[ubuntu/kinetic-proposed] linux 5.19.0-17.17 (Accepted)
Andy Whitcroft
apw at canonical.com
Sun Sep 18 21:25:40 UTC 2022
linux (5.19.0-17.17) kinetic; urgency=medium
* kinetic/linux: 5.19.0-17.17 -proposed tracker (LP: #1989987)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/master)
- debian/dkms-versions -- update from kernel-versions (main/master)
* multiple kernel oops regarding hung tasks delaying boot (LP: #1989258)
- SAUCE: Revert "virtio-rng: make device ready before making request"
- SAUCE: Revert "hwrng: virtio - unregister device before reset"
- SAUCE: Revert "hwrng: virtio - always add a pending request"
- SAUCE: Revert "hwrng: virtio - don't waste entropy"
- SAUCE: Revert "hwrng: virtio - don't wait on cleanup"
- SAUCE: Revert "hwrng: virtio - add an internal buffer"
* kinetic: apply new apparmor and LSM stacking patch set (LP: #1989983)
- Revert "UBUNTU: SAUCE: LSM: Specify which LSM to display (using struct cred
as input)"
- Revert "UBUNTU: SAUCE: apparmor: Fix build error, make sk parameter const"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in smk_netlbl_mls()"
- Revert "UBUNTU: SAUCE: LSM: change ima_read_file() to use lsmblob"
- Revert "UBUNTU: SAUCE: apparmor: rename kzfree() to kfree_sensitive()"
- Revert "UBUNTU: SAUCE: Audit: Fix for missing NULL check"
- Revert "UBUNTU: SAUCE: AppArmor: Remove the exclusive flag"
- Revert "UBUNTU: SAUCE: LSM: Add /proc attr entry for full LSM context"
- Revert "UBUNTU: SAUCE: Audit: Add a new record for multiple object LSM
attributes"
- Revert "UBUNTU: SAUCE: Audit: Fix incorrect static inline function
declration."
- Revert "UBUNTU: SAUCE: Audit: Add new record for multiple process LSM
attributes"
- Revert "UBUNTU: SAUCE: NET: Store LSM netlabel data in a lsmblob"
- Revert "UBUNTU: SAUCE: LSM: security_secid_to_secctx in netlink netfilter"
- Revert "UBUNTU: SAUCE: LSM: Use lsmcontext in security_inode_getsecctx"
- Revert "UBUNTU: SAUCE: LSM: Use lsmcontext in security_secid_to_secctx"
- Revert "UBUNTU: SAUCE: LSM: Ensure the correct LSM context releaser"
- Revert "UBUNTU: SAUCE: LSM: Specify which LSM to display"
- Revert "UBUNTU: SAUCE: IMA: Change internal interfaces to use lsmblobs"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_cred_getsecid"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_inode_getsecid"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_task_getsecid"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_ipc_getsecid"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_secid_to_secctx"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_secctx_to_secid"
- Revert "UBUNTU: SAUCE: net: Prepare UDS for security module stacking"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_kernel_act_as"
- Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_audit_rule_match"
- Revert "UBUNTU: SAUCE: LSM: Create and manage the lsmblob data structure."
