ab4fa1cce4
tree-wide: prune some dead grsec leaves
...
The beginning of pruning grsecurity/PaX from the tree.
2017-04-30 12:05:41 +02:00
32b8512e54
grsecurity: discontinue support
...
Upstream has decided to make -testing patches private, effectively ceasing
free support for grsecurity/PaX [1]. Consequently, we can no longer
responsibly support grsecurity on NixOS.
This patch turns the kernel and patch expressions into build errors and
adds a warning to the manual, but retains most of the infrastructure, in
an effort to make the transition smoother. For 17.09 all of it should
probably be pruned.
[1]: https://grsecurity.net/passing_the_baton.php
2017-04-28 12:35:15 +02:00
b1750d699c
linux-chromiumos: remove 3.14
...
3.14 is no longer supported upstream by kernel.org and thus no longer
receives security patches. The git commit mentioned in this .nix isn't
even available in the linked repository --
https://chromium.googlesource.com/chromiumos/third_party/kernel -- so I
think this .nix might be dead anyway. Finally, it specifies 3.14.0,
which is so ridiculously old (the latest was 3.14.79) that nobody
develops for it.
Fixes : #25145
Supports: #25127
2017-04-23 15:47:46 +02:00
9e6c96f8fc
grsecurity: 4.9.24-201704210851 -> 4.9.24-2201704220732
2017-04-22 16:37:24 +02:00
05911da7bb
grsecurity: 4.9.23-201704181901 -> 4.9.24-201704210851
2017-04-21 15:09:32 +02:00
9902d63e84
grsecurity: 4.9.22-201704120836 -> 4.9.23-201704181901
2017-04-20 00:21:41 +02:00
3fa5605b41
grsecurity: 4.9.21-201704091948 -> 4.9.22-201704120836
2017-04-12 18:58:29 +02:00
7701cbca6b
grsecurity: 4.9.20-201703310823 -> 4.9.21-201704091948
2017-04-10 03:34:42 +02:00
ed41d50e9f
kernel: fix 9p issues
...
[tuomas: rename the patch from 9p-hacks to something slighly more
meaningful]
Signed-off-by: Tuomas Tynkkynen <tuomas@tuxera.com>
2017-04-01 15:49:14 +03:00
a41668f441
grsecurity: 4.9.19-201703300917 -> 4.9.20-201703310823
2017-04-01 00:08:50 +02:00
4d4488e793
grsecurity: 4.9.18-201703261106 -> 4.9.19-201703300917
2017-03-30 16:28:34 +02:00
5fe81c1bdb
grsecurity: 4.9.17-201703221829 -> 4.9.18-201703261106
2017-03-26 21:35:36 +02:00
94ab4932ae
grsecurity: 4.9.16-201703180820 -> 4.9.17-201703221829
2017-03-23 01:03:14 +01:00
d4409817a6
grsecurity: 4.9.15-201703150049 -> 4.9.16-201703180820
2017-03-18 15:32:48 +01:00
9e60a17cb8
grsecurity: 4.9.14-201703121245 -> 4.9.15-201703150049
...
Contains a fix for the n_hdlc double free bug.
2017-03-15 07:25:21 +01:00
4c211bdc63
grsecurity: 4.9.13-201703052141 -> 4.9.14-201703121245
2017-03-12 18:44:27 +01:00
17d80c49fa
grsecurity: 4.9.13-201702270729 -> 201703052141
2017-03-06 15:59:30 +01:00
a20a53300d
grsecurity: 4.9.13-201702261126 -> 201702270729
2017-02-27 16:04:32 +01:00
f3a6991f3d
grsecurity: 4.9.12-201702231830 -> 4.9.13-201702261126
2017-02-26 18:20:50 +01:00
0150d9a95c
grsecurity: 4.9.11-201702222257 -> 4.9.12-201702231830
2017-02-26 14:01:57 +01:00
d36b1ccc13
Revert "Revert "linux kernels: patch against DCCP double free (CVE-2017-6074)""
...
This reverts commit 53a2baabbe
2017-02-23 19:23:29 -05:00
53a2baabbe
Revert "linux kernels: patch against DCCP double free (CVE-2017-6074)"
...
