]> git.ipfire.org Git - people/pmueller/ipfire-3.x.git/log
people/pmueller/ipfire-3.x.git
17 months agolibcap-ng: Update to 0.8.3
Michael Tremer [Mon, 19 Dec 2022 16:28:36 +0000 (16:28 +0000)] 
libcap-ng: Update to 0.8.3

Drop the dependency to Python 2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agopython-decorator: Drop package
Michael Tremer [Mon, 19 Dec 2022 16:21:00 +0000 (16:21 +0000)] 
python-decorator: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agopython-m2crypto: Drop package
Michael Tremer [Mon, 19 Dec 2022 15:50:51 +0000 (15:50 +0000)] 
python-m2crypto: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agocrda: Drop package
Michael Tremer [Mon, 19 Dec 2022 15:50:25 +0000 (15:50 +0000)] 
crda: Drop package

This is being replaced by wireless-regdb

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agowireless-regdb: New package
Michael Tremer [Mon, 19 Dec 2022 15:49:16 +0000 (15:49 +0000)] 
wireless-regdb: New package

This is succeeding CRDA.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Require wireless-regdb at runtime
Michael Tremer [Mon, 19 Dec 2022 15:48:54 +0000 (15:48 +0000)] 
kernel: Require wireless-regdb at runtime

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Build without Python 2
Michael Tremer [Mon, 19 Dec 2022 15:48:12 +0000 (15:48 +0000)] 
kernel: Build without Python 2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agoglibc: Package libxcrypt and compat-libxcrypt
Michael Tremer [Mon, 19 Dec 2022 15:44:40 +0000 (15:44 +0000)] 
glibc: Package libxcrypt and compat-libxcrypt

libcrypt in glibc is deprecated and has been replaced by libxcrypt which
offers a new ABI. The new ABI is package in libxcrypt and the old one in
compat-libxcrypt which should be dropped soon.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agopython-netfilter_conntrack: Drop package
Michael Tremer [Mon, 19 Dec 2022 15:25:18 +0000 (15:25 +0000)] 
python-netfilter_conntrack: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agopython-piksemel: Drop package
Michael Tremer [Mon, 19 Dec 2022 15:24:28 +0000 (15:24 +0000)] 
python-piksemel: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agopython-pyaspects: Drop package
Michael Tremer [Mon, 19 Dec 2022 15:24:02 +0000 (15:24 +0000)] 
python-pyaspects: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agopython-pycurl: Drop package
Michael Tremer [Mon, 19 Dec 2022 15:23:33 +0000 (15:23 +0000)] 
python-pycurl: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agopyserial: Drop package
Michael Tremer [Mon, 19 Dec 2022 15:22:42 +0000 (15:22 +0000)] 
pyserial: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agopython-daemon: Drop package
Michael Tremer [Mon, 19 Dec 2022 15:20:30 +0000 (15:20 +0000)] 
python-daemon: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agopychecker: Drop package
Michael Tremer [Mon, 19 Dec 2022 15:19:57 +0000 (15:19 +0000)] 
pychecker: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agopython-disutils-extra: Drop package
Michael Tremer [Mon, 19 Dec 2022 15:19:24 +0000 (15:19 +0000)] 
python-disutils-extra: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agopcapy: Drop package
Michael Tremer [Mon, 19 Dec 2022 15:17:23 +0000 (15:17 +0000)] 
pcapy: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agofail2ban: Drop package
Michael Tremer [Mon, 19 Dec 2022 15:15:33 +0000 (15:15 +0000)] 
fail2ban: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agopython-yaml: Drop package
Michael Tremer [Mon, 19 Dec 2022 15:15:04 +0000 (15:15 +0000)] 
python-yaml: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agopython-progressbar: Drop package
Michael Tremer [Mon, 19 Dec 2022 15:13:50 +0000 (15:13 +0000)] 
python-progressbar: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agopygpgme: Drop package
Michael Tremer [Mon, 19 Dec 2022 15:13:15 +0000 (15:13 +0000)] 
pygpgme: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agopython-IPy: Drop package
Michael Tremer [Mon, 19 Dec 2022 15:11:56 +0000 (15:11 +0000)] 
python-IPy: Drop package

