.gitignore | 22 7 + 15 - 0 !
1 file changed, 7 insertions(+), 15 deletions(-)

 tweak gitignore for debian pkg-kernel using git svn.

arch/powerpc/platforms/8xx/Kconfig | 3 3 + 0 - 0 !
1 file changed, 3 insertions(+)

 remove microcode patches for mgsuvd (not enabled in debian configs)

drivers/media/usb/dvb-usb/Kconfig | 1 1 + 0 - 0 !
1 file changed, 1 insertion(+)

 dvb-usb-af9005: mark as broken

drivers/media/i2c/Kconfig | 1 1 + 0 - 0 !
1 file changed, 1 insertion(+)

 vs6624: mark as broken

drivers/net/appletalk/Kconfig | 27 0 + 27 - 0 !
drivers/net/appletalk/Makefile | 1 0 + 1 - 0 !
2 files changed, 28 deletions(-)

 add removal patches for: 3c359, smctr, keyspan, cops

drivers/video/fbdev/Kconfig | 93 0 + 93 - 0 !
drivers/video/fbdev/Makefile | 2 0 + 2 - 0 !
2 files changed, 95 deletions(-)

 video: remove nvidiafb and rivafb
Bug-Debian: https://bugs.debian.org/383481

Documentation/netlabel/draft_ietf.rst | 3 1 + 2 - 0 !
1 file changed, 1 insertion(+), 2 deletions(-)

 documentation: fix broken link to cipso draft

Makefile | 15 14 + 1 - 0 !
arch/ia64/kernel/process.c | 5 3 + 2 - 0 !
arch/powerpc/kernel/process.c | 6 4 + 2 - 0 !
arch/x86/um/sysrq_64.c | 6 4 + 2 - 0 !
kernel/hung_task.c | 6 4 + 2 - 0 !
lib/dump_stack.c | 6 4 + 2 - 0 !
6 files changed, 33 insertions(+), 11 deletions(-)

 include package version along with kernel release in stack traces
Date: Tue, 24 Jul 2012 03:13:10 +0100

scripts/mkcompile_h | 10 7 + 3 - 0 !
1 file changed, 7 insertions(+), 3 deletions(-)

 make mkcompile_h accept an alternate timestamp string
Date: Tue, 12 May 2015 19:29:22 +0100

Makefile | 49 24 + 25 - 0 !
1 file changed, 24 insertions(+), 25 deletions(-)

 kbuild: make the toolchain variables easily overwritable
Date: Sun, 22 Feb 2009 15:39:35 +0100

arch/ia64/Makefile | 17 2 + 15 - 0 !
1 file changed, 2 insertions(+), 15 deletions(-)

 hardcode arch script output
Date: Mon, 26 Mar 2007 16:30:51 -0600
Bug-Debian: https://bugs.debian.org/392592

arch/mips/Kbuild | 6 0 + 6 - 0 !
1 file changed, 6 deletions(-)

 [patch] partially revert "mips: add -werror to arch/mips/kbuild"

arch/mips/generic/Platform | 3 0 + 3 - 0 !
1 file changed, 3 deletions(-)

 disable uimage generation for mips generic 

arch/mips/kernel/fpu-probe.c | 7 6 + 1 - 0 !
1 file changed, 6 insertions(+), 1 deletion(-)

 use relaxed ieee754 mode for loongson-3 as 3a 4000 is 2008-only

arch/sh/Makefile | 1 0 + 1 - 0 !
1 file changed, 1 deletion(-)

 [sh4] fix uimage build
Bug-Debian: https://bugs.debian.org/569034

tools/perf/Documentation/Makefile | 14 8 + 6 - 0 !
tools/perf/Makefile.perf | 16 8 + 8 - 0 !
tools/perf/util/Build | 1 1 + 0 - 0 !
tools/perf/util/vdso.c | 4 2 + 2 - 0 !
4 files changed, 19 insertions(+), 16 deletions(-)

 create manpages and binaries including the version

tools/perf/Makefile.perf | 16 8 + 8 - 0 !
1 file changed, 8 insertions(+), 8 deletions(-)

 install perf scripts non-executable

net/wireless/certs/debian.hex | 1426 1426 + 0 - 0 !
1 file changed, 1426 insertions(+)

 wireless: add debian wireless-regdb certificates

fs/file.c | 1 1 + 0 - 0 !
kernel/fork.c | 1 1 + 0 - 0 !
kernel/sched/core.c | 1 1 + 0 - 0 !
kernel/task_work.c | 1 1 + 0 - 0 !
mm/memory.c | 1 1 + 0 - 0 !
mm/shmem.c | 1 1 + 0 - 0 !
security/security.c | 4 4 + 0 - 0 !
7 files changed, 10 insertions(+)

 export symbols needed by android drivers
Bug-Debian: https://bugs.debian.org/901492

We want to enable use of the Android ashmem and binder drivers to
support Anbox, but they should not be built-in as that would waste
resources and increase security attack surface on systems that don't
need them.