- Revert "UBUNTU: SAUCE: LSM: Infrastructure management of the sock security"
- Revert "UBUNTU: SAUCE: apparmor: LSM stacking: switch from SK_CTX() to
aa_sock()"
- Revert "UBUNTU: SAUCE: apparmor: rename aa_sock() to aa_unix_sk()"
- Revert "UBUNTU: SAUCE: apparmor: disable showing the mode as part of a secid
to secctx"
- Revert "apparmor: fix absroot causing audited secids to begin with ="
- Revert "UBUNTU SAUCE: apparmor: fix apparmor mediating locking non-fs, unix
sockets"
- Revert "UBUNTU: SAUCE: apparmor: fix use after free in sk_peer_label"
- Revert "UBUNTU: SAUCE: apparmor: af_unix mediation"
- Revert "UBUNTU: SAUCE: apparmor: patch to provide compatibility with v2.x
net rules"
- Revert "UBUNTU: SAUCE: apparmor: add/use fns to print hash string hex value"
- SAUCE: upstream v6.0: apparmor: fix absroot causing audited secids to begin
with =
- SAUCE: upstream v6.0: apparmor: Fix kernel-doc
- SAUCE: upstream v6.0: lsm: Fix kernel-doc
- SAUCE: upstream v6.0: apparmor: Update help description of policy hash for
introspection
- SAUCE: upstream v6.0: apparmor: make export of raw binary profile to
userspace optional
- SAUCE: upstream v6.0: apparmor: Enable tuning of policy paranoid load for
embedded systems
- SAUCE: upstream v6.0: apparmor: don't create raw_sha1 symlink if sha1
hashing is disabled
- SAUCE: upstream v6.0: apparmor: resolve uninitialized symbol warnings in
policy_unpack_test.c
- SAUCE: upstream v6.0: security/apparmor: remove redundant ret variable
- SAUCE: upstream v6.0: apparmor: Use struct_size() helper in kmalloc()
- SAUCE: upstream v6.0: apparmor: Fix match_mnt_path_str() and match_mnt()
kernel-doc comment
- SAUCE: upstream v6.0: apparmor: Fix some kernel-doc comments
- SAUCE: upstream v6.0: apparmor: Fix some kernel-doc comments
- SAUCE: upstream v6.0: apparmor: Fix undefined reference to
`zlib_deflate_workspacesize'
- SAUCE: upstream v6.0: apparmor: Fix some kernel-doc comments
- SAUCE: upstream v6.0: apparmor: test: Remove some casts which are no-longer
required
- SAUCE: upstream v6.0: apparmor: add a kernel label to use on kernel objects
- SAUCE: upstream v6.0: apparmor: Convert secid mapping to XArrays instead of
IDR
- SAUCE: upstream v6.0: apparmor: disable showing the mode as part of a secid
to secctx
- SAUCE: upstream v6.0: apparmor: Mark alloc_unconfined() as static
- SAUCE: upstream v6.0: apparmor: Fix some kernel-doc comments
- SAUCE: upstream v6.0: apparmor: allow label to carry debug flags
- SAUCE: upstream v6.0: apparmor: extend policydb permission set by making use
of the xbits
- SAUCE: upstream v6.0: apparmor: move ptrace mediation to more logical
task.{h,c}
- SAUCE: upstream v6.0: apparmor: correct config reference to intended one
- SAUCE: upstream v6.0: lsm,io_uring: add LSM hooks for the new uring_cmd file
op
- SAUCE: upstream v6.0: selinux: implement the security_uring_cmd() LSM hook
- SAUCE: upstream v6.0: Smack: Provide read control for io_uring_cmd
- SAUCE: apparmor-next 6.1: apparmor: fix a memleak in multi_transaction_new()
- SAUCE: apparmor-next 6.1: apparmor: fix lockdep warning when removing a
namespace
- SAUCE: apparmor-next 6.1: apparmor: reserve mediation classes
- SAUCE: apparmor-next 6.1: apparmor: use zstd compression for profile data
- SAUCE: apparmor-next 6.1: apparmor: expose compression level limits in sysfs
- SAUCE: apparmor-next 6.1: apparmor: compute file permissions on profile load
- SAUCE: apparmor-next 6.1: apparmor: compute xmatch permissions on profile
load
- SAUCE: apparmor-next 6.1: apparmor: move fperm computation into
policy_unpack
- SAUCE: apparmor-next 6.1: apparmor: rework and cleanup fperm computation
- SAUCE: apparmor-next 6.1: apparmor: convert xmatch to use aa_perms structure
- SAUCE: apparmor-next 6.1: apparmor: compute policydb permission on profile
load
- SAUCE: apparmor-next 6.1: apparmor: combine file_rules and aa_policydb into
