[arch-commits] Commit in linux-hardened/trunk (PKGBUILD config)

[Levente Polyak]

    Date: Sunday, July 31, 2022 @ 22:29:50
  Author: anthraxx
Revision: 451799

upgpkg: linux-hardened 5.18.15.hardened1-1

Modified:
  linux-hardened/trunk/PKGBUILD
  linux-hardened/trunk/config

----------+
 PKGBUILD |   10 +++++-----
 config   |   18 ++++++++++++------
 2 files changed, 17 insertions(+), 11 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2022-07-31 21:31:58 UTC (rev 451798)
+++ PKGBUILD	2022-07-31 22:29:50 UTC (rev 451799)
@@ -4,8 +4,8 @@
 # Contributor: Thomas Baechler <thomas at archlinux.org>
 
 pkgbase=linux-hardened
-pkgver=5.18.12.hardened1
-pkgrel=2
+pkgver=5.18.15.hardened1
+pkgrel=1
 pkgdesc='Security-Hardened Linux'
 url='https://github.com/anthraxx/linux-hardened'
 arch=(x86_64)
@@ -28,11 +28,11 @@
   '647F28654894E3BD457199BE38DBBDC86092693E'  # Greg Kroah-Hartman
   'E240B57E2C4630BA768E2F26FC1B547C8D8172C8'  # Levente Polyak
 )
-sha256sums=('40b74d0942f255da07481710e1083412d06e37e45b8f9d9e34ae856db37b9527'
+sha256sums=('69804febdc388a69dfb64493b7b58d402853de3a14144ea8db7fd67c30dcbe3c'
             'SKIP'
-            '94dd72c76da2a925493c511aa2680cc86066f8448852025abf41582931ba8a1f'
+            '964e11e64075768f27967502ca0cc483ce338485c246d9a19f9af49a1a992647'
             'SKIP'
-            '76f3c45dd2eea7eaa1e426aa30bfb5a3c75e8cd5f5816093e4fef7be5e9c8b9f')
+            'c4a3e5d6df88e1e2524ce8c916938de90208275e19b691b8858da6ba0eda5371')
 
 export KBUILD_BUILD_HOST=archlinux
 export KBUILD_BUILD_USER=$pkgbase

Modified: config
===================================================================
--- config	2022-07-31 21:31:58 UTC (rev 451798)
+++ config	2022-07-31 22:29:50 UTC (rev 451799)
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86 5.18.12-hardened1 Kernel Configuration
+# Linux/x86 5.18.15-hardened1 Kernel Configuration
 #
 CONFIG_CC_VERSION_TEXT="gcc (GCC) 12.1.0"
 CONFIG_CC_IS_GCC=y
@@ -349,9 +349,6 @@
 CONFIG_X86_X2APIC=y
 CONFIG_X86_MPPARSE=y
 # CONFIG_GOLDFISH is not set
-CONFIG_RETPOLINE=y
-CONFIG_CC_HAS_SLS=y
-CONFIG_SLS=y
 CONFIG_X86_CPU_RESCTRL=y
 # CONFIG_X86_EXTENDED_PLATFORM is not set
 CONFIG_X86_INTEL_LPSS=y
@@ -516,6 +513,16 @@
 # CONFIG_LIVEPATCH is not set
 # end of Processor type and features
 
+CONFIG_CC_HAS_SLS=y
+CONFIG_CC_HAS_RETURN_THUNK=y
+CONFIG_SPECULATION_MITIGATIONS=y
+CONFIG_PAGE_TABLE_ISOLATION=y
+CONFIG_RETPOLINE=y
+CONFIG_RETHUNK=y
+CONFIG_CPU_UNRET_ENTRY=y
+CONFIG_CPU_IBPB_ENTRY=y
+CONFIG_CPU_IBRS_ENTRY=y
+CONFIG_SLS=y
 CONFIG_ARCH_HAS_ADD_PAGES=y
 CONFIG_ARCH_MHP_MEMMAP_ON_MEMORY_ENABLE=y
 
@@ -9948,7 +9955,6 @@
 CONFIG_SECURITY=y
 CONFIG_SECURITYFS=y
 CONFIG_SECURITY_NETWORK=y
-CONFIG_PAGE_TABLE_ISOLATION=y
 CONFIG_SECURITY_INFINIBAND=y
 CONFIG_SECURITY_NETWORK_XFRM=y
 CONFIG_SECURITY_PATH=y
@@ -10812,7 +10818,7 @@
 # CONFIG_TEST_FPU is not set
 # CONFIG_TEST_CLOCKSOURCE_WATCHDOG is not set
 CONFIG_ARCH_USE_MEMTEST=y
-# CONFIG_MEMTEST is not set
+CONFIG_MEMTEST=y
 # CONFIG_HYPERV_TESTING is not set
 # end of Kernel Testing and Coverage
 # end of Kernel hacking