Keep an eye on wireguard
by Bruno Wolff III
While the author did not get much feedback from the kernel list when he
mentioned the project there, it has still been getting developed and it
works nicely for at least a few people who are using it (including myself).
The author does plan on submitting for inclusion in the kernel in the not
too distant future and hopefully that will result in more feedback and it
ultimately being included.
I have no problem building it for each kernel update. Someone made a copr
for it, but they don't seem to be updating for rawhide kernels.
The project's home page is at wireguard.io.
It is a lot easier to figure out than IPSEC. With git, if multiple governments
commit backdoors we'll at least be able to see the commits, unlike Juniper
whose change control is so bad they can't (or won't) tell who added backdoors
to their code.
7 years, 6 months
[PATCH] Check configuration files
by Miguel A. Flores Silverio
Duble check generated configuration files in order to avoid
discrepancies like this one:
https://bugzilla.redhat.com/show_bug.cgi?id=1347454
Signed-off-by: Miguel Flores Silverio <floresmigu3l(a)gmail.com>
---
* PATCHv1
- Check config files at compilation time
* PATCHv2
- Check config files before and after oldconfig is aplied
- Save log of mismatches in logs directory in tree
* PATCHv3
- save mismatches in .mismatches and exit compilation if
there any.
- Display error message and config options in .mismatches
- Fixed bug in awk statment
- Only save mismatches of enabled config options
- Delete temporary files outside function to avoid confusion
kernel.spec | 14 ++++++++++++++
1 file changed, 14 insertions(+)
diff --git a/kernel.spec b/kernel.spec
index 8d3587d..431a17c 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -1231,9 +1231,21 @@ rm -f kernel-%{version}-*debug.config
%define make make %{?cross_opts}
+# Check configuration files for any discrepancies
+CheckConfigs(){
+ awk 'NR==FNR{configs[$0]++;next;}
+ NR!=FNR && !($0 in configs)' $1 $2 | egrep '^CONFIG_' > .mismatches
+ if [ -s .mismatches ]
+ then
+ echo "Error: Mismatches found in configuration files"
+ cat .mismatches
+ exit 1
+ fi
+}
# now run oldconfig over all the config files
for i in *.config
do
+ cat $i > temp-$i
mv $i .config
Arch=`head -1 .config | cut -b 3-`
make ARCH=$Arch listnewconfig | grep -E '^CONFIG_' >.newoptions || true
@@ -1247,6 +1259,8 @@ do
make ARCH=$Arch oldnoconfig
echo "# $Arch" > configs/$i
cat .config >> configs/$i
+ CheckConfigs configs/$i temp-$i
+ rm temp-$i
done
# end of kernel config
%endif
--
2.7.4
7 years, 6 months
Kernel 4.7 rebase plans
by Laura Abbott
Hi,
I just submitted the 4.6.6 kernel update to stable for F23/F24. Both
4.7.1 and 4.6.7 are expected to be released upstream on Tuesday. 4.6.7
will be the last 4.6.y based kernel for F23/F24. 4.7.1 or 4.7.2 will
be available for testing sometime early next week.
If you have any questions please let us know.
Thanks,
Laura
7 years, 6 months
[PATCH]
by Yuta Kobayashi
This patch provides definition of Microsoft Type Cover Pro 4 (JP).
---
drivers/hid/hid-core.c | 2 ++
drivers/hid/hid-ids.h | 1 +
drivers/hid/hid-microsoft.c | 2 ++
drivers/hid/usbhid/hid-quirks.c | 1 +
4 files changed, 6 insertions(+)
diff --git a/drivers/hid/hid-core.c b/drivers/hid/hid-core.c
index 4f9c5c6..98f752a 100644
--- a/drivers/hid/hid-core.c
+++ b/drivers/hid/hid-core.c
@@ -727,6 +727,7 @@ static void hid_scan_collection(struct hid_parser *parser, unsigned type)
(hid->product == USB_DEVICE_ID_MS_TYPE_COVER_PRO_3 ||
hid->product == USB_DEVICE_ID_MS_TYPE_COVER_PRO_3_2 ||
hid->product == USB_DEVICE_ID_MS_TYPE_COVER_PRO_3_JP ||
+ hid->product == USB_DEVICE_ID_MS_TYPE_COVER_PRO_4_JP ||
hid->product == USB_DEVICE_ID_MS_TYPE_COVER_3 ||
hid->product == USB_DEVICE_ID_MS_POWER_COVER) &&
hid->group == HID_GROUP_MULTITOUCH)
@@ -1978,6 +1979,7 @@ static const struct hid_device_id hid_have_special_driver[] = {
{ HID_USB_DEVICE(USB_VENDOR_ID_MICROSOFT, USB_DEVICE_ID_MS_TYPE_COVER_PRO_3) },
{ HID_USB_DEVICE(USB_VENDOR_ID_MICROSOFT, USB_DEVICE_ID_MS_TYPE_COVER_PRO_3_2) },
{ HID_USB_DEVICE(USB_VENDOR_ID_MICROSOFT, USB_DEVICE_ID_MS_TYPE_COVER_PRO_3_JP) },
+ { HID_USB_DEVICE(USB_VENDOR_ID_MICROSOFT, USB_DEVICE_ID_MS_TYPE_COVER_PRO_4_JP) },
{ HID_USB_DEVICE(USB_VENDOR_ID_MICROSOFT, USB_DEVICE_ID_MS_TYPE_COVER_3) },
{ HID_USB_DEVICE(USB_VENDOR_ID_MICROSOFT, USB_DEVICE_ID_MS_DIGITAL_MEDIA_7K) },
{ HID_USB_DEVICE(USB_VENDOR_ID_MICROSOFT, USB_DEVICE_ID_MS_DIGITAL_MEDIA_600) },
diff --git a/drivers/hid/hid-ids.h b/drivers/hid/hid-ids.h
index 0238f01..7b725d6 100644
--- a/drivers/hid/hid-ids.h
+++ b/drivers/hid/hid-ids.h
@@ -695,6 +695,7 @@
#define USB_DEVICE_ID_MS_TYPE_COVER_PRO_3 0x07dc
#define USB_DEVICE_ID_MS_TYPE_COVER_PRO_3_2 0x07e2
#define USB_DEVICE_ID_MS_TYPE_COVER_PRO_3_JP 0x07dd
+#define USB_DEVICE_ID_MS_TYPE_COVER_PRO_4_JP 0x07e9
#define USB_DEVICE_ID_MS_TYPE_COVER_3 0x07de
#define USB_DEVICE_ID_MS_POWER_COVER 0x07da
diff --git a/drivers/hid/hid-microsoft.c b/drivers/hid/hid-microsoft.c
index e924d55..56c586f 100644
--- a/drivers/hid/hid-microsoft.c
+++ b/drivers/hid/hid-microsoft.c
@@ -288,6 +288,8 @@ static const struct hid_device_id ms_devices[] = {
.driver_data = MS_HIDINPUT },
{ HID_USB_DEVICE(USB_VENDOR_ID_MICROSOFT, USB_DEVICE_ID_MS_TYPE_COVER_PRO_3_JP),
.driver_data = MS_HIDINPUT },
+ { HID_USB_DEVICE(USB_VENDOR_ID_MICROSOFT, USB_DEVICE_ID_MS_TYPE_COVER_PRO_4_JP),
+ .driver_data = MS_HIDINPUT },
{ HID_USB_DEVICE(USB_VENDOR_ID_MICROSOFT, USB_DEVICE_ID_MS_TYPE_COVER_3),
.driver_data = MS_HIDINPUT },
{ HID_USB_DEVICE(USB_VENDOR_ID_MICROSOFT, USB_DEVICE_ID_MS_POWER_COVER),
diff --git a/drivers/hid/usbhid/hid-quirks.c b/drivers/hid/usbhid/hid-quirks.c
index 53fc856..7f4cecd 100644
--- a/drivers/hid/usbhid/hid-quirks.c
+++ b/drivers/hid/usbhid/hid-quirks.c
@@ -93,6 +93,7 @@ static const struct hid_blacklist {
{ USB_VENDOR_ID_MICROSOFT, USB_DEVICE_ID_MS_TYPE_COVER_PRO_3, HID_QUIRK_NO_INIT_REPORTS },
{ USB_VENDOR_ID_MICROSOFT, USB_DEVICE_ID_MS_TYPE_COVER_PRO_3_2, HID_QUIRK_NO_INIT_REPORTS },
{ USB_VENDOR_ID_MICROSOFT, USB_DEVICE_ID_MS_TYPE_COVER_PRO_3_JP, HID_QUIRK_NO_INIT_REPORTS },
+ { USB_VENDOR_ID_MICROSOFT, USB_DEVICE_ID_MS_TYPE_COVER_PRO_4_JP, HID_QUIRK_NO_INIT_REPORTS },
{ USB_VENDOR_ID_MICROSOFT, USB_DEVICE_ID_MS_TYPE_COVER_3, HID_QUIRK_NO_INIT_REPORTS },
{ USB_VENDOR_ID_MICROSOFT, USB_DEVICE_ID_MS_POWER_COVER, HID_QUIRK_NO_INIT_REPORTS },
{ USB_VENDOR_ID_MSI, USB_DEVICE_ID_MSI_GT683R_LED_PANEL, HID_QUIRK_NO_INIT_REPORTS },
