Changelog
linux (5.4-1~exp1) experimental; urgency=medium
* New upstream release: https://kernelnewbies.org/Linux_5.4
[ Ben Hutchings ]
* lockdown: Rebase on upstream Lockdown LSM:
- Refresh "efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode"
- Update "efi: Lock down the kernel if booted in secure boot mode"
- Update "Add a SysRq option to lift kernel lockdown"
- Update "mtd: Disable slram and phram when locked down"
- Update "arm64: add kernel config option to lock down when in Secure Boot
mode"
- Refresh "lockdown: Refer to Debian wiki until manual page exists"
- Drop all other lockdown patches
- Enable SECURITY_LOCKDOWN_LSM, LOCK_DOWN_KERNEL_FORCE_NONE,
LOCK_DOWN_IN_EFI_SECURE_BOOT
* [armel/marvell] lockdown: Disable Lockdown as it now selects MODULE_SIG
* [amd64] Update "x86: Make x32 syscall support conditional …" for 5.4
* debian/lib/python/debian_linux/abi.py: Add support for symbol namespaces
* debian/bin/genpatch-rt: Fix series generation from git
[ Romain Perier ]
* Rebased the following patches onto 5.4.x:
- debian/version.patch
- debian/ia64-hardcode-arch-script-output.patch
- bugfix/all/
radeon-amdgpu-firmware-is-required-for-drm-and-kms-on-r600-onward.patch
- features/all/aufs5/aufs5-mmap.patch
- features/all/aufs5/aufs5-standalone.patch
- features/x86/
intel-iommu-add-kconfig-option-to-exclude-igpu-by-default.patch
- bugfix/all/fs-add-module_softdep-declarations-for-hard-coded-cr.patch
- debian/revert-objtool-fix-config_stack_validation-y-warning.patch
- features/all/db-mok-keyring/
0003-MODSIGN-checking-the-blacklisted-hash-before-loading-a-kernel-module
.patch
- bugfix/all/tools-perf-man-date.patch
- bugfix/all/usbip-fix-misuse-of-strncpy.patch
- bugfix/all/partially-revert-usb-kconfig-using-select-for-usb_co.patch
[ John Paul Adrian Glaubitz ]
* [m68k] Enable CONFIG_PATA_BUDDHA as module
[ Aurelien Jarno ]
* [armhf] Add support for STM32MP1 SoC: enable ARCH_STM32,
CRYPTO_DEV_STM32_CRC, CRYPTO_DEV_STM32_CRYP, CRYPTO_DEV_STM32_HASH,
DRM_PANEL_ORISETECH_OTM8009A, DRM_SII902X, DRM_STM, DRM_STM_DSI,
HW_RANDOM_STM32, I2C_STM32F7, INPUT_STPMIC1_ONKEY, MFD_STM32_LPTIMER,
MFD_STPMIC1, MTD_NAND_STM32_FMC2, PHY_STM32_USBPHYC, PWM_STM32_LP,
REGULATOR_STM32_BOOSTER, REGULATOR_STM32_PWR, REGULATOR_STM32_VREFBUF,
REGULATOR_STPMIC1, REMOTEPROC, RTC_DRV_STM32, SERIAL_STM32,
SERIAL_STM32_CONSOLE, SND_AUDIO_GRAPH_CARD, SND_SOC_CS42L51_I2C,
SND_SOC_STM32_DFSDM, SND_SOC_STM32_I2S, SND_SOC_STM32_SAI,
SND_SOC_STM32_SPDIFRX, SPI_STM32, SPI_STM32_QSPI, STM32_DMA,
STM32_DMAMUX, STM32_MDMA, STM32_RPROC, STPMIC1_WATCHDOG,
TOUCHSCREEN_EDT_FT5X06.
* [arm64] Re-enable BT_HCIUART_{BCM,LL} (arm64 version of #906048).
* [arm64,armhf] Enable CLK_RASPBERRYPI and RASPBERRYPI_CPUFREQ.
[ Salvatore Bonaccorso ]
* md: Enable MD_CLUSTER as module (Closes: #927026)
-- Ben Hutchings <email address hidden> Tue, 26 Nov 2019 01:33:11 +0000