Commit b49410ac authored by Natanael Copa's avatar Natanael Copa
Browse files

main/linux-lts: enable landlock on all architectures

Fixes alpine/aports#13572
Fixes alpine/aports!31556
parent f2d70890
......@@ -7,7 +7,7 @@ case $pkgver in
*.*.*) _kernver=${pkgver%.*};;
*.*) _kernver=$pkgver;;
esac
pkgrel=0
pkgrel=1
pkgdesc="Linux lts kernel"
url="https://www.kernel.org"
depends="mkinitfs"
......@@ -295,16 +295,16 @@ d25ad40b5bcd6a4c6042fd0fd84e196e7a58024734c3e9a484fd0d5d54a0c1d87db8a3c784eff55e
214c54a839ae37849715520f4b1049f0df5366ca32522701b43afecfad116794c4542940ba32d389f28f2549d08c03d148f884cb8e565b75aa3c0cad6a4887b7 0001-powerpc-config-defang-gcc-check-for-stack-protector-.patch
d26d3f99fdcbd0f56e9af32a281870bbfd9fe6a12d17921ef3876e72bd1e92a3c131e06567078a45c11a41826b39d3068cc6f0e89f67d9e16a14825984869268 vmlinux-zstd.patch
ecd4eed25126e238adaaafdb736599a6f963ba122f0b11eb014d04c3227fe59de4ab215a43aafc93a4890d29b09b99c5a46e4b1697c80768721f7d162299b366 0001-fs-exec-require-argv-0-presence-in-do_execveat_commo.patch
d66001492b06496e18ff145b422c9f6574cbfbc474cca8997e3d2307392690d6be8ef1f488626746b748a3997b5359ed73b642d54c6322a61c608e109f57eb7c lts.aarch64.config
cbbd4d34812f4c26da2501807b38c9d05a704f2a0ceda86387559fcaf2af26b6af3f799277519df24f1f51fcabe9f108e5729144a779073772c22c08c446820d lts.armv7.config
e9193f5822a3ee3b492113f65ba8b8878be4931f145de6227875c3644930c8e5d2b1ddfa271cc19d6277490f31f7b064e8014acffd5b81a3e1ac95cc4937043a lts.x86.config
4912c5f23a441e49695015955ad01eda28ae5d1522625b72af8f53d35cb4b4a27978445f7f6fb32d8ec2841b885e2e4fa1cd163cced0d147ce3c87e78e1bd90e lts.x86_64.config
a0c464c81f19c000034d0101029605a1658e0ce2595826d33b4bcd95a2f72d36053fe6d22bbcb46e18aac32bc2324de1b070a973fbdb3c923673f58691bafcd2 lts.ppc64le.config
4b90d2698fa75d9ed753dc0ac2118fa22db39e0dc81b55e63dc8b8d7da25709688f5f596cb234e19f8a8e40caf24eddfc25fb464a32efde30ce295a3f01d8f10 lts.s390x.config
779eaaf856bb4c9436b05e5a79525ca772aa77cbd713fbc42d145c0d5e14a21b4f4f3da17ec66fdbd9ca58d71aacdbd6c79954ae011163ca904edff497ff93f1 virt.aarch64.config
a8fc7d5fcbc4705c122b9f596db1ffc98dab3a00e7eb042d661bb93187ab2cdf72d889fefbb0299634b9d77ecf95e9c096ea5acbaa60cc996a51b3b51f04f515 virt.armv7.config
b9f554e22fd771ec83f34a4adf33c19ab1a9ebe27f42bd632b651b103b77fbcd6e6fa11d465fa64044e44992d472162108429cfa5c21bbbb264e82d0f4fc41b6 virt.ppc64le.config
8f4a7fadeaef6bec91f7eeaa854351528138e707d53e40085c9d6de3e932fe46e37ca8b4b7c06cc6e4528fe86670d3966dae0eccd4528e9944f412affa381eb1 virt.x86.config
d7d4028b5f1f6278cb7ec717271f687cf5a207f41d2269ca3e7c3060f0f2a0f93be7080c3c8da74f7845b35e43c0f9334dd316bde4da788c9fd6723ce1f61137 virt.x86_64.config
e638ee38dbae9a27ff55e52719db57015c60bb2067daa05901b58ad10ed7a626aa014fa48e8ffd4892e4691fe15ce86f707cf6322b5a89bd460c33ff1433af39 lts.aarch64.config
9ade0ba7ef38803a61ce31c6cd5915bf3e9b8efbe2e2d04c065f901bdffe55ed1aac15438779d944bdd958a1a34cbd4ee0d57a55e1cb9f773ed03f5b5dba13a8 lts.armv7.config
a64c1cdcc66da963a58ff154817bbf1eda7d7ef9e452f89abafa92831abb9517f03b356c42ca0dc02b55b31212907f51fc09327f5fc8f7bc0b640ee581cf315a lts.x86.config
b31d698fb39271a6723cc4f1e9dffabb9d38c75a762eb5a7fa07df3aae0198179590079b072403e8785d6055b9925692113eeb610d31d112fb0bd7a94281259b lts.x86_64.config
157d74fc2b65dc90241c0d0a10f330cbe9793420e43d6fa421711fa208690e69937d81d10affd38b7e515eab6250265135f003d3bd6bcfc2707036a3300aad18 lts.ppc64le.config
a24fc6e9b89b4a031da3d2d240677026da4214ec31c44838348aee802f63d4230773b53b5ab4174a801b42e66fa49dae4718211113872f2f5145036a30fee93e lts.s390x.config
5f99e398332984c880b2d55aaeed0cb7b07d6f0774de443b92f815efe0fb4de8a26e4b6039ff8e8e077e15e6e622acfb61c12dfee29017861fcc1ffb542326f1 virt.aarch64.config
63c5c1365d50a58dc552727a29200f24249f454e94873e23372232228e027ba1cfcb4c76ef44a8dcc026d38cf91f660e9d33c8abfb68dd137822b8e2cfaf1d20 virt.armv7.config
7bd87338419a481a4f0e219239646892e937e689e292f67bf0b980d368327a77513f840afe4add83953264b335664914c202ebf850cd22103965e5f239eafe42 virt.ppc64le.config
9e74ef5d46cf38bbc00ebafb5c391fa9fc77388882e592d08e69b22aef578f248159d903e6311d7f7af750a4d4d4a060d6fbcbdf8b0c6e7edc9b4e53a2b8beed virt.x86.config
6634520e2d0aecbb11670b0447b5964874e4b63b43b74e92e826d035932b294ae6f62143e337aacbeb9a154e3b1df0842d05f5b35bd52a5bf9c35f87a4b338b9 virt.x86_64.config
2bb475910c8197877bf147a3531f821e3ee2f408350c6415e09ef07731877161079545540851fef736a57d77f5aae10c46064b06053f9f8e734b4b527622fef6 patch-5.15.26.xz
"
......@@ -2863,9 +2863,10 @@ CONFIG_HARDENED_USERCOPY=y
CONFIG_FORTIFY_SOURCE=y
CONFIG_SECURITY_APPARMOR=y
CONFIG_SECURITY_YAMA=y
CONFIG_SECURITY_LANDLOCK=y
# CONFIG_INTEGRITY is not set
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity"
CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity"
CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF=y
CONFIG_GCC_PLUGIN_STACKLEAK=y
CONFIG_STACKLEAK_RUNTIME_DISABLE=y
......
......@@ -2178,9 +2178,10 @@ CONFIG_HARDENED_USERCOPY=y
CONFIG_FORTIFY_SOURCE=y
CONFIG_SECURITY_APPARMOR=y
CONFIG_SECURITY_YAMA=y
CONFIG_SECURITY_LANDLOCK=y
# CONFIG_INTEGRITY is not set
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity"
CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity"
CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF=y
CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y
CONFIG_ZERO_CALL_USED_REGS=y
......
......@@ -808,9 +808,10 @@ CONFIG_SECURITY=y
CONFIG_HARDENED_USERCOPY=y
CONFIG_SECURITY_APPARMOR=y
CONFIG_SECURITY_YAMA=y
CONFIG_SECURITY_LANDLOCK=y
# CONFIG_INTEGRITY is not set
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity"
CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity"
CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF=y
CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y
CONFIG_ZERO_CALL_USED_REGS=y
......
