diff options
| author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-08-05 19:27:44 +0000 |
|---|---|---|
| committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-08-05 19:27:47 +0000 |
| commit | c7cded9d961b93d10c1809698aeec060c0799de9 (patch) | |
| tree | dc6afad391b3d57b96b4ac3cce3c9ca399c2d8d4 | |
| parent | Merging debian version 6.10.3-1. (diff) | |
| download | linux-c7cded9d961b93d10c1809698aeec060c0799de9.tar.xz linux-c7cded9d961b93d10c1809698aeec060c0799de9.zip | |
Regenerating debian files.
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
515 files changed, 2 insertions, 9102 deletions
diff --git a/debian/build/version-info b/debian/build/version-info new file mode 100644 index 0000000000..32b2dfaedb --- /dev/null +++ b/debian/build/version-info @@ -0,0 +1,2 @@ +Source: linux +Version: 6.10.3-1~progress7.99u1 diff --git a/debian/linux-headers-4kc-malta.maintscript b/debian/linux-headers-4kc-malta.maintscript deleted file mode 100644 index 7859b593d5..0000000000 --- a/debian/linux-headers-4kc-malta.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-4kc-malta linux-headers-6.10.3-4kc-malta 5.7~rc5-1~exp1 linux-headers-4kc-malta diff --git a/debian/linux-headers-5kc-malta.maintscript b/debian/linux-headers-5kc-malta.maintscript deleted file mode 100644 index 0470684f21..0000000000 --- a/debian/linux-headers-5kc-malta.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-5kc-malta linux-headers-6.10.3-5kc-malta 5.7~rc5-1~exp1 linux-headers-5kc-malta diff --git a/debian/linux-headers-6.10.3-4kc-malta.postinst b/debian/linux-headers-6.10.3-4kc-malta.postinst deleted file mode 100644 index 4b2d5e4555..0000000000 --- a/debian/linux-headers-6.10.3-4kc-malta.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-4kc-malta"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-5kc-malta.postinst b/debian/linux-headers-6.10.3-5kc-malta.postinst deleted file mode 100644 index 42b435ee83..0000000000 --- a/debian/linux-headers-6.10.3-5kc-malta.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-5kc-malta"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-686-pae.postinst b/debian/linux-headers-6.10.3-686-pae.postinst deleted file mode 100644 index 3bc10674f5..0000000000 --- a/debian/linux-headers-6.10.3-686-pae.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-686-pae"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-686.postinst b/debian/linux-headers-6.10.3-686.postinst deleted file mode 100644 index 6cadc1e2ad..0000000000 --- a/debian/linux-headers-6.10.3-686.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-686"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-alpha-generic.postinst b/debian/linux-headers-6.10.3-alpha-generic.postinst deleted file mode 100644 index 27c8194516..0000000000 --- a/debian/linux-headers-6.10.3-alpha-generic.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-alpha-generic"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-alpha-smp.postinst b/debian/linux-headers-6.10.3-alpha-smp.postinst deleted file mode 100644 index 9e7757e467..0000000000 --- a/debian/linux-headers-6.10.3-alpha-smp.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-alpha-smp"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-amd64.postinst b/debian/linux-headers-6.10.3-amd64.postinst deleted file mode 100644 index 3195ab14e9..0000000000 --- a/debian/linux-headers-6.10.3-amd64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-amd64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-arm64-16k.postinst b/debian/linux-headers-6.10.3-arm64-16k.postinst deleted file mode 100644 index e7a48402e2..0000000000 --- a/debian/linux-headers-6.10.3-arm64-16k.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-arm64-16k"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-arm64.postinst b/debian/linux-headers-6.10.3-arm64.postinst deleted file mode 100644 index 677cb184cc..0000000000 --- a/debian/linux-headers-6.10.3-arm64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-arm64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-armmp-lpae.postinst b/debian/linux-headers-6.10.3-armmp-lpae.postinst deleted file mode 100644 index 8ea059a408..0000000000 --- a/debian/linux-headers-6.10.3-armmp-lpae.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-armmp-lpae"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-armmp.postinst b/debian/linux-headers-6.10.3-armmp.postinst deleted file mode 100644 index 7caa8398cc..0000000000 --- a/debian/linux-headers-6.10.3-armmp.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-armmp"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-cloud-amd64.postinst b/debian/linux-headers-6.10.3-cloud-amd64.postinst deleted file mode 100644 index b7ac934f4f..0000000000 --- a/debian/linux-headers-6.10.3-cloud-amd64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-cloud-amd64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-cloud-arm64.postinst b/debian/linux-headers-6.10.3-cloud-arm64.postinst deleted file mode 100644 index 5520e0490a..0000000000 --- a/debian/linux-headers-6.10.3-cloud-arm64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-cloud-arm64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-loong64.postinst b/debian/linux-headers-6.10.3-loong64.postinst deleted file mode 100644 index 1a352275be..0000000000 --- a/debian/linux-headers-6.10.3-loong64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-loong64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-loongson-3.postinst b/debian/linux-headers-6.10.3-loongson-3.postinst deleted file mode 100644 index 6a5f5a7ef1..0000000000 --- a/debian/linux-headers-6.10.3-loongson-3.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-loongson-3"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-m68k.postinst b/debian/linux-headers-6.10.3-m68k.postinst deleted file mode 100644 index 44d2d3c653..0000000000 --- a/debian/linux-headers-6.10.3-m68k.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-m68k"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-mips32r2eb.postinst b/debian/linux-headers-6.10.3-mips32r2eb.postinst deleted file mode 100644 index 5509ff7a3b..0000000000 --- a/debian/linux-headers-6.10.3-mips32r2eb.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-mips32r2eb"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-mips32r2el.postinst b/debian/linux-headers-6.10.3-mips32r2el.postinst deleted file mode 100644 index 877110f626..0000000000 --- a/debian/linux-headers-6.10.3-mips32r2el.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-mips32r2el"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-mips64r2eb.postinst b/debian/linux-headers-6.10.3-mips64r2eb.postinst deleted file mode 100644 index 9f5b29c1ad..0000000000 --- a/debian/linux-headers-6.10.3-mips64r2eb.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-mips64r2eb"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-mips64r2el.postinst b/debian/linux-headers-6.10.3-mips64r2el.postinst deleted file mode 100644 index 374926d7df..0000000000 --- a/debian/linux-headers-6.10.3-mips64r2el.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-mips64r2el"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-mips64r6el.postinst b/debian/linux-headers-6.10.3-mips64r6el.postinst deleted file mode 100644 index 9ee7330410..0000000000 --- a/debian/linux-headers-6.10.3-mips64r6el.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-mips64r6el"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-octeon.postinst b/debian/linux-headers-6.10.3-octeon.postinst deleted file mode 100644 index a7de74ba60..0000000000 --- a/debian/linux-headers-6.10.3-octeon.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-octeon"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-parisc.postinst b/debian/linux-headers-6.10.3-parisc.postinst deleted file mode 100644 index e681ce1317..0000000000 --- a/debian/linux-headers-6.10.3-parisc.