5.13.2

2 files changed, 99 insertions, 52 deletions

diff --git a/.SRCINFO b/.SRCINFO
index 8c97fd3ad15e..4cb88bb224e5 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,6 +1,6 @@
 pkgbase = linux-cacule-rt
 	pkgdesc = Linux-CacULE-RT Kernel by Hamad Marri and with some other patchsets
-	pkgver = 5.13.1
+	pkgver = 5.13.2
 	pkgrel = 1
 	url = https://github.com/hamadmarri/cacule-cpu-scheduler
 	arch = x86_64
@@ -20,7 +20,7 @@ pkgbase = linux-cacule-rt
 	makedepends = xz
 	options = !strip
 	source = https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.13.tar.xz
-	source = https://cdn.kernel.org/pub/linux/kernel/v5.x/patch-5.13.1.xz
+	source = https://cdn.kernel.org/pub/linux/kernel/v5.x/patch-5.13.2.xz
 	source = config
 	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/arch-patches/0001-ZEN-Add-sysctl-and-CONFIG-to-disallow-unprivileged-C.patch
 	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/CacULE/v5.13/cacule-5.13-rt.patch
@@ -29,23 +29,24 @@ pkgbase = linux-cacule-rt
 	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/winesync/5.13-winesync.patch
 	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/zen-patches/0001-zen-patches.patch
 	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/lqx-patches/0001-zen-Allow-MSR-writes-by-default.patch
-	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/bfq-patches/0001-bfq-patches.patch
-	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/block-patches/0001-block-patches.patch
+	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/bfq-patches-v3/0001-bfq-patches.patch
+	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/block-patches-v2/0001-block-patches.patch
 	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/fixes-miscellaneous/0001-fixes-miscellaneous.patch
 	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/bbr2-patches-v2/0001-bbr2-patches.patch
-	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/btrfs-patches/0001-btrfs-patches.patch
-	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/pf-patches-v3/0001-pf-patches.patch
-	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/lru-patches/lru_5.13.patch
-	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/lru-patches/le9db_patches/le9db1-5.10.patch
+	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/btrfs-patches-v2/0001-btrfs-patches.patch
+	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/android-patches/0001-android-export-symbold-and-enable-building-ashmem-an.patch
+	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/pf-patches-v5/0001-pf-patches.patch
+	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/lru-patches-v2/0001-lru-patches.patch
 	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/ntfs3-patches/0001-ntfs3-patches.patch
 	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/misc/nohzfull.patch
 	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/misc/1000-tune-vm-mm-and-vfs-settings.patch
+	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/misc/0001-rcu-boost.patch
 	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/misc/rcu-fixes-next.patch
 	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/zstd-upstream-patches/0001-zstd-upstream-patches.patch
 	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/clearlinux-patches/0001-clearlinux-patches.patch
 	source = https://raw.githubusercontent.com/ptr1337/linux-cacule-aur/master/patches/5.13/v4l2loopback-patches/0001-v4l2loopback-patches.patch
 	md5sums = 76c60fb304510a7bbd9c838790bc5fe4
-	md5sums = e1d6115db8aa6afc106494e940c5cdc0
+	md5sums = 4f36a8f2c69b725c74f137d3f183e358
 	md5sums = 9fc6628d79cc6441934f49da93ccb37c
 	md5sums = 9bb46b8ce45259c238c5233b8394d70b
 	md5sums = 26e9b72135ebafdf269c8b90014d87e1
@@ -54,17 +55,18 @@ pkgbase = linux-cacule-rt
 	md5sums = 9573b92353399343db8a691c9b208300
 	md5sums = 1217799f33d6ba822152a0e2fb6f2e34
 	md5sums = 09a9e83b7b828fae46fd1a4f4cc23c28
-	md5sums = e16eb528e701193bc8cb1facc6b27231
-	md5sums = 396c84c4a6557db27f9c3bbfa656ac3e
+	md5sums = daeacee8fcde31908f90b89dc4b54126
+	md5sums = 4f9e72e7edb909da5cd650afe13aadb6
 	md5sums = 9bbbd88f0303ccd59064648eaaf80edd
 	md5sums = 1bd37d8e71b2a7aae8ebd2853a08f445
-	md5sums = 63078800040b2a9a9f19c59c4ebf5b23
-	md5sums = 81b228546bcd56ff04e7f388a37e11a9
-	md5sums = 3f302dbaceea020abd40f6e9f23b75df
-	md5sums = 7aeb2c86091b9432d1fc9172d418d486
+	md5sums = 65a4399a10b2abd0f327145d479db12d
+	md5sums = 81f27f12e20971c7d7fc3a53ffb6842c
+	md5sums = 5de99ca45528a4a7869249e54eb35b6b
+	md5sums = 9c0260e17db69e024a4838c4617c9f10
 	md5sums = 86825a0c5716a1d9c6a39f9d3886b1bf
 	md5sums = c68e4fd9b4a55ee730a34bb39ae325ad
 	md5sums = 0632f49f076c90b6d6098cad7b5a88ac
+	md5sums = 8fb9f2b248004031700a17faf1e20f10
 	md5sums = eff4bb43a8defb7ed08b9c1e403291ea
 	md5sums = 9e5114dba6da65e8d444aa225b109a21
 	md5sums = c360b8c17d778f98a54fa7cddf348566
diff --git a/PKGBUILD b/PKGBUILD
index 4fa665055e44..2443c3517c99 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -2,15 +2,13 @@
 
