# Disable features broken by exclusion of upstream files debian/dfsg/arch-powerpc-platforms-8xx-ucode-disable.patch debian/dfsg/drivers-media-dvb-dvb-usb-af9005-disable.patch debian/dfsg/video-remove-nvidiafb-and-rivafb.patch debian/dfsg/documentation-fix-broken-link-to-cipso-draft.patch # Changes to support package build system debian/uname-version-timestamp.patch debian/kernelvariables.patch debian/mips-boston-disable-its.patch debian/mips-ieee754-relaxed.patch debian/mips-enable-r2-to-r6-emu-by-default.patch debian/arch-sh4-fix-uimage-build.patch debian/tools-perf-perf-read-vdso-in-libexec.patch debian/tools-perf-install-python-bindings.patch debian/wireless-add-debian-wireless-regdb-certificates.patch debian/export-symbols-needed-by-binder.patch debian/android-enable-building-binder-as-module.patch debian/documentation-drop-sphinx-version-check.patch debian/perf-traceevent-support-asciidoctor-for-documentatio.patch debian/kbuild-look-for-module.lds-under-arch-directory-too.patch debian/kbuild-abort-build-if-subdirs-used.patch debian/makefile-make-compiler-version-comparison-optional.patch bugfix/all/revert-tools-build-clean-cflags-and-ldflags-for-fixdep.patch debian/fixdep-allow-overriding-hostcc-and-hostld.patch debian/linux-perf-remove-remaining-source-filenames-from-executable.patch # Fixes/improvements to firmware loading features/all/drivers-media-dvb-usb-af9005-request_firmware.patch debian/iwlwifi-do-not-request-unreleased-firmware.patch debian/firmware_loader-log-direct-loading-failures-as-info-for-d-i.patch bugfix/all/radeon-amdgpu-firmware-is-required-for-drm-and-kms-on-r600-onward.patch # Change some defaults for security reasons debian/af_802154-Disable-auto-loading-as-mitigation-against.patch debian/rds-Disable-auto-loading-as-mitigation-against-local.patch debian/hamradio-disable-auto-loading-as-mitigation-against-local-exploits.patch debian/fs-enable-link-security-restrictions-by-default.patch # Set various features runtime-disabled by default debian/yama-disable-by-default.patch debian/add-sysctl-to-disallow-unprivileged-CLONE_NEWUSER-by-default.patch features/all/security-perf-allow-further-restriction-of-perf_event_open.patch features/x86/intel-iommu-add-option-to-exclude-integrated-gpu-only.patch features/x86/intel-iommu-add-kconfig-option-to-exclude-igpu-by-default.patch # Disable autoloading/probing of various drivers by default debian/snd-pcsp-disable-autoload.patch bugfix/x86/viafb-autoload-on-olpc-xo1.5-only.patch debian/fjes-disable-autoload.patch # Taint if dangerous features are used debian/fanotify-taint-on-use-of-fanotify_access_permissions.patch debian/btrfs-warn-about-raid5-6-being-experimental-at-mount.patch # Arch bug fixes bugfix/arm/arm-dts-kirkwood-fix-sata-pinmux-ing-for-ts419.patch bugfix/x86/perf-tools-fix-unwind-build-on-i386.patch bugfix/arm/arm-mm-export-__sync_icache_dcache-for-xen-privcmd.patch bugfix/powerpc/powerpc-boot-fix-missing-crc32poly.h-when-building-with-kernel_xz.patch bugfix/arm64/arm64-acpi-Add-fixup-for-HPE-m400-quirks.patch # Arch features features/x86/x86-memtest-WARN-if-bad-RAM-found.patch features/x86/x86-make-x32-syscall-support-conditional.patch # Miscellaneous bug fixes bugfix/all/disable-some-marvell-phys.patch