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-parisc"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-parisc64.postinst b/debian/linux-headers-6.10.3-parisc64.postinst deleted file mode 100644 index 77ee6a9550..0000000000 --- a/debian/linux-headers-6.10.3-parisc64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-parisc64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-powerpc-smp.postinst b/debian/linux-headers-6.10.3-powerpc-smp.postinst deleted file mode 100644 index 0817cb46ce..0000000000 --- a/debian/linux-headers-6.10.3-powerpc-smp.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-powerpc-smp"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-powerpc.postinst b/debian/linux-headers-6.10.3-powerpc.postinst deleted file mode 100644 index 43f1307627..0000000000 --- a/debian/linux-headers-6.10.3-powerpc.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-powerpc"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-powerpc64-64k.postinst b/debian/linux-headers-6.10.3-powerpc64-64k.postinst deleted file mode 100644 index 11f8578e2e..0000000000 --- a/debian/linux-headers-6.10.3-powerpc64-64k.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-powerpc64-64k"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-powerpc64.postinst b/debian/linux-headers-6.10.3-powerpc64.postinst deleted file mode 100644 index 4628242759..0000000000 --- a/debian/linux-headers-6.10.3-powerpc64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-powerpc64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-powerpc64le-64k.postinst b/debian/linux-headers-6.10.3-powerpc64le-64k.postinst deleted file mode 100644 index 8b5539bcb8..0000000000 --- a/debian/linux-headers-6.10.3-powerpc64le-64k.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-powerpc64le-64k"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-powerpc64le.postinst b/debian/linux-headers-6.10.3-powerpc64le.postinst deleted file mode 100644 index 4baa67308f..0000000000 --- a/debian/linux-headers-6.10.3-powerpc64le.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-powerpc64le"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-riscv64.postinst b/debian/linux-headers-6.10.3-riscv64.postinst deleted file mode 100644 index 69b5f7a39c..0000000000 --- a/debian/linux-headers-6.10.3-riscv64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-riscv64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-rpi.postinst b/debian/linux-headers-6.10.3-rpi.postinst deleted file mode 100644 index e37b19ed32..0000000000 --- a/debian/linux-headers-6.10.3-rpi.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-rpi"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-rt-686-pae.postinst b/debian/linux-headers-6.10.3-rt-686-pae.postinst deleted file mode 100644 index b94ad9a36f..0000000000 --- a/debian/linux-headers-6.10.3-rt-686-pae.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-rt-686-pae"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-rt-amd64.postinst b/debian/linux-headers-6.10.3-rt-amd64.postinst deleted file mode 100644 index fb06393301..0000000000 --- a/debian/linux-headers-6.10.3-rt-amd64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-rt-amd64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-rt-arm64.postinst b/debian/linux-headers-6.10.3-rt-arm64.postinst deleted file mode 100644 index 8471eeff82..0000000000 --- a/debian/linux-headers-6.10.3-rt-arm64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-rt-arm64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-rt-armmp.postinst b/debian/linux-headers-6.10.3-rt-armmp.postinst deleted file mode 100644 index 3d9f3500fa..0000000000 --- a/debian/linux-headers-6.10.3-rt-armmp.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-rt-armmp"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-s390x.postinst b/debian/linux-headers-6.10.3-s390x.postinst deleted file mode 100644 index 6677e48216..0000000000 --- a/debian/linux-headers-6.10.3-s390x.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-s390x"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-sh7751r.postinst b/debian/linux-headers-6.10.3-sh7751r.postinst deleted file mode 100644 index dd6d863a00..0000000000 --- a/debian/linux-headers-6.10.3-sh7751r.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-sh7751r"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-sh7785lcr.postinst b/debian/linux-headers-6.10.3-sh7785lcr.postinst deleted file mode 100644 index ab560b0564..0000000000 --- a/debian/linux-headers-6.10.3-sh7785lcr.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-sh7785lcr"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-sparc64-smp.postinst b/debian/linux-headers-6.10.3-sparc64-smp.postinst deleted file mode 100644 index 0a4745921b..0000000000 --- a/debian/linux-headers-6.10.3-sparc64-smp.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-sparc64-smp"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.10.3-sparc64.postinst b/debian/linux-headers-6.10.3-sparc64.postinst deleted file mode 100644 index 0f32c2e2cb..0000000000 --- a/debian/linux-headers-6.10.3-sparc64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.10.3-sparc64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-686-pae.maintscript b/debian/linux-headers-686-pae.maintscript deleted file mode 100644 index 68bbb4da85..0000000000 --- a/debian/linux-headers-686-pae.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-686-pae linux-headers-6.10.3-686-pae 5.7~rc5-1~exp1 linux-headers-686-pae diff --git a/debian/linux-headers-686.maintscript b/debian/linux-headers-686.maintscript deleted file mode 100644 index 545de91808..0000000000 --- a/debian/linux-headers-686.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-686 linux-headers-6.10.3-686 5.7~rc5-1~exp1 linux-headers-686 diff --git a/debian/linux-headers-alpha-generic.maintscript b/debian/linux-headers-alpha-generic.maintscript deleted file mode 100644 index 9880ee81ce..0000000000 --- a/debian/linux-headers-alpha-generic.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-alpha-generic linux-headers-6.10.3-alpha-generic 5.7~rc5-1~exp1 linux-headers-alpha-generic diff --git a/debian/linux-headers-alpha-smp.maintscript b/debian/linux-headers-alpha-smp.maintscript deleted file mode 100644 index ecbd283257..0000000000 --- a/debian/linux-headers-alpha-smp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-alpha-smp linux-headers-6.10.3-alpha-smp 5.7~rc5-1~exp1 linux-headers-alpha-smp diff --git a/debian/linux-headers-armmp-lpae.maintscript b/debian/linux-headers-armmp-lpae.maintscript deleted file mode 100644 index 213c003f2f..0000000000 --- a/debian/linux-headers-armmp-lpae.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-armmp-lpae linux-headers-6.10.3-armmp-lpae 5.7~rc5-1~exp1 linux-headers-armmp-lpae diff --git a/debian/linux-headers-armmp.maintscript b/debian/linux-headers-armmp.maintscript deleted file mode 100644 index 21adbcf4e3..0000000000 --- a/debian/linux-headers-armmp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-armmp linux-headers-6.10.3-armmp 5.7~rc5-1~exp1 linux-headers-armmp diff --git a/debian/linux-headers-loong64.maintscript b/debian/linux-headers-loong64.maintscript deleted file mode 100644 index 83431b290b..0000000000 --- a/debian/linux-headers-loong64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-loong64 linux-headers-6.10.3-loong64 5.7~rc5-1~exp1 linux-headers-loong64 diff --git a/debian/linux-headers-loongson-3.maintscript b/debian/linux-headers-loongson-3.maintscript deleted file mode 100644 index e716dfdc2d..0000000000 --- a/debian/linux-headers-loongson-3.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-loongson-3 linux-headers-6.10.3-loongson-3 5.7~rc5-1~exp1 linux-headers-loongson-3 diff --git a/debian/linux-headers-m68k.maintscript b/debian/linux-headers-m68k.maintscript deleted file mode 100644 index f102a62e4e..0000000000 --- a/debian/linux-headers-m68k.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-m68k linux-headers-6.10.3-m68k 5.7~rc5-1~exp1 linux-headers-m68k diff --git a/debian/linux-headers-mips32r2eb.maintscript b/debian/linux-headers-mips32r2eb.maintscript deleted file mode 100644 index 425abdd907..0000000000 --- a/debian/linux-headers-mips32r2eb.