Go to file
Justin M. Forbes 6260f827cb CVE-2016-9588 fix possible DoS in nVMX (rhbz 1404924 1404925) 2016-12-15 08:38:59 -06:00
scripts Linux v4.7.9 fixes CVE-2016-5195 2016-10-20 09:00:59 -05:00
.gitignore add kernel-4* to .gitignore 2015-03-13 12:54:51 -04:00
0001-HID-input-ignore-System-Control-application-usages-i.patch Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
0001-iio-Use-event-header-from-kernel-tree.patch Fix for incorrect return checking in cpupower (rhbz 1374212) 2016-09-14 10:16:36 -07:00
0001-ipv6-Avoid-creating-RTF_CACHE-from-a-rt-that-is-not-.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
0001-netfilter-ipv6-nf_defrag-drop-mangled-skb-on-ream-er.patch Linux v4.8.12 2016-12-02 10:57:44 -06:00
0001-x86-cpu-cacheinfo-Fix-teardown-path.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
ACPI-Limit-access-to-custom_method.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
ARM-Drop-fixed-200-Hz-timer-requirement-from-Samsung-platforms.patch Add upstream patch to fix all ARMv7 devices set to initial 200Mhz 2016-11-28 07:53:41 +00:00
ARM-OMAP4-Fix-crashes.patch Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
ARM-tegra-usb-no-reset.patch Linux v4.1-11235-gc63f887bdae8 2015-06-29 11:24:25 -04:00
Add-EFI-signature-data-types.patch Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
Add-an-EFI-signature-blob-parser-and-key-loader.patch Linux v4.7.2 2016-08-22 10:51:37 -07:00
Add-option-to-automatically-enforce-module-signature.patch Linux v4.7.2 2016-08-22 10:51:37 -07:00
Add-secure_modules-call.patch Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
Add-sysrq-option-to-disable-secure-boot-mode.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
AllWinner-net-emac.patch Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
HID-chicony-Add-support-for-Acer-Aspire-Switch-12.patch Patch from Nicholas Kudriavtsev for Acer Switch 12 Fn keys (rhbz 1244511) 2015-08-04 14:29:20 -04:00
HID-hid-input-Fix-accessing-freed-memory-during-devi.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
HID-microsoft-Add-Surface-4-type-cover-pro-4-JP.patch Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
HID-wacom-fix-Bamboo-ONE-oops.patch Fix Bamboo ONE issues (rhbz 1317116) 2016-04-12 08:12:11 -04:00
Initialize-msg-shm-IPC-objects-before-doing-ipc_addi.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
Input-synaptics-pin-3-touches-when-the-firmware-repo.patch Linux v4.2-rc2 2015-07-13 10:53:53 -04:00
KEYS-Add-a-system-blacklist-keyring.patch Linux v4.7.2 2016-08-22 10:51:37 -07:00
Kbuild-Add-an-option-to-enable-GCC-VTA.patch Linux v4.2-rc2 2015-07-13 10:53:53 -04:00
MODSIGN-Import-certificates-from-UEFI-Secure-Boot.patch Linux v4.7.2 2016-08-22 10:51:37 -07:00
MODSIGN-Support-not-importing-certs-from-db.patch Linux v4.7.2 2016-08-22 10:51:37 -07:00
Makefile Disable CONFIG_DEBUG_VM_PGFLAGS on non debug kernels (rhbz 1335173) 2016-05-16 11:44:06 -05:00
Makefile.config Reorganisation and cleanup of the powerpc configs 2015-06-26 22:23:54 +01:00
Makefile.release Disable CONFIG_DEBUG_VM_PGFLAGS on non debug kernels (rhbz 1335173) 2016-05-16 11:44:06 -05:00
PCI-Lock-down-BAR-access-when-module-security-is-ena.patch Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
PatchList.txt Linux v3.13-rc1-77-g4c1cc40 2013-11-24 08:42:45 -05:00
RDS-verify-the-underlying-transport-exists-before-cr.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
README.txt document inheritance/heirarchy of config generation 2012-01-13 15:42:52 -05:00
Restrict-dev-mem-and-dev-kmem-when-module-loading-is.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
TODO re-enable RCU_FAST_NO_HZ, enable NO_HZ_FULL on x86_64 2014-09-17 13:10:12 -05:00
USB-whiteheat-fix-potential-null-deref-at-probe.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
acpi-Ignore-acpi_rsdp-kernel-parameter-when-module-l.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
acpi-video-Add-force-native-backlight-quirk-for-Leno.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
acpi-video-Allow-forcing-native-backlight-on-non-win.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
arm-revert-mmc-omap_hsmmc-Use-dma_request_chan-for-reque.patch Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