a single shared struct
- SAUCE: apparmor-next 6.1: apparmor: convert xmatch to using the new shared
policydb struct
- SAUCE: apparmor-next 6.1: apparmor: convert fperm lookup to use accept as an
index
- SAUCE: apparmor-next 6.1: apparmor: convert xmatch lookup to use accept as
an index
- SAUCE: apparmor-next 6.1: apparmor: cleanup shared permission struct
- SAUCE: apparmor-next 6.1: apparmor: convert policy lookup to use accept as
an index
- SAUCE: apparmor-next 6.1: apparmor: preparse for state being more than just
an integer
- SAUCE: apparmor-next 6.1: apparmor: Fix abi check to include v8 abi
- SAUCE: apparmor-next 6.1: apparmor: fix apparmor mediating locking non-fs
unix sockets
- SAUCE: apparmor-next 6.1: apparmor: extend policydb permission set by making
use of the xbits
- SAUCE: apparmor-next 6.1: apparmor: move dfa perm macros into policy_unpack
- SAUCE: apparmor-next 6.1: apparmor: extend xindex size
- SAUCE: apparmor-next 6.1: apparmor: isolate policy backwards compatibility
to its own file
- SAUCE: apparmor-next 6.1: apparmor: extend permissions to support a label
and tag string
- SAUCE: apparmor-next 6.1: apparmor: add mediation class information to
auditing
- SAUCE: apparmor-next 6.1: apparmor: add user mode flag
- SAUCE: apparmor-next 6.1: apparmor: make transition table unpack generic so
it can be reused
- SAUCE: apparmor-next 6.1: apparmor: group dfa policydb unpacking
- SAUCE: apparmor-next 6.1: apparmor: make unpack_array return a trianary
value
- SAUCE: apparmor-next 6.1: apparmor: add the ability for policy to specify a
permission table
- SAUCE: apparmor-next 6.1: apparmor: verify permission table indexes
- SAUCE: apparmor-next 6.1: apparmor: make sure perm indexes are accumulated
- SAUCE: apparmor-next 6.1: apparmor: cleanup: move perm accumulation into
perms.h
- SAUCE: apparmor-next 6.1: apparmor: verify loaded permission bits masks
don't overlap
- SAUCE: apparmor-next 6.1: apparmor: refactor profile rules and attachments
- SAUCE: apparmor-next 6.1: apparmor: rework profile->rules to be a list
- SAUCE: apparmor-next 6.1: apparmor: fix aa_class_names[] to match reserved
classes
- SAUCE: apparmor: add/use fns to print hash string hex value
- SAUCE: apparmor: patch to provide compatibility with v2.x net rules
- SAUCE: apparmor: af_unix mediation
- SAUCE: fix shutdown unix socket owner conditional check
- SAUCE: apparmor: rename aa_sock() to aa_unix_sk()
- SAUCE: apparmor: Add fine grained mediation of posix mqueues
- SAUCE: apparmor: LSM stacking: switch from SK_CTX() to aa_sock()
- SAUCE: lsm stacking v37: integrity: disassociate ima_filter_rule from
security_audit_rule
- SAUCE: lsm stacking v37: LSM: Infrastructure management of the sock security
- SAUCE: lsm stacking v37: LSM: Add the lsmblob data structure.
- SAUCE: lsm stacking v37: LSM: provide lsm name and id slot mappings
- SAUCE: lsm stacking v37: IMA: avoid label collisions with stacked LSMs
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_audit_rule_match
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_kernel_act_as
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_secctx_to_secid
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_secid_to_secctx
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_ipc_getsecid
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_current_getsecid
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_inode_getsecid
- SAUCE: lsm stacking v37: LSM: Use lsmblob in security_cred_getsecid
- SAUCE: lsm stacking v37: LSM: Specify which LSM to display
- SAUCE: fixup lsm stacking v37: LSM: Specify which LSM to display
- SAUCE: lsm stacking v37: LSM: Ensure the correct LSM context releaser
- SAUCE: lsm stacking v37: LSM: Use lsmcontext in security_secid_to_secctx
- SAUCE: lsm stacking v37: LSM: Use lsmcontext in security_inode_getsecctx
- SAUCE: lsm stacking v37: LSM: Use lsmcontext in
