[arch-commits] Commit in linux-hardened/trunk (PKGBUILD config)

[Levente Polyak]

    Date: Thursday, May 12, 2022 @ 17:45:50
  Author: anthraxx
Revision: 445328

upgpkg: linux-hardened 5.17.7.hardened1-1

 enable SLS
 enable INIT_STACK_ALL_ZERO

Modified:
  linux-hardened/trunk/PKGBUILD
  linux-hardened/trunk/config

----------+
 PKGBUILD |   10 +++++-----
 config   |   17 +++++++++--------
 2 files changed, 14 insertions(+), 13 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2022-05-12 17:39:25 UTC (rev 445327)
+++ PKGBUILD	2022-05-12 17:45:50 UTC (rev 445328)
@@ -4,8 +4,8 @@
 # Contributor: Thomas Baechler <thomas at archlinux.org>
 
 pkgbase=linux-hardened
-pkgver=5.17.6.hardened1
-pkgrel=2
+pkgver=5.17.7.hardened1
+pkgrel=1
 pkgdesc='Security-Hardened Linux'
 url='https://github.com/anthraxx/linux-hardened'
 arch=(x86_64)
@@ -28,11 +28,11 @@
   '647F28654894E3BD457199BE38DBBDC86092693E'  # Greg Kroah-Hartman
   'E240B57E2C4630BA768E2F26FC1B547C8D8172C8'  # Levente Polyak
 )
-sha256sums=('64ccf18380be5b5491322a3fd54904538b544e523e4bf86289dd8df7404cb10c'
+sha256sums=('22f67ef6b12ef6c0c0353be4b90b4bf4b9b18b858c16c346fa495b67ec718c99'
             'SKIP'
-            'c84bba852a03441e478b3e4a68069e800e50d9b0be79a55c32db60993fdf1480'
+            '1b3157e89881c936a0fdc6536a7fcd53ce40a05788968ab3b31ec4efe9325a5c'
             'SKIP'
-            '4a683e54fd501ce25aa017b18a5fc445fbfb376af1fb8134c2f9edd2b90d3d16')
+            'd6590b5bb98f7441ae8bb61a1a983313d7b75b0e18136d63e4f06c28fee46a65')
 
 export KBUILD_BUILD_HOST=archlinux
 export KBUILD_BUILD_USER=$pkgbase

Modified: config
===================================================================
--- config	2022-05-12 17:39:25 UTC (rev 445327)
+++ config	2022-05-12 17:45:50 UTC (rev 445328)
@@ -1,10 +1,10 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86 5.17.6-hardened1 Kernel Configuration
+# Linux/x86 5.17.7-hardened1 Kernel Configuration
 #
-CONFIG_CC_VERSION_TEXT="gcc (GCC) 11.2.0"
+CONFIG_CC_VERSION_TEXT="gcc (GCC) 12.1.0"
 CONFIG_CC_IS_GCC=y
-CONFIG_GCC_VERSION=110200
+CONFIG_GCC_VERSION=120100
 CONFIG_CLANG_VERSION=0
 CONFIG_AS_IS_GNU=y
 CONFIG_AS_VERSION=23800
@@ -349,6 +349,8 @@
 CONFIG_X86_MPPARSE=y
 # CONFIG_GOLDFISH is not set
 CONFIG_RETPOLINE=y
+CONFIG_CC_HAS_SLS=y
+CONFIG_SLS=y
 CONFIG_X86_CPU_RESCTRL=y
 # CONFIG_X86_EXTENDED_PLATFORM is not set
 CONFIG_X86_INTEL_LPSS=y
@@ -9832,16 +9834,15 @@
 #
 # Kernel hardening options
 #
-CONFIG_GCC_PLUGIN_STRUCTLEAK=y
 
 #
 # Memory initialization
 #
+CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y
+CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y
 # CONFIG_INIT_STACK_NONE is not set
-# CONFIG_GCC_PLUGIN_STRUCTLEAK_USER is not set
-# CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF is not set
-CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF_ALL=y
-# CONFIG_GCC_PLUGIN_STRUCTLEAK_VERBOSE is not set
+# CONFIG_INIT_STACK_ALL_PATTERN is not set
+CONFIG_INIT_STACK_ALL_ZERO=y
 CONFIG_GCC_PLUGIN_STACKLEAK=y
 CONFIG_STACKLEAK_TRACK_MIN_SIZE=100
 # CONFIG_STACKLEAK_METRICS is not set