From 7ba49aae81237fa18ebfa3acdf0da5602fa55669 Mon Sep 17 00:00:00 2001 From: Alexandre Oliva Date: Tue, 28 Mar 2017 17:00:01 +0000 Subject: tag 4.9.17-100.fc24.gnu --- freed-ora/tags/f24/4.9.17-100.fc24.gnu/.gitignore | 8 + ...001-iio-Use-event-header-from-kernel-tree.patch | 64 + ...Use-a-dma-capable-buffer-also-for-reading.patch | 63 + ...ia-dvb-usb-firmware-don-t-do-DMA-on-stack.patch | 86 + .../ACPI-Limit-access-to-custom_method.patch | 31 + ...-timer-requirement-from-Samsung-platforms.patch | 88 + .../ARM-tegra-usb-no-reset.patch | 28 + .../Add-EFI-signature-data-types.patch | 54 + ...-EFI-signature-blob-parser-and-key-loader.patch | 179 + ...to-automatically-enforce-module-signature.patch | 217 + .../Add-secure_modules-call.patch | 63 + ...-sysrq-option-to-disable-secure-boot-mode.patch | 246 + .../4.9.17-100.fc24.gnu/AllWinner-net-emac.patch | 2669 ++++ ...crosoft-Add-Surface-4-type-cover-pro-4-JP.patch | 76 + ...tics-pin-3-touches-when-the-firmware-repo.patch | 47 + .../KEYS-Add-a-system-blacklist-keyring.patch | 102 + .../Kbuild-Add-an-option-to-enable-GCC-VTA.patch | 89 + ...-t-try-secure-boot-if-EFI-runtime-is-disa.patch | 32 + ...Import-certificates-from-UEFI-Secure-Boot.patch | 213 + ...DSIGN-Support-not-importing-certs-from-db.patch | 86 + freed-ora/tags/f24/4.9.17-100.fc24.gnu/Makefile | 125 + .../tags/f24/4.9.17-100.fc24.gnu/Makefile.config | 129 + .../tags/f24/4.9.17-100.fc24.gnu/Makefile.release | 85 + ...wn-BAR-access-when-module-security-is-ena.patch | 117 + .../tags/f24/4.9.17-100.fc24.gnu/PatchList.txt | 52 + freed-ora/tags/f24/4.9.17-100.fc24.gnu/README.txt | 82 + ...v-mem-and-dev-kmem-when-module-loading-is.patch | 43 + freed-ora/tags/f24/4.9.17-100.fc24.gnu/TODO | 10 + ...-acpi_rsdp-kernel-parameter-when-module-l.patch | 39 + ...omap_hsmmc-Use-dma_request_chan-for-reque.patch | 100 + .../arm64-ACPI-parse-SPCR-table.patch | 596 + ...-to-be-initialized-for-the-entire-section.patch | 93 + .../4.9.17-100.fc24.gnu/arm64-pcie-quirks.patch | 977 ++ ...strict-debugfs-interface-when-module-load.patch | 54 + .../ath9k-rx-dma-stop-check.patch | 38 + .../bcm2837-initial-support.patch | 207 + .../bcm283x-mmc-imp-speed.patch | 176 + .../f24/4.9.17-100.fc24.gnu/config-arm-generic | 697 + .../tags/f24/4.9.17-100.fc24.gnu/config-arm64 | 349 + .../tags/f24/4.9.17-100.fc24.gnu/config-armv7 | 627 + .../f24/4.9.17-100.fc24.gnu/config-armv7-generic | 782 + .../tags/f24/4.9.17-100.fc24.gnu/config-armv7-lpae | 77 + .../tags/f24/4.9.17-100.fc24.gnu/config-debug | 132 + .../tags/f24/4.9.17-100.fc24.gnu/config-generic | 6070 ++++++++ .../tags/f24/4.9.17-100.fc24.gnu/config-i686-PAE | 8 + .../tags/f24/4.9.17-100.fc24.gnu/config-local | 2 + .../tags/f24/4.9.17-100.fc24.gnu/config-no-extra | 27 + .../tags/f24/4.9.17-100.fc24.gnu/config-nodebug | 132 + .../tags/f24/4.9.17-100.fc24.gnu/config-powerpc64 | 109 + .../4.9.17-100.fc24.gnu/config-powerpc64-generic | 377 + .../f24/4.9.17-100.fc24.gnu/config-powerpc64le | 8 + .../f24/4.9.17-100.fc24.gnu/config-powerpc64p7 | 3 + .../tags/f24/4.9.17-100.fc24.gnu/config-s390x | 298 + .../f24/4.9.17-100.fc24.gnu/config-x86-32-generic | 204 + .../f24/4.9.17-100.fc24.gnu/config-x86-generic | 626 + .../f24/4.9.17-100.fc24.gnu/config-x86_64-generic | 247 + .../tags/f24/4.9.17-100.fc24.gnu/cpupower.config | 3 + .../tags/f24/4.9.17-100.fc24.gnu/cpupower.service | 13 + .../f24/4.9.17-100.fc24.gnu/crash-driver.patch | 722 + .../f24/4.9.17-100.fc24.gnu/criu-no-expert.patch | 32 + freed-ora/tags/f24/4.9.17-100.fc24.gnu/deblob-4.9 | 3338 +++++ .../tags/f24/4.9.17-100.fc24.gnu/deblob-check | 8812 +++++++++++ freed-ora/tags/f24/4.9.17-100.fc24.gnu/deblob-main | 311 + .../f24/4.9.17-100.fc24.gnu/die-floppy-die.patch | 29 + .../disable-i8042-check-on-apple-mac.patch | 62 + .../drm-i915-hush-check-crtc-state.patch | 32 + .../drm-i915-turn-off-wc-mmaps.patch | 21 + ...ying-to-cache-a-partially-constructed-BO..patch | 42 + ...15_skl_Backport_watermark_fixes_for_4.8.y.patch | 1247 ++ .../efi-Add-EFI_SECURE_BOOT-bit.patch | 43 + ...M-and-image-security-database-GUID-defini.patch | 31 + ...e-secure-boot-if-shim-is-in-insecure-mode.patch | 58 + .../tags/f24/4.9.17-100.fc24.gnu/filter-aarch64.sh | 16 + .../tags/f24/4.9.17-100.fc24.gnu/filter-armv7hl.sh | 18 + .../tags/f24/4.9.17-100.fc24.gnu/filter-i686.sh | 14 + .../tags/f24/4.9.17-100.fc24.gnu/filter-modules.sh | 151 + .../tags/f24/4.9.17-100.fc24.gnu/filter-ppc64.sh | 14 + .../tags/f24/4.9.17-100.fc24.gnu/filter-ppc64le.sh | 14 + .../tags/f24/4.9.17-100.fc24.gnu/filter-ppc64p7.sh | 14 + .../tags/f24/4.9.17-100.fc24.gnu/filter-s390x.sh | 12 + .../tags/f24/4.9.17-100.fc24.gnu/filter-x86_64.sh | 12 + ...op-WARN-from-usermodehelper_read_trylock-.patch | 89 + .../tags/f24/4.9.17-100.fc24.gnu/freedo.patch | 14677 +++++++++++++++++++ .../geekbox-v4-device-tree-support.patch | 138 + freed-ora/tags/f24/4.9.17-100.fc24.gnu/gitrev | 1 + ...e-Disable-in-a-signed-modules-environment.patch | 39 + .../imx6sx-Add-UDOO-Neo-support.patch | 619 + .../input-kill-stupid-messages.patch | 30 + .../4.9.17-100.fc24.gnu/kbuild-AFTER_LINK.patch | 126 + freed-ora/tags/f24/4.9.17-100.fc24.gnu/kernel.spec | 4790 ++++++ ...le-at-runtime-if-the-kernel-enforces-modu.patch | 44 + ...uefi-copy-secure_boot-flag-in-boot-params.patch | 30 + .../kvm-fix-page-struct-leak-in-handle_vmon.patch | 48 + ...-Make-CPUMASK_OFFSTACK-usable-without-deb.patch | 34 + .../linux-libre-4.9-gnu.tar.xz.sign | 7 + .../linux-libre-4.9-gnu.xdelta.xz | Bin 0 -> 127568 bytes .../linux-libre-4.9-gnu.xdelta.xz.sign | 7 + .../lis3-improve-handling-of-null-rate.patch | 75 + freed-ora/tags/f24/4.9.17-100.fc24.gnu/merge.pl | 66 + ...c_contig-re-allow-CMA-to-compact-FS-pages.patch | 42 + .../tags/f24/4.9.17-100.fc24.gnu/mod-extra.list | 193 + .../tags/f24/4.9.17-100.fc24.gnu/mod-extra.sh | 80 + freed-ora/tags/f24/4.9.17-100.fc24.gnu/mod-sign.sh | 36 + ..._tables-deal-with-bogus-nextoffset-values.patch | 109 + .../4.9.17-100.fc24.gnu/no-pcspkr-modalias.patch | 22 + .../nouveau-add-maxwell-to-backlight-init.patch | 24 + .../patch-4.9-gnu-4.9.17-gnu.xz.sign | 7 + .../qcom-QDF2432-tmp-errata.patch | 59 + .../qxl-reapply-cursor-after-SetCrtc-calls.patch | 439 + .../rc-core-fix-repeat-events.patch | 46 + .../rds-fix-an-infoleak-in-rds_inc_info_copy.txt | 31 + .../tags/f24/4.9.17-100.fc24.gnu/rebase-notes.txt | 9 + .../f24/4.9.17-100.fc24.gnu/remove-binary-diff.pl | 35 + .../f24/4.9.17-100.fc24.gnu/rt2800-warning.patch | 34 + .../4.9.17-100.fc24.gnu/scripts/add-changelog.sh | 12 + .../4.9.17-100.fc24.gnu/scripts/allarchconfig.sh | 16 + .../4.9.17-100.fc24.gnu/scripts/bumpspecfile.py | 76 + .../f24/4.9.17-100.fc24.gnu/scripts/check-TODO.sh | 27 + .../4.9.17-100.fc24.gnu/scripts/check-configs.pl | 83 + .../4.9.17-100.fc24.gnu/scripts/check-patchlist.sh | 113 + .../f24/4.9.17-100.fc24.gnu/scripts/combine.sh | 34 + .../4.9.17-100.fc24.gnu/scripts/configcommon.pl | 82 + .../f24/4.9.17-100.fc24.gnu/scripts/configdiff.pl | 76 + .../f24/4.9.17-100.fc24.gnu/scripts/cross-aarch64 | 3 + .../tags/f24/4.9.17-100.fc24.gnu/scripts/cross-arm | 3 + .../f24/4.9.17-100.fc24.gnu/scripts/fast-build.sh | 13 + .../f24/4.9.17-100.fc24.gnu/scripts/fast-x86_64 | 3 + .../4.9.17-100.fc24.gnu/scripts/fixup-bumpspec.sh | 10 + .../scripts/generate-git-snapshot.sh | 44 + .../scripts/generate-perf-man.sh | 54 + .../f24/4.9.17-100.fc24.gnu/scripts/grab-logs.sh | 35 + .../4.9.17-100.fc24.gnu/scripts/kernel-version.sh | 8 + .../f24/4.9.17-100.fc24.gnu/scripts/newpatch.sh | 42 + .../f24/4.9.17-100.fc24.gnu/scripts/rawhide-rc.sh | 36 + .../scripts/rawhide-snapshot.sh | 59 + .../f24/4.9.17-100.fc24.gnu/scripts/rediffall.pl | 64 + .../f24/4.9.17-100.fc24.gnu/scripts/sort-config | 226 + .../4.9.17-100.fc24.gnu/scripts/stable-update.sh | 67 + ...sd_revalidate_disk-prevent-NULL-ptr-deref.patch | 39 + ...eeloff-operation-on-asocs-with-threads-sl.patch | 66 + .../security-selinux-overlayfs-support.patch | 931 ++ .../selinux-namespace-fix.patch | 57 + .../4.9.17-100.fc24.gnu/silence-fbcon-logo.patch | 52 + freed-ora/tags/f24/4.9.17-100.fc24.gnu/sources | 3 + ...b-phy-tegra-Add-38.4MHz-clock-table-entry.patch | 53 + .../vc4-fix-vblank-cursor-update-issue.patch | 59 + freed-ora/tags/f24/4.9.17-100.fc24.gnu/x509.genkey | 16 + ...wn-IO-port-access-when-module-security-is.patch | 72 + ...t-MSR-access-when-module-loading-is-restr.patch | 44 + ...-Don-t-disable-PCI_COMMAND-on-PCI-device-.patch | 48 + 150 files changed, 57812 insertions(+) create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/.gitignore create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/0001-iio-Use-event-header-from-kernel-tree.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/1-2-media-cxusb-Use-a-dma-capable-buffer-also-for-reading.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/2-2-media-dvb-usb-firmware-don-t-do-DMA-on-stack.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/ACPI-Limit-access-to-custom_method.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/ARM-Drop-fixed-200-Hz-timer-requirement-from-Samsung-platforms.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/ARM-tegra-usb-no-reset.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/Add-EFI-signature-data-types.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/Add-an-EFI-signature-blob-parser-and-key-loader.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/Add-option-to-automatically-enforce-module-signature.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/Add-secure_modules-call.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/Add-sysrq-option-to-disable-secure-boot-mode.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/AllWinner-net-emac.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/HID-microsoft-Add-Surface-4-type-cover-pro-4-JP.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/Input-synaptics-pin-3-touches-when-the-firmware-repo.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/KEYS-Add-a-system-blacklist-keyring.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/Kbuild-Add-an-option-to-enable-GCC-VTA.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/MODSIGN-Don-t-try-secure-boot-if-EFI-runtime-is-disa.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/MODSIGN-Import-certificates-from-UEFI-Secure-Boot.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/MODSIGN-Support-not-importing-certs-from-db.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/Makefile create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/Makefile.config create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/Makefile.release create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/PCI-Lock-down-BAR-access-when-module-security-is-ena.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/PatchList.txt create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/README.txt create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/Restrict-dev-mem-and-dev-kmem-when-module-loading-is.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/TODO create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/acpi-Ignore-acpi_rsdp-kernel-parameter-when-module-l.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/arm-revert-mmc-omap_hsmmc-Use-dma_request_chan-for-reque.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/arm64-ACPI-parse-SPCR-table.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/arm64-mm-Fix-memmap-to-be-initialized-for-the-entire-section.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/arm64-pcie-quirks.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/asus-wmi-Restrict-debugfs-interface-when-module-load.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/ath9k-rx-dma-stop-check.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/bcm2837-initial-support.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/bcm283x-mmc-imp-speed.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/config-arm-generic create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/config-arm64 create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/config-armv7 create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/config-armv7-generic create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/config-armv7-lpae create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/config-debug create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/config-generic create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/config-i686-PAE create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/config-local create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/config-no-extra create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/config-nodebug create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/config-powerpc64 create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/config-powerpc64-generic create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/config-powerpc64le create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/config-powerpc64p7 create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/config-s390x create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/config-x86-32-generic create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/config-x86-generic create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/config-x86_64-generic create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/cpupower.config create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/cpupower.service create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/crash-driver.