Export the currently un-exported symbols they depend on.

drivers/android/Kconfig | 2 1 + 1 - 0 !
drivers/android/Makefile | 7 4 + 3 - 0 !
drivers/android/binder_alloc.c | 2 1 + 1 - 0 !
drivers/staging/android/Kconfig | 2 1 + 1 - 0 !
drivers/staging/android/Makefile | 3 2 + 1 - 0 !
drivers/staging/android/ashmem.c | 3 3 + 0 - 0 !
6 files changed, 12 insertions(+), 7 deletions(-)

 android: enable building ashmem and binder as modules
Bug-Debian: https://bugs.debian.org/901492

We want to enable use of the Android ashmem and binder drivers to
support Anbox, but they should not be built-in as that would waste
resources and increase security attack surface on systems that don't
need them.

- Add a MODULE_LICENSE declaration to ashmem
- Change the Makefiles to build each driver as an object with the
  "_linux" suffix (which is what Anbox expects)
- Change config symbol types to tristate

Documentation/Makefile | 5 0 + 5 - 0 !
1 file changed, 5 deletions(-)

 [patch 1/2] documentation: drop sphinx version check

tools/lib/perf/Documentation/Makefile | 2 1 + 1 - 0 !
tools/lib/traceevent/Documentation/Makefile | 2 1 + 1 - 0 !
tools/perf/Documentation/Makefile | 2 1 + 1 - 0 !
3 files changed, 3 insertions(+), 3 deletions(-)

 [patch 2/2] perf/traceevent: support asciidoctor for documentation

scripts/Makefile.modfinal | 5 3 + 2 - 0 !
1 file changed, 3 insertions(+), 2 deletions(-)

 kbuild: look for module.lds under arch directory too

Makefile | 12 12 + 0 - 0 !
1 file changed, 12 insertions(+)

 kbuild: abort build if subdirs used

drivers/media/usb/dvb-usb/Kconfig | 2 1 + 1 - 0 !
drivers/media/usb/dvb-usb/af9005-fe.c | 66 53 + 13 - 0 !
2 files changed, 54 insertions(+), 14 deletions(-)

 af9005: use request_firmware() to load register init script

drivers/net/wireless/intel/iwlwifi/cfg/6000.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 iwlwifi: do not request unreleased firmware for iwl6000
Bug-Debian: https://bugs.debian.org/689416

drivers/base/firmware_loader/fallback.c | 2 1 + 1 - 0 !
drivers/base/firmware_loader/main.c | 17 8 + 9 - 0 !
2 files changed, 9 insertions(+), 10 deletions(-)

 firmware_class: log every success and failure against given device
Date: Sun, 09 Dec 2012 16:02:00 +0000

