diff options
| -rw-r--r-- | 0001-ZEN-Add-sysctl-and-CONFIG-to-disallow-unprivileged-C.patch | 10 | ||||
| -rw-r--r-- | PKGBUILD | 6 |
2 files changed, 7 insertions, 9 deletions
diff --git a/0001-ZEN-Add-sysctl-and-CONFIG-to-disallow-unprivileged-C.patch b/0001-ZEN-Add-sysctl-and-CONFIG-to-disallow-unprivileged-C.patch index 5ff280f96539..d9744c11f438 100644 --- a/0001-ZEN-Add-sysctl-and-CONFIG-to-disallow-unprivileged-C.patch +++ b/0001-ZEN-Add-sysctl-and-CONFIG-to-disallow-unprivileged-C.patch @@ -1,7 +1,8 @@ -From 024a28765039cafbd4b4056d3f213be989e39dc2 Mon Sep 17 00:00:00 2001 +From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001 From: "Jan Alexander Steffens (heftig)" <jan.steffens@gmail.com> Date: Mon, 16 Sep 2019 04:53:20 +0200 -Subject: ZEN: Add sysctl and CONFIG to disallow unprivileged CLONE_NEWUSER +Subject: [PATCH] ZEN: Add sysctl and CONFIG to disallow unprivileged + CLONE_NEWUSER Our default behavior continues to match the vanilla kernel. --- @@ -35,7 +36,7 @@ index 6ef1c7109fc4..2140091b0b8d 100644 { return &init_user_ns; diff --git a/init/Kconfig b/init/Kconfig -index 0872a5a2e759..a40d8afeb1bb 100644 +index d559abf38c90..f7558fa7a155 100644 --- a/init/Kconfig +++ b/init/Kconfig @@ -1173,6 +1173,22 @@ config USER_NS @@ -148,6 +149,3 @@ index e703d5d9cbe8..5758274feaee 100644 static struct kmem_cache *user_ns_cachep __read_mostly; static DEFINE_MUTEX(userns_state_mutex); --- -cgit v1.2.3-1-gf6bb5 - @@ -1,7 +1,7 @@ # Maintainer: Andreas Radke <andyrtr@archlinux.org> pkgbase=linux-vfio-lts -pkgver=5.10.20 +pkgver=5.10.21 pkgrel=1 pkgdesc='LTS Linux VFIO' url="https://www.kernel.org/" @@ -25,10 +25,10 @@ validpgpkeys=( '647F28654894E3BD457199BE38DBBDC86092693E' # Greg Kroah-Hartman ) # https://www.kernel.org/pub/linux/kernel/v5.x/sha256sums.asc -sha256sums=('9be37146feba42be05137cf900a7d9012990b5a1d5e59bc0c8da1f86952930a3' +sha256sums=('9e7fe6ff1665bb578e8a88e761f6727b7f170a81563b93c1d49bd0bb7d7de2af' 'SKIP' '7195cd958f8ab5b097ec0bae05b026022fab17e4ffd4e8bd8ace974e94369359' - '757e6de2a76284cd86f443d8a9830e775291ba01d9d339cff9b9b3e4b205b7b3' + '6992aed5d5398f9442f0ce94d5d5b6503bf492df0ebe719ed6e0fc1dc2ee1929' 'b90be7b79652be61f7d50691000f6a8c75a240dc2eee2667b68d984f67583f77' '1c621f67bbf9efef610d1b2d1afd727fca9ceaa298f807bd0348b59ec6ce9562') |