arm64-ACPI-parse-SPCR-table.patch Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
arm64-avoid-needing-console-to-enable-serial-console.patch Linux v4.6.3 2016-07-05 12:18:02 -04:00
arm64-pcie-quirks.patch Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
asus-wmi-Restrict-debugfs-interface-when-module-load.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
ath9k-rx-dma-stop-check.patch Linux v4.1-rc2-79-g0e1dc4274828 2015-05-07 09:22:47 -04:00
bcm283x-vc4-fixes.patch Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
bcm2837-initial-support.patch Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
block-blkg_destroy_all-should-clear-q-root_blkg-and-.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
config-arm-generic Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
config-arm64 Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
config-armv7 Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
config-armv7-generic Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
config-armv7-lpae Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
config-debug Linux v4.7.2 2016-08-22 10:51:37 -07:00
config-generic disable CONFIG_IWLWIFI_PCIE_RTPM it can cause wifi disconnects 2016-12-15 08:00:15 -06:00
config-i686-PAE Remove all references to unknown Kconfig symbols 2014-10-02 08:26:50 -04:00
config-local Add support for local rebuild config option overrides 2011-01-10 17:37:27 -05:00
config-no-extra disable extras on arm 2013-10-03 12:22:16 -04:00
config-nodebug Linux v4.7.2 2016-08-22 10:51:37 -07:00
config-powerpc64 Linux v4.2-rc1 2015-07-06 16:34:35 -04:00
config-powerpc64-generic Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
config-powerpc64le Linux v4.6.3 2016-07-05 12:18:02 -04:00
config-powerpc64p7 Reorganisation and cleanup of the powerpc configs 2015-06-26 22:23:54 +01:00
config-s390x Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
config-x86-32-generic Linux v4.6.3 2016-07-05 12:18:02 -04:00
config-x86-generic Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
config-x86_64-generic Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
cpupower.config Create the kernel-tools package. WHEE 2011-08-17 21:19:57 -04:00
cpupower.service Create the kernel-tools package. WHEE 2011-08-17 21:19:57 -04:00
crash-driver.patch Add patch from Dave Anderson to fix live system crash analysis on Aarch64 2016-11-22 08:40:10 -05:00
criu-no-expert.patch Linux v4.2-rc1 2015-07-06 16:34:35 -04:00
dcache-Handle-escaped-paths-in-prepend_path.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
die-floppy-die.patch Linux v4.1-rc2-79-g0e1dc4274828 2015-05-07 09:22:47 -04:00
disable-i8042-check-on-apple-mac.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
drm-i915-hush-check-crtc-state.patch Linux v4.7.2 2016-08-22 10:51:37 -07:00
drm-i915-turn-off-wc-mmaps.patch Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
drm-vmwgfx-Allow-dropped-masters-render-node-like-ac.patch Fix vmware driver issues from Thomas Hellström (rhbz 1227193) 2015-08-27 13:44:07 -04:00
efi-Add-EFI_SECURE_BOOT-bit.patch Linux v4.4.2 2016-02-18 16:18:16 -08:00
efi-Disable-secure-boot-if-shim-is-in-insecure-mode.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
filter-aarch64.sh Forgot to update filters 2016-11-11 09:28:06 -06:00
filter-armv7hl.sh Forgot to update filters 2016-11-11 09:28:06 -06:00
filter-i686.sh Forgot to update filters 2016-11-11 09:28:06 -06:00
filter-modules.sh Linux v4.7.2 2016-08-22 10:51:37 -07:00
filter-ppc64.sh Forgot to update filters 2016-11-11 09:28:06 -06:00
filter-ppc64le.sh Forgot to update filters 2016-11-11 09:28:06 -06:00
filter-ppc64p7.sh Forgot to update filters 2016-11-11 09:28:06 -06:00
filter-s390x.sh Linux v4.6.3 2016-07-05 12:18:02 -04:00
filter-x86_64.sh Linux v4.6.3 2016-07-05 12:18:02 -04:00
firmware-Drop-WARN-from-usermodehelper_read_trylock-.patch Linux v4.2-rc2 2015-07-13 10:53:53 -04:00
geekbox-v4-device-tree-support.patch Linux v4.7.2 2016-08-22 10:51:37 -07:00
hibernate-Disable-in-a-signed-modules-environment.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
iSCSI-let-session-recovery_tmo-sysfs-writes-persist.patch Fix iscsi issue (rhbz 1253789) 2015-08-17 11:27:38 -04:00