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/criu-no-expert.patch create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/deblob-4.9 create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/deblob-check create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/deblob-main create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/die-floppy-die.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/disable-i8042-check-on-apple-mac.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/drm-i915-hush-check-crtc-state.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/drm-i915-turn-off-wc-mmaps.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/drm-vc4-Fix-OOPSes-from-trying-to-cache-a-partially-constructed-BO..patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/drm_i915_skl_Backport_watermark_fixes_for_4.8.y.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/efi-Add-EFI_SECURE_BOOT-bit.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/efi-Add-SHIM-and-image-security-database-GUID-defini.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/efi-Disable-secure-boot-if-shim-is-in-insecure-mode.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/filter-aarch64.sh create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/filter-armv7hl.sh create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/filter-i686.sh create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/filter-modules.sh create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/filter-ppc64.sh create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/filter-ppc64le.sh create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/filter-ppc64p7.sh create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/filter-s390x.sh create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/filter-x86_64.sh create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/firmware-Drop-WARN-from-usermodehelper_read_trylock-.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/freedo.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/geekbox-v4-device-tree-support.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/gitrev create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/hibernate-Disable-in-a-signed-modules-environment.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/imx6sx-Add-UDOO-Neo-support.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/input-kill-stupid-messages.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/kbuild-AFTER_LINK.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/kernel.spec create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/kexec-Disable-at-runtime-if-the-kernel-enforces-modu.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/kexec-uefi-copy-secure_boot-flag-in-boot-params.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/kvm-fix-page-struct-leak-in-handle_vmon.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/lib-cpumask-Make-CPUMASK_OFFSTACK-usable-without-deb.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/linux-libre-4.9-gnu.tar.xz.sign create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/linux-libre-4.9-gnu.xdelta.xz create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/linux-libre-4.9-gnu.xdelta.xz.sign create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/lis3-improve-handling-of-null-rate.patch create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/merge.pl create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/mm-alloc_contig-re-allow-CMA-to-compact-FS-pages.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/mod-extra.list create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/mod-extra.sh create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/mod-sign.sh create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/netfilter-x_tables-deal-with-bogus-nextoffset-values.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/no-pcspkr-modalias.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/nouveau-add-maxwell-to-backlight-init.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/patch-4.9-gnu-4.9.17-gnu.xz.sign create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/qcom-QDF2432-tmp-errata.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/qxl-reapply-cursor-after-SetCrtc-calls.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/rc-core-fix-repeat-events.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/rds-fix-an-infoleak-in-rds_inc_info_copy.txt create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/rebase-notes.txt create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/remove-binary-diff.pl create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/rt2800-warning.patch create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/add-changelog.sh create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/allarchconfig.sh create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/bumpspecfile.py create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/check-TODO.sh create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/check-configs.pl create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/check-patchlist.sh create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/combine.sh create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/configcommon.pl create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/configdiff.pl create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/cross-aarch64 create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/cross-arm create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/fast-build.sh create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/fast-x86_64 create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/fixup-bumpspec.sh create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/generate-git-snapshot.sh create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/generate-perf-man.sh create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/grab-logs.sh create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/kernel-version.sh create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/newpatch.sh create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/rawhide-rc.sh create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/rawhide-snapshot.sh create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/rediffall.pl create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/sort-config create mode 100755 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scripts/stable-update.sh create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/scsi-sd_revalidate_disk-prevent-NULL-ptr-deref.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/sctp-deny-peeloff-operation-on-asocs-with-threads-sl.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/security-selinux-overlayfs-support.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/selinux-namespace-fix.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/silence-fbcon-logo.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/sources create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/usb-phy-tegra-Add-38.4MHz-clock-table-entry.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/vc4-fix-vblank-cursor-update-issue.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/x509.genkey create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/x86-Lock-down-IO-port-access-when-module-security-is.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/x86-Restrict-MSR-access-when-module-loading-is-restr.patch create mode 100644 freed-ora/tags/f24/4.9.17-100.fc24.gnu/xen-pciback-Don-t-disable-PCI_COMMAND-on-PCI-device-.patch diff --git a/freed-ora/tags/f24/4.9.17-100.fc24.gnu/.gitignore b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/.gitignore new file mode 100644 index 000000000..d3ce51643 --- /dev/null +++ b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/.gitignore @@ -0,0 +1,8 @@ +.svn +clog +*.bz2 +*.xz +*.rpm +*.orig +kernel-[234].*/ +perf-man-*.tar.gz diff --git a/freed-ora/tags/f24/4.9.17-100.fc24.gnu/0001-iio-Use-event-header-from-kernel-tree.patch b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/0001-iio-Use-event-header-from-kernel-tree.patch new file mode 100644 index 000000000..1724db3fd --- /dev/null +++ b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/0001-iio-Use-event-header-from-kernel-tree.patch @@ -0,0 +1,64 @@ +From 0eadbb65c0026fb4eec89c54f6b48a0febd87f92 Mon Sep 17 00:00:00 2001 +From: Laura Abbott +Date: Fri, 9 Sep 2016 08:19:17 -0700 +Subject: [PATCH] iio: Use type header from kernel tree +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit +To: Jonathan Cameron +To: Hartmut Knaack +To: Lars-Peter Clausen +To: Peter Meerwald-Stadler +Cc: linux-iio@vger.kernel.org +Cc: linux-kernel@vger.kernel.org + + +The iio tools have been updated as new event types have been added to +the kernel. The tools currently use the standard system headers which +means that the system may not have the newest defintitions. This leads +to build failures when building newer tools on older hosts: + +gcc -Wall -g -D_GNU_SOURCE -c -o iio_event_monitor.o +iio_event_monitor.c +iio_event_monitor.c:59:3: error: ‘IIO_UVINDEX’ undeclared here (not in a +function) + [IIO_UVINDEX] = "uvindex", + ^~~~~~~~~~~ +iio_event_monitor.c:59:3: error: array index in initializer not of +integer type +iio_event_monitor.c:59:3: note: (near initialization for +‘iio_chan_type_name_spec’) +iio_event_monitor.c:97:3: error: ‘IIO_MOD_LIGHT_UV’ undeclared here (not +in a function) + [IIO_MOD_LIGHT_UV] = "uv", + ^~~~~~~~~~~~~~~~ +iio_event_monitor.c:97:3: error: array index in initializer not of +integer type +iio_event_monitor.c:97:3: note: (near initialization for +‘iio_modifier_names’) +: recipe for target 'iio_event_monitor.o' failed + +Switch to using the header from the kernel tree to ensure the newest +defintions are always picked up. + +Signed-off-by: Laura Abbott +--- + tools/iio/iio_event_monitor.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/tools/iio/iio_event_monitor.c b/tools/iio/iio_event_monitor.c +index d9b7e0f..f02523d 100644 +--- a/tools/iio/iio_event_monitor.c ++++ b/tools/iio/iio_event_monitor.c +@@ -26,7 +26,7 @@ + #include + #include "iio_utils.h" + #include +-#include ++#include "../../include/uapi/linux/iio/types.h" + + static const char * const iio_chan_type_name_spec[] = { + [IIO_VOLTAGE] = "voltage", +-- +2.7.4 + diff --git a/freed-ora/tags/f24/4.9.17-100.fc24.gnu/1-2-media-cxusb-Use-a-dma-capable-buffer-also-for-reading.patch b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/1-2-media-cxusb-Use-a-dma-capable-buffer-also-for-reading.patch new file mode 100644 index 000000000..a3dec80d2 --- /dev/null +++ b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/1-2-media-cxusb-Use-a-dma-capable-buffer-also-for-reading.patch @@ -0,0 +1,63 @@ +From patchwork Sun Feb 5 14:57:59 2017 +Content-Type: text/plain; charset="utf-8" +MIME-Version: 1.0 +Content-Transfer-Encoding: 8bit +Subject: [1/2,media] cxusb: Use a dma capable buffer also for reading +From: =?utf-8?q?Stefan_Br=C3=BCns?= +X-Patchwork-Id: 39207 +Message-Id: +To: +Cc: , Mauro Carvalho Chehab , + Michael Krufky , + =?UTF-8?q?Stefan=20Br=C3=BCns?= +Date: Sun, 5 Feb 2017 15:57:59 +0100 + +Commit 17ce039b4e54 ("[media] cxusb: don't do DMA on stack") +added a kmalloc'ed bounce buffer for writes, but missed to do the same +for reads. As the read only happens after the write is finished, we can +reuse the same buffer. + +As dvb_usb_generic_rw handles a read length of 0 by itself, avoid calling +it using the dvb_usb_generic_read wrapper function. + +Signed-off-by: Stefan Brüns +--- + drivers/media/usb/dvb-usb/cxusb.c | 15 ++++++++------- + 1 file changed, 8 insertions(+), 7 deletions(-) + +diff --git a/drivers/media/usb/dvb-usb/cxusb.c b/drivers/media/usb/dvb-usb/cxusb.c +index 9b8c82d94b3f..8f28a63597bd 100644 +--- a/drivers/media/usb/dvb-usb/cxusb.c ++++ b/drivers/media/usb/dvb-usb/cxusb.c +@@ -59,23 +59,24 @@ static int cxusb_ctrl_msg(struct dvb_usb_device *d, + u8 cmd, u8 *wbuf, int wlen, u8 *rbuf, int rlen) + { + struct cxusb_state *st = d->priv; +- int ret, wo; ++ int ret; + + if (1 + wlen > MAX_XFER_SIZE) { + warn("i2c wr: len=%d is too big!\n", wlen); + return -EOPNOTSUPP; + } + +- wo = (rbuf == NULL || rlen == 0); /* write-only */ ++ if (rlen > MAX_XFER_SIZE) { ++ warn("i2c rd: len=%d is too big!\n", rlen); ++ return -EOPNOTSUPP; ++ } + + mutex_lock(&d->data_mutex); + st->data[0] = cmd; + memcpy(&st->data[1], wbuf, wlen); +- if (wo) +- ret = dvb_usb_generic_write(d, st->data, 1 + wlen); +- else +- ret = dvb_usb_generic_rw(d, st->data, 1 + wlen, +- rbuf, rlen, 0); ++ ret = dvb_usb_generic_rw(d, st->data, 1 + wlen, st->data, rlen, 0); ++ if (!ret && rbuf && rlen) ++ memcpy(rbuf, st->data, rlen); + + mutex_unlock(&d->data_mutex); + return ret; diff --git a/freed-ora/tags/f24/4.9.17-100.fc24.gnu/2-2-media-dvb-usb-firmware-don-t-do-DMA-on-stack.patch b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/2-2-media-dvb-usb-firmware-don-t-do-DMA-on-stack.patch new file mode 100644 index 000000000..7f3c1e10a --- /dev/null +++ b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/2-2-media-dvb-usb-firmware-don-t-do-DMA-on-stack.patch @@ -0,0 +1,86 @@ +From patchwork Sun Feb 5 14:58:00 2017 +Content-Type: text/plain; charset="utf-8" +MIME-Version: 1.0 +Content-Transfer-Encoding: 8bit +Subject: [2/2,media] dvb-usb-firmware: don't do DMA on stack +From: =?utf-8?q?Stefan_Br=C3=BCns?