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-mips32r2eb linux-headers-6.10.3-mips32r2eb 5.7~rc5-1~exp1 linux-headers-mips32r2eb diff --git a/debian/linux-headers-mips32r2el.maintscript b/debian/linux-headers-mips32r2el.maintscript deleted file mode 100644 index 2636e82a96..0000000000 --- a/debian/linux-headers-mips32r2el.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-mips32r2el linux-headers-6.10.3-mips32r2el 5.7~rc5-1~exp1 linux-headers-mips32r2el diff --git a/debian/linux-headers-mips64r2eb.maintscript b/debian/linux-headers-mips64r2eb.maintscript deleted file mode 100644 index 69143ee841..0000000000 --- a/debian/linux-headers-mips64r2eb.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-mips64r2eb linux-headers-6.10.3-mips64r2eb 5.7~rc5-1~exp1 linux-headers-mips64r2eb diff --git a/debian/linux-headers-mips64r2el.maintscript b/debian/linux-headers-mips64r2el.maintscript deleted file mode 100644 index 6301afce3a..0000000000 --- a/debian/linux-headers-mips64r2el.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-mips64r2el linux-headers-6.10.3-mips64r2el 5.7~rc5-1~exp1 linux-headers-mips64r2el diff --git a/debian/linux-headers-mips64r6el.maintscript b/debian/linux-headers-mips64r6el.maintscript deleted file mode 100644 index 01c8b5c1c2..0000000000 --- a/debian/linux-headers-mips64r6el.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-mips64r6el linux-headers-6.10.3-mips64r6el 5.7~rc5-1~exp1 linux-headers-mips64r6el diff --git a/debian/linux-headers-octeon.maintscript b/debian/linux-headers-octeon.maintscript deleted file mode 100644 index 05db1f0906..0000000000 --- a/debian/linux-headers-octeon.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-octeon linux-headers-6.10.3-octeon 5.7~rc5-1~exp1 linux-headers-octeon diff --git a/debian/linux-headers-parisc.maintscript b/debian/linux-headers-parisc.maintscript deleted file mode 100644 index 023d9bf0c8..0000000000 --- a/debian/linux-headers-parisc.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-parisc linux-headers-6.10.3-parisc 5.7~rc5-1~exp1 linux-headers-parisc diff --git a/debian/linux-headers-parisc64.maintscript b/debian/linux-headers-parisc64.maintscript deleted file mode 100644 index a3b791c3f5..0000000000 --- a/debian/linux-headers-parisc64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-parisc64 linux-headers-6.10.3-parisc64 5.7~rc5-1~exp1 linux-headers-parisc64 diff --git a/debian/linux-headers-powerpc-smp.maintscript b/debian/linux-headers-powerpc-smp.maintscript deleted file mode 100644 index 5efd7077ef..0000000000 --- a/debian/linux-headers-powerpc-smp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-powerpc-smp linux-headers-6.10.3-powerpc-smp 5.7~rc5-1~exp1 linux-headers-powerpc-smp diff --git a/debian/linux-headers-powerpc.maintscript b/debian/linux-headers-powerpc.maintscript deleted file mode 100644 index 52424d8bd2..0000000000 --- a/debian/linux-headers-powerpc.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-powerpc linux-headers-6.10.3-powerpc 5.7~rc5-1~exp1 linux-headers-powerpc diff --git a/debian/linux-headers-powerpc64-64k.maintscript b/debian/linux-headers-powerpc64-64k.maintscript deleted file mode 100644 index 971bc63940..0000000000 --- a/debian/linux-headers-powerpc64-64k.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-powerpc64-64k linux-headers-6.10.3-powerpc64-64k 5.7~rc5-1~exp1 linux-headers-powerpc64-64k diff --git a/debian/linux-headers-powerpc64.maintscript b/debian/linux-headers-powerpc64.maintscript deleted file mode 100644 index 16800da50f..0000000000 --- a/debian/linux-headers-powerpc64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-powerpc64 linux-headers-6.10.3-powerpc64 5.7~rc5-1~exp1 linux-headers-powerpc64 diff --git a/debian/linux-headers-powerpc64le-64k.maintscript b/debian/linux-headers-powerpc64le-64k.maintscript deleted file mode 100644 index e4eba62d92..0000000000 --- a/debian/linux-headers-powerpc64le-64k.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-powerpc64le-64k linux-headers-6.10.3-powerpc64le-64k 5.7~rc5-1~exp1 linux-headers-powerpc64le-64k diff --git a/debian/linux-headers-powerpc64le.maintscript b/debian/linux-headers-powerpc64le.maintscript deleted file mode 100644 index dd46d330e8..0000000000 --- a/debian/linux-headers-powerpc64le.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-powerpc64le linux-headers-6.10.3-powerpc64le 5.7~rc5-1~exp1 linux-headers-powerpc64le diff --git a/debian/linux-headers-riscv64.maintscript b/debian/linux-headers-riscv64.maintscript deleted file mode 100644 index 8eaa89074b..0000000000 --- a/debian/linux-headers-riscv64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-riscv64 linux-headers-6.10.3-riscv64 5.7~rc5-1~exp1 linux-headers-riscv64 diff --git a/debian/linux-headers-rpi.maintscript b/debian/linux-headers-rpi.maintscript deleted file mode 100644 index 2631c9dc74..0000000000 --- a/debian/linux-headers-rpi.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-rpi linux-headers-6.10.3-rpi 5.7~rc5-1~exp1 linux-headers-rpi diff --git a/debian/linux-headers-rt-686-pae.maintscript b/debian/linux-headers-rt-686-pae.maintscript deleted file mode 100644 index bb4228ba23..0000000000 --- a/debian/linux-headers-rt-686-pae.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-rt-686-pae linux-headers-6.10.3-rt-686-pae 5.7~rc5-1~exp1 linux-headers-rt-686-pae diff --git a/debian/linux-headers-rt-armmp.maintscript b/debian/linux-headers-rt-armmp.maintscript deleted file mode 100644 index a32a7b7d24..0000000000 --- a/debian/linux-headers-rt-armmp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-rt-armmp linux-headers-6.10.3-rt-armmp 5.7~rc5-1~exp1 linux-headers-rt-armmp diff --git a/debian/linux-headers-s390x.maintscript b/debian/linux-headers-s390x.maintscript deleted file mode 100644 index c242576b8a..0000000000 --- a/debian/linux-headers-s390x.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-s390x linux-headers-6.10.3-s390x 5.7~rc5-1~exp1 linux-headers-s390x diff --git a/debian/linux-headers-sh7751r.maintscript b/debian/linux-headers-sh7751r.maintscript deleted file mode 100644 index 1a6a702ec4..0000000000 --- a/debian/linux-headers-sh7751r.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-sh7751r linux-headers-6.10.3-sh7751r 5.7~rc5-1~exp1 linux-headers-sh7751r diff --git a/debian/linux-headers-sh7785lcr.maintscript b/debian/linux-headers-sh7785lcr.maintscript deleted file mode 100644 index 03599ff2d3..0000000000 --- a/debian/linux-headers-sh7785lcr.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-sh7785lcr linux-headers-6.10.3-sh7785lcr 5.7~rc5-1~exp1 linux-headers-sh7785lcr diff --git a/debian/linux-headers-sparc64-smp.maintscript b/debian/linux-headers-sparc64-smp.maintscript deleted file mode 100644 index 98e9801832..0000000000 --- a/debian/linux-headers-sparc64-smp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-sparc64-smp linux-headers-6.10.3-sparc64-smp 5.7~rc5-1~exp1 linux-headers-sparc64-smp diff --git a/debian/linux-headers-sparc64.maintscript b/debian/linux-headers-sparc64.maintscript deleted file mode 100644 index a460f35f64..0000000000 --- a/debian/linux-headers-sparc64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-sparc64 linux-headers-6.10.3-sparc64 5.7~rc5-1~exp1 linux-headers-sparc64 diff --git a/debian/linux-image-4kc-malta-dbg.lintian-overrides b/debian/linux-image-4kc-malta-dbg.lintian-overrides deleted file mode 100644 index ff38eee30b..0000000000 --- a/debian/linux-image-4kc-malta-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-4kc-malta-dbg: wrong-section-according-to-package-name linux-image-4kc-malta-dbg => debug diff --git a/debian/linux-image-4kc-malta-dbg.maintscript b/debian/linux-image-4kc-malta-dbg.maintscript deleted file mode 100644 index 4396bf9837..0000000000 --- a/debian/linux-image-4kc-malta-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-4kc-malta-dbg linux-image-6.10.3-4kc-malta-dbg 5.7~rc5-1~exp1 linux-image-4kc-malta-dbg diff --git a/debian/linux-image-4kc-malta.bug-presubj b/debian/linux-image-4kc-malta.bug-presubj deleted file mode 100644 index d943e449d2..0000000000 --- a/debian/linux-image-4kc-malta.