This is not being used anywhere

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agolibtevent: Update to 0.13.0
Michael Tremer [Mon, 19 Dec 2022 14:32:29 +0000 (14:32 +0000)] 
libtevent: Update to 0.13.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agolibtirpc: Update to 1.3.3
Michael Tremer [Mon, 19 Dec 2022 13:59:17 +0000 (13:59 +0000)] 
libtirpc: Update to 1.3.3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agolibtalloc: Update to 2.3.4
Michael Tremer [Mon, 19 Dec 2022 13:58:40 +0000 (13:58 +0000)] 
libtalloc: Update to 2.3.4

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agolibtdb: Update to 1.4.7
Michael Tremer [Mon, 19 Dec 2022 13:42:10 +0000 (13:42 +0000)] 
libtdb: Update to 1.4.7

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agopython-urlgrabber: Drop package
Michael Tremer [Mon, 19 Dec 2022 13:15:52 +0000 (13:15 +0000)] 
python-urlgrabber: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agopyxattr: Drop package
Michael Tremer [Mon, 19 Dec 2022 13:15:08 +0000 (13:15 +0000)] 
pyxattr: Drop package

This was used by Pakfire but is not longer needed.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agosip: Drop package
Michael Tremer [Mon, 19 Dec 2022 13:13:25 +0000 (13:13 +0000)] 
sip: Drop package

Nothing depends on this any longer

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agoswig: Update to 4.1.1
Michael Tremer [Mon, 19 Dec 2022 13:12:18 +0000 (13:12 +0000)] 
swig: Update to 4.1.1

And drop the dependency to Python 2.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agosubversion: Drop package
Michael Tremer [Mon, 19 Dec 2022 13:11:13 +0000 (13:11 +0000)] 
subversion: Drop package

We no longer use this.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agosyslinux: Drop package
Michael Tremer [Mon, 19 Dec 2022 13:06:54 +0000 (13:06 +0000)] 
syslinux: Drop package

This is no longer maintained, and we currently use GRUB for our ISO
image.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Disable the RANDSTRUCT plugin
Michael Tremer [Mon, 19 Dec 2022 13:00:46 +0000 (13:00 +0000)] 
kernel: Disable the RANDSTRUCT plugin

This does not seem to have the benefit we are expecting and comes with a
huge compile time cost that I would like to disable this for now.

As a disitribution kernel we do/have to publish the seed which makes
this entire feature very questionable.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agopango: Update to 1.90.0
Michael Tremer [Mon, 19 Dec 2022 12:55:31 +0000 (12:55 +0000)] 
pango: Update to 1.90.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agocairo: Update to 1.17.6
Michael Tremer [Mon, 19 Dec 2022 12:54:23 +0000 (12:54 +0000)] 
cairo: Update to 1.17.6

This patch also changes that we use meson instead of autotools to build
cairo. The autotools build seems to have been incomplete and did not
allow us to build pango against cairo.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agoharfbuzz: Enable GObject Introspection
Michael Tremer [Mon, 19 Dec 2022 12:53:38 +0000 (12:53 +0000)] 
harfbuzz: Enable GObject Introspection

This is required to build pango.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agopasswd: Update to 0.80
Michael Tremer [Fri, 16 Dec 2022 17:57:32 +0000 (17:57 +0000)] 
passwd: Update to 0.80

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agobzip2: Update to 1.0.8
Michael Tremer [Fri, 16 Dec 2022 17:55:47 +0000 (17:55 +0000)] 
bzip2: Update to 1.0.8

This patch also splits the library into a separate package.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Create a -debuginfo package for the tools
Michael Tremer [Fri, 16 Dec 2022 17:48:22 +0000 (17:48 +0000)] 
kernel: Create a -debuginfo package for the tools

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agoMAKEDEV: Drop package
Michael Tremer [Fri, 16 Dec 2022 17:28:05 +0000 (17:28 +0000)] 
MAKEDEV: Drop package

Nothing has ever used this I think.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agoasciidoc: Fix build
Michael Tremer [Fri, 16 Dec 2022 17:23:38 +0000 (17:23 +0000)] 
asciidoc: Fix build

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agoppp: Update to 2.4.9
Michael Tremer [Fri, 16 Dec 2022 17:16:29 +0000 (17:16 +0000)] 
ppp: Update to 2.4.9