= +X-Patchwork-Id: 39206 +Message-Id: +To: +Cc: , Mauro Carvalho Chehab , + Michael Krufky , + =?UTF-8?q?Stefan=20Br=C3=BCns?= +Date: Sun, 5 Feb 2017 15:58:00 +0100 + +The USB control messages require DMA to work. We cannot pass +a stack-allocated buffer, as it is not warranted that the +stack would be into a DMA enabled area. + +Signed-off-by: Stefan Brüns +--- + drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 30 ++++++++++++++++------------ + 1 file changed, 17 insertions(+), 13 deletions(-) + +diff --git a/drivers/media/usb/dvb-usb/dvb-usb-firmware.c b/drivers/media/usb/dvb-usb/dvb-usb-firmware.c +index dd048a7c461c..189b6725edd0 100644 +--- a/drivers/media/usb/dvb-usb/dvb-usb-firmware.c ++++ b/drivers/media/usb/dvb-usb/dvb-usb-firmware.c +@@ -35,41 +35,45 @@ static int usb_cypress_writemem(struct usb_device *udev,u16 addr,u8 *data, u8 le + + int usb_cypress_load_firmware(struct usb_device *udev, const struct firmware *fw, int type) + { +- struct hexline hx; +- u8 reset; +- int ret,pos=0; ++ u8 *buf = kmalloc(sizeof(struct hexline), GFP_KERNEL); ++ struct hexline *hx = (struct hexline *)buf; ++ int ret, pos = 0; ++ u16 cpu_cs_register = cypress[type].cpu_cs_register; + + /* stop the CPU */ +- reset = 1; +- if ((ret = usb_cypress_writemem(udev,cypress[type].cpu_cs_register,&reset,1)) != 1) ++ buf[0] = 1; ++ if (usb_cypress_writemem(udev, cpu_cs_register, buf, 1) != 1) + err("could not stop the USB controller CPU."); + +- while ((ret = dvb_usb_get_hexline(fw,&hx,&pos)) > 0) { +- deb_fw("writing to address 0x%04x (buffer: 0x%02x %02x)\n",hx.addr,hx.len,hx.chk); +- ret = usb_cypress_writemem(udev,hx.addr,hx.data,hx.len); ++ while ((ret = dvb_usb_get_hexline(fw, hx, &pos)) > 0) { ++ deb_fw("writing to address 0x%04x (buffer: 0x%02x %02x)\n", ++ hx->addr, hx->len, hx->chk); ++ ret = usb_cypress_writemem(udev, hx->addr, hx->data, hx->len); + +- if (ret != hx.len) { ++ if (ret != hx->len) { + err("error while transferring firmware " + "(transferred size: %d, block size: %d)", +- ret,hx.len); ++ ret, hx->len); + ret = -EINVAL; + break; + } + } + if (ret < 0) { +- err("firmware download failed at %d with %d",pos,ret); ++ err("firmware download failed at %d with %d", pos, ret); ++ kfree(buf); + return ret; + } + + if (ret == 0) { + /* restart the CPU */ +- reset = 0; +- if (ret || usb_cypress_writemem(udev,cypress[type].cpu_cs_register,&reset,1) != 1) { ++ buf[0] = 0; ++ if (usb_cypress_writemem(udev, cpu_cs_register, buf, 1) != 1) { + err("could not restart the USB controller CPU."); + ret = -EINVAL; + } + } else + ret = -EIO; ++ kfree(buf); + + return ret; + } diff --git a/freed-ora/tags/f24/4.9.17-100.fc24.gnu/ACPI-Limit-access-to-custom_method.patch b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/ACPI-Limit-access-to-custom_method.patch new file mode 100644 index 000000000..38236753e --- /dev/null +++ b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/ACPI-Limit-access-to-custom_method.patch @@ -0,0 +1,31 @@ +From 4b85149b764cd024e3dd2aff9eb22a9e1aadd1fa Mon Sep 17 00:00:00 2001 +From: Matthew Garrett +Date: Fri, 9 Mar 2012 08:39:37 -0500 +Subject: [PATCH 04/20] ACPI: Limit access to custom_method + +custom_method effectively allows arbitrary access to system memory, making +it possible for an attacker to circumvent restrictions on module loading. +Disable it if any such restrictions have been enabled. + +Signed-off-by: Matthew Garrett +--- + drivers/acpi/custom_method.c | 3 +++ + 1 file changed, 3 insertions(+) + +diff --git a/drivers/acpi/custom_method.c b/drivers/acpi/custom_method.c +index c68e72414a67..4277938af700 100644 +--- a/drivers/acpi/custom_method.c ++++ b/drivers/acpi/custom_method.c +@@ -29,6 +29,9 @@ static ssize_t cm_write(struct file *file, const char __user * user_buf, + struct acpi_table_header table; + acpi_status status; + ++ if (secure_modules()) ++ return -EPERM; ++ + if (!(*ppos)) { + /* parse the table header to get the table length */ + if (count <= sizeof(struct acpi_table_header)) +-- +2.4.3 + diff --git a/freed-ora/tags/f24/4.9.17-100.fc24.gnu/ARM-Drop-fixed-200-Hz-timer-requirement-from-Samsung-platforms.patch b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/ARM-Drop-fixed-200-Hz-timer-requirement-from-Samsung-platforms.patch new file mode 100644 index 000000000..bf389545b --- /dev/null +++ b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/ARM-Drop-fixed-200-Hz-timer-requirement-from-Samsung-platforms.patch @@ -0,0 +1,88 @@ +From patchwork Fri Nov 18 11:15:12 2016 +Content-Type: text/plain; charset="utf-8" +MIME-Version: 1.0 +Content-Transfer-Encoding: 7bit +Subject: [v3] ARM: Drop fixed 200 Hz timer requirement from Samsung platforms +From: Krzysztof Kozlowski +X-Patchwork-Id: 9436225 +Message-Id: <1479467712-5218-1-git-send-email-krzk@kernel.org> +To: Russell King , Kukjin Kim , + Krzysztof Kozlowski , + Javier Martinez Canillas , + linux-arm-kernel@lists.infradead.org, linux-samsung-soc@vger.kernel.org, + linux-kernel@vger.kernel.org +Cc: Arnd Bergmann , + Bartlomiej Zolnierkiewicz , + Tomasz Figa , + Ben Dooks , + Sylwester Nawrocki , + Lee Jones , + Marek Szyprowski +Date: Fri, 18 Nov 2016 13:15:12 +0200 + +All Samsung platforms, including the Exynos, are selecting HZ_FIXED with +200 Hz. Unfortunately in case of multiplatform image this affects also +other platforms when Exynos is enabled. + +This looks like an very old legacy code, dating back to initial +upstreaming of S3C24xx. Probably it was required for s3c24xx timer +driver, which was removed in commit ad38bdd15d5b ("ARM: SAMSUNG: Remove +unused plat-samsung/time.c"). + +Since then, this fixed 200 Hz spread everywhere, including out-of-tree +Samsung kernels (SoC vendor's and Tizen's). I believe this choice +was rather an effect of coincidence instead of conscious choice. + +On S3C24xx, the PWM counter is only 16 bit wide, and with the +typical 12MHz input clock that overflows every 5.5ms. This works +with HZ=200 or higher but not with HZ=100 which needs a 10ms +interval between ticks. On Later chips (S3C64xx, S5P and EXYNOS), +the counter is 32 bits and does not have this problem. + +The new samsung_pwm_timer driver solves the problem by scaling the input +clock by a factor of 50 on S3C24xx, which makes it less accurate but +allows HZ=100 as well as CONFIG_NO_HZ with fewer wakeups. + +Few perf mem and sched tests on Odroid XU3 board (Exynos5422, 4x Cortex +A7, 4x Cortex A15) show no regressions when switching from 200 Hz to +other values. + +Reported-by: Lee Jones +[Dropping of 200_HZ from S3C/S5P was suggested by Arnd] +Reported-by: Arnd Bergmann +Signed-off-by: Krzysztof Kozlowski +Cc: Kukjin Kim +[Tested on Exynos5800] +Tested-by: Javier Martinez Canillas +Acked-by: Kukjin Kim +[Tested on S3C2440] +Tested-by: Sylwester Nawrocki +--- + +Changes since v2: +1. Extend message. +2. Add Kukjin's ack. +3. Add Sylwester's tested-by. + +Changes since v1: +1. Add Javier's tested-by. +2. Drop HZ_FIXED also from ARCH_S5PV210 and ARCH_S3C24XX after Arnd + suggestions and analysis. +--- + arch/arm/Kconfig | 3 +-- + 1 file changed, 1 insertion(+), 2 deletions(-) + +diff --git a/arch/arm/Kconfig b/arch/arm/Kconfig +index b5d529fdffab..ced2e08a9d08 100644 +--- a/arch/arm/Kconfig ++++ b/arch/arm/Kconfig +@@ -1496,8 +1496,7 @@ source kernel/Kconfig.preempt + + config HZ_FIXED + int +- default 200 if ARCH_EBSA110 || ARCH_S3C24XX || \ +- ARCH_S5PV210 || ARCH_EXYNOS4 ++ default 200 if ARCH_EBSA110 + default 128 if SOC_AT91RM9200 + default 0 + diff --git a/freed-ora/tags/f24/4.9.17-100.fc24.gnu/ARM-tegra-usb-no-reset.patch b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/ARM-tegra-usb-no-reset.patch new file mode 100644 index 000000000..8ea4f5174 --- /dev/null +++ b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/ARM-tegra-usb-no-reset.patch @@ -0,0 +1,28 @@ +From: Peter Robinson +Date: Thu, 3 May 2012 20:27:11 +0100 +Subject: [PATCH] ARM: tegra: usb no reset + +Patch for disconnect issues with storage attached to a + tegra-ehci controller +--- + drivers/usb/core/hub.c | 7 +++++++ + 1 file changed, 7 insertions(+) + +diff --git a/drivers/usb/core/hub.c b/drivers/usb/core/hub.c +index 43cb2f2e3b43..7f838ec11c81 100644 +--- a/drivers/usb/core/hub.c ++++ b/drivers/usb/core/hub.c +@@ -4996,6 +4996,13 @@ static void hub_event(struct work_struct *work) + (u16) hub->change_bits[0], + (u16) hub->event_bits[0]); + ++ /* Don't disconnect USB-SATA on TrimSlice */ ++ if (strcmp(dev_name(hdev->bus->controller), "tegra-ehci.0") == 0) { ++ if ((hdev->state == 7) && (hub->change_bits[0] == 0) && ++ (hub->event_bits[0] == 0x2)) ++ hub->event_bits[0] = 0; ++ } ++ + /* Lock the device, then check to see if we were + * disconnected while waiting for the lock to succeed. */ + usb_lock_device(hdev); diff --git a/freed-ora/tags/f24/4.9.17-100.fc24.gnu/Add-EFI-signature-data-types.patch b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/Add-EFI-signature-data-types.patch new file mode 100644 index 000000000..23402354e --- /dev/null +++ b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/Add-EFI-signature-data-types.patch @@ -0,0 +1,54 @@ +From 5216de8394ff599e41c8540c0572368c18c51459 Mon Sep 17 00:00:00 2001 +From: Dave Howells +Date: Tue, 23 Oct 2012 09:30:54 -0400 +Subject: [PATCH 4/9] Add EFI signature data types + +Add the data types that are used for containing hashes, keys and certificates +for cryptographic verification. + +Bugzilla: N/A +Upstream-status: Fedora mustard for now + +Signed-off-by: David Howells +--- + include/linux/efi.h | 20 ++++++++++++++++++++ + 1 file changed, 20 insertions(+) + +diff --git a/include/linux/efi.h b/include/linux/efi.h +index 8cb38cfcba74..8c274b4ea8e6 100644 +--- a/include/linux/efi.h ++++ b/include/linux/efi.h +@@ -647,6 +647,9 @@ void efi_native_runtime_setup(void); + #define LINUX_EFI_ARM_SCREEN_INFO_TABLE_GUID EFI_GUID(0xe03fc20a, 0x85dc, 0x406e, 0xb9, 0x0e, 0x4a, 0xb5, 0x02, 0x37, 0x1d, 0x95) + #define LINUX_EFI_LOADER_ENTRY_GUID EFI_GUID(0x4a67b082, 0x0a4c, 0x41cf, 0xb6, 0xc7, 0x44, 0x0b, 0x29, 0xbb, 0x8c, 0x4f) + ++#define EFI_CERT_SHA256_GUID EFI_GUID(0xc1c41626, 0x504c, 0x4092, 0xac, 0xa9, 0x41, 0xf9, 0x36, 0x93, 0x43, 0x28) ++#define EFI_CERT_X509_GUID EFI_GUID(0xa5c059a1, 0x94e4, 0x4aa7, 0x87, 0xb5, 0xab, 0x15, 0x5c, 0x2b, 0xf0, 0x72) ++ + typedef struct { + efi_guid_t guid; + u64 table; +@@ -879,6 +885,20 @@ typedef struct { + efi_memory_desc_t entry[0]; + } efi_memory_attributes_table_t; + ++typedef struct { ++ efi_guid_t signature_owner; ++ u8 signature_data[]; ++} efi_signature_data_t; ++ ++typedef struct { ++ efi_guid_t signature_type; ++ u32 signature_list_size; ++ u32 signature_header_size; ++ u32 signature_size; ++ u8 signature_header[]; ++ /* efi_signature_data_t signatures[][] */ ++} efi_signature_list_t; ++ + /* + * All runtime access to EFI goes through this structure: + */ +-- +2.5.5 + diff --git a/freed-ora/tags/f24/4.9.17-100.fc24.gnu/Add-an-EFI-signature-blob-parser-and-key-loader.patch b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/Add-an-EFI-signature-blob-parser-and-key-loader.patch new file mode 100644 index 000000000..3697a4b74 --- /dev/null +++ b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/Add-an-EFI-signature-blob-parser-and-key-loader.patch @@ -0,0 +1,179 @@ +From e36a2d65e25fdf42b50aa5dc17583d7bfd09c4c4 Mon Sep 17 00:00:00 2001 +From: Dave Howells +Date: Tue, 23 Oct 2012 09:36:28 -0400 +Subject: [PATCH 5/9] Add an EFI signature blob parser and key loader. + +X.509 certificates are loaded into the specified keyring as asymmetric type +keys. + +[labbott@fedoraproject.org: Drop KEY_ALLOC_TRUSTED] +Signed-off-by: David Howells +--- + crypto/asymmetric_keys/Kconfig | 8 +++ + crypto/asymmetric_keys/Makefile | 1 + + crypto/asymmetric_keys/efi_parser.c | 108 ++++++++++++++++++++++++++++++++++++ + include/linux/efi.h | 4 ++ + 4 files changed, 121 insertions(+) + create mode 100644 crypto/asymmetric_keys/efi_parser.c + +diff --git a/crypto/asymmetric_keys/Kconfig b/crypto/asymmetric_keys/Kconfig +index e28e912000a7..94024e8aedaa 100644 +--- a/crypto/asymmetric_keys/Kconfig ++++ b/crypto/asymmetric_keys/Kconfig +@@ -60,4 +60,12 @@ config SIGNED_PE_FILE_VERIFICATION + This option provides support for verifying the signature(s) on a + signed PE binary. + ++config EFI_SIGNATURE_LIST_PARSER ++ bool "EFI signature list parser" ++ depends on EFI ++ select X509_CERTIFICATE_PARSER ++ help ++ This option provides support for parsing EFI signature lists for ++ X.509 certificates and turning them into keys. ++ + endif # ASYMMETRIC_KEY_TYPE +diff --git a/crypto/asymmetric_keys/Makefile b/crypto/asymmetric_keys/Makefile +index 6516855bec18..c099fe15ed6d 100644 +--- a/crypto/asymmetric_keys/Makefile ++++ b/crypto/asymmetric_keys/Makefile +@@ -10,6 +10,7 @@ asymmetric_keys-y := \ + signature.o + + obj-$(CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE) += public_key.o ++obj-$(CONFIG_EFI_SIGNATURE_LIST_PARSER) += efi_parser.o + + # + # X.509 Certificate handling +diff --git a/crypto/asymmetric_keys/efi_parser.c b/crypto/asymmetric_keys/efi_parser.c +new file mode 100644 +index 000000000000..636feb18b733 +--- /dev/null ++++ b/crypto/asymmetric_keys/efi_parser.c +@@ -0,0 +1,108 @@ ++/* EFI