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-4kc-malta instead. diff --git a/debian/linux-image-4kc-malta.maintscript b/debian/linux-image-4kc-malta.maintscript deleted file mode 100644 index 6fefb3c42b..0000000000 --- a/debian/linux-image-4kc-malta.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-4kc-malta linux-image-6.10.3-4kc-malta 5.7~rc5-1~exp1 linux-image-4kc-malta diff --git a/debian/linux-image-5kc-malta-dbg.lintian-overrides b/debian/linux-image-5kc-malta-dbg.lintian-overrides deleted file mode 100644 index 598b21f390..0000000000 --- a/debian/linux-image-5kc-malta-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-5kc-malta-dbg: wrong-section-according-to-package-name linux-image-5kc-malta-dbg => debug diff --git a/debian/linux-image-5kc-malta-dbg.maintscript b/debian/linux-image-5kc-malta-dbg.maintscript deleted file mode 100644 index 968b9c06a1..0000000000 --- a/debian/linux-image-5kc-malta-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-5kc-malta-dbg linux-image-6.10.3-5kc-malta-dbg 5.7~rc5-1~exp1 linux-image-5kc-malta-dbg diff --git a/debian/linux-image-5kc-malta.bug-presubj b/debian/linux-image-5kc-malta.bug-presubj deleted file mode 100644 index 7005d81c4b..0000000000 --- a/debian/linux-image-5kc-malta.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-5kc-malta instead. diff --git a/debian/linux-image-5kc-malta.maintscript b/debian/linux-image-5kc-malta.maintscript deleted file mode 100644 index 94d015951c..0000000000 --- a/debian/linux-image-5kc-malta.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-5kc-malta linux-image-6.10.3-5kc-malta 5.7~rc5-1~exp1 linux-image-5kc-malta diff --git a/debian/linux-image-6.10.3-4kc-malta-dbg.lintian-overrides b/debian/linux-image-6.10.3-4kc-malta-dbg.lintian-overrides deleted file mode 100644 index 6829699573..0000000000 --- a/debian/linux-image-6.10.3-4kc-malta-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-4kc-malta-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.10.3-4kc-malta-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.10.3-4kc-malta.NEWS b/debian/linux-image-6.10.3-4kc-malta.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-4kc-malta.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-4kc-malta.lintian-overrides b/debian/linux-image-6.10.3-4kc-malta.lintian-overrides deleted file mode 100644 index bd7c579172..0000000000 --- a/debian/linux-image-6.10.3-4kc-malta.lintian-overrides +++ /dev/null @@ -1,7 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.10.3-4kc-malta: binary-from-other-architecture *boot/vmlinu* -linux-image-6.10.3-4kc-malta: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. -linux-image-6.10.3-4kc-malta: unstripped-binary-or-object *boot/vmlinu* diff --git a/debian/linux-image-6.10.3-4kc-malta.postinst b/debian/linux-image-6.10.3-4kc-malta.postinst deleted file mode 100644 index 2873ada56c..0000000000 --- a/debian/linux-image-6.10.3-4kc-malta.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-4kc-malta -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-4kc-malta.postrm b/debian/linux-image-6.10.3-4kc-malta.postrm deleted file mode 100644 index 679c83d769..0000000000 --- a/debian/linux-image-6.10.3-4kc-malta.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-4kc-malta -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-4kc-malta.preinst b/debian/linux-image-6.10.3-4kc-malta.preinst deleted file mode 100644 index ad8eaa04e2..0000000000 --- a/debian/linux-image-6.10.3-4kc-malta.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-4kc-malta -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-4kc-malta.prerm b/debian/linux-image-6.10.3-4kc-malta.prerm deleted file mode 100644 index 6431e57c30..0000000000 --- a/debian/linux-image-6.10.3-4kc-malta.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-4kc-malta -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-5kc-malta-dbg.lintian-overrides b/debian/linux-image-6.10.3-5kc-malta-dbg.lintian-overrides deleted file mode 100644 index 257af6f609..0000000000 --- a/debian/linux-image-6.10.3-5kc-malta-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-5kc-malta-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-5kc-malta.NEWS b/debian/linux-image-6.10.3-5kc-malta.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-5kc-malta.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-5kc-malta.lintian-overrides b/debian/linux-image-6.10.3-5kc-malta.lintian-overrides deleted file mode 100644 index c8c455cc68..0000000000 --- a/debian/linux-image-6.10.3-5kc-malta.lintian-overrides +++ /dev/null @@ -1,5 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. -linux-image-6.10.3-5kc-malta: unstripped-binary-or-object *boot/vmlinu* diff --git a/debian/linux-image-6.10.3-5kc-malta.postinst b/debian/linux-image-6.10.3-5kc-malta.postinst deleted file mode 100644 index e5a22db10d..0000000000 --- a/debian/linux-image-6.10.3-5kc-malta.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-5kc-malta -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-5kc-malta.postrm b/debian/linux-image-6.10.3-5kc-malta.postrm deleted file mode 100644 index d7de641a25..0000000000 --- a/debian/linux-image-6.10.3-5kc-malta.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-5kc-malta -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-5kc-malta.preinst b/debian/linux-image-6.10.3-5kc-malta.preinst deleted file mode 100644 index 673e15c19b..0000000000 --- a/debian/linux-image-6.10.3-5kc-malta.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-5kc-malta -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-5kc-malta.prerm b/debian/linux-image-6.10.3-5kc-malta.prerm deleted file mode 100644 index 8dc5d81809..0000000000 --- a/debian/linux-image-6.10.3-5kc-malta.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-5kc-malta -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-686-dbg.lintian-overrides b/debian/linux-image-6.10.3-686-dbg.lintian-overrides deleted file mode 100644 index f85b92016f..0000000000 --- a/debian/linux-image-6.10.3-686-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-686-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.10.3-686-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-686/vdso/vdso32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-686-pae-dbg.lintian-overrides b/debian/linux-image-6.10.3-686-pae-dbg.lintian-overrides deleted file mode 100644 index 298b1ca5c3..0000000000 --- a/debian/linux-image-6.10.3-686-pae-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-686-pae-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.10.3-686-pae-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-686-pae/vdso/vdso32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-686-pae.NEWS b/debian/linux-image-6.10.3-686-pae.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-686-pae.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-686-pae.lintian-overrides b/debian/linux-image-6.10.3-686-pae.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-686-pae.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-686-pae.postinst b/debian/linux-image-6.10.3-686-pae.postinst deleted file mode 100644 index 64b811d234..0000000000 --- a/debian/linux-image-6.10.3-686-pae.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-686-pae -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-686-pae.postrm b/debian/linux-image-6.10.3-686-pae.postrm deleted file mode 100644 index 40bf641816..0000000000 --- a/debian/linux-image-6.10.3-686-pae.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-686-pae -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-686-pae.preinst b/debian/linux-image-6.10.3-686-pae.preinst deleted file mode 100644 index fe4a6d2844..0000000000 --- a/debian/linux-image-6.10.3-686-pae.