 ### BUILD OPTIONS
 # Set the next two variables to ANYTHING that is not null to enable them
-### BUILD OPTIONS
-# Set these variables to ANYTHING that is not null to enable them
 
 # NUMA is optimized for multi-socket motherboards.
 # A single multi-core CPU actually runs slower with NUMA enabled.
 # See, https://bugs.archlinux.org/task/31187
 _NUMAdisable=y
 # Enable fsync
-_fsync=y
+_fsync=
 #enable futex2
 _futex2=y
 #enable winesync
@@ -26,9 +24,17 @@ _2k_HZ_ticks=
 _1k_HZ_ticks=y
 _500_HZ_ticks=
 ### Enable protect file mappings under memory pressure
-_mm_protect=
+_mm_protect=y
 ### Enable multigenerational LRU
 _lru_enable=y
+### Enable Linux Random Number Generator
+_lrng_enable=
+### Enable SECURITY_FORK_BRUTE
+# WARNING Not recommended.
+# An experimental solution, still in testing phase.
+# Possible compilation and installation errors.
+# Leave it unselected.
+_fork_brute=
 # Tweak kernel options prior to a build via nconfig
 _makenconfig=
 
@@ -52,7 +58,7 @@ _use_current=
 ### IMPORTANT: Do no edit below this line unless you know what you're doing
 
 _major=5.13
-_minor=1
+_minor=2
 _srcname=linux-${_major}
 pkgbase=linux-cacule-rt
 pkgver=${_major}.${_minor}
@@ -74,24 +80,33 @@ source=(
   "${_patchsource}/arch-patches/0001-ZEN-Add-sysctl-and-CONFIG-to-disallow-unprivileged-C.patch"
   "${_caculepatches}/v5.13/cacule-5.13-rt.patch"
   "${_patchsource}/cpu-patches/0001-cpu-patches.patch"
+#  "${_patchsource}/futex-patches/0001-futex-resync-from-gitlab.collabora.com.patch"
   "${_patchsource}/futex2/0007-v5.13-futex2_interface.patch"
   "${_patchsource}/winesync/5.13-winesync.patch"
   "${_patchsource}/zen-patches/0001-zen-patches.patch"
   "${_patchsource}/lqx-patches/0001-zen-Allow-MSR-writes-by-default.patch"
-  "${_patchsource}/bfq-patches/0001-bfq-patches.patch"
-  "${_patchsource}/block-patches/0001-block-patches.patch"
+  "${_patchsource}/bfq-patches-v3/0001-bfq-patches.patch"
+  "${_patchsource}/block-patches-v2/0001-block-patches.patch"
   "${_patchsource}/fixes-miscellaneous/0001-fixes-miscellaneous.patch"
   "${_patchsource}/bbr2-patches-v2/0001-bbr2-patches.patch"
-  "${_patchsource}/btrfs-patches/0001-btrfs-patches.patch"
-  "${_patchsource}/pf-patches-v3/0001-pf-patches.patch"
-  "${_patchsource}/lru-patches/lru_5.13.patch"
-  "${_patchsource}/lru-patches/le9db_patches/le9db1-5.10.patch"
+  "${_patchsource}/btrfs-patches-v2/0001-btrfs-patches.patch"
+  "${_patchsource}/android-patches/0001-android-export-symbold-and-enable-building-ashmem-an.patch"
+  "${_patchsource}/pf-patches-v5/0001-pf-patches.patch"
+  "${_patchsource}/lru-patches-v2/0001-lru-patches.patch"
+#  "${_patchsource}/lru-patches/lru_5.13.patch"
+#  "${_patchsource}/lru-patches/le9db_patches/le9db1-5.10.patch"
   "${_patchsource}/ntfs3-patches/0001-ntfs3-patches.patch"
+#  "${_patchsource}/security-2/hardened-patches.patch"
+#  "${_patchsource}/lrng-patches/0001-lrng-patches.patch"
+#  "${_patchsource}/security-patches/0001-security-patches.patch"
   "${_patchsource}/misc/nohzfull.patch"
   "${_patchsource}/misc/1000-tune-vm-mm-and-vfs-settings.patch"
+  "${_patchsource}/misc/0001-rcu-boost.patch"
   "${_patchsource}/misc/rcu-fixes-next.patch"
+#  "${_patchsource}/alsa-patches/0001-alsa-patches.patch"
   "${_patchsource}/zstd-upstream-patches/0001-zstd-upstream-patches.patch"
   "${_patchsource}/clearlinux-patches/0001-clearlinux-patches.patch"
+#  "${_patchsource}/ksm-patches/0001-ksm-patches.patch"
   "${_patchsource}/v4l2loopback-patches/0001-v4l2loopback-patches.patch"
 )
 