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agowpa_supplicant: Depend on network without epoch
Michael Tremer [Fri, 16 Dec 2022 17:08:31 +0000 (17:08 +0000)] 
wpa_supplicant: Depend on network without epoch

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agobatctl: Drop package
Michael Tremer [Fri, 16 Dec 2022 17:02:34 +0000 (17:02 +0000)] 
batctl: Drop package

We currently do not have B.A.T.M.A.N. enabled in our kernel, so this
tools is not of much use.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agoupower: Drop package
Michael Tremer [Fri, 16 Dec 2022 17:01:30 +0000 (17:01 +0000)] 
upower: Drop package

I don't think that we need to worry about battery-powered firewalls
right now.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agoopenldap: Update to 2.6.3
Michael Tremer [Fri, 16 Dec 2022 16:58:12 +0000 (16:58 +0000)] 
openldap: Update to 2.6.3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agocyrus-sasl: Update to 2.1.28
Michael Tremer [Fri, 16 Dec 2022 16:57:29 +0000 (16:57 +0000)] 
cyrus-sasl: Update to 2.1.28

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agotftp: Drop package
Michael Tremer [Fri, 16 Dec 2022 16:56:45 +0000 (16:56 +0000)] 
tftp: Drop package

This is probably not needed right now, and tftp is pretty much out of
fashion.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agolibpwquality: Update to 1.4.5
Michael Tremer [Fri, 16 Dec 2022 16:52:20 +0000 (16:52 +0000)] 
libpwquality: Update to 1.4.5

The project has moved to GitHub.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agocracklib: Remove Python module
Michael Tremer [Fri, 16 Dec 2022 16:39:03 +0000 (16:39 +0000)] 
cracklib: Remove Python module

The Python module does not build with Python 3 and we do not need it
anyways. So this patch disables it.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agoaudit: Drop package
Michael Tremer [Fri, 16 Dec 2022 16:24:25 +0000 (16:24 +0000)] 
audit: Drop package

This package is not very useful as we do not have any sources
configured, nor do we have the audit subsystem enabled in the kernel.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agoDrop epoch from all files
Michael Tremer [Fri, 16 Dec 2022 16:23:24 +0000 (16:23 +0000)] 
Drop epoch from all files

We are having a fresh start, so let's use it for better version numbers.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agoipfire-release: Install pakfire by default and try to install vim
Michael Tremer [Fri, 16 Dec 2022 16:20:08 +0000 (16:20 +0000)] 
ipfire-release: Install pakfire by default and try to install vim

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agoipfire-release: No longer install pakfire-build into the build environment
Michael Tremer [Fri, 16 Dec 2022 16:19:10 +0000 (16:19 +0000)] 
ipfire-release: No longer install pakfire-build into the build environment

Pakfire does not need any internal components any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agonewt: Fix build against Python 3
Michael Tremer [Fri, 16 Dec 2022 16:16:49 +0000 (16:16 +0000)] 
newt: Fix build against Python 3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agopython3-gobject3: Update to 3.42.2
Michael Tremer [Fri, 16 Dec 2022 16:08:21 +0000 (16:08 +0000)] 
python3-gobject3: Update to 3.42.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agogobject-introspection: Update to 1.74.0
Michael Tremer [Fri, 16 Dec 2022 16:06:37 +0000 (16:06 +0000)] 
gobject-introspection: Update to 1.74.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agopython3-cairo: Update to 1.23.0
Michael Tremer [Fri, 16 Dec 2022 16:04:57 +0000 (16:04 +0000)] 
python3-cairo: Update to 1.23.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agoavahi: Update to 0.8
Michael Tremer [Fri, 16 Dec 2022 16:03:05 +0000 (16:03 +0000)] 
avahi: Update to 0.8

Drop dependency to Python 2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agorrdtool: Update to 1.8.0
Michael Tremer [Fri, 16 Dec 2022 15:40:26 +0000 (15:40 +0000)] 
rrdtool: Update to 1.8.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agocairo: Update to 1.16.0
Michael Tremer [Fri, 16 Dec 2022 15:27:11 +0000 (15:27 +0000)] 
cairo: Update to 1.16.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agopython3-dbus: Update to 1.3.2
Michael Tremer [Fri, 16 Dec 2022 15:04:40 +0000 (15:04 +0000)] 
python3-dbus: Update to 1.3.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Disable all sorts of useless Device Mapper targets
Michael Tremer [Thu, 15 Dec 2022 17:35:29 +0000 (17:35 +0000)] 
kernel: Disable all sorts of useless Device Mapper targets