input-kill-stupid-messages.patch Linux v4.1-rc2-79-g0e1dc4274828 2015-05-07 09:22:47 -04:00
input-silence-i8042-noise.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
kbuild-AFTER_LINK.patch Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
kernel.spec CVE-2016-9588 fix possible DoS in nVMX (rhbz 1404924 1404925) 2016-12-15 08:38:59 -06:00
kexec-Disable-at-runtime-if-the-kernel-enforces-modu.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
kexec-uefi-copy-secure_boot-flag-in-boot-params.patch kexec/uefi: copy secure boot flag in boot params across kexec reboot 2015-08-07 10:59:11 -04:00
kvm-nVMX-allow-L1-to-intercept-software-exceptions.patch CVE-2016-9588 fix possible DoS in nVMX (rhbz 1404924 1404925) 2016-12-15 08:38:59 -06:00
lib-cpumask-Make-CPUMASK_OFFSTACK-usable-without-deb.patch Linux v4.1-11355-g6aaf0da8728c 2015-06-30 13:01:28 -04:00
lis3-improve-handling-of-null-rate.patch Linux v4.2-rc1 2015-07-06 16:34:35 -04:00
merge.pl initial srpm import 2010-07-29 16:46:31 -07:00
mod-extra.list Move joydev.ko from kernel-modules-extra to kernel-modules 2015-08-04 07:49:18 -04:00
mod-extra.sh Prep mod-extra.sh for signed modules 2012-09-25 13:22:00 -04:00
mod-sign.sh simplify the signing stuff now that sign-file takes pub/priv key args 2013-03-28 16:33:21 -04:00
net-inet-fix-race-in-reqsk_queue_unlink.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
netfilter-x_tables-deal-with-bogus-nextoffset-values.patch Linux v4.7.2 2016-08-22 10:51:37 -07:00
no-pcspkr-modalias.patch Linux v4.1-rc2-79-g0e1dc4274828 2015-05-07 09:22:47 -04:00
nouveau-add-maxwell-to-backlight-init.patch Add maxwell to backlight init (rhbz 1390308) 2016-11-11 15:39:50 -06:00
nv46-Change-mc-subdev-oclass-from-nv44-to-nv4c.patch Add patch from Hans de Goede to fix nv46 based cards (rhbz 1257534) 2015-08-27 10:46:07 -04:00
ovl-fix-permission-checking-for-setattr.patch CVE-XXXX-XXXX permission bypass on overlayfs (rhbz 1291329 1291332) 2015-12-14 10:33:01 -05:00
pinctrl-pinctrl-single-must-be-initialized-early.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
qcom-QDF2432-tmp-errata.patch Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
qxl-reapply-cursor-after-SetCrtc-calls.patch Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
rc-core-fix-repeat-events.patch Add event decoding fix (rhbz 1360688) 2016-08-29 14:26:15 -07:00
rds-fix-an-infoleak-in-rds_inc_info_copy.txt CVE-2016-5244 info leak in rds (rhbz 1343338 1343337) 2016-06-07 08:24:33 -04:00
rebase-notes.txt Linux v4.5.3 rebase 2016-05-09 09:50:20 -05:00
regulator-axp20x-module-alias.patch Add upstream patch to fix a Allwinner regulator loading as a module 2015-09-28 17:08:31 +01:00
scsi-sd_revalidate_disk-prevent-NULL-ptr-deref.patch Linux v4.4.2 2016-02-18 16:18:16 -08:00
security-selinux-overlayfs-support.patch Linux v4.8.6 rebase 2016-11-07 12:19:00 -06:00
si2157-Bounds-check-firmware.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
si2168-Bounds-check-firmware.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
silence-fbcon-logo.patch Linux v4.1-11235-gc63f887bdae8 2015-06-29 11:24:25 -04:00
sources Linux v4.8.14 2016-12-12 08:37:49 -06:00
usb-phy-tegra-Add-38.4MHz-clock-table-entry.patch Linux v4.5.3 rebase 2016-05-09 09:50:20 -05:00
v3-vfio-pci-Fix-integer-overflows-bitmask-check.patch CVE-2016-9083 CVE-2016-9084 vfio multiple flaws 2016-10-27 09:27:47 -05:00
vfs-Test-for-and-handle-paths-that-are-unreachable-f.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
vmwgfx-Rework-device-initialization.patch Fix vmware driver issues from Thomas Hellström (rhbz 1227193) 2015-08-27 13:44:07 -04:00
watchdog-Disable-watchdog-on-virtual-machines.patch Linux v4.5.3 rebase 2016-05-09 09:50:20 -05:00
x86-Lock-down-IO-port-access-when-module-security-is.patch Linux v4.4.7 2016-04-12 14:30:24 -07:00
x86-Restrict-MSR-access-when-module-loading-is-restr.patch Merge 4.3.3 from stabilization branch 2016-01-05 14:56:17 -05:00
x509.genkey Switch to using modsign-post-KS upstream with x509 certs 2012-09-25 13:22:04 -04:00
xen-pciback-Don-t-disable-PCI_COMMAND-on-PCI-device-.patch Linux v4.1-rc2-79-g0e1dc4274828 2015-05-07 09:22:47 -04:00

README.txt

		Kernel package tips & tricks.
		~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

The kernel is one of the more complicated packages in the distro, and
for the newcomer, some of the voodoo in the spec file can be somewhat scary.
This file attempts to document some of the magic.


Speeding up make prep
---------------------
The kernel is nearly 500MB of source code, and as such, 'make prep'
takes a while. The spec file employs some trickery so that repeated
invocations of make prep don't take as long.  Ordinarily the %prep
phase of a package will delete the tree it is about to untar/patch.
The kernel %prep keeps around an unpatched version of the tree,
and makes a symlink tree clone of that clean tree and than applies
the patches listed in the spec to the symlink tree.
This makes a huge difference if you're doing multiple make preps a day.
As an added bonus, doing a diff between the clean tree and the symlink
tree is slightly faster than it would be doing two proper copies of the tree.


build logs.
-----------
There's a convenience helper script in scripts/grab-logs.sh
that will grab the build logs from koji for the kernel version reported
by make verrel


config heirarchy.
-----------------
Instead of having to maintain a config file for every arch variant we build on,
the kernel spec uses a nested system of configs.  At the top level, is
config-generic. Add options here that should be present in every possible
config on all architectures.

Beneath this are per-arch overrides. For example config-x86-generic add
additional x86 specific options, and also _override_ any options that were
set in config-generic.

The heirarchy looks like this..

                           config-generic
                                 |
                         config-x86-generic
                         |                |
             config-x86-32-generic   config-x86-64-generic

An option set in a lower level will override the same option set in one
of the higher levels.


There exist two additional overrides, config-debug, and config-nodebug,
which override -generic, and the per-arch overrides. It is documented
further below.


debug options.
--------------
This is a little complicated, as the purpose & meaning of this changes
depending on where we are in the release cycle.
If we are building for a current stable release, 'make release' has
typically been run already, which sets up the following..
- Two builds occur, a 'kernel' and a 'kernel-debug' flavor.
- kernel-debug will get various heavyweight debugging options like
  lockdep etc turned on.

If we are building for rawhide, 'make debug' has been run, which changes
the status quo to:
- We only build one kernel 'kernel'
- The debug options from 'config-debug' are always turned on.
This is done to increase coverage testing, as not many people actually
run kernel-debug.

To add new debug options, add an option to _both_ config-debug and config-nodebug,
and also new stanzas to the Makefile 'debug' and 'release' targets.

Sometimes debug options get added to config-generic, or per-arch overrides
instead of config-[no]debug. In this instance, the options should have no
discernable performance impact, otherwise they belong in the debug files.