Skip to content

Linux hardened for 2024-04-18#301858

Closed
Mynacol wants to merge 7 commits intoNixOS:masterfrom
Mynacol:linux-hardened-2024-04-05
Closed

Linux hardened for 2024-04-18#301858
Mynacol wants to merge 7 commits intoNixOS:masterfrom
Mynacol:linux-hardened-2024-04-05

Conversation

@Mynacol
Copy link
Contributor

@Mynacol Mynacol commented Apr 5, 2024

Description of changes

Updates for the hardened variants of kernels. Created by running the update script.

Things done

  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
    • sandbox = relaxed
    • sandbox = true
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
  • Fits CONTRIBUTING.md.

Add a 👍 reaction to pull requests you find important.

@github-actions github-actions bot added the 6.topic: kernel The Linux kernel label Apr 5, 2024
@Mynacol Mynacol added 8.has: package (update) This PR updates a package to a newer version awaiting_merger labels Apr 5, 2024
@ofborg ofborg bot added 10.rebuild-darwin: 0 This PR does not cause any packages to rebuild on Darwin. 10.rebuild-linux: 501+ This PR causes many rebuilds on Linux and should normally target the staging branches. 10.rebuild-linux: 1001-2500 This PR causes many rebuilds on Linux and should target the staging branches. labels Apr 5, 2024
@Mynacol Mynacol force-pushed the linux-hardened-2024-04-05 branch from 07062d8 to 7623267 Compare April 18, 2024 20:13
@Mynacol Mynacol changed the title Linux hardened for 2024-04-05 Linux hardened for 2024-04-18 Apr 18, 2024
@Mynacol
Copy link
Contributor Author

Mynacol commented Apr 18, 2024

I updated the kernel versions to the newest hardened patches by running the update script again. No time to test the compilation/usage.

@Mynacol Mynacol added the 1.severity: security Issues which raise a security issue, or PRs that fix one label Apr 18, 2024
@Mynacol
Copy link
Contributor Author

Mynacol commented Apr 21, 2024

I built and ran the kernel in a VM successfully.

@whentze whentze mentioned this pull request May 3, 2024
13 tasks
@wegank wegank added the 2.status: merge conflict This PR has merge conflicts with the target branch label May 22, 2024
@Mynacol
Copy link
Contributor Author

Mynacol commented Jun 15, 2024

Superseded by #313236

@Mynacol Mynacol closed this Jun 15, 2024
@Mynacol Mynacol deleted the linux-hardened-2024-04-05 branch July 31, 2024 12:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

1.severity: security Issues which raise a security issue, or PRs that fix one 2.status: merge conflict This PR has merge conflicts with the target branch 6.topic: kernel The Linux kernel 8.has: package (update) This PR updates a package to a newer version 10.rebuild-darwin: 0 This PR does not cause any packages to rebuild on Darwin. 10.rebuild-linux: 501+ This PR causes many rebuilds on Linux and should normally target the staging branches. 10.rebuild-linux: 1001-2500 This PR causes many rebuilds on Linux and should target the staging branches.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants