Johnny Hughes
2018-02-03 53d6f0b757a916eb07eb2c7b0ca476cbae5a14da
Manual CentOS Debranding and config changes
4 files added
3 files modified
39 ■■■■■ changed files
SOURCES/centos-kpatch.x509 patch | view | raw | blame | history
SOURCES/centos-ldup.x509 patch | view | raw | blame | history
SOURCES/kernel-alt-4.11.0-aarch64.config 4 ●●●● patch | view | raw | blame | history
SOURCES/secureboot.cer patch | view | raw | blame | history
SOURCES/securebootca.cer patch | view | raw | blame | history
SOURCES/x509.genkey 6 ●●●● patch | view | raw | blame | history
SPECS/kernel-alt.spec 29 ●●●● patch | view | raw | blame | history
SOURCES/centos-kpatch.x509
Binary files differ
SOURCES/centos-ldup.x509
Binary files differ
SOURCES/kernel-alt-4.11.0-aarch64.config
@@ -670,10 +670,10 @@
CONFIG_CPU_FREQ_GOV_ATTR_SET=y
CONFIG_CPU_FREQ_GOV_COMMON=y
CONFIG_CPU_FREQ_STAT=y
# CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE is not set
CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE=y
# CONFIG_CPU_FREQ_DEFAULT_GOV_POWERSAVE is not set
# CONFIG_CPU_FREQ_DEFAULT_GOV_USERSPACE is not set
CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND=y
# CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND is not set
# CONFIG_CPU_FREQ_DEFAULT_GOV_CONSERVATIVE is not set
# CONFIG_CPU_FREQ_DEFAULT_GOV_SCHEDUTIL is not set
CONFIG_CPU_FREQ_GOV_PERFORMANCE=y
SOURCES/secureboot.cer
Binary files differ
SOURCES/securebootca.cer
Binary files differ
SOURCES/x509.genkey
@@ -5,9 +5,9 @@
x509_extensions = myexts
[ req_distinguished_name ]
O = Red Hat
CN = Red Hat Enterprise Linux kernel signing key
emailAddress = secalert@redhat.com
O = CentOS
CN = CentOS Linux kernel signing key
emailAddress = security@centos.org
[ myexts ]
basicConstraints=critical,CA:FALSE
SPECS/kernel-alt.spec
@@ -15,13 +15,13 @@
# For internal testing builds during development, it should be 0.
%global released_kernel 0
%global distro_build 44
%global distro_build 45
%define rpmversion 4.11.0
%define pkgrelease 44.4.1.el7a
%define pkgrelease 45.4.1.el7a
# allow pkg_release to have configurable %{?dist} tag
%define specrelease 44.4.1%{?dist}
%define specrelease 45.4.1%{?dist}
%define pkg_release %{specrelease}%{?buildid}
@@ -320,6 +320,7 @@
BuildRequires: openssl openssl-devel
BuildRequires: hmaccalc
BuildRequires: python-devel, newt-devel, perl(ExtUtils::Embed)
BuildRequires: git
%ifarch x86_64
BuildRequires: pesign >= 0.109-4
%endif
@@ -363,12 +364,12 @@
Source14: secureboot.cer
%define pesign_name redhatsecureboot301
%else
Source13: redhatsecurebootca2.cer
Source14: redhatsecureboot003.cer
Source13: securebootca.cer
Source14: secureboot.cer
%define pesign_name redhatsecureboot003
%endif
Source15: rheldup3.x509
Source16: rhelkpatch1.x509
Source15: centos-ldup.x509
Source16: centos-kpatch.x509
Source18: check-kabi
@@ -720,6 +721,17 @@
ApplyOptionalPatch linux-kernel-test.patch
# Any further pre-build tree manipulations happen here.
if [ ! -d .git ]; then
  git init
  git config user.email "noreply@centos.org"
  git config user.name "AltArch Kernel"
  git config gc.auto 0
  git add .
  git commit -a -q -m "baseline"
fi
#Altarch patches
chmod +x scripts/checkpatch.pl
@@ -1575,6 +1587,9 @@
%kernel_variant_files %{with_kdump} kdump
%changelog
* Fri Feb 02 2018 Johnny Hughes <johnny@centos.org> [4.11.0-45.4.1.el7a]
- updated with patch from QCOM for network functionality
* Sat Dec 09 2017 Frantisek Hrbata <fhrbata@hrbata.com> [4.11.0-44.4.1.el7a]
- [mm] kernel: pmd can become dirty without going through a COW cycle (Chris von Recklinghausen) [1518611 1518612] {CVE-2017-1000405}
- [powerpc] powernv: Fix missing attr initialisation in (Frantisek Hrbata) [1522845 1513834]