Commit Graph

56 Commits

Author SHA1 Message Date
Thomas Trepl (Moody)
c49c1fb77f Automatic merge of trunk into multilib 2022-09-12 00:30:10 +02:00
Xi Ruoyao
e5aa02fe17
kernel: enable ASLR and SSP
It does not make too much sense to protect the userspace with PIE+ASLR
and SSP but leave the kernel alone...
2022-09-11 12:09:18 +08:00
Xi Ruoyao
a710d35e1f
Revert "linux kernel: disable CONFIG_USERFAULTFD to avoid CVE-2022-2590 for now"
This reverts commit 098f4de336.

CVE-2022-2590 is fixed in Linux >= 5.19.6.
2022-09-11 12:01:31 +08:00
Thomas Trepl (Moody)
b92cf89b16 Automatic merge of trunk into multilib 2022-08-27 00:30:11 +02:00
Xi Ruoyao
5353a1948f
grub: add a note about filesystem UUID and partition UUID usage
Text only change.
2022-08-26 20:30:29 +08:00
Thomas Trepl (Moody)
d8c9a43f29 Automatic merge of trunk into multilib 2022-08-26 00:30:10 +02:00
Xi Ruoyao
feed7fea36
linux kernel: reword description for CONFIG_X86_X2APIC 2022-08-25 01:05:55 +08:00
Xi Ruoyao
098f4de336
linux kernel: disable CONFIG_USERFAULTFD to avoid CVE-2022-2590 for now 2022-08-24 16:42:49 +08:00
Xi Ruoyao
83b86449a1
linux kernel: enable CONFIG_X86_X2APIC
It's recommended for CVE-2022-21233 mitigation.  And, if the BIOS has
enabled x2APIC but CONFIG_X86_X2APIC=n, the kernel will panic on boot.

If x2APIC is disabled or not available, the kernel with
CONFIG_X86_X2APIC=y can still boot normally.

No need to tag anything again because interrupt handling cannot affect
userspace.
2022-08-24 16:42:48 +08:00
Thomas Trepl (Moody)
588c7a0492 Merge upstream 2022-05-11 09:22:07 +02:00
Xi Ruoyao
ed2bec7dd6
kernel: disable CONFIG_WERROR
The help of this options says:

"However, if you have a new compiler with ..., you may need to disable
this config option in order to successfully build the kernel."

As we are having state-of-art GCC-12, and Linux-5.18 release candidate
FTBFS with GCC-12 and CONFIG_WERROR=y [1], and <rant>the kernel developers
are making stupid and meaningless discussion instead of fixing the building
failure</rant> [2], I don't think enabling this option makes any sense
building LFS.

[1]:https://lkml.org/lkml/2022/4/14/1676
[2]:https://lkml.org/lkml/2022/4/21/254
2022-05-09 16:32:19 +08:00
Thomas Trepl (Moody)
65ac2fdf48 Automatic merge of trunk into multilib 2022-04-22 05:45:10 +02:00
Xi Ruoyao
e286d8db14
decorate the references to root and lfs user
The references already correctly decorated are not changed because "if
it's not broken don't fix it".
2022-04-21 14:12:43 +08:00
Thomas Trepl (Moody)
acd14bc9f5 Automatic merge of trunk into multilib 2022-03-23 05:45:10 +01:00
Pierre Labastie
6ad4730862 Fix kernel config to mount the devtmpfs before boot
Also make the order and the layout the same as in menu.
2022-03-22 22:03:33 +01:00
Thomas Trepl (Moody)
53beb36860 Automatic merge of trunk into multilib 2022-02-28 05:45:10 +01:00
Douglas R. Reno
68550bbdee Kernel (systemd): Add CONFIG_MEMCG as required (systemd-oomd). 2022-02-27 16:10:44 -06:00
Douglas R. Reno
18d4d6d2d7 Do a minor reword in networkd.xml and move Firmware Drivers to the
Device Drivers section in the systemd kernel configuration.
2022-02-26 23:18:28 -06:00
Thomas Trepl (Moody)
aa95507be6 Automatic merge of trunk into multilib 2022-01-14 05:45:10 +01:00
Douglas R. Reno
c8df034e5f Fix CVE-2021-3997 in systemd. 2022-01-13 15:16:37 -06:00
Thomas Trepl (Moody)
bb2febd46a Automatic merge of trunk into multilib 2022-01-04 05:45:10 +01:00
Douglas R. Reno
d21ec2fcbb systemd: Add CONFIG_PSI to the kernel configuration to get systemd-oomd
to work.

