X-Git-Url: http://git.ipfire.org/?a=blobdiff_plain;ds=sidebyside;f=lfs%2Flinux;h=018892f7f2b056f6b08de97c9cce734491e9fe6d;hb=400c4e8edb63164be1b41cf8cdb4d23026bcf6d9;hp=bd9e0cc6506f80223ef274ea2a3ef2794e5d6eef;hpb=88a7b2d34bc851ac04b2a6a1355ae3bc5bf4cec4;p=ipfire-2.x.git

diff --git a/lfs/linux b/lfs/linux
index bd9e0cc650..018892f7f2 100644
--- a/lfs/linux
+++ b/lfs/linux
@@ -137,6 +137,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	# fix Boot with enabled usercopy hardening
 	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/linux/linux-5.9-crypto_testmgr_allocate_buffers_with____GFP_COMP.patch
 
+	# Patch performance monitoring restrictions to allow further hardening
+	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/linux/linux-5.15.17-security-perf-allow-further-restriction-of-perf_event_open.patch
+
 ifeq "$(BUILD_ARCH)" "armv6l"
 	# Apply Arm-multiarch kernel patches.
 	cd $(DIR_APP) && xzcat $(DIR_DL)/arm-multi-patches-$(ARM_PATCHES).patch.xz | patch -Np1