Henrik Riomar authored 7 years ago and Timo Teräs committed 7 years ago

Skip pre/post apk hooks on diskless initramfs installation.

Commit 63f5e7d2 assigned the SPDX 3 license.
This commit refines the license to show the exact variant.

What's different about the source at the URLs?

* New URL: Github is the raw, authoritative source URL.
* Old URL: The vendor takes the Github source,
  runs './bootstrap', and posts it to their download site.

This commit makes the build process more transparent.

Why change the URL now?

The vendor has tagged a new version of duo_unix on github but
has not yet made the new version available at their official
download site.

Oliver Smith authored 7 years ago and Ariadne Conill committed 7 years ago

As discussed in <https://lists.alpinelinux.org/alpine-devel/6005.html>

(CVE-2018-5205, CVE-2018-5206, CVE-2018-5207, CVE-2018-5208)

Add check

This reverts commit f6759c96.

Rust was upgraded to 1.23 which no longer needs to import the trait AsciiExt:
https://blog.rust-lang.org/2018/01/04/Rust-1.23.html

Reverting for now until a patch is ready

https://embed.cs.utah.edu/csmith/
Tool for generating random C programs

Marian Buschsieweke authored 7 years ago and Timo Teräs committed 7 years ago

This commit updates to kernel version 4.9.75 and enables
CONFIG_PAGE_TABLE_ISOLATION for x86, x86_64 and aarch64. For all
other architectures, CONFIG_PAGE_TABLE_ISOLATION is disabled.

CONFIG_PAGE_TABLE_ISOLATION mitigates the Meltdown security flaw
almost all Intel CPUs and some ARM CPUs are suspect to [1,2].
(This patch does not solve the Spectre security threat [2], which
affects also non-Intel CPUs [3].)

I believe this commit will cause some discussion, especially the
following points seem worth discussing:

 a) CONFIG_PAGE_TABLE_ISOLATION has a performance impact on
    syscalls, which can slow down specific applications
    significantly. AMD users might benefit from a kernel without
    KPTI (unless Meltdown turns out to affect them as well)
 b) Is disabling this feature a reasonable choice for CPU
    architectures different from x86, x86_64 and aarch64?

[1]: https://meltdownattack.com/#faq-systems-meltdown
[2]: http://kroah.com/log/blog/2018/01/06/meltdown-status/
[3]: https://meltdownattack.com/#faq-systems-spectre

Enable build on both arches as syncthinis is building fine on them.

Add a simple test as upstream doesn't provide a test suite.