arch/x86/kernel/cpu/microcode/amd.c | 4 1 + 3 - 0 !
drivers/atm/ambassador.c | 4 1 + 3 - 0 !
drivers/atm/fore200e.c | 5 2 + 3 - 0 !
drivers/bluetooth/ath3k.c | 8 2 + 6 - 0 !
drivers/bluetooth/bcm203x.c | 2 0 + 2 - 0 !
drivers/bluetooth/bfusb.c | 4 1 + 3 - 0 !
drivers/bluetooth/bt3c_cs.c | 4 1 + 3 - 0 !
drivers/bluetooth/btmrvl_sdio.c | 4 0 + 4 - 0 !
drivers/char/dsp56k.c | 5 1 + 4 - 0 !
drivers/dma/imx-sdma.c | 5 1 + 4 - 0 !
drivers/gpu/drm/mga/mga_warp.c | 5 1 + 4 - 0 !
drivers/gpu/drm/nouveau/nvkm/engine/gr/gf100.c | 4 1 + 3 - 0 !
drivers/gpu/drm/r128/r128_cce.c | 5 1 + 4 - 0 !
drivers/gpu/drm/radeon/ni.c | 3 0 + 3 - 0 !
drivers/gpu/drm/radeon/r100.c | 4 1 + 3 - 0 !
drivers/gpu/drm/radeon/r600.c | 3 0 + 3 - 0 !
drivers/infiniband/hw/qib/qib_sd7220.c | 4 1 + 3 - 0 !
drivers/input/touchscreen/atmel_mxt_ts.c | 4 1 + 3 - 0 !
drivers/isdn/hardware/mISDN/speedfax.c | 5 1 + 4 - 0 !
drivers/media/common/siano/smscoreapi.c | 4 1 + 3 - 0 !
drivers/media/dvb-frontends/af9013.c | 8 1 + 7 - 0 !
drivers/media/dvb-frontends/bcm3510.c | 5 2 + 3 - 0 !
drivers/media/dvb-frontends/cx24116.c | 7 1 + 6 - 0 !
drivers/media/dvb-frontends/drxd_hard.c | 4 1 + 3 - 0 !
drivers/media/dvb-frontends/drxk_hard.c | 4 0 + 4 - 0 !
drivers/media/dvb-frontends/ds3000.c | 6 1 + 5 - 0 !
drivers/media/dvb-frontends/nxt200x.c | 12 2 + 10 - 0 !
drivers/media/dvb-frontends/or51132.c | 4 1 + 3 - 0 !
drivers/media/dvb-frontends/or51211.c | 5 1 + 4 - 0 !
drivers/media/dvb-frontends/sp8870.c | 4 1 + 3 - 0 !
drivers/media/dvb-frontends/sp887x.c | 4 1 + 3 - 0 !
drivers/media/dvb-frontends/tda10048.c | 2 0 + 2 - 0 !
drivers/media/dvb-frontends/tda1004x.c | 5 1 + 4 - 0 !
drivers/media/dvb-frontends/tda10071.c | 6 1 + 5 - 0 !
drivers/media/i2c/cx25840/cx25840-firmware.c | 4 1 + 3 - 0 !
drivers/media/pci/bt8xx/bttv-cards.c | 4 1 + 3 - 0 !
drivers/media/pci/cx18/cx18-av-firmware.c | 4 1 + 3 - 0 !
drivers/media/pci/cx18/cx18-dvb.c | 4 1 + 3 - 0 !
drivers/media/pci/cx18/cx18-firmware.c | 7 1 + 6 - 0 !
drivers/media/pci/cx23885/cx23885-417.c | 6 1 + 5 - 0 !
drivers/media/pci/cx23885/cx23885-cards.c | 5 1 + 4 - 0 !
drivers/media/pci/cx88/cx88-blackbird.c | 6 1 + 5 - 0 !
drivers/media/pci/ivtv/ivtv-firmware.c | 2 0 + 2 - 0 !
drivers/media/pci/ngene/ngene-core.c | 7 1 + 6 - 0 !
drivers/media/pci/saa7164/saa7164-fw.c | 5 1 + 4 - 0 !
drivers/media/pci/ttpci/av7110.c | 9 2 + 7 - 0 !
drivers/media/pci/ttpci/av7110_hw.c | 5 1 + 4 - 0 !
drivers/media/platform/s5p-mfc/s5p_mfc_ctrl.c | 4 1 + 3 - 0 !
drivers/media/radio/radio-wl1273.c | 5 1 + 4 - 0 !
drivers/media/radio/wl128x/fmdrv_common.c | 4 1 + 3 - 0 !
drivers/media/tuners/tuner-xc2028.c | 1 0 + 1 - 0 !
drivers/media/usb/cpia2/cpia2_core.c | 5 1 + 4 - 0 !