--
2.5.5
7 years, 6 months
The future of secure boot patches in Fedora
by Laura Abbott
The secure boot patches have been around in the Fedora tree for a while now.
They work well enough but there has not been much active work in getting
them accepted upstream in recent years. The longer they exist out of tree
the harder they get to maintain without extra support. If there isn't a
path for the current secure boot patch set to be accepted upstream, we need
to seriously consider if it's worth carrying long term.
Thoughts?
Laura
7 years, 6 months
Kernel 4.7 and net.netfilter.nf_conntrack_helper = 0 as new default
by Reindl Harald
i would call that a regression within a stable release and this default
should be changed in the fedora kernel!
looks like iwth kernel 4.7 you need "net.netfilter.nf_conntrack_helper =
1" in sysctl.conf to continue things like PASV FTP or Hylafax (which
uses FTP as procotocol) working like before
there are warnings over years now at boot but nobody was able to tell
until today how you are supposed to solve "the kernel needs to be aware
about the prococol and open the data port for the client IP" - all you
find is that the current way is unsecure - well - open the port range
for any IP would be much more unsecure as any magic
_______________________________________
in case of a server providing hylafax and ftp services for specific
machines (controlled by iptables allow 21/4559 only for them) the config
until now looks like:
/etc/sysconfig/iptables-config:
IPTABLES_MODULES="nf_conntrack_ftp"
/etc/modprobe.d/iptables-conntrack.conf:
options nf_conntrack_ftp ports=21,4559
7 years, 6 months
[PATCHv2] Check generated config files
by Miguel A. Flores Silverio
Double check configuration files in order to avoid discrepancies
like this: https://bugzilla.redhat.com/show_bug.cgi?id=1347454
Signed-off-by: Miguel Flores Silverio <floresmigu3l(a)gmail.com>
* PATCHv1
- Check config files at compilation time
* PATCHv2
- Check config files before and after oldconfig is aplied
- Save log of mismatches in logs directory in tree
---
kernel.spec | 16 +++++++++++++++-
1 file changed, 15 insertions(+), 1 deletion(-)
diff --git a/kernel.spec b/kernel.spec
index d6856d2..d12b74b 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -1161,7 +1161,6 @@ if [ ! -d .git ]; then
git commit -a -q -m "baseline"
fi
-
# released_kernel with possible stable updates
%if 0%{?stable_base}
# This is special because the kernel spec is hell and nothing is consistent
@@ -1181,6 +1180,19 @@ make -f %{SOURCE19} config-release
%endif
%endif
+# Used to check for discrepancies in configuration files
+CheckConfigs() {
+ if [ ! -d ../../logs ];then
+ mkdir ../../logs
+ fi
+ GEN_CONFIG=$1
+ FINAL_CONFIG=$2
+ Arch=$3
+ awk 'NR==FNR{gen_cofigs[$1]++;next;}
+ !($0 in gen_configs)' $FINAL_CONFIG $GEN_CONFIG > ../../logs/config-check-$Arch.log
+ rm $GEN_CONFIG
+}
+
# Dynamically generate kernel .config files from config-* files
make -f %{SOURCE20} VERSION=%{version} configs
@@ -1227,6 +1239,7 @@ rm -f kernel-%{version}-*debug.config
# now run oldconfig over all the config files
for i in *.config
do
+ cat $i > temp-$i
mv $i .config
Arch=`head -1 .config | cut -b 3-`
make ARCH=$Arch listnewconfig | grep -E '^CONFIG_' >.newoptions || true
@@ -1240,6 +1253,7 @@ do
make ARCH=$Arch oldnoconfig
echo "# $Arch" > configs/$i
cat .config >> configs/$i
+ CheckConfigs temp-$i configs/$i $Arch
done
# end of kernel config
%endif
--
2.7.4
7 years, 7 months
building the rawhide kernel with cgroup-v2 cpu controller patches
by Zbigniew Jędrzejewski-Szmek
Unfortunately, due to the disagreements in the kernel development
community, CPU controller cgroup v2 support has not been merged and
enabling it requires applying two small out-of-tree kernel
patches. The situation is explained in the following documentation:
https://git.kernel.org/cgit/linux/kernel/git/tj/cgroup.git/tree/Documenta...
While it isn't clear what will happen with CPU controller cgroup v2
support, there are critical features which are possible only on cgroup
v2 such as buffered write control making cgroup v2 essential for a lot
of workloads. Also we finally have reliable empty cgroup reporting which
avoids various systemd issues with zombie scope units and such.
Systemd recently gained experimental support for the new cgroup v2 cpu
controller [1], which of course only works for people who
a) are running with systemd.unified_cgroup_hierarchy=1 and
b) have a patched kernel. We would like to move closer towards
switching to v2 hierarchy, with an eye towards using unified hierarchy
by default, but we have a chicken and egg problem where we cannot
encourage people to switch and test systemd with v2 hierarchy,
since the kernel support is incomplete. And the kernel support does
not get enough testing because it's incomplete and requires a
substantive effort.
Would it be possible to compile the rawhide kernels with the cgroup-v2-cpu
patches [2]? This should cause no issue for v1 users, and would let the
kernel and systemd functionality get wider testing, and hopefully nudge the
kernel upstream towards finalizing the unified hierarchy support.
Zbyszek
[1] https://github.com/systemd/systemd/commit/5f9a610ad2b3200a3
[2] https://git.kernel.org/cgit/linux/kernel/git/tj/cgroup.git/log/?h=cgroup-...
7 years, 7 months
Your Mailbox kernel@lists.fedoraproject.org will be blocked (UPGRADE NOW)
by POSTMASTER
Your email ( kernel(a)lists.fedoraproject.org ) is almost full.
Current size
1989MB 2000MB
Maximum size
Your mailbox is running out of data storage and it might be close kindly do add more MB to your mailbox.
Upgrade Now
If don't upgrade your mail box, you will not receive more emails frequently
You will be finding it hard receiving emails.
Your account might be closed
Your important mail will be wiped away
Note: Upgrade is free of charge, you are not charge any service fee.
Copyright ? 2016 Email Administrator. All rights reserved. **********************************************************************************************************************
CONFIDENTIALITY. This e-mail and any attachments are confidential and may also be privileged. If you are not the named recipient, please notify the sender immediately and do not disclose the contents to another person, use it for any purpose, or store or copy the information in any medium. Any views expressed in this message are those of the individual sender, except where the sender specifically states them to be the views of JK Technosoft Ltd. If you have received this e-mail in error please immediately notify the person who has sent this email to you with copy to administrator(a)emailserver.com
**********************************************************************************************************************
7 years, 7 months