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-686-pae -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-686-pae.prerm b/debian/linux-image-6.10.3-686-pae.prerm deleted file mode 100644 index c8e96ff39a..0000000000 --- a/debian/linux-image-6.10.3-686-pae.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-686-pae -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-686.NEWS b/debian/linux-image-6.10.3-686.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-686.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-686.lintian-overrides b/debian/linux-image-6.10.3-686.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-686.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-686.postinst b/debian/linux-image-6.10.3-686.postinst deleted file mode 100644 index 660a6a44f5..0000000000 --- a/debian/linux-image-6.10.3-686.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-686 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-686.postrm b/debian/linux-image-6.10.3-686.postrm deleted file mode 100644 index 526e50b200..0000000000 --- a/debian/linux-image-6.10.3-686.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-686 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-686.preinst b/debian/linux-image-6.10.3-686.preinst deleted file mode 100644 index 843fa7bb4f..0000000000 --- a/debian/linux-image-6.10.3-686.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-686 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-686.prerm b/debian/linux-image-6.10.3-686.prerm deleted file mode 100644 index 7ea9ac14e5..0000000000 --- a/debian/linux-image-6.10.3-686.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-686 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-alpha-generic-dbg.lintian-overrides b/debian/linux-image-6.10.3-alpha-generic-dbg.lintian-overrides deleted file mode 100644 index e5734a37d8..0000000000 --- a/debian/linux-image-6.10.3-alpha-generic-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-alpha-generic-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-alpha-generic.NEWS b/debian/linux-image-6.10.3-alpha-generic.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-alpha-generic.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-alpha-generic.lintian-overrides b/debian/linux-image-6.10.3-alpha-generic.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-alpha-generic.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-alpha-generic.postinst b/debian/linux-image-6.10.3-alpha-generic.postinst deleted file mode 100644 index a3955d1a94..0000000000 --- a/debian/linux-image-6.10.3-alpha-generic.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-alpha-generic -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-alpha-generic.postrm b/debian/linux-image-6.10.3-alpha-generic.postrm deleted file mode 100644 index fe3eb539f0..0000000000 --- a/debian/linux-image-6.10.3-alpha-generic.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-alpha-generic -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-alpha-generic.preinst b/debian/linux-image-6.10.3-alpha-generic.preinst deleted file mode 100644 index 3419e1aa50..0000000000 --- a/debian/linux-image-6.10.3-alpha-generic.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-alpha-generic -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-alpha-generic.prerm b/debian/linux-image-6.10.3-alpha-generic.prerm deleted file mode 100644 index 8d99a1317e..0000000000 --- a/debian/linux-image-6.10.3-alpha-generic.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-alpha-generic -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-alpha-smp-dbg.lintian-overrides b/debian/linux-image-6.10.3-alpha-smp-dbg.lintian-overrides deleted file mode 100644 index 1ea5782958..0000000000 --- a/debian/linux-image-6.10.3-alpha-smp-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-alpha-smp-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-alpha-smp.NEWS b/debian/linux-image-6.10.3-alpha-smp.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-alpha-smp.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-alpha-smp.lintian-overrides b/debian/linux-image-6.10.3-alpha-smp.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-alpha-smp.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-alpha-smp.postinst b/debian/linux-image-6.10.3-alpha-smp.postinst deleted file mode 100644 index dd7c6caf3f..0000000000 --- a/debian/linux-image-6.10.3-alpha-smp.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-alpha-smp -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-alpha-smp.postrm b/debian/linux-image-6.10.3-alpha-smp.postrm deleted file mode 100644 index 3c1d6836f9..0000000000 --- a/debian/linux-image-6.10.3-alpha-smp.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-alpha-smp -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-alpha-smp.preinst b/debian/linux-image-6.10.3-alpha-smp.preinst deleted file mode 100644 index 3f3bd56787..0000000000 --- a/debian/linux-image-6.10.3-alpha-smp.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-alpha-smp -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-alpha-smp.prerm b/debian/linux-image-6.10.3-alpha-smp.prerm deleted file mode 100644 index d0662faf10..0000000000 --- a/debian/linux-image-6.10.3-alpha-smp.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-alpha-smp -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-amd64-dbg.lintian-overrides b/debian/linux-image-6.10.3-amd64-dbg.lintian-overrides deleted file mode 100644 index a570a303f6..0000000000 --- a/debian/linux-image-6.10.3-amd64-dbg.lintian-overrides +++ /dev/null @@ -1,15 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-amd64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.10.3-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-amd64/vdso/vdso32.so* -linux-image-6.10.3-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-amd64/vdso/vdso64.so* -linux-image-6.10.3-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-amd64/vdso/vdsox32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.10.3-amd64-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.10.3-amd64/vdso/vdsox32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-amd64-unsigned.NEWS b/debian/linux-image-6.10.3-amd64-unsigned.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-amd64-unsigned.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-amd64-unsigned.lintian-overrides b/debian/linux-image-6.10.3-amd64-unsigned.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-amd64-unsigned.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-amd64-unsigned.postinst b/debian/linux-image-6.10.3-amd64-unsigned.postinst deleted file mode 100644 index e6c7b9bd42..0000000000 --- a/debian/linux-image-6.10.3-amd64-unsigned.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-amd64-unsigned.postrm b/debian/linux-image-6.10.3-amd64-unsigned.postrm deleted file mode 100644 index d6c40d64ee..0000000000 --- a/debian/linux-image-6.10.3-amd64-unsigned.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-amd64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-amd64-unsigned.preinst b/debian/linux-image-6.10.3-amd64-unsigned.preinst deleted file mode 100644 index 5afde0ff04..0000000000 --- a/debian/linux-image-6.10.3-amd64-unsigned.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-amd64-unsigned.prerm b/debian/linux-image-6.10.3-amd64-unsigned.prerm deleted file mode 100644 index bd7d55076d..0000000000 --- a/debian/linux-image-6.10.3-amd64-unsigned.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-arm64-16k-dbg.lintian-overrides b/debian/linux-image-6.10.3-arm64-16k-dbg.lintian-overrides deleted file mode 100644 index 732fa97566..0000000000 --- a/debian/linux-image-6.10.3-arm64-16k-dbg.lintian-overrides +++ /dev/null @@ -1,14 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-arm64-16k-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.10.3-arm64-16k-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-arm64-16k/vdso/vdso.so* -linux-image-6.10.3-arm64-16k-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-arm64-16k/vdso/vdso32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.10.3-arm64-16k-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.10.3-arm64-16k/vdso/vdso32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-arm64-16k-unsigned.NEWS b/debian/linux-image-6.10.3-arm64-16k-unsigned.