This patch also compiles all sorts of device mapper stuff as modules.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Disable support for floppy drives and block ramdisks
Michael Tremer [Thu, 15 Dec 2022 17:29:37 +0000 (17:29 +0000)] 
kernel: Disable support for floppy drives and block ramdisks

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Enable modern features of the block layer
Michael Tremer [Thu, 15 Dec 2022 17:25:35 +0000 (17:25 +0000)] 
kernel: Enable modern features of the block layer

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Disable the Distributed Lock Manager
Michael Tremer [Thu, 15 Dec 2022 16:57:38 +0000 (16:57 +0000)] 
kernel: Disable the Distributed Lock Manager

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Enable support for ExFAT & NTFS
Michael Tremer [Thu, 15 Dec 2022 16:53:26 +0000 (16:53 +0000)] 
kernel: Enable support for ExFAT & NTFS

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Enable support for Hyper-V across the board
Michael Tremer [Thu, 15 Dec 2022 16:48:45 +0000 (16:48 +0000)] 
kernel: Enable support for Hyper-V across the board

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Disable I3C
Michael Tremer [Thu, 15 Dec 2022 15:50:02 +0000 (15:50 +0000)] 
kernel: Disable I3C

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Update Ethernet driver configuration
Michael Tremer [Wed, 14 Dec 2022 20:02:45 +0000 (20:02 +0000)] 
kernel: Update Ethernet driver configuration

Enable what hasn't been enabled before, and disable PIO mode where
possible.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Merge aarch64 & x86_64
Michael Tremer [Wed, 14 Dec 2022 18:32:33 +0000 (18:32 +0000)] 
kernel: Merge aarch64 & x86_64

This only sync configuration that seems to have been different between
those two architectures for no reason.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Compile EHCI/OHCI/UHCI support as modules
Michael Tremer [Wed, 14 Dec 2022 18:12:08 +0000 (18:12 +0000)] 
kernel: Compile EHCI/OHCI/UHCI support as modules

The USB core will always be compiled into the kernel (because I believe
that we have virtually no systems which won't have a USB bus).

The others will only be loaded when necessary.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Compile the entire SCSI subsystem as modules
Michael Tremer [Wed, 14 Dec 2022 18:04:39 +0000 (18:04 +0000)] 
kernel: Compile the entire SCSI subsystem as modules

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Compile the ATA subsystem as a module
Michael Tremer [Wed, 14 Dec 2022 17:40:35 +0000 (17:40 +0000)] 
kernel: Compile the ATA subsystem as a module

It probably was a good assumption to compile this in, but since more
hardware is using NVMe, I think this might not be used on all systems
any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Compile the MMC subsystem as a module
Michael Tremer [Wed, 14 Dec 2022 17:39:12 +0000 (17:39 +0000)] 
kernel: Compile the MMC subsystem as a module

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Disable the multimedia subsystem
Michael Tremer [Wed, 14 Dec 2022 17:37:30 +0000 (17:37 +0000)] 
kernel: Disable the multimedia subsystem

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Enable all supported platforms for ARM
Michael Tremer [Wed, 14 Dec 2022 17:32:56 +0000 (17:32 +0000)] 
kernel: Enable all supported platforms for ARM

These are the platforms that are currently supported in IPFire 2 and
their depending drivers.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Disable overloading ACPI methods
Michael Tremer [Wed, 14 Dec 2022 16:23:57 +0000 (16:23 +0000)] 
kernel: Disable overloading ACPI methods

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Wipe all memory when rebooting on EFI
Michael Tremer [Wed, 14 Dec 2022 16:21:04 +0000 (16:21 +0000)] 
kernel: Wipe all memory when rebooting on EFI

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Wipe all caller-used registers on exit from the function
Michael Tremer [Wed, 14 Dec 2022 16:18:39 +0000 (16:18 +0000)] 
kernel: Wipe all caller-used registers on exit from the function

