-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 26 Nov 2019 01:33:11 +0000 Source: linux Architecture: source Version: 5.4-1~exp1 Distribution: experimental Urgency: medium Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Ben Hutchings <ben@decadent.org.uk> Closes: 927026 Changes: linux (5.4-1~exp1) experimental; urgency=medium . * New upstream release: https://kernelnewbies.org/Linux_5.4 . [ Ben Hutchings ] * lockdown: Rebase on upstream Lockdown LSM: - Refresh "efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode" - Update "efi: Lock down the kernel if booted in secure boot mode" - Update "Add a SysRq option to lift kernel lockdown" - Update "mtd: Disable slram and phram when locked down" - Update "arm64: add kernel config option to lock down when in Secure Boot mode" - Refresh "lockdown: Refer to Debian wiki until manual page exists" - Drop all other lockdown patches - Enable SECURITY_LOCKDOWN_LSM, LOCK_DOWN_KERNEL_FORCE_NONE, LOCK_DOWN_IN_EFI_SECURE_BOOT * [armel/marvell] lockdown: Disable Lockdown as it now selects MODULE_SIG * [amd64] Update "x86: Make x32 syscall support conditional …" for 5.4 * debian/lib/python/debian_linux/abi.py: Add support for symbol namespaces * debian/bin/genpatch-rt: Fix series generation from git . [ Romain Perier ] * Rebased the following patches onto 5.4.x: - debian/version.patch - debian/ia64-hardcode-arch-script-output.patch - bugfix/all/ radeon-amdgpu-firmware-is-required-for-drm-and-kms-on-r600-onward.patch - features/all/aufs5/aufs5-mmap.patch - features/all/aufs5/aufs5-standalone.patch - features/x86/ intel-iommu-add-kconfig-option-to-exclude-igpu-by-default.patch - bugfix/all/fs-add-module_softdep-declarations-for-hard-coded-cr.patch - debian/revert-objtool-fix-config_stack_validation-y-warning.patch - features/all/db-mok-keyring/ 0003-MODSIGN-checking-the-blacklisted-hash-before-loading-a-kernel-module .patch - bugfix/all/tools-perf-man-date.patch - bugfix/all/usbip-fix-misuse-of-strncpy.patch - bugfix/all/partially-revert-usb-kconfig-using-select-for-usb_co.patch . [ John Paul Adrian Glaubitz ] * [m68k] Enable CONFIG_PATA_BUDDHA as module . [ Aurelien Jarno ] * [armhf] Add support for STM32MP1 SoC: enable ARCH_STM32, CRYPTO_DEV_STM32_CRC, CRYPTO_DEV_STM32_CRYP, CRYPTO_DEV_STM32_HASH, DRM_PANEL_ORISETECH_OTM8009A, DRM_SII902X, DRM_STM, DRM_STM_DSI, HW_RANDOM_STM32, I2C_STM32F7, INPUT_STPMIC1_ONKEY, MFD_STM32_LPTIMER, MFD_STPMIC1, MTD_NAND_STM32_FMC2, PHY_STM32_USBPHYC, PWM_STM32_LP, REGULATOR_STM32_BOOSTER, REGULATOR_STM32_PWR, REGULATOR_STM32_VREFBUF, REGULATOR_STPMIC1, REMOTEPROC, RTC_DRV_STM32, SERIAL_STM32, SERIAL_STM32_CONSOLE, SND_AUDIO_GRAPH_CARD, SND_SOC_CS42L51_I2C, SND_SOC_STM32_DFSDM, SND_SOC_STM32_I2S, SND_SOC_STM32_SAI, SND_SOC_STM32_SPDIFRX, SPI_STM32, SPI_STM32_QSPI, STM32_DMA, STM32_DMAMUX, STM32_MDMA, STM32_RPROC, STPMIC1_WATCHDOG, TOUCHSCREEN_EDT_FT5X06. * [arm64] Re-enable BT_HCIUART_{BCM,LL} (arm64 version of #906048). * [arm64,armhf] Enable CLK_RASPBERRYPI and RASPBERRYPI_CPUFREQ. . [ Salvatore Bonaccorso ] * md: Enable MD_CLUSTER as module (Closes: #927026) Checksums-Sha1: d6680ca41fbee169b865836e037c45d2d1f63c0e 206738 linux_5.4-1~exp1.dsc 663ef3ef5a3fdedb90e5deca27ea38231942afc7 113627808 linux_5.4.orig.tar.xz 8e01bed595ec56ff753308d9f882a898c17e5e94 1153596 linux_5.4-1~exp1.debian.tar.xz de90ea9e2643038d638c003fdffe184ab348ecd9 52720 linux_5.4-1~exp1_source.buildinfo Checksums-Sha256: 85de4bb434162d7826a815d22c027f3a44a4b38555c40ec3784e2d2f03e68b96 206738 linux_5.4-1~exp1.dsc 3356cb3edcf11a5207d59593fcadcb3c5b4f06b604fb3434e19d92ea83375cd4 113627808 linux_5.4.orig.tar.xz 04ecaf5dee0a4410194aa5c2a88186f71606cea192e6606e49dd9d7651b994ad 1153596 linux_5.4-1~exp1.debian.tar.xz 427ad561409d5c978fb5791c6b04f85ec4791110a9e4513cccbc6755b276a372 52720 linux_5.4-1~exp1_source.buildinfo Files: 7b63c96c22a5253d0d732a7117dec2c3 206738 kernel optional linux_5.4-1~exp1.dsc 2a12dabf82304c9f4bad41c09ce62c35 113627808 kernel optional linux_5.4.orig.tar.xz 017e1f4b4e3743641201fd275aea0599 1153596 kernel optional linux_5.4-1~exp1.debian.tar.xz d90fced78e9f0301afd42e1140513f7c 52720 kernel optional linux_5.4-1~exp1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAl3dkbEACgkQ57/I7JWG EQl8QBAA1OAw/hWA7RkGU5eiTmH1mLHAQTXi92ppMWnvy8mE4KY5QBVnA1q9J/u9 EulnG6Rd6jUMzHH+Ug72j6xi0rzm7e9f0h16UxaVdXPmioS/Wg8+jyrdG6rucmBU nrnK8Xq/QfZsQ4LWNMwDbTNw70se4KybKfXowC07A49Hk6gSVn3eyFFaY41WqEiE UmEGlfeeBmW4cs7EXpifxSDPYxKxIJKtWFao4WJVCbE7yKUP0akheOAwPS/h7y/q Ro9KYlTVYS1uC9ZHrDN7G1LR4Lyyiczvr5qHP/JexeVSOi7ghZih3qwz/opb6ji6 1LQayakG1+Cd3juYLDPL4OJuC8xB537pbTfokqFRjfPr75eZq4FUHl4nspLBWU1E k3T78Ju0pI0c7cJvrEQ0kSxpHa4yJmo4Czo2upRTa79OX03vU9V0ATRylg4/2AsD IynrpvaZwNVqurUnTKXQmhUouNdlKjSbtwiSyhcrHnfc8lbN32Ta7QqfmrZXX9ls S9Vu7/7AT4+TCMF1aoo6ZCTfpGVkA6mfNl124KG0QfIIli2uPGvGKiApolFkglLM Gp6/PFPDqszE0WJiYkU1aZvVc/AfBpR8sydFJ9pDz2juBO39mEYuMISHCe8N6/zs +/Il9jXINk+L7aL2wBR/c4EvCtjSht1IaBMPrQejNuV6JzrSwVc= =UugJ -----END PGP SIGNATURE-----