Date: Thursday, May 12, 2022 @ 17:45:50 Author: anthraxx Revision: 445328
upgpkg: linux-hardened 5.17.7.hardened1-1 enable SLS enable INIT_STACK_ALL_ZERO Modified: linux-hardened/trunk/PKGBUILD linux-hardened/trunk/config ----------+ PKGBUILD | 10 +++++----- config | 17 +++++++++-------- 2 files changed, 14 insertions(+), 13 deletions(-) Modified: PKGBUILD =================================================================== --- PKGBUILD 2022-05-12 17:39:25 UTC (rev 445327) +++ PKGBUILD 2022-05-12 17:45:50 UTC (rev 445328) @@ -4,8 +4,8 @@ # Contributor: Thomas Baechler <tho...@archlinux.org> pkgbase=linux-hardened -pkgver=5.17.6.hardened1 -pkgrel=2 +pkgver=5.17.7.hardened1 +pkgrel=1 pkgdesc='Security-Hardened Linux' url='https://github.com/anthraxx/linux-hardened' arch=(x86_64) @@ -28,11 +28,11 @@ '647F28654894E3BD457199BE38DBBDC86092693E' # Greg Kroah-Hartman 'E240B57E2C4630BA768E2F26FC1B547C8D8172C8' # Levente Polyak ) -sha256sums=('64ccf18380be5b5491322a3fd54904538b544e523e4bf86289dd8df7404cb10c' +sha256sums=('22f67ef6b12ef6c0c0353be4b90b4bf4b9b18b858c16c346fa495b67ec718c99' 'SKIP' - 'c84bba852a03441e478b3e4a68069e800e50d9b0be79a55c32db60993fdf1480' + '1b3157e89881c936a0fdc6536a7fcd53ce40a05788968ab3b31ec4efe9325a5c' 'SKIP' - '4a683e54fd501ce25aa017b18a5fc445fbfb376af1fb8134c2f9edd2b90d3d16') + 'd6590b5bb98f7441ae8bb61a1a983313d7b75b0e18136d63e4f06c28fee46a65') export KBUILD_BUILD_HOST=archlinux export KBUILD_BUILD_USER=$pkgbase Modified: config =================================================================== --- config 2022-05-12 17:39:25 UTC (rev 445327) +++ config 2022-05-12 17:45:50 UTC (rev 445328) @@ -1,10 +1,10 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 5.17.6-hardened1 Kernel Configuration +# Linux/x86 5.17.7-hardened1 Kernel Configuration # -CONFIG_CC_VERSION_TEXT="gcc (GCC) 11.2.0" +CONFIG_CC_VERSION_TEXT="gcc (GCC) 12.1.0" CONFIG_CC_IS_GCC=y -CONFIG_GCC_VERSION=110200 +CONFIG_GCC_VERSION=120100 CONFIG_CLANG_VERSION=0 CONFIG_AS_IS_GNU=y CONFIG_AS_VERSION=23800 @@ -349,6 +349,8 @@ CONFIG_X86_MPPARSE=y # CONFIG_GOLDFISH is not set CONFIG_RETPOLINE=y +CONFIG_CC_HAS_SLS=y +CONFIG_SLS=y CONFIG_X86_CPU_RESCTRL=y # CONFIG_X86_EXTENDED_PLATFORM is not set CONFIG_X86_INTEL_LPSS=y @@ -9832,16 +9834,15 @@ # # Kernel hardening options # -CONFIG_GCC_PLUGIN_STRUCTLEAK=y # # Memory initialization # +CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y +CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y # CONFIG_INIT_STACK_NONE is not set -# CONFIG_GCC_PLUGIN_STRUCTLEAK_USER is not set -# CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF is not set -CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF_ALL=y -# CONFIG_GCC_PLUGIN_STRUCTLEAK_VERBOSE is not set +# CONFIG_INIT_STACK_ALL_PATTERN is not set +CONFIG_INIT_STACK_ALL_ZERO=y CONFIG_GCC_PLUGIN_STACKLEAK=y CONFIG_STACKLEAK_TRACK_MIN_SIZE=100 # CONFIG_STACKLEAK_METRICS is not set