@@ -200,25 +215,54 @@ prepare() {
     		    scripts/config --disable CONFIG_MQ_IOSCHED_KYBER
     	    fi
 
-
-      ### Enable protect file mappings under memory pressure
-          if [ -n "$_mm_protect" ]; then
-          	echo "Enabling protect file mappings under memory pressure..."
-          	scripts/config --enable CONFIG_UNEVICTABLE_FILE
-          	scripts/config --set-val CONFIG_UNEVICTABLE_FILE_KBYTES_LOW 262144
-          	scripts/config --set-val CONFIG_UNEVICTABLE_FILE_KBYTES_MIN 131072
-          fi
-
-              ### Enable multigenerational LRU
-          if [ -n "$_lru_enable" ]; then
-          	echo "Enabling multigenerational LRU..."
-          	scripts/config --enable CONFIG_HAVE_ARCH_PARENT_PMD_YOUNG
-          	scripts/config --enable CONFIG_LRU_GEN
-          	scripts/config --set-val CONFIG_NR_LRU_GENS 7
-          	scripts/config --set-val CONFIG_TIERS_PER_GEN 4
-          	scripts/config --enable CONFIG_LRU_GEN_ENABLED
-          	scripts/config --disable CONFIG_LRU_GEN_STATS
-          fi
+                ### Enable protect file mappings under memory pressure
+                    if [ -n "$_mm_protect" ]; then
+                    	echo "Enabling protect file mappings under memory pressure..."
+                    	scripts/config --enable CONFIG_UNEVICTABLE_FILE
+                    	scripts/config --set-val CONFIG_UNEVICTABLE_FILE_KBYTES_LOW 262144
+                    	scripts/config --set-val CONFIG_UNEVICTABLE_FILE_KBYTES_MIN 131072
+                      scripts/config --enable CONFIG_UNEVICTABLE_ANON
+                      scripts/config --set-val CONFIG_UNEVICTABLE_ANON_KBYTES_LOW 65536
+                      scripts/config --set-val CONFIG_UNEVICTABLE_ANON_KBYTES_MIN 32768
+                    fi
+
+                        ### Enable multigenerational LRU
+                    if [ -n "$_lru_enable" ]; then
+                    	echo "Enabling multigenerational LRU..."
+                    	scripts/config --enable CONFIG_HAVE_ARCH_PARENT_PMD_YOUNG
+                    	scripts/config --enable CONFIG_LRU_GEN
+                    	scripts/config --set-val CONFIG_NR_LRU_GENS 7
+                    	scripts/config --set-val CONFIG_TIERS_PER_GEN 4
+                    	scripts/config --enable CONFIG_LRU_GEN_ENABLED
+                    	scripts/config --disable CONFIG_LRU_GEN_STATS
+                    fi
+
+                  ### Enable Linux Random Number Generator
+                  if [ -n "$_lrng_enable" ]; then
+                      echo "Enabling Linux Random Number Generator ..."
+                      scripts/config --enable CONFIG_LRNG
+                      scripts/config --disable CONFIG_LRNG_OVERSAMPLE_ENTROPY_SOURCES
+                      scripts/config --enable CONFIG_LRNG_CONTINUOUS_COMPRESSION_ENABLED
+                      scripts/config --disable CONFIG_LRNG_CONTINUOUS_COMPRESSION_DISABLED
+                      scripts/config --disable CONFIG_LRNG_SWITCHABLE_CONTINUOUS_COMPRESSION
+                      scripts/config --enable CONFIG_LRNG_COLLECTION_SIZE_1024
+                      scripts/config --disable CONFIG_LRNG_HEALTH_TESTS
+                      scripts/config --set-val CONFIG_LRNG_IRQ_ENTROPY_RATE 256
+                      scripts/config --disable CONFIG_LRNG_JENT
+                      scripts/config --set-val CONFIG_LRNG_JENT_ENTROPY_RATE 16
+                      scripts/config --set-val CONFIG_LRNG_CPU_ENTROPY_RATE 8
+                      scripts/config --disable CONFIG_LRNG_DRNG_SWITCH
+                      scripts/config --disable CONFIG_LRNG_DRBG
+                      scripts/config --disable CONFIG_LRNG_TESTING_MENU
+                      scripts/config --disable CONFIG_LRNG_SELFTEST
+                  fi
+
+                      ### Enable SECURITY_FORK_BRUTE
+                  if [ -n "$_fork_brute" ]; then
+                      echo "Enabling SECURITY_FORK_BRUTE..."
+                      scripts/config --enable CONFIG_SECURITY_FORK_BRUTE
+                      scripts/config --set-str CONFIG_LSM lockdown,yama,brute
+                  fi
 