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-arm64-16k-unsigned.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-arm64-16k-unsigned.lintian-overrides b/debian/linux-image-6.10.3-arm64-16k-unsigned.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-arm64-16k-unsigned.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-arm64-16k-unsigned.postinst b/debian/linux-image-6.10.3-arm64-16k-unsigned.postinst deleted file mode 100644 index 58b1fbc224..0000000000 --- a/debian/linux-image-6.10.3-arm64-16k-unsigned.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-arm64-16k -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-arm64-16k-unsigned.postrm b/debian/linux-image-6.10.3-arm64-16k-unsigned.postrm deleted file mode 100644 index 4824f34676..0000000000 --- a/debian/linux-image-6.10.3-arm64-16k-unsigned.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-arm64-16k -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-arm64-16k-unsigned.preinst b/debian/linux-image-6.10.3-arm64-16k-unsigned.preinst deleted file mode 100644 index a660d112a0..0000000000 --- a/debian/linux-image-6.10.3-arm64-16k-unsigned.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-arm64-16k -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-arm64-16k-unsigned.prerm b/debian/linux-image-6.10.3-arm64-16k-unsigned.prerm deleted file mode 100644 index 6dcac6c290..0000000000 --- a/debian/linux-image-6.10.3-arm64-16k-unsigned.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-arm64-16k -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-arm64-dbg.lintian-overrides b/debian/linux-image-6.10.3-arm64-dbg.lintian-overrides deleted file mode 100644 index 07ad43da5c..0000000000 --- a/debian/linux-image-6.10.3-arm64-dbg.lintian-overrides +++ /dev/null @@ -1,14 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-arm64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.10.3-arm64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-arm64/vdso/vdso.so* -linux-image-6.10.3-arm64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-arm64/vdso/vdso32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.10.3-arm64-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.10.3-arm64/vdso/vdso32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-arm64-unsigned.NEWS b/debian/linux-image-6.10.3-arm64-unsigned.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-arm64-unsigned.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-arm64-unsigned.lintian-overrides b/debian/linux-image-6.10.3-arm64-unsigned.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-arm64-unsigned.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-arm64-unsigned.postinst b/debian/linux-image-6.10.3-arm64-unsigned.postinst deleted file mode 100644 index c1ca710fc5..0000000000 --- a/debian/linux-image-6.10.3-arm64-unsigned.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-arm64-unsigned.postrm b/debian/linux-image-6.10.3-arm64-unsigned.postrm deleted file mode 100644 index 246dd6f398..0000000000 --- a/debian/linux-image-6.10.3-arm64-unsigned.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-arm64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-arm64-unsigned.preinst b/debian/linux-image-6.10.3-arm64-unsigned.preinst deleted file mode 100644 index 1c59e07563..0000000000 --- a/debian/linux-image-6.10.3-arm64-unsigned.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-arm64-unsigned.prerm b/debian/linux-image-6.10.3-arm64-unsigned.prerm deleted file mode 100644 index 0274e74d88..0000000000 --- a/debian/linux-image-6.10.3-arm64-unsigned.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-armmp-dbg.lintian-overrides b/debian/linux-image-6.10.3-armmp-dbg.lintian-overrides deleted file mode 100644 index 037e730f44..0000000000 --- a/debian/linux-image-6.10.3-armmp-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-armmp-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.10.3-armmp-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-armmp/vdso/vdso.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-armmp-lpae-dbg.lintian-overrides b/debian/linux-image-6.10.3-armmp-lpae-dbg.lintian-overrides deleted file mode 100644 index d0a7081295..0000000000 --- a/debian/linux-image-6.10.3-armmp-lpae-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-armmp-lpae-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.10.3-armmp-lpae-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-armmp-lpae/vdso/vdso.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-armmp-lpae.NEWS b/debian/linux-image-6.10.3-armmp-lpae.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-armmp-lpae.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-armmp-lpae.lintian-overrides b/debian/linux-image-6.10.3-armmp-lpae.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-armmp-lpae.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-armmp-lpae.postinst b/debian/linux-image-6.10.3-armmp-lpae.postinst deleted file mode 100644 index 32fcca3d0f..0000000000 --- a/debian/linux-image-6.10.3-armmp-lpae.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-armmp-lpae -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-armmp-lpae.postrm b/debian/linux-image-6.10.3-armmp-lpae.postrm deleted file mode 100644 index 178597cfa5..0000000000 --- a/debian/linux-image-6.10.3-armmp-lpae.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-armmp-lpae -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-armmp-lpae.preinst b/debian/linux-image-6.10.3-armmp-lpae.preinst deleted file mode 100644 index 3eeac3872e..0000000000 --- a/debian/linux-image-6.10.3-armmp-lpae.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-armmp-lpae -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-armmp-lpae.prerm b/debian/linux-image-6.10.3-armmp-lpae.prerm deleted file mode 100644 index ccc34ddde8..0000000000 --- a/debian/linux-image-6.10.3-armmp-lpae.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-armmp-lpae -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-armmp.NEWS b/debian/linux-image-6.10.3-armmp.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-armmp.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-armmp.lintian-overrides b/debian/linux-image-6.10.3-armmp.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-armmp.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-armmp.postinst b/debian/linux-image-6.10.3-armmp.postinst deleted file mode 100644 index df07f3678b..0000000000 --- a/debian/linux-image-6.10.3-armmp.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-armmp -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-armmp.postrm b/debian/linux-image-6.10.3-armmp.postrm deleted file mode 100644 index b159b95a60..0000000000 --- a/debian/linux-image-6.10.3-armmp.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-armmp -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-armmp.preinst b/debian/linux-image-6.10.3-armmp.preinst deleted file mode 100644 index 6d75b57d57..0000000000 --- a/debian/linux-image-6.10.3-armmp.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-armmp -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-armmp.prerm b/debian/linux-image-6.10.3-armmp.prerm deleted file mode 100644 index d2fb3be9af..0000000000 --- a/debian/linux-image-6.10.3-armmp.