This reverts commit 1d68edbef4
2017-02-23 18:47:16 -05:00
1d68edbef4
linux kernels: patch against DCCP double free (CVE-2017-6074)
2017-02-23 18:44:43 -05:00
b92501f0d8
grsecurity: 4.9.11-201702181444 -> 201702222257
2017-02-23 19:18:39 +01:00
2423313581
kernel: 4.9.10 -> 4.9.11
2017-02-18 18:33:36 -05:00
ca016c2626
grsecurity: 4.9.10-201702152052 -> 4.9.11-201702181444
2017-02-18 22:01:16 +01:00
e8007c0e89
linux_4_9: patch for CVE-2017-5986
...
Seems fairly low impact[1] but we might as well patch it until a new 4.9
version is released
[1]: https://bugzilla.redhat.com/show_bug.cgi?id=1420276
2017-02-17 19:11:30 +01:00
bc2f53fd29
grsecurity: 4.9.8-201702071801 -> 4.9.10-201702152052
2017-02-16 14:51:25 +01:00
c71a893334
Revert "Use looser 9pfs caching in VM tests/builds"
...
This reverts commit bbd03e236a
2017-02-13 14:38:19 +01:00
4af79a7331
Revert "linux: Apply 9p veryloose patch to 4.9"
...
This reverts commit a82810c7a7Fixes #22695 .
2017-02-13 12:16:39 +01:00
bd46a375df
grsecurity: 4.9.8-201702060653 -> 201702071801
2017-02-08 01:31:18 +01:00
0d422c5db5
grsecurity: 4.8.17-201701151620 -> 4.9.8-201702060653
...
The first release in the 4.9 branch.
I've also migrated my update scripts to SHA-512 so that'll
be the hash of choice for grsec packages going forward.
2017-02-06 15:49:34 +01:00
c50c551142
grsecurity: 4.8.16-201701062021 -> 4.8.17-201701151620
2017-01-25 00:58:57 +01:00
482c67af70
grsecurity: adapt new to mirror url structure
2017-01-25 00:58:54 +01:00
a82810c7a7
linux: Apply 9p veryloose patch to 4.9
2017-01-24 13:05:02 +01:00
d6ff445f10
grsecurity: 4.8.15-201612301949 -> 4.8.16-201701062021
2017-01-07 08:01:41 +01:00
75ce714818
grsecurity: 4.8.15-201612151923 -> 201612301949
2017-01-01 06:01:04 +01:00
bbd03e236a
Use looser 9pfs caching in VM tests/builds
...
This can give significant speed ups, see
7e20254412
2016-12-29 21:26:16 +01:00
c6bcc485de
linux_4_8: add patch to fix CVE-2016-9919
2016-12-28 06:35:11 +01:00
f0e77cd07d
grsecurity: 4.8.14-201612110933 -> 4.8.15-201612151923
2016-12-16 12:46:44 +01:00
01d022e16b
Merge pull request #21118 from grahamc/fix-rsa-build-failure
...
linux_{4_8,grsec_nixos}: patch to fix build failure
2016-12-13 09:15:50 -05:00
7a813d3f6d
linux_{4_8,grsec_nixos}: patch to fix build failure
...
crypto/rsa_helper.c:18:28: fatal error: rsapubkey-asn1.h: No such file or directory
2016-12-13 07:25:46 -05:00
601058e0e2
grsecurity: 4.8.13-201612082118 -> 4.8.14-201612110933
2016-12-11 19:09:16 +01:00
9074d9859e
linux: add patch to fix CVE-2016-8655
...
See https://lwn.net/Articles/708319/ for more information.
2016-12-10 17:08:42 +01:00
d1a5dc0b1c
grsecurity: 4.8.12-201612062306 -> 4.8.13-201612082118
2016-12-09 15:31:02 +01:00
9a63779d64
grsecurity: use upstream url as the primary source
2016-12-09 15:31:00 +01:00
5fd4ffe00f
grsecurity: 4.8.12-201612031658 -> 201612062306
2016-12-08 12:22:13 +01:00
9578299bbe
grsecurity: 4.8.11-201611271225 -> 4.8.12-201612031658
2016-12-06 01:24:32 +01:00
b90ed0cc80
grsecurity: 4.8.10-201611232213 -> 4.8.11-201611271225
2016-11-28 11:41:10 +01:00
4c7323545b
Revert "grsecurity: work around for #20490 "
...
This reverts commit e38b74ba89
2016-11-28 11:40:55 +01:00
Joachim Fasting
Jason A. Donenfeld
Volth
Graham Christensen
Tim Steinbach
Eelco Dolstra
Franz Pletz