public
/
nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
nixpkgs/pkgs/os-specific/linux/kernel/hardened/patches.json

33 lines
1.4 KiB
JSON
Raw Normal View History

linux_*_hardened: use linux-hardened patch set This is an updated version of the former upstream, https://github.com/AndroidHardeningArchive/linux-hardened, and provides a minimal set of additional hardening patches on top of upstream. The patch already incorporates many of our hardened profile defaults, and releases are timely (Linux 5.5.15 and 5.6.2 were released on 2020-04-02; linux-hardened patches for them came out on 2020-04-03 and 2020-04-04 respectively).
2020-04-04 14:47:13 -07:00
{
linux_*_hardened: index patches by major kernel version This will avoid breaking the build whenever a non-major kernel update happens. In the update script, we map each kernel version to the latest patch for the latest kernel version less than or equal to what we have packaged.
2020-04-23 10:43:44 -07:00
"4.14": {
linux/hardened/patches/4.14: 4.14.213.a -> 4.14.214.a
2021-01-09 12:26:17 -08:00
"extra": ".a",
linux/hardened/patches/4.14: 4.14.215.a -> 4.14.216.a
2021-01-18 07:59:04 -08:00
"name": "linux-hardened-4.14.216.a.patch",
"sha256": "1pv0akd1dmhm10r9b7xambn3ipl1niypsmb3ibfmxdj4zln0g7aq",
"url": "https://github.com/anthraxx/linux-hardened/releases/download/4.14.216.a/linux-hardened-4.14.216.a.patch"
linux/hardened-patches/5.6.6: init at 5.6.6.a
2020-04-21 17:12:17 -07:00
},
linux_*_hardened: index patches by major kernel version This will avoid breaking the build whenever a non-major kernel update happens. In the update script, we map each kernel version to the latest patch for the latest kernel version less than or equal to what we have packaged.
2020-04-23 10:43:44 -07:00
"4.19": {
linux-hardened: Track extra version Fixes #108707
2021-01-07 11:39:27 -08:00
"extra": ".a",
linux/hardened/patches/4.19: 4.19.168.a -> 4.19.169.a
2021-01-20 06:59:13 -08:00
"name": "linux-hardened-4.19.169.a.patch",
"sha256": "0l3n1yjsa777pdxh4ib7phpfrw7c8vr1xwzgs8khnffllj9f16iq",
"url": "https://github.com/anthraxx/linux-hardened/releases/download/4.19.169.a/linux-hardened-4.19.169.a.patch"
linux/hardened-patches/4.19.117: init at 4.19.117.a
2020-04-21 17:12:28 -07:00
},
linux/hardened/patches/5.10: init at 5.10.4.a
2020-12-30 18:18:49 -08:00
"5.10": {
linux-hardened: Track extra version Fixes #108707
2021-01-07 11:39:27 -08:00
"extra": ".a",
linux/hardened/patches/5.10: 5.10.8.a -> 5.10.9.a
2021-01-20 06:59:15 -08:00
"name": "linux-hardened-5.10.9.a.patch",
"sha256": "0mkwyknafdbc2hqv4j7jjc6wsrrx6a76d69hxh7x90gi0s3f5rfw",
"url": "https://github.com/anthraxx/linux-hardened/releases/download/5.10.9.a/linux-hardened-5.10.9.a.patch"
linux/hardened/patches/5.10: init at 5.10.4.a
2020-12-30 18:18:49 -08:00
},
linux_*_hardened: index patches by major kernel version This will avoid breaking the build whenever a non-major kernel update happens. In the update script, we map each kernel version to the latest patch for the latest kernel version less than or equal to what we have packaged.
2020-04-23 10:43:44 -07:00
"5.4": {
linux-hardened: Track extra version Fixes #108707
2021-01-07 11:39:27 -08:00
"extra": ".a",
linux/hardened/patches/5.4: 5.4.90.a -> 5.4.91.a
2021-01-20 06:59:17 -08:00
"name": "linux-hardened-5.4.91.a.patch",
"sha256": "0kqn9g6wh4rp9riwkjmzapmnwk0fd5z18z26j2rqfgq7x4r8d7rm",
"url": "https://github.com/anthraxx/linux-hardened/releases/download/5.4.91.a/linux-hardened-5.4.91.a.patch"
linux/hardened-patches/5.4.34: init at 5.4.34.a
2020-04-21 17:12:25 -07:00
},
linux/hardened/patches/5.9: init at 5.9.1.a
2020-10-17 12:09:23 -07:00
"5.9": {
linux-hardened: Track extra version Fixes #108707
2021-01-07 11:39:27 -08:00
"extra": "",
linux/hardened/patches/5.9: 5.9.15.a -> 5.9.16.a
2020-12-22 11:37:21 -08:00
"name": "linux-hardened-5.9.16.a.patch",
"sha256": "024wdzc9bwgr4nd4z0l6bazcl35jczhsmdl2lb26bvffjwg207rw",
"url": "https://github.com/anthraxx/linux-hardened/releases/download/5.9.16.a/linux-hardened-5.9.16.a.patch"
linux_*_hardened: use linux-hardened patch set This is an updated version of the former upstream, https://github.com/AndroidHardeningArchive/linux-hardened, and provides a minimal set of additional hardening patches on top of upstream. The patch already incorporates many of our hardened profile defaults, and releases are timely (Linux 5.5.15 and 5.6.2 were released on 2020-04-02; linux-hardened patches for them came out on 2020-04-03 and 2020-04-04 respectively).
2020-04-04 14:47:13 -07:00
}
}