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-armmp -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-cloud-amd64-dbg.lintian-overrides b/debian/linux-image-6.10.3-cloud-amd64-dbg.lintian-overrides deleted file mode 100644 index ba0883471f..0000000000 --- a/debian/linux-image-6.10.3-cloud-amd64-dbg.lintian-overrides +++ /dev/null @@ -1,15 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-cloud-amd64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.10.3-cloud-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-cloud-amd64/vdso/vdso32.so* -linux-image-6.10.3-cloud-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-cloud-amd64/vdso/vdso64.so* -linux-image-6.10.3-cloud-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-cloud-amd64/vdso/vdsox32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.10.3-cloud-amd64-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.10.3-cloud-amd64/vdso/vdsox32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-cloud-amd64-unsigned.NEWS b/debian/linux-image-6.10.3-cloud-amd64-unsigned.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-cloud-amd64-unsigned.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-cloud-amd64-unsigned.lintian-overrides b/debian/linux-image-6.10.3-cloud-amd64-unsigned.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-cloud-amd64-unsigned.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-cloud-amd64-unsigned.postinst b/debian/linux-image-6.10.3-cloud-amd64-unsigned.postinst deleted file mode 100644 index d4cc820a31..0000000000 --- a/debian/linux-image-6.10.3-cloud-amd64-unsigned.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-cloud-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-cloud-amd64-unsigned.postrm b/debian/linux-image-6.10.3-cloud-amd64-unsigned.postrm deleted file mode 100644 index 7687c72672..0000000000 --- a/debian/linux-image-6.10.3-cloud-amd64-unsigned.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-cloud-amd64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-cloud-amd64-unsigned.preinst b/debian/linux-image-6.10.3-cloud-amd64-unsigned.preinst deleted file mode 100644 index 46f955771f..0000000000 --- a/debian/linux-image-6.10.3-cloud-amd64-unsigned.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-cloud-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-cloud-amd64-unsigned.prerm b/debian/linux-image-6.10.3-cloud-amd64-unsigned.prerm deleted file mode 100644 index 5da1246631..0000000000 --- a/debian/linux-image-6.10.3-cloud-amd64-unsigned.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-cloud-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-cloud-arm64-dbg.lintian-overrides b/debian/linux-image-6.10.3-cloud-arm64-dbg.lintian-overrides deleted file mode 100644 index e5e77835ae..0000000000 --- a/debian/linux-image-6.10.3-cloud-arm64-dbg.lintian-overrides +++ /dev/null @@ -1,14 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-cloud-arm64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.10.3-cloud-arm64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-cloud-arm64/vdso/vdso.so* -linux-image-6.10.3-cloud-arm64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-cloud-arm64/vdso/vdso32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.10.3-cloud-arm64-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.10.3-cloud-arm64/vdso/vdso32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-cloud-arm64-unsigned.NEWS b/debian/linux-image-6.10.3-cloud-arm64-unsigned.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-cloud-arm64-unsigned.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-cloud-arm64-unsigned.lintian-overrides b/debian/linux-image-6.10.3-cloud-arm64-unsigned.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-cloud-arm64-unsigned.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-cloud-arm64-unsigned.postinst b/debian/linux-image-6.10.3-cloud-arm64-unsigned.postinst deleted file mode 100644 index 333ea5b3e4..0000000000 --- a/debian/linux-image-6.10.3-cloud-arm64-unsigned.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-cloud-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-cloud-arm64-unsigned.postrm b/debian/linux-image-6.10.3-cloud-arm64-unsigned.postrm deleted file mode 100644 index a6a8881782..0000000000 --- a/debian/linux-image-6.10.3-cloud-arm64-unsigned.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-cloud-arm64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-cloud-arm64-unsigned.preinst b/debian/linux-image-6.10.3-cloud-arm64-unsigned.preinst deleted file mode 100644 index f3e2b5f607..0000000000 --- a/debian/linux-image-6.10.3-cloud-arm64-unsigned.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-cloud-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-cloud-arm64-unsigned.prerm b/debian/linux-image-6.10.3-cloud-arm64-unsigned.prerm deleted file mode 100644 index 293cf23bb2..0000000000 --- a/debian/linux-image-6.10.3-cloud-arm64-unsigned.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-cloud-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-loong64-dbg.lintian-overrides b/debian/linux-image-6.10.3-loong64-dbg.lintian-overrides deleted file mode 100644 index 8127e0dea9..0000000000 --- a/debian/linux-image-6.10.3-loong64-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-loong64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-loong64.NEWS b/debian/linux-image-6.10.3-loong64.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-loong64.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-loong64.lintian-overrides b/debian/linux-image-6.10.3-loong64.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-loong64.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-loong64.postinst b/debian/linux-image-6.10.3-loong64.postinst deleted file mode 100644 index 5f91b0279d..0000000000 --- a/debian/linux-image-6.10.3-loong64.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-loong64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-loong64.postrm b/debian/linux-image-6.10.3-loong64.postrm deleted file mode 100644 index fb3d3c7a95..0000000000 --- a/debian/linux-image-6.10.3-loong64.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-loong64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-loong64.preinst b/debian/linux-image-6.10.3-loong64.preinst deleted file mode 100644 index 2f710d5068..0000000000 --- a/debian/linux-image-6.10.3-loong64.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-loong64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-loong64.prerm b/debian/linux-image-6.10.3-loong64.prerm deleted file mode 100644 index 459baafb8c..0000000000 --- a/debian/linux-image-6.10.3-loong64.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-loong64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-loongson-3-dbg.lintian-overrides b/debian/linux-image-6.10.3-loongson-3-dbg.lintian-overrides deleted file mode 100644 index 9b578a20d0..0000000000 --- a/debian/linux-image-6.10.3-loongson-3-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-loongson-3-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.10.3-loongson-3-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.10.3-loongson-3.NEWS b/debian/linux-image-6.10.3-loongson-3.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-loongson-3.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-loongson-3.lintian-overrides b/debian/linux-image-6.10.3-loongson-3.lintian-overrides deleted file mode 100644 index b5c4b2cb70..0000000000 --- a/debian/linux-image-6.10.3-loongson-3.lintian-overrides +++ /dev/null @@ -1,7 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.10.3-loongson-3: binary-from-other-architecture *boot/vmlinu* -linux-image-6.10.3-loongson-3: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. -linux-image-6.10.3-loongson-3: unstripped-binary-or-object *boot/vmlinu* diff --git a/debian/linux-image-6.10.3-loongson-3.postinst b/debian/linux-image-6.10.3-loongson-3.postinst deleted file mode 100644 index 1cfa2591fb..0000000000 --- a/debian/linux-image-6.10.3-loongson-3.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-loongson-3 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-loongson-3.postrm b/debian/linux-image-6.10.3-loongson-3.postrm deleted file mode 100644 index b48e2f7dba..0000000000 --- a/debian/linux-image-6.10.3-loongson-3.