security_dentry_init_security
- SAUCE: lsm stacking v37: LSM: security_secid_to_secctx in netlink netfilter
- SAUCE: lsm stacking v37: NET: Store LSM netlabel data in a lsmblob
- SAUCE: lsm stacking v37: binder: Pass LSM identifier for confirmation
- SAUCE: lsm stacking v37: LSM: security_secid_to_secctx module selection
- SAUCE: lsm stacking v37: Audit: Keep multiple LSM data in audit_names
- SAUCE: lsm stacking v37: Audit: Create audit_stamp structure
- SAUCE: lsm stacking v37: LSM: Add a function to report multiple LSMs
- SAUCE: lsm stacking v37: Audit: Allow multiple records in an audit_buffer
- SAUCE: lsm stacking v37: Audit: Add record for multiple task security
contexts
- SAUCE: lsm stacking v37: audit: multiple subject lsm values for netlabel
- SAUCE: lsm stacking v37: Audit: Add record for multiple object contexts
- SAUCE: lsm stacking v37: netlabel: Use a struct lsmblob in audit data
- SAUCE: lsm stacking v37: LSM: Removed scaffolding function lsmcontext_init
- SAUCE: lsm stacking v37: LSM: Add /proc attr entry for full LSM context
- SAUCE: lsm stacking v37: AppArmor: Remove the exclusive flag
- SAUCE: security, lsm: Introduce security_create_user_ns()
- SAUCE: bpf-lsm: Make bpf_lsm_userns_create() sleepable
- SAUCE: selinux: Implement userns_create hook
- SAUCE: apparmor: add user namespace creation mediation
- [Config] update configs after apply new apparmor patch set
* [22.10 FEAT] KVM: Secure Execution guest dump encryption with customer keys
- kernel part (LP: #1959940)
- s390/uv: Add SE hdr query information
- s390/uv: Add dump fields to query
- KVM: s390: pv: Add query interface
- KVM: s390: pv: Add dump support definitions
- KVM: s390: pv: Add query dump information
- KVM: s390: Add configuration dump functionality
- KVM: s390: Add CPU dump functionality
- KVM: s390: Add KVM_CAP_S390_PROTECTED_DUMP
- Documentation: virt: Protected virtual machine dumps
- Documentation/virt/kvm/api.rst: Add protvirt dump/info api descriptions
- Documentation/virt/kvm/api.rst: Explain rc/rrc delivery
* [SRU][OEM-5.14/Jammy/OEM-5.17][PATCH 0/1] Fix blank screen on Thinkpad ADL
4K+ panel (LP: #1980621)
- SAUCE: drm/i915: Implement WaEdpLinkRateDataReload
- SAUCE: Revert "drm/i915/display: Re-add check for low voltage sku for max dp
source rate"
* [UBUNTU 22.04] s390/qeth: cache link_info for ethtool (LP: #1984103)
- s390/qeth: cache link_info for ethtool
* Kernel livepatch support for for s390x (LP: #1639924)
- [Config] Enable EXPOLINE_EXTERN on s390x
* IWLMEI may cause device down at resuming from s2idle (LP: #1987312)
- [Config] Disable IWLMEI
* Raise CONFIG_NR_CPUS (LP: #1967889)
- [Config] Raise riscv64 CONFIG_NR_CPUS to 32
* PolarFire Icicle Kit: missing USB support (LP: #1986970)
- usb: musb: Add support for PolarFire SoC's musb controller
- usb: musb: mpfs: Fix error codes in probe()
- usb: musb: mpfs: add missing clk_disable_unprepare() in mpfs_remove()
- [Config] Enable CONFIG_USB_MUSB_POLARFIRE_SOC on riscv64
* System freeze after resuming from suspend due to PCI ASPM settings
(LP: #1980829)
- SAUCE: PCI/ASPM: Save/restore L1SS Capability for suspend/resume
- SAUCE: whitelist platforms that needs save/restore ASPM L1SS for
suspend/resume
* Please enable CONFIG_SQUASHFS_DECOMP_MULTI_PERCPU (LP: #1980861)
- [Config] Switch from DECOMP_SINGLE to DECOMP_MULTI_PERCPU
* Miscellaneous Ubuntu changes
- [Config] enable security-related configs
- [Packaging] Make stamp-install-<flavor> target reentrant
- [Packaging] Pass kernel build_arch to dkms
- [Packaging] Enable building zfs during cross-compile
- [Packaging] temporarily disable signing for ppc64el
Date: 2022-09-16 18:54:13.474552+00:00
Changed-By: Andrea Righi <andrea.righi at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux/5.19.0-17.17
-------------- next part --------------
Sorry, changesfile not available.
More information about the kinetic-changes
mailing list