drivers/media/usb/cx231xx/cx231xx-417.c | 5 0 + 5 - 0 !
drivers/media/usb/dvb-usb/dib0700_devices.c | 14 4 + 10 - 0 !
drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 8 2 + 6 - 0 !
drivers/media/usb/dvb-usb/gp8psk.c | 7 1 + 6 - 0 !
drivers/media/usb/dvb-usb/opera1.c | 2 0 + 2 - 0 !
drivers/media/usb/go7007/go7007-driver.c | 4 1 + 3 - 0 !
drivers/media/usb/go7007/go7007-fw.c | 6 1 + 5 - 0 !
drivers/media/usb/go7007/go7007-loader.c | 10 2 + 8 - 0 !
drivers/media/usb/gspca/vicam.c | 4 1 + 3 - 0 !
drivers/media/usb/pvrusb2/pvrusb2-hdw.c | 19 0 + 19 - 0 !
drivers/media/usb/s2255/s2255drv.c | 4 1 + 3 - 0 !
drivers/media/usb/ttusb-budget/dvb-ttusb-budget.c | 4 1 + 3 - 0 !
drivers/media/usb/ttusb-dec/ttusb_dec.c | 5 1 + 4 - 0 !
drivers/misc/ti-st/st_kim.c | 5 1 + 4 - 0 !
drivers/net/can/softing/softing_fw.c | 5 1 + 4 - 0 !
drivers/net/ethernet/3com/typhoon.c | 5 1 + 4 - 0 !
drivers/net/ethernet/adaptec/starfire.c | 10 2 + 8 - 0 !
drivers/net/ethernet/alacritech/slicoss.c | 9 2 + 7 - 0 !
drivers/net/ethernet/alteon/acenic.c | 5 1 + 4 - 0 !
drivers/net/ethernet/broadcom/bnx2.c | 9 3 + 6 - 0 !
drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c | 5 1 + 4 - 0 !
drivers/net/ethernet/broadcom/tg3.c | 5 1 + 4 - 0 !
drivers/net/ethernet/brocade/bna/cna_fwimg.c | 4 1 + 3 - 0 !
drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c | 16 3 + 13 - 0 !
drivers/net/ethernet/intel/e100.c | 3 0 + 3 - 0 !
drivers/net/ethernet/myricom/myri10ge/myri10ge.c | 2 0 + 2 - 0 !
drivers/net/ethernet/smsc/smc91c92_cs.c | 4 1 + 3 - 0 !
drivers/net/ethernet/sun/cassini.c | 5 1 + 4 - 0 !
drivers/net/hamradio/yam.c | 5 1 + 4 - 0 !
drivers/net/usb/kaweth.c | 4 1 + 3 - 0 !
drivers/net/wimax/i2400m/fw.c | 7 1 + 6 - 0 !
drivers/net/wireless/ath/ath9k/hif_usb.c | 3 0 + 3 - 0 !
drivers/net/wireless/ath/carl9170/usb.c | 1 0 + 1 - 0 !
drivers/net/wireless/atmel/at76c50x-usb.c | 7 1 + 6 - 0 !
drivers/net/wireless/atmel/atmel.c | 6 1 + 5 - 0 !
drivers/net/wireless/broadcom/b43/main.c | 13 1 + 12 - 0 !
drivers/net/wireless/broadcom/b43legacy/main.c | 5 1 + 4 - 0 !
drivers/net/wireless/broadcom/brcm80211/brcmsmac/mac80211_if.c | 10 2 + 8 - 0 !
drivers/net/wireless/intel/ipw2x00/ipw2100.c | 6 1 + 5 - 0 !
drivers/net/wireless/intel/ipw2x00/ipw2200.c | 4 1 + 3 - 0 !
drivers/net/wireless/intel/iwlegacy/3945-mac.c | 1 0 + 1 - 0 !
drivers/net/wireless/intel/iwlwifi/iwl-drv.c | 2 0 + 2 - 0 !
drivers/net/wireless/intersil/orinoco/fw.c | 9 2 + 7 - 0 !
drivers/net/wireless/intersil/orinoco/orinoco_usb.c | 1 0 + 1 - 0 !
drivers/net/wireless/intersil/p54/p54pci.c | 1 0 + 1 - 0 !
drivers/net/wireless/intersil/p54/p54spi.c | 4 1 + 3 - 0 !
drivers/net/wireless/intersil/p54/p54usb.c | 1 0 + 1 - 0 !
