diff --git a/linux/.SRCINFO b/linux/.SRCINFO index 548d9b5fa2..cce8a03c4c 100644 --- a/linux/.SRCINFO +++ b/linux/.SRCINFO @@ -1,6 +1,6 @@ pkgbase = linux pkgdesc = Linux (powerpc64le) - pkgver = 6.11.1.arch1 + pkgver = 6.11.2.arch1 pkgrel = 1 url = https://github.com/archlinux/linux arch = powerpc64le @@ -16,10 +16,10 @@ pkgbase = linux makedepends = tar makedepends = xz options = !debug - source = https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.11.1.tar.xz - source = https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.11.1.tar.sign - source = https://github.com/archlinux/linux/releases/download/v6.11.1-arch1/linux-v6.11.1-arch1.patch.zst - source = https://github.com/archlinux/linux/releases/download/v6.11.1-arch1/linux-v6.11.1-arch1.patch.zst.sig + source = https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.11.2.tar.xz + source = https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.11.2.tar.sign + source = https://github.com/archlinux/linux/releases/download/v6.11.2-arch1/linux-v6.11.2-arch1.patch.zst + source = https://github.com/archlinux/linux/releases/download/v6.11.2-arch1/linux-v6.11.2-arch1.patch.zst.sig source = config source = config.ppc32 source = 0002-hotfix-usb-audio.patch @@ -31,24 +31,24 @@ pkgbase = linux validpgpkeys = ABAF11C65A2970B130ABE3C479BE3E4300411886 validpgpkeys = 647F28654894E3BD457199BE38DBBDC86092693E validpgpkeys = 83BC8889351B5DEBBB68416EB8AC08600F108CDF - sha256sums = 2a372373b4e1eaf55f2a2f104bfa91477ec9b263acf8f3aed08f4d8bdc78ee3d + sha256sums = ec9ef7a0b9cebb55940e1ef87a1f9e1004b10456a119dc386bb3e565b0d39c42 sha256sums = SKIP - sha256sums = cb4acbf6c7f0ef00e335929d90ea2acadead0266d9f769c15976ee74c5c8828d + sha256sums = 86e2959cac748ff503f33e40d5994acc3eb5008b9ff9ca2a7e2d264c107a4b24 sha256sums = SKIP - sha256sums = 3d2ad800b1eb25ed9e6b0a43c27adc60999456ad39b6144fcdab49eac3d502f2 - sha256sums = 182e4cfd612cf951d0e646802855cff802f05ffedf4cb61ef657bb83a415bf4a + sha256sums = d5d10c039be50f2a8d936de4cdda7022ed39a0768521e7d0b010b97e75176775 + sha256sums = 3ff78ac72083f96b046cf4e19e990e01b75e7ccb6b7ee9b86f3b8d751dde66e8 sha256sums = d1f25e9415a749268ede5ce2aa2595faa08d5bf6e29cee63b27b9334d5efc3a2 sha256sums = 07dbbf3e8f743e8d2ad90891a8b567392271db139e339529df1ab4387e0e6400 sha256sums = b8a5d1e9dbed702d23bda79af3ac6f3d61228e123f7d6e5717779f2e28c4b677 sha256sums = 060a30a4148aa88701003fd56bb389971db8527fa376e3436094cddcdec76c24 sha256sums = 5dc5eb5772dd79ea4c87a60c2bafbb0503f20a3e4ddbf2075c02ca69e159e21d sha256sums = 7d44df97c0e565cfec60b77c0ad582e7f0da54726cfedc149c0b49e45f3a5d8b - b2sums = ac9927d74542a2d244b9d683920363ec2dbbe851ae0e069b278f1a0ba82c58b00f0f0312104b46f1b8c06585c2e6acb7eb1e63bd28499891f629c00f9a32f6b5 + b2sums = 5720e8dd0bed0247dcfe0bdbce17e36e67bff56811611ae1b04f048b77b6e60c2a48303db73c5a0d4a56c7125cdd695116c4dfd965bd7cb28aa932f427bb3e7d b2sums = SKIP - b2sums = 3621c4b5476cd615d0abb2568ed8b67bc5a4022a35ae0fa2c0d9ef27d5e31fcab56d38aa0ca86320357f4cc31c7e5d3acb12222694ec83a8aab21b16847c8b81 + b2sums = a34d50594e17ea6e9e89dc9fecfcc1417db823e5bbaa7038864b6d1edfdfb38424cdb4a97b70ec57b625b72c7f239b9c1cb2acfab00af8aca5bea566de662bc4 b2sums = SKIP - b2sums = e0f1f8b7d7841b058088f0f128cf48e53f2a011e42976e1265abbeccb788e7a426e9815551f629c808d3cfc16f39a75444481777044cdf375f22988c12445fbd - b2sums = 0bed560500a2a10fb22506fc3ec76e2ed44b455f4b79476695cf8b7541af18e0c9ba378d8903395cccbb793065a0cf14bc9e80f3d6b6ef64e06fffb48f8c1875 + b2sums = 9ec70d150086cadf6f15ccdf11aaaf72b6f3969bc8a676be8db8c4cba96d2faf7422acdb213da91ffdf60586808d59579e3dc0486d6ebf8946c652f39fac21ca + b2sums = b8d49c43762c15d4664acdf05bb192729028cd6f0d2d0990714f9cc2e49b5bf42c93b904b903e297d3f811a85d9eb7663bca8e5c961f520091f529e51870fc1e b2sums = 91b488e69c8b34c7347d135cde425e681faa6a329951648172ab00561e498a74063e345b897ea45142d167a2c02a27fee9ffe585f6a7919040b37f43547c1fc8 b2sums = 9677bbe86e5bb846c1fef6065f854e72b97a6e2b3b0e547192159fd56fac8b879999c6d52a835ebf7566be00c1a78644112564a4f76ec1c912181474479ad0a0 b2sums = 7af37e02f6b8233a72c03be8586abeabc253dae70208e8169b208f49360c96c63edc5d68c1dbb51d6480d8b1bfdf8ba5f3303d1b18e9ab453c01ebebf3cf19a7 diff --git a/linux/PKGBUILD b/linux/PKGBUILD index 7f12f6140b..321eca5437 100644 --- a/linux/PKGBUILD +++ b/linux/PKGBUILD @@ -2,7 +2,7 @@ # Maintainer: Jan Alexander Steffens (heftig) pkgbase=linux -pkgver=6.11.1.arch1 +pkgver=6.11.2.arch1 pkgrel=1 pkgdesc="Linux (${CARCH})" url='https://github.com/archlinux/linux' @@ -41,24 +41,24 @@ validpgpkeys=( 83BC8889351B5DEBBB68416EB8AC08600F108CDF # Jan Alexander Steffens (heftig) ) # https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc -sha256sums=('2a372373b4e1eaf55f2a2f104bfa91477ec9b263acf8f3aed08f4d8bdc78ee3d' +sha256sums=('ec9ef7a0b9cebb55940e1ef87a1f9e1004b10456a119dc386bb3e565b0d39c42' 'SKIP' - 'cb4acbf6c7f0ef00e335929d90ea2acadead0266d9f769c15976ee74c5c8828d' + '86e2959cac748ff503f33e40d5994acc3eb5008b9ff9ca2a7e2d264c107a4b24' 'SKIP' - '3d2ad800b1eb25ed9e6b0a43c27adc60999456ad39b6144fcdab49eac3d502f2' - '182e4cfd612cf951d0e646802855cff802f05ffedf4cb61ef657bb83a415bf4a' + 'd5d10c039be50f2a8d936de4cdda7022ed39a0768521e7d0b010b97e75176775' + '3ff78ac72083f96b046cf4e19e990e01b75e7ccb6b7ee9b86f3b8d751dde66e8' 'd1f25e9415a749268ede5ce2aa2595faa08d5bf6e29cee63b27b9334d5efc3a2' '07dbbf3e8f743e8d2ad90891a8b567392271db139e339529df1ab4387e0e6400' 'b8a5d1e9dbed702d23bda79af3ac6f3d61228e123f7d6e5717779f2e28c4b677' '060a30a4148aa88701003fd56bb389971db8527fa376e3436094cddcdec76c24' '5dc5eb5772dd79ea4c87a60c2bafbb0503f20a3e4ddbf2075c02ca69e159e21d' '7d44df97c0e565cfec60b77c0ad582e7f0da54726cfedc149c0b49e45f3a5d8b') -b2sums=('ac9927d74542a2d244b9d683920363ec2dbbe851ae0e069b278f1a0ba82c58b00f0f0312104b46f1b8c06585c2e6acb7eb1e63bd28499891f629c00f9a32f6b5' +b2sums=('5720e8dd0bed0247dcfe0bdbce17e36e67bff56811611ae1b04f048b77b6e60c2a48303db73c5a0d4a56c7125cdd695116c4dfd965bd7cb28aa932f427bb3e7d' 'SKIP' - '3621c4b5476cd615d0abb2568ed8b67bc5a4022a35ae0fa2c0d9ef27d5e31fcab56d38aa0ca86320357f4cc31c7e5d3acb12222694ec83a8aab21b16847c8b81' + 'a34d50594e17ea6e9e89dc9fecfcc1417db823e5bbaa7038864b6d1edfdfb38424cdb4a97b70ec57b625b72c7f239b9c1cb2acfab00af8aca5bea566de662bc4' 'SKIP' - 'e0f1f8b7d7841b058088f0f128cf48e53f2a011e42976e1265abbeccb788e7a426e9815551f629c808d3cfc16f39a75444481777044cdf375f22988c12445fbd' - '0bed560500a2a10fb22506fc3ec76e2ed44b455f4b79476695cf8b7541af18e0c9ba378d8903395cccbb793065a0cf14bc9e80f3d6b6ef64e06fffb48f8c1875' + '9ec70d150086cadf6f15ccdf11aaaf72b6f3969bc8a676be8db8c4cba96d2faf7422acdb213da91ffdf60586808d59579e3dc0486d6ebf8946c652f39fac21ca' + 