[packages/kernel] - drop non apparmor patches; ups

arekm arekm at pld-linux.org
Fri Sep 15 09:18:34 CEST 2017


commit 78a8d9f30a808ce8c14f277d51efa5c1d369d663
Author: Arkadiusz Miśkiewicz <arekm at maven.pl>
Date:   Fri Sep 15 09:18:27 2017 +0200

    - drop non apparmor patches; ups

 ..._CONSTANTS-The-error-messages-regarding-y.patch | 26 --------------
 ...E-efi-lockdown-MODSIGN-Fix-module-signatu.patch | 41 ----------------------
 kernel.spec                                        |  2 --
 3 files changed, 69 deletions(-)
---
diff --git a/kernel.spec b/kernel.spec
index 8da51bfe..21ff0d18 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -219,7 +219,6 @@ Patch2001:	kernel-pwc-uncompress.patch
 Patch2003:	kernel-regressions.patch
 
 # http://bazaar.launchpad.net/~apparmor-dev/apparmor/master/files/head:/kernel-patches/v4.13/
-Patch5000:	0001-UBUNTU-SAUCE-efi-lockdown-MODSIGN-Fix-module-signatu.patch
 Patch5001:	0002-apparmor-Fix-shadowed-local-variable-in-unpack_trans.patch
 Patch5002:	0003-apparmor-Fix-logical-error-in-verify_header.patch
 Patch5003:	0004-apparmor-Fix-an-error-code-in-aafs_create.patch
@@ -706,7 +705,6 @@ rm -f localversion-rt
 
 # apparmor
 %if %{with apparmor}
-%patch5000 -p1
 %patch5001 -p1
 %patch5002 -p1
 %patch5003 -p1
diff --git a/0001-Enable-SCSI_CONSTANTS-The-error-messages-regarding-y.patch b/0001-Enable-SCSI_CONSTANTS-The-error-messages-regarding-y.patch
deleted file mode 100644
index 7b354836..00000000
--- a/0001-Enable-SCSI_CONSTANTS-The-error-messages-regarding-y.patch
+++ /dev/null
@@ -1,26 +0,0 @@
-From 3cf99fb519595e3934882ac9ea32409badc6b57a Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Arkadiusz=20Mi=C5=9Bkiewicz?= <arekm at maven.pl>
-Date: Fri, 27 Jun 2014 13:50:25 +0200
-Subject: [PATCH] Enable SCSI_CONSTANTS; The error messages regarding your SCSI
- hardware will be easier to understand if you say Y here.
-
----
- kernel-multiarch.config | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/kernel-multiarch.config b/kernel-multiarch.config
-index ea15c17..8aee3c6 100644
---- a/kernel-multiarch.config
-+++ b/kernel-multiarch.config
-@@ -4513,7 +4513,7 @@ CHR_DEV_SG all=m
- CHR_DEV_SCH all=m
- SCSI_ENCLOSURE all=m
- SCSI_MULTI_LUN all=y
--SCSI_CONSTANTS all=n
-+SCSI_CONSTANTS all=y
- SCSI_LOGGING all=y
- SCSI_SCAN_ASYNC all=y
- SCSI_WAIT_SCAN all=m
--- 
-2.0.0
-
diff --git a/0001-UBUNTU-SAUCE-efi-lockdown-MODSIGN-Fix-module-signatu.patch b/0001-UBUNTU-SAUCE-efi-lockdown-MODSIGN-Fix-module-signatu.patch
deleted file mode 100644
index 6401a552..00000000
--- a/0001-UBUNTU-SAUCE-efi-lockdown-MODSIGN-Fix-module-signatu.patch
+++ /dev/null
@@ -1,41 +0,0 @@
-From 00c72bc198aa85e5da02de2c0c4cc423c82a54f1 Mon Sep 17 00:00:00 2001
-From: Fedora Kernel Team <kernel-team at fedoraproject.org>
-Date: Thu, 3 Aug 2017 13:46:51 -0500
-Subject: [PATCH 01/17] UBUNTU: SAUCE: (efi-lockdown) MODSIGN: Fix module
- signature verification
-
-BugLink: http://bugs.launchpad.net/bugs/1712168
-
-Currently mod_verify_sig() calls verify_pkcs_7_signature() with
-trusted_keys=NULL, which causes only the builtin keys to be used
-to verify the signature. This breaks self-signing of modules with
-a MOK, as the MOK is loaded into the secondary trusted keyring.
-Fix this by passing the spacial value trusted_keys=(void *)1UL,
-which tells verify_pkcs_7_signature() to use the secondary
-keyring instead.
-
-(cherry picked from commit cff4523d65b848f9c41c9e998a735ae2a820da2d
- git://git.kernel.org/pub/scm/linux/kernel/git/jwboyer/fedora.git)
-[ saf: Taken from fedora commit without authorship information or much
-  of a commit message; modified so that commit will describe the
-  problem being fixed. ]
-Signed-off-by: Seth Forshee <seth.forshee at canonical.com>
----
- kernel/module_signing.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/kernel/module_signing.c b/kernel/module_signing.c
-index 937c844bee4a..d3d6f95a96b4 100644
---- a/kernel/module_signing.c
-+++ b/kernel/module_signing.c
-@@ -81,6 +81,6 @@ int mod_verify_sig(const void *mod, unsigned long *_modlen)
- 	}
- 
- 	return verify_pkcs7_signature(mod, modlen, mod + modlen, sig_len,
--				      NULL, VERIFYING_MODULE_SIGNATURE,
-+				      (void *)1UL, VERIFYING_MODULE_SIGNATURE,
- 				      NULL, NULL);
- }
--- 
-2.11.0
-
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/kernel.git/commitdiff/78a8d9f30a808ce8c14f277d51efa5c1d369d663



More information about the pld-cvs-commit mailing list