bugfix/all/fs-add-module_softdep-declarations-for-hard-coded-cr.patch bugfix/all/proc-fix-missing-pde_set_flags-for-net-proc-files.patch # Miscellaneous features # Lockdown missing pieces features/all/lockdown/efi-add-an-efi_secure_boot-flag-to-indicate-secure-b.patch features/all/lockdown/efi-lock-down-the-kernel-if-booted-in-secure-boot-mo.patch features/all/lockdown/mtd-disable-slram-and-phram-when-locked-down.patch features/all/lockdown/arm64-add-kernel-config-option-to-lock-down-when.patch # Improve integrity platform keyring for kernel modules verification features/all/db-mok-keyring/0003-MODSIGN-checking-the-blacklisted-hash-before-loading-a-kernel-module.patch features/all/db-mok-keyring/KEYS-Make-use-of-platform-keyring-for-module-signature.patch features/all/db-mok-keyring/trust-machine-keyring-by-default.patch # Security fixes # Fix exported symbol versions bugfix/all/module-disable-matching-missing-version-crc.patch # Tools bug fixes bugfix/all/usbip-document-tcp-wrappers.patch bugfix/all/kbuild-fix-recordmcount-dependency.patch bugfix/all/tools-perf-remove-shebangs.patch bugfix/all/tools-build-remove-bpf-run-time-check-at-build-time.patch bugfix/all/cpupower-fix-checks-for-cpu-existence.patch bugfix/all/libapi-define-_fortify_source-as-2-not-empty.patch bugfix/all/tools-perf-fix-missing-ldflags-for-some-programs.patch bugfix/all/tools_lib_symbol_use_d_fortify_source_2_for_non_debug_builds.patch bugfix/all/perf-tools-support-extra-cxxflags.patch bugfix/all/perf-tools-pass-extra_cflags-through-to-libbpf-build-again.patch bugfix/all/kbuild-bpf-fix-btf-reproducibility.patch bugfix/all/perf-docs-Fix-perf-check-manual-page-built-with-asci.patch bugfix/all/libbpf-use-the-standard-fixdep-build-rule.patch bugfix/all/tools-bootconfig-cleanup-bootconfig-footer-size-calc.patch bugfix/all/bootconfig-fix-unaligned-access-when-building-footer.patch bugfix/all/bootconfig-fix-negative-seeks-on-32-bit-with-lfs-ena.patch # ABI maintenance ## own patches krd/0001-established-timeout.patch krd/0002-local-ports.patch krd/0003-bridge-group_fwd_mask.patch krd/0004-certs-genkey.patch ## 3rd party patches mixed-arch/0001-graysky2-more-ISA-levels-and-uarches.patch mixed-arch/0002-ZEN-Restore-CONFIG_OPTIMIZE_FOR_PERFORMANCE_O3.patch mixed-arch/0003-krd-adjust-CONFIG_CC_OPTIMIZE_FOR_PERFORMANCE_O3.patch mixed-arch/0004-XANMOD-x86-build-prevent-generating-avx2-floating-point-code.patch mixed-arch/0005-krd-adjust-KBUILD_CFLAGS-fno-tree-vectorize.patch mixed-arch/0006-XANMOD-kbuild-add-GCC-SMS-based-modulo-scheduling-flags.patch misc-openwrt/0101-mac80211-ignore-AP-power-level-when-tx-power-type-is.patch misc-openwrt/0102-mac80211-avoid-crashing-missing-band.patch misc-openwrt/0103-mac80211-sta-randomize-BA-session-dialog-token-alloc.patch misc-openwrt/0104-mac80211-minstrel_ht-fix-MINSTREL_FRAC-macro.patch misc-openwrt/0105-mac80211-minstrel_ht-reduce-fluctuations-in-rate-pro.patch misc-openwrt/0106-mac80211-minstrel_ht-rework-rate-downgrade-code-and-.patch misc-openwrt/0107-mac80211-increase-quantum-for-airtime-scheduler.patch misc-openwrt/0108-mac80211-add-AQL-support-for-broadcast-packets.patch misc-openwrt/0109-mac80211-txq-tune.patch misc-openwrt/0110-cfg80211-aql-txq-limit.patch misc-openwrt/0201-sched-sch_cake-fix-bulk-flow-accounting-logic-for-host.patch