'b8d49c43762c15d4664acdf05bb192729028cd6f0d2d0990714f9cc2e49b5bf42c93b904b903e297d3f811a85d9eb7663bca8e5c961f520091f529e51870fc1e' '91b488e69c8b34c7347d135cde425e681faa6a329951648172ab00561e498a74063e345b897ea45142d167a2c02a27fee9ffe585f6a7919040b37f43547c1fc8' '9677bbe86e5bb846c1fef6065f854e72b97a6e2b3b0e547192159fd56fac8b879999c6d52a835ebf7566be00c1a78644112564a4f76ec1c912181474479ad0a0' '7af37e02f6b8233a72c03be8586abeabc253dae70208e8169b208f49360c96c63edc5d68c1dbb51d6480d8b1bfdf8ba5f3303d1b18e9ab453c01ebebf3cf19a7' diff --git a/linux/config b/linux/config index 9a11e6cdf1..e6e584c1c7 100644 --- a/linux/config +++ b/linux/config @@ -10010,9 +10010,7 @@ CONFIG_IO_WQ=y CONFIG_KEYS=y # CONFIG_KEYS_REQUEST_CACHE is not set # CONFIG_PERSISTENT_KEYRINGS is not set -CONFIG_TRUSTED_KEYS=m -CONFIG_HAVE_TRUSTED_KEYS=y -CONFIG_TRUSTED_KEYS_TPM=y +# CONFIG_TRUSTED_KEYS is not set CONFIG_ENCRYPTED_KEYS=m # CONFIG_USER_DECRYPTED_DATA is not set CONFIG_KEY_DH_OPERATIONS=y @@ -10021,10 +10019,9 @@ CONFIG_SECURITY_DMESG_RESTRICT=y CONFIG_SECURITY=y CONFIG_SECURITYFS=y CONFIG_SECURITY_NETWORK=y -# CONFIG_SECURITY_INFINIBAND is not set # CONFIG_SECURITY_NETWORK_XFRM is not set CONFIG_SECURITY_PATH=y -CONFIG_HARDENED_USERCOPY=y +# CONFIG_HARDENED_USERCOPY is not set CONFIG_FORTIFY_SOURCE=y # CONFIG_STATIC_USERMODEHELPER is not set # CONFIG_SECURITY_SELINUX is not set @@ -10038,18 +10035,24 @@ CONFIG_SECURITY_APPARMOR_HASH_DEFAULT=y CONFIG_SECURITY_APPARMOR_EXPORT_BINARY=y CONFIG_SECURITY_APPARMOR_PARANOID_LOAD=y # CONFIG_SECURITY_LOADPIN is not set -CONFIG_SECURITY_YAMA=y +# CONFIG_SECURITY_YAMA is not set # CONFIG_SECURITY_SAFESETID is not set -# CONFIG_SECURITY_LOCKDOWN_LSM is not set +CONFIG_SECURITY_LOCKDOWN_LSM=y +CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y +CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y +# CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set +# CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set CONFIG_SECURITY_LANDLOCK=y CONFIG_INTEGRITY=y -# CONFIG_INTEGRITY_SIGNATURE is not set +CONFIG_INTEGRITY_SIGNATURE=y +CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y +CONFIG_INTEGRITY_TRUSTED_KEYRING=y CONFIG_INTEGRITY_AUDIT=y # CONFIG_IMA is not set # CONFIG_EVM is not set # CONFIG_DEFAULT_SECURITY_APPARMOR is not set CONFIG_DEFAULT_SECURITY_DAC=y -CONFIG_LSM="yama,loadpin,safesetid,integrity" +CONFIG_LSM="landlock,lockdown,yama,integrity,bpf" # # Kernel hardening options diff --git a/linux/config.ppc32 b/linux/config.ppc32 index 964d518944..f1731e84a1 100644 --- a/linux/config.ppc32 +++ b/linux/config.ppc32 @@ -8491,16 +8491,22 @@ CONFIG_SECURITY_APPARMOR_PARANOID_LOAD=y # CONFIG_SECURITY_LOADPIN is not set # CONFIG_SECURITY_YAMA is not set # CONFIG_SECURITY_SAFESETID is not set -# CONFIG_SECURITY_LOCKDOWN_LSM is not set -# CONFIG_SECURITY_LANDLOCK is not set +CONFIG_SECURITY_LOCKDOWN_LSM=y +CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y +CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y +# CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set +# CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set +CONFIG_SECURITY_LANDLOCK=y CONFIG_INTEGRITY=y -# CONFIG_INTEGRITY_SIGNATURE is not set +CONFIG_INTEGRITY_SIGNATURE=y +CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y +CONFIG_INTEGRITY_TRUSTED_KEYRING=y CONFIG_INTEGRITY_AUDIT=y # CONFIG_IMA is not set # CONFIG_EVM is not set # CONFIG_DEFAULT_SECURITY_APPARMOR is not set CONFIG_DEFAULT_SECURITY_DAC=y -CONFIG_LSM="yama,loadpin,safesetid,integrity,apparmor,selinux,smack,tomoyo" +CONFIG_LSM="landlock,lockdown,yama,integrity,bpf" # # Kernel hardening options