signature/key/certificate list parser ++ * ++ * Copyright (C) 2012 Red Hat, Inc. All Rights Reserved. ++ * Written by David Howells (dhowells@redhat.com) ++ * ++ * This program is free software; you can redistribute it and/or ++ * modify it under the terms of the GNU General Public Licence ++ * as published by the Free Software Foundation; either version ++ * 2 of the Licence, or (at your option) any later version. ++ */ ++ ++#define pr_fmt(fmt) "EFI: "fmt ++#include ++#include ++#include ++#include ++#include ++ ++static __initdata efi_guid_t efi_cert_x509_guid = EFI_CERT_X509_GUID; ++ ++/** ++ * parse_efi_signature_list - Parse an EFI signature list for certificates ++ * @data: The data blob to parse ++ * @size: The size of the data blob ++ * @keyring: The keyring to add extracted keys to ++ */ ++int __init parse_efi_signature_list(const void *data, size_t size, struct key *keyring) ++{ ++ unsigned offs = 0; ++ size_t lsize, esize, hsize, elsize; ++ ++ pr_devel("-->%s(,%zu)\n", __func__, size); ++ ++ while (size > 0) { ++ efi_signature_list_t list; ++ const efi_signature_data_t *elem; ++ key_ref_t key; ++ ++ if (size < sizeof(list)) ++ return -EBADMSG; ++ ++ memcpy(&list, data, sizeof(list)); ++ pr_devel("LIST[%04x] guid=%pUl ls=%x hs=%x ss=%x\n", ++ offs, ++ list.signature_type.b, list.signature_list_size, ++ list.signature_header_size, list.signature_size); ++ ++ lsize = list.signature_list_size; ++ hsize = list.signature_header_size; ++ esize = list.signature_size; ++ elsize = lsize - sizeof(list) - hsize; ++ ++ if (lsize > size) { ++ pr_devel("<--%s() = -EBADMSG [overrun @%x]\n", ++ __func__, offs); ++ return -EBADMSG; ++ } ++ if (lsize < sizeof(list) || ++ lsize - sizeof(list) < hsize || ++ esize < sizeof(*elem) || ++ elsize < esize || ++ elsize % esize != 0) { ++ pr_devel("- bad size combo @%x\n", offs); ++ return -EBADMSG; ++ } ++ ++ if (efi_guidcmp(list.signature_type, efi_cert_x509_guid) != 0) { ++ data += lsize; ++ size -= lsize; ++ offs += lsize; ++ continue; ++ } ++ ++ data += sizeof(list) + hsize; ++ size -= sizeof(list) + hsize; ++ offs += sizeof(list) + hsize; ++ ++ for (; elsize > 0; elsize -= esize) { ++ elem = data; ++ ++ pr_devel("ELEM[%04x]\n", offs); ++ ++ key = key_create_or_update( ++ make_key_ref(keyring, 1), ++ "asymmetric", ++ NULL, ++ &elem->signature_data, ++ esize - sizeof(*elem), ++ (KEY_POS_ALL & ~KEY_POS_SETATTR) | ++ KEY_USR_VIEW, ++ KEY_ALLOC_NOT_IN_QUOTA); ++ ++ if (IS_ERR(key)) ++ pr_err("Problem loading in-kernel X.509 certificate (%ld)\n", ++ PTR_ERR(key)); ++ else ++ pr_notice("Loaded cert '%s' linked to '%s'\n", ++ key_ref_to_ptr(key)->description, ++ keyring->description); ++ ++ data += esize; ++ size -= esize; ++ offs += esize; ++ } ++ } ++ ++ return 0; ++} +diff --git a/include/linux/efi.h b/include/linux/efi.h +index 8c274b4ea8e6..ff1877145aa4 100644 +--- a/include/linux/efi.h ++++ b/include/linux/efi.h +@@ -1044,6 +1044,10 @@ extern int efi_memattr_apply_permissions(struct mm_struct *mm, + char * __init efi_md_typeattr_format(char *buf, size_t size, + const efi_memory_desc_t *md); + ++struct key; ++extern int __init parse_efi_signature_list(const void *data, size_t size, ++ struct key *keyring); ++ + /** + * efi_range_is_wc - check the WC bit on an address range + * @start: starting kvirt address +-- +2.5.5 + diff --git a/freed-ora/tags/f24/4.9.17-100.fc24.gnu/Add-option-to-automatically-enforce-module-signature.patch b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/Add-option-to-automatically-enforce-module-signature.patch new file mode 100644 index 000000000..aa1983377 --- /dev/null +++ b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/Add-option-to-automatically-enforce-module-signature.patch @@ -0,0 +1,217 @@ +From 0000dc9edd5997cc49b8893a9d5407f89dfa1307 Mon Sep 17 00:00:00 2001 +From: Matthew Garrett +Date: Fri, 9 Aug 2013 18:36:30 -0400 +Subject: [PATCH] Add option to automatically enforce module signatures when in + Secure Boot mode + +UEFI Secure Boot provides a mechanism for ensuring that the firmware will +only load signed bootloaders and kernels. Certain use cases may also +require that all kernel modules also be signed. Add a configuration option +that enforces this automatically when enabled. + +Signed-off-by: Matthew Garrett +--- + Documentation/x86/zero-page.txt | 2 ++ + arch/x86/Kconfig | 11 ++++++ + arch/x86/boot/compressed/eboot.c | 66 +++++++++++++++++++++++++++++++++++ + arch/x86/include/uapi/asm/bootparam.h | 3 +- + arch/x86/kernel/setup.c | 6 ++++ + include/linux/module.h | 6 ++++ + kernel/module.c | 7 ++++ + 7 files changed, 100 insertions(+), 1 deletion(-) + +diff --git a/Documentation/x86/zero-page.txt b/Documentation/x86/zero-page.txt +index 95a4d34af3fd..b8527c6b7646 100644 +--- a/Documentation/x86/zero-page.txt ++++ b/Documentation/x86/zero-page.txt +@@ -31,6 +31,8 @@ Offset Proto Name Meaning + 1E9/001 ALL eddbuf_entries Number of entries in eddbuf (below) + 1EA/001 ALL edd_mbr_sig_buf_entries Number of entries in edd_mbr_sig_buffer + (below) ++1EB/001 ALL kbd_status Numlock is enabled ++1EC/001 ALL secure_boot Secure boot is enabled in the firmware + 1EF/001 ALL sentinel Used to detect broken bootloaders + 290/040 ALL edd_mbr_sig_buffer EDD MBR signatures + 2D0/A00 ALL e820_map E820 memory map table +diff --git a/arch/x86/Kconfig b/arch/x86/Kconfig +index 0a7b885964ba..29b8ba9ae713 100644 +--- a/arch/x86/Kconfig ++++ b/arch/x86/Kconfig +@@ -1776,6 +1776,17 @@ config EFI_MIXED + + If unsure, say N. + ++config EFI_SECURE_BOOT_SIG_ENFORCE ++ def_bool n ++ depends on EFI ++ prompt "Force module signing when UEFI Secure Boot is enabled" ++ ---help--- ++ UEFI Secure Boot provides a mechanism for ensuring that the ++ firmware will only load signed bootloaders and kernels. Certain ++ use cases may also require that all kernel modules also be signed. ++ Say Y here to automatically enable module signature enforcement ++ when a system boots with UEFI Secure Boot enabled. ++ + config SECCOMP + def_bool y + prompt "Enable seccomp to safely compute untrusted bytecode" +diff --git a/arch/x86/boot/compressed/eboot.c b/arch/x86/boot/compressed/eboot.c +index 52fef606bc54..6b8b9a775b46 100644 +--- a/arch/x86/boot/compressed/eboot.c ++++ b/arch/x86/boot/compressed/eboot.c +@@ -12,6 +12,7 @@ + #include + #include + #include ++#include + + #include "../string.h" + #include "eboot.h" +@@ -571,6 +572,67 @@ free_handle: + efi_call_early(free_pool, pci_handle); + } + ++static int get_secure_boot(void) ++{ ++ u8 sb, setup; ++ unsigned long datasize = sizeof(sb); ++ efi_guid_t var_guid = EFI_GLOBAL_VARIABLE_GUID; ++ efi_status_t status; ++ ++ status = efi_early->call((unsigned long)sys_table->runtime->get_variable, ++ L"SecureBoot", &var_guid, NULL, &datasize, &sb); ++ ++ if (status != EFI_SUCCESS) ++ return 0; ++ ++ if (sb == 0) ++ return 0; ++ ++ ++ status = efi_early->call((unsigned long)sys_table->runtime->get_variable, ++ L"SetupMode", &var_guid, NULL, &datasize, ++ &setup); ++ ++ if (status != EFI_SUCCESS) ++ return 0; ++ ++ if (setup == 1) ++ return 0; ++ ++ return 1; ++} ++ ++ ++/* ++ * See if we have Graphics Output Protocol ++ */ ++static efi_status_t setup_gop(struct screen_info *si, efi_guid_t *proto, ++ unsigned long size) ++{ ++ efi_status_t status; ++ void **gop_handle = NULL; ++ ++ status = efi_call_early(allocate_pool, EFI_LOADER_DATA, ++ size, (void **)&gop_handle); ++ if (status != EFI_SUCCESS) ++ return status; ++ ++ status = efi_call_early(locate_handle, ++ EFI_LOCATE_BY_PROTOCOL, ++ proto, NULL, &size, gop_handle); ++ if (status != EFI_SUCCESS) ++ goto free_handle; ++ ++ if (efi_early->is64) ++ status = setup_gop64(si, proto, size, gop_handle); ++ else ++ status = setup_gop32(si, proto, size, gop_handle); ++ ++free_handle: ++ efi_call_early(free_pool, gop_handle); ++ return status; ++} ++ + static efi_status_t + setup_uga32(void **uga_handle, unsigned long size, u32 *width, u32 *height) + { +@@ -1126,6 +1188,10 @@ struct boot_params *efi_main(struct efi_config *c, + else + setup_boot_services32(efi_early); + ++ sanitize_boot_params(boot_params); ++ ++ boot_params->secure_boot = get_secure_boot(); ++ + setup_graphics(boot_params); + + setup_efi_pci(boot_params); +diff --git a/arch/x86/include/uapi/asm/bootparam.h b/arch/x86/include/uapi/asm/bootparam.h +index c18ce67495fa..2b3e5427097b 100644 +--- a/arch/x86/include/uapi/asm/bootparam.h ++++ b/arch/x86/include/uapi/asm/bootparam.h +@@ -134,7 +134,8 @@ struct boot_params { + __u8 eddbuf_entries; /* 0x1e9 */ + __u8 edd_mbr_sig_buf_entries; /* 0x1ea */ + __u8 kbd_status; /* 0x1eb */ +- __u8 _pad5[3]; /* 0x1ec */ ++ __u8 secure_boot; /* 0x1ec */ ++ __u8 _pad5[2]; /* 0x1ed */ + /* + * The sentinel is set to a nonzero value (0xff) in header.S. + * +diff --git a/arch/x86/kernel/setup.c b/arch/x86/kernel/setup.c +index c4e7b3991b60..bdb9881c7afd 100644 +--- a/arch/x86/kernel/setup.c ++++ b/arch/x86/kernel/setup.c +@@ -1152,6 +1152,12 @@ void __init setup_arch(char **cmdline_p) + + io_delay_init(); + ++#ifdef CONFIG_EFI_SECURE_BOOT_SIG_ENFORCE ++ if (boot_params.secure_boot) { ++ enforce_signed_modules(); ++ } ++#endif ++ + /* + * Parse the ACPI tables for possible boot-time SMP configuration. + */ +diff --git a/include/linux/module.h b/include/linux/module.h +index 082298a09df1..38d0597f7615 100644 +--- a/include/linux/module.h ++++ b/include/linux/module.h +@@ -273,6 +273,12 @@ const struct exception_table_entry *search_exception_tables(unsigned long add); + + struct notifier_block; + ++#ifdef CONFIG_MODULE_SIG ++extern void enforce_signed_modules(void); ++#else ++static inline void enforce_signed_modules(void) {}; ++#endif ++ + #ifdef CONFIG_MODULES + + extern int modules_disabled; /* for sysctl */ +diff --git a/kernel/module.c b/kernel/module.c +index 3c384968f553..ea484f3a35b2 100644 +--- a/kernel/module.c ++++ b/kernel/module.c +@@ -4200,6 +4200,13 @@ void module_layout(struct module *mod, + EXPORT_SYMBOL(module_layout); + #endif + ++#ifdef CONFIG_MODULE_SIG ++void enforce_signed_modules(void) ++{ ++ sig_enforce = true; ++} ++#endif ++ + bool secure_modules(void) + { + #ifdef CONFIG_MODULE_SIG +-- +2.5.5 + diff --git a/freed-ora/tags/f24/4.9.17-100.fc24.gnu/Add-secure_modules-call.patch b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/Add-secure_modules-call.patch new file mode 100644 index 000000000..1cbf3afd9 --- /dev/null +++ b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/Add-secure_modules-call.patch @@ -0,0 +1,63 @@ +From 3213f1513a744fb21b6b9e4d4f2650a204855b3e Mon Sep 17 00:00:00 2001 +From: Matthew Garrett +Date: Fri, 9 Aug 2013 17:58:15 -0400 +Subject: [PATCH] Add secure_modules() call + +Provide a single call to allow kernel code to determine whether the system +has been configured to either disable module loading entirely or to load +only modules signed with a trusted key. + +Bugzilla: N/A +Upstream-status: Fedora mustard. Replaced by securelevels, but that was nak'd + +Signed-off-by: Matthew Garrett +--- + include/linux/module.h | 6 ++++++ + kernel/module.c | 10 ++++++++++ + 2 files changed, 16 insertions(+) + +diff --git a/include/linux/module.h b/include/linux/module.h +index 0c3207d..05bd6c9 100644 +--- a/include/linux/module.h ++++ b/include/linux/module.h +@@ -641,6 +641,8 @@ static inline bool is_livepatch_module(struct module *mod) + } + #endif /* CONFIG_LIVEPATCH */ + ++extern bool secure_modules(void); ++ + #else /* !CONFIG_MODULES... */ + + static inline struct module *__module_address(unsigned long addr) +@@ -750,6 +752,10 @@ static inline bool module_requested_async_probing(struct module *module) + return false; + } + ++static inline bool secure_modules(void) ++{ ++ return false; ++} + #endif /* CONFIG_MODULES */ + + #ifdef CONFIG_SYSFS +diff --git a/kernel/module.c b/kernel/module.c +index 529efae..0332fdd 100644 +--- a/kernel/module.c ++++ b/kernel/module.c +@@ -4279,3 +4279,13 @@ void module_layout(struct module *mod, + } + EXPORT_SYMBOL(module_layout); + #endif ++ ++bool secure_modules(void) ++{ ++#ifdef CONFIG_MODULE_SIG ++ return (sig_enforce || modules_disabled); ++#else ++ return modules_disabled; ++#endif ++} ++EXPORT_SYMBOL(secure_modules); +-- +2.9.2 + diff --git a/freed-ora/tags/f24/4.9.17-100.fc24.gnu/Add-sysrq-option-to-disable-secure-boot-mode.patch b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/Add-sysrq-option-to-disable-secure-boot-mode.patch new file mode 100644 index 000000000..4600848cf --- /dev/null +++ b/freed-ora/tags/f24/4.9.17-100.fc24.gnu/Add-sysrq-option-to-disable-secure-boot-mode.patch @@ -0,0 +1,246 @@ +From 16d2ba5d5bc46e67e6aa7a3d113fbcc18c217388 Mon Sep 17 00:00:00 2001 +From: Kyle McMartin +Date: Fri, 30 Aug 2013 09:28:51 -0400 +Subject: [PATCH 20/20] Add sysrq option to disable secure boot mode + +Bugzilla: N/A +Upstream-status: Fedora mustard +--- + arch/x86/kernel/setup.c | 36 ++++++++++++++++++++++++++++++++++++ + drivers/input/misc/uinput.c | 1 + + drivers/tty/sysrq.c | 19 +++++++++++++------ + include/linux/input.h | 5 +++++ + include/linux/sysrq.h | 8 +++++++- + kernel/debug/kdb/kdb_main.c | 2 +- + kernel/module.c | 2 +- + 7 files changed, 64 insertions(+), 9 deletions(-) + +diff --git a/arch/x86/kernel/setup.c b/arch/x86/kernel/setup.c +index f93826b8522c..41679b1aca83 100644 +--- a/arch/x86/kernel/setup.c ++++ b/arch/x86/kernel/setup.c +@@ -70,6 +70,11 @@ + #include + #include + ++#include ++#include ++#include ++#include ++ + #include