......@@ -946,11 +946,11 @@ CONFIG_SECURITY_DMESG_RESTRICT=y
CONFIG_SECURITY=y
CONFIG_SECURITY_NETWORK=y
CONFIG_SECURITY_NETWORK_XFRM=y
CONFIG_SECURITY_PATH=y
CONFIG_HARDENED_USERCOPY=y
CONFIG_FORTIFY_SOURCE=y
CONFIG_SECURITY_YAMA=y
CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity"
CONFIG_SECURITY_LANDLOCK=y
CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity"
CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF=y
CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y
CONFIG_ZERO_CALL_USED_REGS=y
......
......@@ -2871,9 +2871,10 @@ CONFIG_HARDENED_USERCOPY=y
CONFIG_FORTIFY_SOURCE=y
CONFIG_SECURITY_APPARMOR=y
CONFIG_SECURITY_YAMA=y
CONFIG_SECURITY_LANDLOCK=y
# CONFIG_INTEGRITY is not set
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity"
CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity"
CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF=y
CONFIG_GCC_PLUGIN_STACKLEAK=y
CONFIG_STACKLEAK_RUNTIME_DISABLE=y
......
......@@ -2969,9 +2969,10 @@ CONFIG_HARDENED_USERCOPY=y
CONFIG_FORTIFY_SOURCE=y
CONFIG_SECURITY_APPARMOR=y
CONFIG_SECURITY_YAMA=y
CONFIG_SECURITY_LANDLOCK=y
# CONFIG_INTEGRITY is not set
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity"
CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity"
CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF=y
CONFIG_GCC_PLUGIN_STACKLEAK=y
CONFIG_STACKLEAK_RUNTIME_DISABLE=y
......
......@@ -996,9 +996,11 @@ CONFIG_DLM=m
CONFIG_ENCRYPTED_KEYS=m
CONFIG_KEY_DH_OPERATIONS=y
CONFIG_SECURITY_DMESG_RESTRICT=y
CONFIG_SECURITY=y
CONFIG_SECURITYFS=y
CONFIG_HARDENED_USERCOPY=y
CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity"
CONFIG_SECURITY_LANDLOCK=y
CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity"
CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF=y
CONFIG_GCC_PLUGIN_STACKLEAK=y
CONFIG_STACKLEAK_RUNTIME_DISABLE=y
......
......@@ -945,9 +945,11 @@ CONFIG_DLM=m
CONFIG_ENCRYPTED_KEYS=m
CONFIG_KEY_DH_OPERATIONS=y
CONFIG_SECURITY_DMESG_RESTRICT=y
CONFIG_SECURITY=y
CONFIG_SECURITYFS=y
CONFIG_HARDENED_USERCOPY=y
CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity"
CONFIG_SECURITY_LANDLOCK=y
CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity"
CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF=y
CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y
CONFIG_ZERO_CALL_USED_REGS=y
......
......@@ -942,9 +942,11 @@ CONFIG_DLM=m
CONFIG_ENCRYPTED_KEYS=m
CONFIG_KEY_DH_OPERATIONS=y
CONFIG_SECURITY_DMESG_RESTRICT=y
CONFIG_SECURITY=y
CONFIG_SECURITYFS=y
CONFIG_HARDENED_USERCOPY=y
CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity"
CONFIG_SECURITY_LANDLOCK=y
CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity"
CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF=y
CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y
CONFIG_ZERO_CALL_USED_REGS=y
......
......@@ -956,9 +956,11 @@ CONFIG_DLM=m
CONFIG_ENCRYPTED_KEYS=m
CONFIG_KEY_DH_OPERATIONS=y
CONFIG_SECURITY_DMESG_RESTRICT=y
CONFIG_SECURITY=y
CONFIG_SECURITYFS=y
CONFIG_HARDENED_USERCOPY=y
CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity"
CONFIG_SECURITY_LANDLOCK=y
CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity"
CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF=y
CONFIG_GCC_PLUGIN_STACKLEAK=y
CONFIG_STACKLEAK_RUNTIME_DISABLE=y
......
......@@ -989,8 +989,9 @@ CONFIG_HARDENED_USERCOPY=y
CONFIG_FORTIFY_SOURCE=y
CONFIG_SECURITY_APPARMOR=y
CONFIG_SECURITY_LOCKDOWN_LSM=y
CONFIG_SECURITY_LANDLOCK=y
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity"
CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity"
CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF=y
CONFIG_GCC_PLUGIN_STACKLEAK=y
CONFIG_STACKLEAK_RUNTIME_DISABLE=y
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment