058) 2018-01-08 14:41:35 -08:00
kernel-i686.config Disable CONFIG_RESET_ATTACK_MITIGATION (rhbz 1532058) 2018-01-08 14:41:35 -08:00
kernel-local Change method of configuration generation 2016-12-06 12:07:10 -08:00
kernel-ppc64-debug.config Disable CONFIG_RESET_ATTACK_MITIGATION (rhbz 1532058) 2018-01-08 14:41:35 -08:00
kernel-ppc64.config Disable CONFIG_RESET_ATTACK_MITIGATION (rhbz 1532058) 2018-01-08 14:41:35 -08:00
kernel-ppc64le-debug.config Disable CONFIG_RESET_ATTACK_MITIGATION (rhbz 1532058) 2018-01-08 14:41:35 -08:00
kernel-ppc64le.config Disable CONFIG_RESET_ATTACK_MITIGATION (rhbz 1532058) 2018-01-08 14:41:35 -08:00
kernel-s390x-debug.config Disable CONFIG_RESET_ATTACK_MITIGATION (rhbz 1532058) 2018-01-08 14:41:35 -08:00
kernel-s390x.config Disable CONFIG_RESET_ATTACK_MITIGATION (rhbz 1532058) 2018-01-08 14:41:35 -08:00
kernel-x86_64-debug.config Disable CONFIG_RESET_ATTACK_MITIGATION (rhbz 1532058) 2018-01-08 14:41:35 -08:00
kernel-x86_64.config Disable CONFIG_RESET_ATTACK_MITIGATION (rhbz 1532058) 2018-01-08 14:41:35 -08:00
kernel.spec Update MODSIGN fixes with dhowell's first round of feedback. 2018-01-09 17:11:18 -05:00
lib-cpumask-Make-CPUMASK_OFFSTACK-usable-without-deb.patch Linux v4.1-11355-g6aaf0da8728c 2015-06-30 13:01:28 -04:00
lis3-improve-handling-of-null-rate.patch Linux v4.2-rc1 2015-07-06 16:34:35 -04:00
merge.pl initial srpm import 2010-07-29 16:46:31 -07:00
mod-extra.list sort mod-extra.list alphabetically (NFC) 2015-09-09 15:10:45 +01:00
mod-extra.sh Prep mod-extra.sh for signed modules 2012-09-25 13:22:00 -04:00
mod-sign.sh simplify the signing stuff now that sign-file takes pub/priv key args 2013-03-28 16:33:21 -04:00
netfilter-nfnetlink_cthelper-Add-missing-permission-.patch Linux v4.14.5 2017-12-14 09:52:51 -05:00
netfilter-xt_osf-Add-missing-permission-checks.patch Linux v4.14.5 2017-12-14 09:52:51 -05:00
no-pcspkr-modalias.patch Linux v4.14.4 rebase 2017-12-08 09:47:02 -05:00
qcom-msm89xx-fixes.patch Linux v4.14.4 rebase 2017-12-08 09:47:02 -05:00
qxl-fixes.patch Linux v4.14.4 rebase 2017-12-08 09:47:02 -05:00
rebase-notes.txt Update rebase notes for S390x minumum hw level 2017-02-03 16:22:19 -06:00
remove-binary-diff.pl Linux v4.9-rc3 2016-10-31 06:27:33 -07:00
rpi-graphics-fix.patch Add fix for vc4 interupts 2017-11-15 08:50:19 +00:00
scsi-sd_revalidate_disk-prevent-NULL-ptr-deref.patch Linux v4.9-7150-gcdb98c2 2016-12-14 12:50:48 -06:00
silence-fbcon-logo.patch Linux v4.14.4 rebase 2017-12-08 09:47:02 -05:00
sources Linux v4.14.12 2018-01-05 09:30:57 -06:00
usb-phy-tegra-Add-38.4MHz-clock-table-entry.patch fix i.MX6 gpu module loading, fix Jetson TX1 usb 2016-04-28 13:42:42 +01:00
v3-2-2-Input-synaptics---Lenovo-X1-Carbon-5-should-use-SMBUS-RMI.patch Patches for ThinkPad X1 Carbon Gen5 Touchpad (rhbz 1509461) 2017-11-06 13:09:32 -08:00
v4-KVM-Fix-stack-out-of-bounds-read-in-write_mmio.patch Fix CVE-2017-17741 (rhbz 1527112 1527113) 2017-12-19 09:35:53 -06:00
x509.genkey Switch to using modsign-post-KS upstream with x509 certs 2012-09-25 13:22:04 -04:00
xen-pciback-Don-t-disable-PCI_COMMAND-on-PCI-device-.patch Linux v4.1-rc2-79-g0e1dc4274828 2015-05-07 09:22:47 -04:00

README.txt

		Kernel package tips & tricks.
		~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

The kernel is one of the more complicated packages in the distro, and
for the newcomer, some of the voodoo in the spec file can be somewhat scary.
This file attempts to document some of the magic.


Speeding up make prep
---------------------
The kernel is nearly 500MB of source code, and as such, 'make prep'
takes a while. The spec file employs some trickery so that repeated
invocations of make prep don't take as long.  Ordinarily the %prep
phase of a package will delete the tree it is about to untar/patch.
The kernel %prep keeps around an unpatched version of the tree,
and makes a symlink tree clone of that clean tree and than applies
the patches listed in the spec to the symlink tree.
This makes a huge difference if you're doing multiple make preps a day.
As an added bonus, doing a diff between the clean tree and the symlink
tree is slightly faster than it would be doing two proper copies of the tree.


build logs.
-----------
There's a convenience helper script in scripts/grab-logs.sh
that will grab the build logs from koji for the kernel version reported
by make verrel


config heirarchy.
-----------------
Instead of having to maintain a config file for every arch variant we build on,
the kernel spec uses a nested system of configs.  At the top level, is
config-generic. Add options here that should be present in every possible
config on all architectures.

Beneath this are per-arch overrides. For example config-x86-generic add
additional x86 specific options, and also _override_ any options that were
set in config-generic.

The heirarchy looks like this..

                           config-generic
                                 |
                         config-x86-generic
                         |                |
             config-x86-32-generic   config-x86-64-generic

An option set in a lower level will override the same option set in one
of the higher levels.


There exist two additional overrides, config-debug, and config-nodebug,
which override -generic, and the per-arch overrides. It is documented
further below.


debug options.
--------------
This is a little complicated, as the purpose & meaning of this changes
depending on where we are in the release cycle.
If we are building for a current stable release, 'make release' has
typically been run already, which sets up the following..
- Two builds occur, a 'kernel' and a 'kernel-debug' flavor.
- kernel-debug will get various heavyweight debugging options like
  lockdep etc turned on.

If we are building for rawhide, 'make debug' has been run, which changes
the status quo to:
- We only build one kernel 'kernel'
- The debug options from 'config-debug' are always turned on.
This is done to increase coverage testing, as not many people actually
run kernel-debug.

To add new debug options, add an option to _both_ config-debug and config-nodebug,
and also new stanzas to the Makefile 'debug' and 'release' targets.

Sometimes debug options get added to config-generic, or per-arch overrides
instead of config-[no]debug. In this instance, the options should have no
discernable performance impact, otherwise they belong in the debug files.