diff options
| author | David P <megver83@parabola.nu> | 2019-06-02 11:53:48 -0400 |
|---|---|---|
| committer | David P <megver83@parabola.nu> | 2019-06-02 11:53:48 -0400 |
| commit | 3b402a3bd6cf0e2c35e1c3e2b5f52e5763735938 (patch) | |
| tree | c9012e2aa7f4668d3f70ca262c375b2d0be4c402 | |
| parent | a8189c588fdda550f31a0175a94608b41922ccf3 (diff) | |
| download | abslibre-3b402a3bd6cf0e2c35e1c3e2b5f52e5763735938.tar.gz abslibre-3b402a3bd6cf0e2c35e1c3e2b5f52e5763735938.tar.bz2 abslibre-3b402a3bd6cf0e2c35e1c3e2b5f52e5763735938.zip | |
upgpkg: libre/linux-libre-pae 5.1.6_gnu-1
Signed-off-by: David P <megver83@parabola.nu>
| -rw-r--r-- | libre/linux-libre-pae/0001-add-sysctl-to-disallow-unprivileged-CLONE_NEWUSER-by.patch | 8 | ||||
| -rw-r--r-- | libre/linux-libre-pae/PKGBUILD | 8 | ||||
| -rw-r--r-- | libre/linux-libre-pae/config | 3 |
3 files changed, 10 insertions, 9 deletions
diff --git a/libre/linux-libre-pae/0001-add-sysctl-to-disallow-unprivileged-CLONE_NEWUSER-by.patch b/libre/linux-libre-pae/0001-add-sysctl-to-disallow-unprivileged-CLONE_NEWUSER-by.patch index 73fc506df..a290583c2 100644 --- a/libre/linux-libre-pae/0001-add-sysctl-to-disallow-unprivileged-CLONE_NEWUSER-by.patch +++ b/libre/linux-libre-pae/0001-add-sysctl-to-disallow-unprivileged-CLONE_NEWUSER-by.patch @@ -1,4 +1,4 @@ -From 72f134cf21751bebcfc4d8c88202f817f6f56610 Mon Sep 17 00:00:00 2001 +From ec4b54ebab3f84210e4b36d1af2dea754b8eb789 Mon Sep 17 00:00:00 2001 From: Serge Hallyn <serge.hallyn@canonical.com> Date: Fri, 31 May 2013 19:12:12 +0100 Subject: [PATCH] add sysctl to disallow unprivileged CLONE_NEWUSER by default @@ -13,7 +13,7 @@ Signed-off-by: Daniel Micay <danielmicay@gmail.com> 3 files changed, 30 insertions(+) diff --git a/kernel/fork.c b/kernel/fork.c -index 9dcd18aa210b..6769323efb86 100644 +index 2628f3773ca8..a2da35b446a6 100644 --- a/kernel/fork.c +++ b/kernel/fork.c @@ -103,6 +103,11 @@ @@ -28,7 +28,7 @@ index 9dcd18aa210b..6769323efb86 100644 /* * Minimum number of threads to boot the kernel -@@ -1694,6 +1699,10 @@ static __latent_entropy struct task_struct *copy_process( +@@ -1719,6 +1724,10 @@ static __latent_entropy struct task_struct *copy_process( if ((clone_flags & (CLONE_NEWUSER|CLONE_FS)) == (CLONE_NEWUSER|CLONE_FS)) return ERR_PTR(-EINVAL); @@ -39,7 +39,7 @@ index 9dcd18aa210b..6769323efb86 100644 /* * Thread groups must share signals as well, and detached threads * can only be started up within the thread group. -@@ -2527,6 +2536,12 @@ int ksys_unshare(unsigned long unshare_flags) +@@ -2554,6 +2563,12 @@ int ksys_unshare(unsigned long unshare_flags) if (unshare_flags & CLONE_NEWNS) unshare_flags |= CLONE_FS; diff --git a/libre/linux-libre-pae/PKGBUILD b/libre/linux-libre-pae/PKGBUILD index b29584f96..2be15a57b 100644 --- a/libre/linux-libre-pae/PKGBUILD +++ b/libre/linux-libre-pae/PKGBUILD @@ -11,7 +11,7 @@ pkgbase=linux-libre-pae _srcbasever=5.1-gnu -_srcver=5.1.3-gnu +_srcver=5.1.6-gnu _replacesarchkernel=('linux%') # '%' gets replaced with _kernelname _replacesoldkernels=() # '%' gets replaced with _kernelname @@ -54,7 +54,7 @@ validpgpkeys=( ) sha512sums=('42510bffa69746e0f919fecef5a23da4adb2473239ee67730fa1eb2340256fb4618c6acab439c01ae781df768a2e1ac4b76ad80fe0e4a432eaceb7f01f275439' 'SKIP' - 'a84d9d60f754c7afc7a733721dc50a39f4c7e8d702f21bffcd4685564914a74259de9be2c19122c82db0606c1e984591b34248356a70000c3974ddb812e7330e' + '7c860911baae3c94743981980f93928bde01679f5f8bc3c91f19eb23d1fb1cc590cc4dbb421c1ae9165dab9d1c697e19926fc265a4a2fcfdaaa262cb2b025455' 'SKIP' '13cb5bc42542e7b8bb104d5f68253f6609e463b6799800418af33eb0272cc269aaa36163c3e6f0aacbdaaa1d05e2827a4a7c4a08a029238439ed08b89c564bb3' 'SKIP' @@ -62,13 +62,13 @@ sha512sums=('42510bffa69746e0f919fecef5a23da4adb2473239ee67730fa1eb2340256fb4618 'SKIP' '7a3716bfe3b9f546da309c7492f3e08f8f506813afeb1c737a474c83313d5c313cf4582b65215c2cfce3b74d9d1021c96e8badafe8f6e5b01fe28d2b5c61ae78' 'SKIP' - '1d9addcc57b15f4a8f7766715f77e5c98db27bdd6a5bf0b57b5c65b57956c6b463dd85e6a79bbfc68f5d0de1cd0d93e71922d22d7104156eb31015e2c6e0e9de' + 'b50e461ef0d817376b954e3a0c3721e4d688e43edc9a0c651f4b532f5a26d7ba68fad152ff9834a47424bcd2155af7c3fa095c66315f9748423e6d0e6ee6a2de' '7ad5be75ee422dda3b80edd2eb614d8a9181e2c8228cd68b3881e2fb95953bf2dea6cbe7900ce1013c9de89b2802574b7b24869fc5d7a95d3cc3112c4d27063a' '4a8b324aee4cccf3a512ad04ce1a272d14e5b05c8de90feb82075f55ea3845948d817e1b0c6f298f5816834ddd3e5ce0a0e2619866289f3c1ab8fd2f35f04f44' '2dc6b0ba8f7dbf19d2446c5c5f1823587de89f4e28e9595937dd51a87755099656f2acec50e3e2546ea633ad1bfd1c722e0c2b91eef1d609103d8abdc0a7cbaf' '02af4dd2a007e41db0c63822c8ab3b80b5d25646af1906dc85d0ad9bb8bbf5236f8e381d7f91cf99ed4b0978c50aee37cb9567cdeef65b7ec3d91b882852b1af' 'b8fe56e14006ab866970ddbd501c054ae37186ddc065bb869cf7d18db8c0d455118d5bda3255fb66a0dde38b544655cfe9040ffe46e41d19830b47959b2fb168' - '46869be1bbd7e2af0f46ffacfac505b853afc550e01c06f8f2dde5d1cd67689a2dc6c56d238d5b9bc4d7bc804d715d0993a09029dcc16e1c1a226b8a6e070e20') + '4dd2f5be666462549a70ae330e094c35970c0fa384d215884c84fe40ca7f82f9b90b155c96bb3d14d0a460c64f5fc251c156ae9cca595d0f5546674569f215ea') _kernelname=${pkgbase#linux-libre} _replacesarchkernel=("${_replacesarchkernel[@]/\%/${_kernelname}}") diff --git a/libre/linux-libre-pae/config b/libre/linux-libre-pae/config index 441a99420..c8461212a 100644 --- a/libre/linux-libre-pae/config +++ b/libre/linux-libre-pae/config @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 5.1.3-gnu Kernel Configuration +# Linux/x86 5.1.6-gnu Kernel Configuration # # @@ -766,6 +766,7 @@ CONFIG_ISA_BUS_API=y CONFIG_CLONE_BACKWARDS=y CONFIG_OLD_SIGSUSPEND3=y CONFIG_OLD_SIGACTION=y +CONFIG_64BIT_TIME=y CONFIG_COMPAT_32BIT_TIME=y CONFIG_ARCH_HAS_STRICT_KERNEL_RWX=y CONFIG_STRICT_KERNEL_RWX=y |