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Make the scheduler aware of SMT
Michael Tremer [Wed, 14 Dec 2022 16:14:18 +0000 (16:14 +0000)] 
kernel: Make the scheduler aware of SMT

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Trust the CPU's RNG
Michael Tremer [Wed, 14 Dec 2022 16:12:13 +0000 (16:12 +0000)] 
kernel: Trust the CPU's RNG

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Enable all TPM devices
Michael Tremer [Wed, 14 Dec 2022 16:10:21 +0000 (16:10 +0000)] 
kernel: Enable all TPM devices

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Enable IOMMU and set it to strict mode
Michael Tremer [Wed, 14 Dec 2022 16:08:09 +0000 (16:08 +0000)] 
kernel: Enable IOMMU and set it to strict mode

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Improve memory hardening with KFENCE
Michael Tremer [Wed, 14 Dec 2022 16:04:03 +0000 (16:04 +0000)] 
kernel: Improve memory hardening with KFENCE

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Enable Kernel Lockdown in Confidentiality Mode
Michael Tremer [Wed, 14 Dec 2022 15:53:51 +0000 (15:53 +0000)] 
kernel: Enable Kernel Lockdown in Confidentiality Mode

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Set HZ=100
Michael Tremer [Wed, 14 Dec 2022 15:50:37 +0000 (15:50 +0000)] 
kernel: Set HZ=100

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Enable cpufreq support for AMD processors
Michael Tremer [Wed, 14 Dec 2022 15:43:57 +0000 (15:43 +0000)] 
kernel: Enable cpufreq support for AMD processors

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Enable support for all sorts of ACPI components
Michael Tremer [Wed, 14 Dec 2022 15:40:33 +0000 (15:40 +0000)] 
kernel: Enable support for all sorts of ACPI components

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Disable some character devices that do not make sense
Michael Tremer [Wed, 14 Dec 2022 15:32:32 +0000 (15:32 +0000)] 
kernel: Disable some character devices that do not make sense

Like vibrators.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Make graphics configruation sane
Michael Tremer [Wed, 14 Dec 2022 15:27:22 +0000 (15:27 +0000)] 
kernel: Make graphics configruation sane

This patch disables lots of legacy hardware that should not be found in
the IPFire context and enables any modern GPUs.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Disable syscalls that allows processes to r/w other processes' memory
Michael Tremer [Wed, 14 Dec 2022 15:19:38 +0000 (15:19 +0000)] 
kernel: Disable syscalls that allows processes to r/w other processes' memory

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Mount devtmpfs with noexec, etc.
Michael Tremer [Wed, 14 Dec 2022 15:14:14 +0000 (15:14 +0000)] 
kernel: Mount devtmpfs with noexec, etc.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Enable/disable (mainly wireless) network hardware
Michael Tremer [Wed, 14 Dec 2022 15:11:06 +0000 (15:11 +0000)] 
kernel: Enable/disable (mainly wireless) network hardware

This patch enables modules for various modern WiFi/WWAN devices, and
disables support for devices that are not supported by us any more (i.e.
802.11b only cards).

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Enable WireGuard
Michael Tremer [Wed, 14 Dec 2022 14:22:52 +0000 (14:22 +0000)] 
kernel: Enable WireGuard

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Enable SLS on x86
Michael Tremer [Wed, 14 Dec 2022 11:34:55 +0000 (11:34 +0000)] 
kernel: Enable SLS on x86

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Disable option to execute 32 bit binaries
Michael Tremer [Wed, 14 Dec 2022 11:29:43 +0000 (11:29 +0000)] 
kernel: Disable option to execute 32 bit binaries

Since we are a 64 bit only distribution, there is no need to compile in
any support for 32 bit binaries.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Compile binfmt_misc as a module
Michael Tremer [Wed, 14 Dec 2022 11:09:11 +0000 (11:09 +0000)] 
kernel: Compile binfmt_misc as a module

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Disable /dev/mem
Michael Tremer [Wed, 14 Dec 2022 11:07:04 +0000 (11:07 +0000)] 
kernel: Disable /dev/mem

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
17 months agokernel: Build all HWRNGs as modules
Michael Tremer [Wed, 14 Dec 2022 11:04:36 +0000 (11:04 +0000)] 
kernel: Build all HWRNGs as modules

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>