drivers/net/wireless/intersil/prism54/islpci_dev.c | 7 2 + 5 - 0 !
drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2 0 + 2 - 0 !
drivers/net/wireless/marvell/mwifiex/main.c | 5 1 + 4 - 0 !
drivers/net/wireless/marvell/mwl8k.c | 15 3 + 12 - 0 !
drivers/net/wireless/ralink/rt2x00/rt2x00firmware.c | 4 1 + 3 - 0 !
drivers/net/wireless/realtek/rtlwifi/core.c | 1 0 + 1 - 0 !
drivers/net/wireless/realtek/rtlwifi/rtl8192se/sw.c | 2 0 + 2 - 0 !
drivers/net/wireless/ti/wl1251/main.c | 8 2 + 6 - 0 !
drivers/net/wireless/ti/wlcore/main.c | 4 1 + 3 - 0 !
drivers/net/wireless/zydas/zd1201.c | 2 0 + 2 - 0 !
drivers/net/wireless/zydas/zd1211rw/zd_usb.c | 9 1 + 8 - 0 !
drivers/scsi/advansys.c | 8 0 + 8 - 0 !
drivers/scsi/aic94xx/aic94xx_init.c | 2 0 + 2 - 0 !
drivers/scsi/aic94xx/aic94xx_seq.c | 5 1 + 4 - 0 !
drivers/scsi/bfa/bfad.c | 1 0 + 1 - 0 !
drivers/scsi/ipr.c | 4 1 + 3 - 0 !
drivers/scsi/pm8001/pm8001_ctl.c | 3 0 + 3 - 0 !
drivers/scsi/qla1280.c | 2 0 + 2 - 0 !
drivers/scsi/qla2xxx/qla_init.c | 7 0 + 7 - 0 !
drivers/scsi/qla2xxx/qla_nx.c | 5 1 + 4 - 0 !
drivers/scsi/qla2xxx/qla_os.c | 2 0 + 2 - 0 !
drivers/scsi/qlogicpti.c | 5 1 + 4 - 0 !
drivers/staging/rtl8192u/r819xU_firmware.c | 4 1 + 3 - 0 !
drivers/staging/rtl8712/hal_init.c | 2 0 + 2 - 0 !
drivers/staging/vt6656/main_usb.c | 5 1 + 4 - 0 !
drivers/tty/cyclades.c | 4 1 + 3 - 0 !
drivers/tty/moxa.c | 7 1 + 6 - 0 !
drivers/tty/serial/icom.c | 3 0 + 3 - 0 !
drivers/tty/serial/ucc_uart.c | 4 1 + 3 - 0 !
drivers/usb/atm/cxacru.c | 2 0 + 2 - 0 !
drivers/usb/atm/ueagle-atm.c | 28 4 + 24 - 0 !
drivers/usb/misc/emi26.c | 10 3 + 7 - 0 !
drivers/usb/misc/ezusb.c | 6 1 + 5 - 0 !
drivers/usb/misc/isight_firmware.c | 1 0 + 1 - 0 !
drivers/usb/serial/io_edgeport.c | 5 1 + 4 - 0 !
drivers/usb/serial/io_ti.c | 2 0 + 2 - 0 !
drivers/usb/serial/ti_usb_3410_5052.c | 4 1 + 3 - 0 !
drivers/video/fbdev/broadsheetfb.c | 4 1 + 3 - 0 !
drivers/video/fbdev/metronomefb.c | 4 1 + 3 - 0 !
sound/drivers/vx/vx_hwdep.c | 4 1 + 3 - 0 !
sound/isa/msnd/msnd_pinnacle.c | 8 2 + 6 - 0 !
sound/isa/sscape.c | 9 2 + 7 - 0 !
sound/isa/wavefront/wavefront_synth.c | 4 1 + 3 - 0 !
sound/pci/asihpi/hpidspcd.c | 2 0 + 2 - 0 !
sound/pci/cs46xx/cs46xx_lib.c | 5 1 + 4 - 0 !
sound/pci/echoaudio/echoaudio.c | 5 1 + 4 - 0 !
sound/pci/emu10k1/emu10k1_main.c | 4 1 + 3 - 0 !
sound/pci/hda/hda_intel.c | 2 0 + 2 - 0 !
sound/pci/korg1212/korg1212.c | 1 0 + 1 - 0 !
sound/pci/mixart/mixart_hwdep.c | 5 1 + 4 - 0 !
sound/pci/pcxhr/pcxhr_hwdep.c | 6 1 + 5 - 0 !
sound/pci/riptide/riptide.c | 5 1 + 4 - 0 !
sound/pci/rme9652/hdsp.c | 5 1 + 4 - 0 !
sound/soc/codecs/wm2000.c | 4 1 + 3 - 0 !
sound/usb/6fire/firmware.c | 4 0 + 4 - 0 !
154 files changed, 143 insertions(+), 651 deletions(-)