     ### Enabling ZSTD COMPRESSION ##
           echo "Set module compression to ZSTD"
@@ -496,7 +540,7 @@ for _p in "${pkgname[@]}"; do
 done
 
 md5sums=('76c60fb304510a7bbd9c838790bc5fe4'
-         'e1d6115db8aa6afc106494e940c5cdc0'
+         '4f36a8f2c69b725c74f137d3f183e358'
          '9fc6628d79cc6441934f49da93ccb37c'
          '9bb46b8ce45259c238c5233b8394d70b'
          '26e9b72135ebafdf269c8b90014d87e1'
@@ -505,17 +549,18 @@ md5sums=('76c60fb304510a7bbd9c838790bc5fe4'
          '9573b92353399343db8a691c9b208300'
          '1217799f33d6ba822152a0e2fb6f2e34'
          '09a9e83b7b828fae46fd1a4f4cc23c28'
-         'e16eb528e701193bc8cb1facc6b27231'
-         '396c84c4a6557db27f9c3bbfa656ac3e'
+         'daeacee8fcde31908f90b89dc4b54126'
+         '4f9e72e7edb909da5cd650afe13aadb6'
          '9bbbd88f0303ccd59064648eaaf80edd'
          '1bd37d8e71b2a7aae8ebd2853a08f445'
-         '63078800040b2a9a9f19c59c4ebf5b23'
-         '81b228546bcd56ff04e7f388a37e11a9'
-         '3f302dbaceea020abd40f6e9f23b75df'
-         '7aeb2c86091b9432d1fc9172d418d486'
+         '65a4399a10b2abd0f327145d479db12d'
+         '81f27f12e20971c7d7fc3a53ffb6842c'
+         '5de99ca45528a4a7869249e54eb35b6b'
+         '9c0260e17db69e024a4838c4617c9f10'
          '86825a0c5716a1d9c6a39f9d3886b1bf'
          'c68e4fd9b4a55ee730a34bb39ae325ad'
          '0632f49f076c90b6d6098cad7b5a88ac'
+         '8fb9f2b248004031700a17faf1e20f10'
          'eff4bb43a8defb7ed08b9c1e403291ea'
          '9e5114dba6da65e8d444aa225b109a21'
          'c360b8c17d778f98a54fa7cddf348566'