Note that it just skips bringing systemd-oomd up when not present, and
does not fail the startup process.
2022-01-03 12:03:45 -06:00
Thomas Trepl (Moody)
0fd2370f61 Automatic merge of trunk into multilib 2022-01-01 05:45:10 +01:00
Xi Ruoyao
cea24f504c
systemd: correct the description of systemd#21896 2021-12-31 21:26:31 +08:00
Thomas Trepl (Moody)
af4bd5774b Automatic merge of trunk into multilib 2021-12-31 05:45:09 +01:00
Douglas R. Reno
6d19228191 Package Updates:
Update to systemd-250 (BLFS coming shortly)
Update to meson-0.60.3
Kernel Configuration: Enable the framebuffer since it's disabled by
default in Linux-5.15.
Kernel Configuration: Add a note about CONFIG_DEFAULT_HOSTNAME on
systemd.
2021-12-30 11:39:08 -06:00
Thomas Trepl (Moody)
b010eeca35 Automatic merge of trunk into multilib 2021-11-24 05:45:08 +01:00
Xi Ruoyao
768ae15039
don't enable CONFIG_IKHEADERS building the kernel
https://lists.linuxfromscratch.org/sympa/arc/lfs-support/2021-11/msg00014.html
2021-11-23 18:23:51 +08:00
Thomas Trepl (Moody)
384c707b7f Add more info about kernel requirements for multilib 2021-11-09 14:43:34 +01:00
Thomas Trepl (Moody)
08a636839d Merge upstream 2021-10-15 12:21:18 +02:00
Xi Ruoyao
3d7b4f686a
clean up after condxml merge 2021-10-13 19:27:35 +08:00
Thomas Trepl (Moody)
02d8168679 Automatic merge of trunk into multilib 2021-09-23 05:45:12 +02:00
Pierre Labastie
0480d22900 Add missing comma 2021-09-22 23:23:16 +02:00
Pierre Labastie
784fdaed25 Remove all versiond entities 2021-09-22 23:17:28 +02:00
Xi Ruoyao
2f142598a9
kernel: CONFIG_SECCOMP is now in General architecture-dependent options 2021-09-22 21:44:18 +08:00
Thomas Trepl (Moody)
716db1f765 Merge upstream 2021-09-20 09:37:34 +02:00
Pierre Labastie
9cea9a28c8 Remove spaces at end o lines - chapter10 2021-09-07 22:23:53 +02:00
Thomas Trepl (Moody)
00e8b5325a Merge upstream changes 2021-07-28 15:43:47 +02:00
Xi Ruoyao
cefb4c9641
grub cfg: replace hardcoded (and outdated) chapter number 2021-07-28 12:09:14 +08:00
Thomas Trepl (Moody)
c74edb30fd Merge branch 'trunk' into multilib 2021-04-15 13:49:46 +02:00
Xi Ruoyao
1c16a05b81
modify the reference to lfs-uefi hint to BLFS instead 2021-04-09 19:07:48 +08:00
Thomas Trepl
38de42d0ed
Merge changes from trunk to multilib
git-svn-id: http://svn.linuxfromscratch.org/LFS/branches/multilib@12072 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689
2021-03-31 18:41:40 +08:00
Thomas Trepl
16caca2b75
Merge changes from trunk to multilib
git-svn-id: http://svn.linuxfromscratch.org/LFS/branches/multilib@12062 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689
2021-03-31 18:41:40 +08:00
Thomas Trepl
1b1a5e7238
Merge changes from trunk to multilib
git-svn-id: http://svn.linuxfromscratch.org/LFS/branches/multilib@12041 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689
2021-03-31 18:41:40 +08:00
Thomas Trepl
d7e0db5ccd
Merge changes from trunk to multilib
git-svn-id: http://svn.linuxfromscratch.org/LFS/branches/multilib@12034 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689
2021-03-31 18:41:40 +08:00
Thomas Trepl
4ea78e038f
Merge changes from trunk to multilib
git-svn-id: http://svn.linuxfromscratch.org/LFS/branches/multilib@12021 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689
2021-03-31 18:41:40 +08:00
Thomas Trepl
6dfcfecca3
Update to new lfs structure
git-svn-id: http://svn.linuxfromscratch.org/LFS/branches/multilib@11986 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689
2021-03-31 18:41:39 +08:00
Douglas R. Reno
22009fb768 Update to systemd-247
Update to bc-3.2.3
Update to linux-5.9.12
Incorporate kernel changes from rhubarbpieguy

git-svn-id: http://svn.linuxfromscratch.org/LFS/trunk/BOOK@12065 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689
2020-12-04 04:05:25 +00:00
Douglas R. Reno
4b859f1f7f Kernel: Restructure the General Setup and Filesystems menus on systemd
git-svn-id: http://svn.linuxfromscratch.org/LFS/trunk/BOOK@12059 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689
2020-11-12 00:27:51 +00:00
Pierre Labastie
eab5b72b28 Update kernel figures + explain
how to launch the menu interface before telling what to tick in the
menu...

git-svn-id: http://svn.linuxfromscratch.org/LFS/trunk/BOOK@12039 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689
2020-08-29 07:17:20 +00:00