 firmware: remove redundant log messages from drivers
Date: Sun, 09 Dec 2012 16:40:31 +0000

drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 29 29 + 0 - 0 !
drivers/gpu/drm/radeon/radeon_drv.c | 30 30 + 0 - 0 !
2 files changed, 59 insertions(+)

 radeon, amdgpu: firmware is required for drm and kms on r600 onward
Date: Tue, 08 Jan 2013 03:25:52 +0000
Bug-Debian: https://bugs.debian.org/607194
Bug-Debian: https://bugs.debian.org/607471
Bug-Debian: https://bugs.debian.org/610851
Bug-Debian: https://bugs.debian.org/627497
Bug-Debian: https://bugs.debian.org/632212
Bug-Debian: https://bugs.debian.org/637943
Bug-Debian: https://bugs.debian.org/649448
Bug-Debian: https://bugs.debian.org/697229

drivers/base/firmware_loader/main.c | 5 4 + 1 - 0 !
drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 1 1 + 0 - 0 !
drivers/gpu/drm/radeon/radeon_drv.c | 1 1 + 0 - 0 !
3 files changed, 6 insertions(+), 1 deletion(-)

 firmware_class: refer to debian wiki page when logging missing firmware
Bug-Debian: https://bugs.debian.org/888405

net/ieee802154/socket.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 [patch 2/3] af_802154: disable auto-loading as mitigation against local exploits

net/rds/af_rds.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 [patch 1/3] rds: disable auto-loading as mitigation against local exploits

net/decnet/af_decnet.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 [patch] decnet: disable auto-loading as mitigation against local exploits

net/dccp/ipv4.c | 4 2 + 2 - 0 !
net/dccp/ipv6.c | 4 2 + 2 - 0 !
2 files changed, 4 insertions(+), 4 deletions(-)

 dccp: disable auto-loading as mitigation against local exploits

net/ax25/af_ax25.c | 2 1 + 1 - 0 !
net/netrom/af_netrom.c | 2 1 + 1 - 0 !
net/rose/af_rose.c | 2 1 + 1 - 0 !
3 files changed, 3 insertions(+), 3 deletions(-)

 hamradio: disable auto-loading as mitigation against local exploits

fs/namei.c | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 fs: enable link security restrictions by default
Date: Fri, 02 Nov 2012 05:32:06 +0000
Bug-Debian: https://bugs.debian.org/609455

kernel/sched/autogroup.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 sched: do not enable autogrouping by default
Date: Wed, 16 Mar 2011 03:17:06 +0000

security/yama/yama_lsm.c | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 yama: disable by default
Date: Wed, 19 Jun 2013 04:35:28 +0100
Bug-Debian: https://bugs.debian.org/712740

kernel/fork.c | 15 15 + 0 - 0 !
kernel/sysctl.c | 13 13 + 0 - 0 !
kernel/user_namespace.c | 3 3 + 0 - 0 !
3 files changed, 31 insertions(+)

 add sysctl to disallow unprivileged clone_newuser by default

include/linux/perf_event.h | 5 5 + 0 - 0 !
kernel/events/core.c | 8 8 + 0 - 0 !
security/Kconfig | 9 9 + 0 - 0 !
3 files changed, 22 insertions(+)

 security,perf: allow further restriction of perf_event_open

Documentation/admin-guide/kernel-parameters.txt | 2 2 + 0 - 0 !
drivers/iommu/intel/iommu.c | 14 14 + 0 - 0 !
2 files changed, 16 insertions(+)

 intel-iommu: add option to exclude integrated gpu only
Bug-Debian: https://bugs.debian.org/935270
Bug-Kali: https://bugs.kali.org/view.php?id=5644

There is still laptop firmware that touches the integrated GPU behind
the operating system's back, and doesn't say so in the RMRR table.
Enabling the IOMMU for all devices causes breakage, but turning it off
for all graphics devices seems like a major weakness.

Add an option, intel_iommu=igpu_off, to exclude only integrated GPUs
from remapping.  This is a narrower exclusion than igfx_off: it only
affects Intel devices on the root bus.  Devices attached through an
external port (Thunderbolt or ExpressCard) won't be on the root bus.

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

drivers/iommu/intel/Kconfig | 28 21 + 7 - 0 !
drivers/iommu/intel/iommu.c | 9 3 + 6 - 0 !
2 files changed, 24 insertions(+), 13 deletions(-)

 intel-iommu: add kconfig option to exclude igpu by default
Bug-Debian: https://bugs.debian.org/935270
Bug-Kali: https://bugs.kali.org/view.php?id=5644

There is still laptop firmware that touches the integrated GPU behind
the operating system's back, and doesn't say so in the RMRR table.
Enabling the IOMMU for all devices causes breakage.

Replace CONFIG_INTEL_IOMMU_DEFAULT_ON with a 3-way choice
corresponding to "on", "off", and "on,intgpu_off".

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>