misc-openwrt/0301-fq-adjust-memory-size.patch patchset-pf/cpuidle/0001-cpuidle-Prefer-teo-over-menu-governor.patch patchset-pf/kbuild/0001-ice-mark-ice_write_prof_mask_reg-as-noinline.patch patchset-pf/kbuild/0002-wifi-mac80211-mark-copy_mesh_setup-as-noinline.patch patchset-xanmod/binder/0001-binder-turn-into-module.patch patchset-xanmod/clearlinux/0001-sched-wait-Do-accept-in-LIFO-order-for-cache-efficie.patch patchset-xanmod/clearlinux/0002-firmware-Enable-stateless-firmware-loading.patch patchset-xanmod/clearlinux/0003-locking-rwsem-spin-faster.patch patchset-xanmod/clearlinux/0004-drivers-initialize-ata-before-graphics.patch patchset-xanmod/net/netfilter/0001-netfilter-Add-netfilter-nf_tables-fullcone-support.patch patchset-xanmod/net/netfilter/0002-netfilter-add-xt_FLOWOFFLOAD-target.patch patchset-xanmod/net/tcp/bbr3/0001-tcp_bbr-v3-update-TCP-bbr-congestion-control-module-.patch patchset-xanmod/net/tcp/cloudflare/0001-tcp-Add-a-sysctl-to-skip-tcp-collapse-processing-whe.patch patchset-xanmod/pci_acso/0001-PCI-Enable-overrides-for-missing-ACS-capabilities.patch patchset-xanmod/valve/0001-extcon-Add-driver-for-Steam-Deck.patch patchset-xanmod/valve/0002-hwmon-Add-driver-for-Steam-Deck-s-EC-sensors.patch patchset-xanmod/valve/0003-hwmon-steamdeck-hwmon-Add-support-for-max-battery-le.patch patchset-xanmod/valve/0004-leds-steamdeck-Add-support-for-Steam-Deck-LED.patch patchset-xanmod/valve/0005-mfd-Add-MFD-core-driver-for-Steam-Deck.patch patchset-xanmod/valve/0006-mfd-steamdeck-Expose-controller-board-power-in-sysfs.patch patchset-xanmod/xanmod/0001-kbuild-Re-add-.config-file-required-to-sign-external.patch patchset-xanmod/xanmod/0002-XANMOD-fair-Set-scheduler-tunable-latencies-to-unsca.patch patchset-xanmod/xanmod/0003-XANMOD-sched-Add-yield_type-sysctl-to-reduce-or-disa.patch patchset-xanmod/xanmod/0004-XANMOD-block-mq-deadline-Increase-write-priority-to-.patch patchset-xanmod/xanmod/0005-XANMOD-block-mq-deadline-Disable-front_merges-by-def.patch patchset-xanmod/xanmod/0006-XANMOD-block-Set-rq_affinity-to-force-complete-I-O-r.patch patchset-xanmod/xanmod/0007-XANMOD-blk-wbt-Set-wbt_default_latency_nsec-to-2msec.patch patchset-xanmod/xanmod/0008-XANMOD-kconfig-add-500Hz-timer-interrupt-kernel-conf.patch patchset-xanmod/xanmod/0009-XANMOD-vfs-Decrease-rate-at-which-vfs-caches-are-rec.patch patchset-xanmod/xanmod/0010-XANMOD-mm-Raise-max_map_count-default-value.patch patchset-xanmod/xanmod/0011-XANMOD-mm-vmscan-Reduce-amount-of-swapping.patch patchset-xanmod/xanmod/0012-XANMOD-sched-autogroup-Add-kernel-parameter-and-conf.patch patchset-xanmod/xanmod/0013-XANMOD-cpufreq-tunes-ondemand-and-conservative-gover.patch patchset-xanmod/xanmod/0014-XANMOD-lib-kconfig.debug-disable-default-SYMBOLIC_ER.patch patchset-xanmod/xanmod/0015-XANMOD-scripts-setlocalversion-remove-tag-for-git-re.patch patchset-xanmod/xanmod/0016-XANMOD-scripts-setlocalversion-Move-localversion-fil.patch patchset-zen/sauce/0001-ZEN-Add-VHBA-driver.patch patchset-zen/sauce/0002-ZEN-PCI-Add-Intel-remapped-NVMe-device-support.patch patchset-zen/sauce/0003-ZEN-Disable-stack-conservation-for-GCC.patch patchset-zen/sauce/0004-ZEN-Input-evdev-use-call_rcu-when-detaching-client.patch