Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-07-03 | bump 3.19 | yar | |
2015-07-03 | bump 3.18.5 | yar | |
2015-07-03 | bump 3.18.4 | yar | |
2015-07-03 | bump 3.18.3 | yar | |
2015-07-03 | bump 3.18.2 | yar | |
2015-07-03 | gpg | yar | |
2015-07-03 | bump 3.18.1 | yar | |
2015-07-03 | config 3.18 | yar | |
2015-07-03 | bump 3.18 | yar | |
2015-07-03 | bump 3.17.6 | yar | |
2015-07-03 | bump 3.17.4 | yar | |
2015-07-03 | bump 3.17.3 | yar | |
2015-07-03 | bump 3.17.2 | yar | |
2015-07-03 | aslr | yar | |
enable kernel address space layout randomization but only in the primary boot option - not in the rescue or backup boot options | |||
2015-07-03 | bump 3.17.1 | yar | |
2015-07-03 | remove obsolete loglevel patch | yar | |
2015-07-03 | config 3.17 | yar | |
2015-07-03 | bump 3.17 | yar | |
2015-07-03 | bump 3.16.4 | yar | |
2015-07-03 | bump 3.16.3 | yar | |
2015-07-03 | bump 3.16.2 | yar | |
2015-07-03 | protect module memory | yar | |
CONFIG_DEBUG_SET_MODULE_RONX RO/NX protection for kernel modules https://bugs.archlinux.org/task/41347 | |||
2015-07-03 | bump 3.16.1 | yar | |
2015-07-03 | updated loglevel patch | yar | |
2015-07-03 | relocatable and randomizable | yar | |
it seems that RELOCATABLE has been off since the very beginning, not sure why to randomize, it would still need kaslr passed on the kernel line (will test) randomize also needs dmesg_restrict & kptr_restrict, and even with that won't be safe for a long time... https://bugs.archlinux.org/task/41463 | |||
2015-07-03 | config 3.16 | yar | |
2015-07-03 | remove bitrotten loglevel patch | yar | |
2015-07-03 | bump 3.16 | yar | |
2015-07-03 | bump 3.15.8 | yar | |
2015-07-03 | fix config hashes | yar | |
2015-07-03 | bump 3.15.7 | yar | |
2015-07-03 | prevent mmap below 64K | yar | |
https://bugs.archlinux.org/task/41260 http://cateee.net/lkddb/web-lkddb/DEFAULT_MMAP_MIN_ADDR.html | |||
2015-07-03 | bump 3.15.6 | yar | |
2015-07-03 | re-enable IA32 emulation | yar | |
this lets me cross-compile with makechrootpkg - i need this! there was no good reason to disable this. the arch bug was about the X32 ABI, not 32-bit emulation in general. | |||
2015-07-03 | bump 3.15.5 | yar | |
2015-07-03 | bump 3.15.4 | yar | |
2015-07-03 | fix CVE-2014-4699 (ptrace vulnerability) | yar | |
https://bugs.archlinux.org/task/41115 http://www.openwall.com/lists/oss-security/2014/07/04/4 https://github.com/torvalds/linux/commit/b9cd18de4db3c9ffa7e17b0dc0ca99ed5aa4d43a | |||
2015-07-03 | bump 3.15.3 | yar | |
2015-07-03 | bump 3.15.2 | yar | |
2015-07-03 | enable DM_THIN_PROVISIONING | yar | |
'needed for docker devicemapper graphdriver', says m0ikz | |||
2015-07-03 | disable MEMCG_KMEM | yar | |
'strongly discouraged by upstream' https://bugs.archlinux.org/task/40818 | |||
2015-07-03 | bump 3.15.1 | yar | |
2015-07-03 | config 3.15 | yar | |
2015-07-03 | bump 3.15 | yar | |
2015-07-03 | bump 3.14.6 | yar | |
2015-07-03 | FSID=0 bug fixed upstream | yar | |
2015-07-03 | bump 3.14.5 | yar | |
2015-07-03 | bump 3.14.4 | yar | |
2015-07-03 | -fstack-protector-strong (really this time) | yar | |
2015-07-03 | bump 3.14.3 | yar | |