webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-19 15:32:59 +02:00
Code Issues Packages Projects Releases Wiki Activity
12,011 Commits 2 Branches 1 Tag
eeab80f8dcb7ad8564ac684e014f1a67be82923e
Commit Graph

27 Commits

Author SHA1 Message Date
Arne Fitzenreiter
6c9651f620 kernel: update to 4.14.43 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-05-24 07:40:22 +02:00
Arne Fitzenreiter
b69338e0e8 kernel: update to 4.14.38 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-04-30 12:26:30 +02:00
Arne Fitzenreiter
8718a67ec5 kernel: disable crng unseeded use message spamming 
there was a bug until 4.14.36 that this message are not printed at all
now it work and spam the log at boot.
For security it is is a nightmare to use unseeded random but we and the user
cannot do anything. This is work for platform maintainers to get the crng
working earlier.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-04-29 09:50:06 +02:00
Arne Fitzenreiter
96a2ff029e kernel: update config 
disable isdn
disable audit
disable profiling on arm
disable scsi driver on arm

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-04-11 18:36:57 +02:00
Arne Fitzenreiter
b465322d7c kernel: x86_64 enable DEVFREQ modules 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-03-30 16:39:02 +02:00
Arne Fitzenreiter
e5ef944d6e kernel: update to 4.14.21 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-02-23 19:33:15 +01:00
Arne Fitzenreiter
c7a00111e0 kernel: update to 4.14.16 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-02-02 07:17:10 +01:00
Arne Fitzenreiter
b715af20c9 kernel: update to 4.14.13 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-01-10 22:20:33 +01:00
Arne Fitzenreiter
6d295033e1 kernel: update to 4.14.12 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-01-05 23:31:54 +01:00
Arne Fitzenreiter
2e1fe3c816 kernel: update to 4.14.1 
only x86_config has updated yet and grsecurity is removed.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-11-22 12:29:36 +01:00
Arne Fitzenreiter
8b6380784c kernel: enable Mellanox ConnectX-4 ethernet driver on i586 cfg 
and disable debug for older Mellanox cards.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-07-27 20:11:14 +02:00
Arne Fitzenreiter
ddc7b38cc0 kernel: fix and enable layer7 filter 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-03-06 13:36:53 +01:00
Arne Fitzenreiter
60661dddae kernel: update to 4.9.12 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-02-25 15:08:29 +01:00
Arne Fitzenreiter
91648bd166 kernel: updated to 4.9.8 
at the moment its only for x86_64 and layer7 is disabled because it crashs.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2017-02-12 19:58:43 +01:00
Michael Tremer
f5194e7a38 kernel: Fix broken syntax in configuration file 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-07-15 11:09:42 +01:00
Arne Fitzenreiter
7959134a55 kernel: disable amd ccp support 
ccp based trng of the apu2 produce none random data.
Aes accleration is also not used because IPFire prefere
AES-NI if this is supported.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-07-11 11:00:55 +02:00
Arne Fitzenreiter
484e62046e kernel: update to 3.14.74 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-06-29 17:04:28 +02:00
Arne Fitzenreiter
545c15b0a1 kernel: add PC Engines(TM) APU2 LED driver 2016-03-26 10:15:45 +01:00
Arne Fitzenreiter
6fa34327dd kernel: enable NFS_DEBUG 
fixes #11053
 2016-03-14 18:04:38 +01:00
Arne Fitzenreiter
ee552b7e1a kernel: update to 3.14.61 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-02-19 07:18:29 +01:00
Arne Fitzenreiter
d651e48f70 kernel: disable grsecurity KSTACKOVERFLOW. 
this is the reason for crashes usb lan dongles and media devices.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-02-07 09:40:03 +01:00
Michael Tremer
857b2c795e Improve hardening by using -fstack-protector-strong 
This functionality is now available for us since we updated
to GCC 4.9 and just improves the stack smashing protector
in GCC.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-01-18 22:26:23 +00:00
Arne Fitzenreiter
905d1afd4e kernel: disable RANDSTRUCT 
RANDSRUCT is incompatible with ccache build.

fixes #10905
fixes #11012

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2016-01-13 07:24:34 +01:00
Arne Fitzenreiter
8ee2cb7803 kernel: enable intel_pstate driver. 
this is needed to use turbo boost of newer intel processors.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-12-02 14:14:30 +01:00
Arne Fitzenreiter
c9f0174979 kernel: update to 3.14.53 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-09-27 12:58:22 +02:00
Arne Fitzenreiter
4d4f36ef55 kernel: Update pcengines apu led patch for x86_64 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-09-20 12:46:12 +02:00
Michael Tremer
ba58389215 kernel: Add a preliminary kernel from the i586 PAE configuration 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-09-11 00:20:08 +02:00