patchset-zen/sauce/0005-ZEN-Add-config-for-default-of-unprivileged_userns_cl.patch patchset-zen/sauce/0006-ZEN-cpufreq-Remove-schedutil-dependency-on-Intel-AMD.patch patchset-zen/sauce/0007-ZEN-intel-pstate-Implement-enable-parameter.patch patchset-zen/sauce/0008-ZEN-drm-amdgpu-pm-Allow-override-of-min_power_limit-.patch patchset-zen/sauce/0009-ZEN-mm-Stop-kswapd-early-when-nothing-s-waiting-for-.patch patchset-zen/sauce/0010-ZEN-ahci-Disable-staggered-spinup-by-default.patch patchset-zen/sauce/0011-ZEN-kernel-Kconfig.preempt-Remove-EXPERT-conditional.patch patchset-zen/sauce/0012-ZEN-INTERACTIVE-Base-config-item.patch patchset-zen/sauce/0013-ZEN-INTERACTIVE-Use-BFQ-as-the-elevator-for-SQ-devic.patch patchset-zen/sauce/0014-block-Clean-up-elevator_set_default.patch patchset-zen/sauce/0015-ZEN-INTERACTIVE-Use-Kyber-as-the-elevator-for-MQ-dev.patch patchset-zen/sauce/0016-ZEN-INTERACTIVE-Enable-background-reclaim-of-hugepag.patch patchset-zen/sauce/0017-ZEN-INTERACTIVE-Tune-EEVDF-for-interactivity.patch patchset-zen/sauce/0018-ZEN-INTERACTIVE-Tune-ondemand-governor-for-interacti.patch patchset-zen/sauce/0019-ZEN-INTERACTIVE-mm-Disable-unevictable-compaction.patch patchset-zen/sauce/0020-ZEN-INTERACTIVE-mm-Disable-watermark-boosting-by-def.patch patchset-zen/sauce/0021-ZEN-INTERACTIVE-mm-swap-Disable-swap-in-readahead.patch patchset-zen/sauce/0022-ZEN-INTERACTIVE-Document-PDS-BMQ-configuration.patch patchset-zen/sauce/0023-squash-ZEN-INTERACTIVE-Use-Kyber-as-the-elevator-for.patch patchset-pf/steady/0001-io_uring-zcrx-always-pass-page-to-io_zcrx_copy_chunk.patch patchset-pf/steady/0002-io_uring-zcrx-assert-area-type-in-io_zcrx_iov_page.patch patchset-pf/steady/0003-io_uring-zcrx-prepare-fallback-for-larger-pages.patch patchset-pf/steady/0004-fs-proc-task_mmu-remove-conversion-of-seq_file-posit.patch patchset-pf/steady/0005-cifs-Add-support-for-creating-reparse-points-over-SM.patch patchset-pf/steady/0006-smb-client-fix-creating-symlinks-under-POSIX-mounts.patch patchset-pf/steady/0007-watchdog-intel_oc_wdt-Do-not-try-to-write-into-const.patch patchset-pf/steady/0008-ALSA-usb-audio-Add-mute-TLV-for-playback-volumes-on-.patch patchset-pf/steady/0009-ALSA-hda-realtek-Fix-headset-mic-for-TongFang-X6-AF-.patch patchset-pf/steady/0010-of_numa-fix-uninitialized-memory-nodes-causing-kerne.patch patchset-pf/steady/0011-mm-userfaultfd-fix-kmap_local-LIFO-ordering-for-CONF.patch patchset-pf/steady/0012-mm-damon-core-prevent-unnecessary-overflow-in-damos_.patch patchset-pf/steady/0013-mm-fix-accounting-of-memmap-pages.patch patchset-pf/steady/0014-mm-move-page-table-sync-declarations-to-linux-pgtabl.patch patchset-pf/steady/0015-mm-introduce-and-use-pgd-p4d-_populate_kernel.patch patchset-pf/steady/0016-x86-mm-64-define-ARCH_PAGE_TABLE_SYNC_MASK-and-arch_.patch patchset-pf/steady/0017-ALSA-hda-tas2781-fix-tas2563-EFI-data-endianness.patch patchset-pf/steady/0018-ALSA-hda-tas2781-reorder-tas2563-calibration-variabl.patch patchset-pf/steady/0019-ALSA-hda-hdmi-Add-pin-fix-for-another-HP-EliteDesk-8.patch patchset-pf/steady/0020-mm-fix-possible-deadlock-in-kmemleak.patch patchset-pf/steady/0021-kasan-fix-GCC-mem-intrinsic-prefix-with-sw-tags.patch patchset-pf/steady/0022-sched-Fix-sched_numa_find_nth_cpu-if-mask-offline.patch