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-loongson-3 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-loongson-3.preinst b/debian/linux-image-6.10.3-loongson-3.preinst deleted file mode 100644 index b136c331f6..0000000000 --- a/debian/linux-image-6.10.3-loongson-3.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-loongson-3 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-loongson-3.prerm b/debian/linux-image-6.10.3-loongson-3.prerm deleted file mode 100644 index 5b34095879..0000000000 --- a/debian/linux-image-6.10.3-loongson-3.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-loongson-3 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-m68k-dbg.lintian-overrides b/debian/linux-image-6.10.3-m68k-dbg.lintian-overrides deleted file mode 100644 index 384d76edb6..0000000000 --- a/debian/linux-image-6.10.3-m68k-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-m68k-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-m68k.NEWS b/debian/linux-image-6.10.3-m68k.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-m68k.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-m68k.lintian-overrides b/debian/linux-image-6.10.3-m68k.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-m68k.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-m68k.postinst b/debian/linux-image-6.10.3-m68k.postinst deleted file mode 100644 index 9398513f0d..0000000000 --- a/debian/linux-image-6.10.3-m68k.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-m68k -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-m68k.postrm b/debian/linux-image-6.10.3-m68k.postrm deleted file mode 100644 index 5b2b8c80e6..0000000000 --- a/debian/linux-image-6.10.3-m68k.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-m68k -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-m68k.preinst b/debian/linux-image-6.10.3-m68k.preinst deleted file mode 100644 index 049406874a..0000000000 --- a/debian/linux-image-6.10.3-m68k.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-m68k -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-m68k.prerm b/debian/linux-image-6.10.3-m68k.prerm deleted file mode 100644 index 4a3af064d0..0000000000 --- a/debian/linux-image-6.10.3-m68k.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-m68k -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-mips32r2eb-dbg.lintian-overrides b/debian/linux-image-6.10.3-mips32r2eb-dbg.lintian-overrides deleted file mode 100644 index f60a990f20..0000000000 --- a/debian/linux-image-6.10.3-mips32r2eb-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-mips32r2eb-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.10.3-mips32r2eb-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.10.3-mips32r2eb.NEWS b/debian/linux-image-6.10.3-mips32r2eb.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-mips32r2eb.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-mips32r2eb.lintian-overrides b/debian/linux-image-6.10.3-mips32r2eb.lintian-overrides deleted file mode 100644 index cf124d1102..0000000000 --- a/debian/linux-image-6.10.3-mips32r2eb.lintian-overrides +++ /dev/null @@ -1,6 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.10.3-mips32r2eb: binary-from-other-architecture *boot/vmlinu* -linux-image-6.10.3-mips32r2eb: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-mips32r2eb.postinst b/debian/linux-image-6.10.3-mips32r2eb.postinst deleted file mode 100644 index ce0d0d0a7c..0000000000 --- a/debian/linux-image-6.10.3-mips32r2eb.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-mips32r2eb -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-mips32r2eb.postrm b/debian/linux-image-6.10.3-mips32r2eb.postrm deleted file mode 100644 index f91be8cb6d..0000000000 --- a/debian/linux-image-6.10.3-mips32r2eb.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-mips32r2eb -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-mips32r2eb.preinst b/debian/linux-image-6.10.3-mips32r2eb.preinst deleted file mode 100644 index acc0f50583..0000000000 --- a/debian/linux-image-6.10.3-mips32r2eb.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-mips32r2eb -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-mips32r2eb.prerm b/debian/linux-image-6.10.3-mips32r2eb.prerm deleted file mode 100644 index 3832335e99..0000000000 --- a/debian/linux-image-6.10.3-mips32r2eb.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-mips32r2eb -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-mips32r2el-dbg.lintian-overrides b/debian/linux-image-6.10.3-mips32r2el-dbg.lintian-overrides deleted file mode 100644 index 4bc368400c..0000000000 --- a/debian/linux-image-6.10.3-mips32r2el-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-mips32r2el-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.10.3-mips32r2el-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.10.3-mips32r2el.NEWS b/debian/linux-image-6.10.3-mips32r2el.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-mips32r2el.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-mips32r2el.lintian-overrides b/debian/linux-image-6.10.3-mips32r2el.lintian-overrides deleted file mode 100644 index c30c0defed..0000000000 --- a/debian/linux-image-6.10.3-mips32r2el.lintian-overrides +++ /dev/null @@ -1,7 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.10.3-mips32r2el: binary-from-other-architecture *boot/vmlinu* -linux-image-6.10.3-mips32r2el: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. -linux-image-6.10.3-mips32r2el: unstripped-binary-or-object *boot/vmlinu* diff --git a/debian/linux-image-6.10.3-mips32r2el.postinst b/debian/linux-image-6.10.3-mips32r2el.postinst deleted file mode 100644 index ae2e17db45..0000000000 --- a/debian/linux-image-6.10.3-mips32r2el.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-mips32r2el -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-mips32r2el.postrm b/debian/linux-image-6.10.3-mips32r2el.postrm deleted file mode 100644 index b177a8237a..0000000000 --- a/debian/linux-image-6.10.3-mips32r2el.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-mips32r2el -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-mips32r2el.preinst b/debian/linux-image-6.10.3-mips32r2el.preinst deleted file mode 100644 index 7718b74d25..0000000000 --- a/debian/linux-image-6.10.3-mips32r2el.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-mips32r2el -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-mips32r2el.prerm b/debian/linux-image-6.10.3-mips32r2el.prerm deleted file mode 100644 index 969d8a547b..0000000000 --- a/debian/linux-image-6.10.3-mips32r2el.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-mips32r2el -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-mips64r2eb-dbg.lintian-overrides b/debian/linux-image-6.10.3-mips64r2eb-dbg.lintian-overrides deleted file mode 100644 index b706dbb92e..0000000000 --- a/debian/linux-image-6.10.3-mips64r2eb-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-mips64r2eb-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-mips64r2eb.NEWS b/debian/linux-image-6.10.3-mips64r2eb.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-mips64r2eb.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-mips64r2eb.lintian-overrides b/debian/linux-image-6.10.3-mips64r2eb.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-mips64r2eb.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-mips64r2eb.postinst b/debian/linux-image-6.10.3-mips64r2eb.postinst deleted file mode 100644 index aa86020c1e..0000000000 --- a/debian/linux-image-6.10.3-mips64r2eb.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-mips64r2eb -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-mips64r2eb.postrm b/debian/linux-image-6.10.3-mips64r2eb.postrm deleted file mode 100644 index c75c5d00e5..0000000000 --- a/debian/linux-image-6.10.3-mips64r2eb.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-mips64r2eb -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-mips64r2eb.preinst b/debian/linux-image-6.10.3-mips64r2eb.preinst deleted file mode 100644 index 7a5ca8c653..0000000000 --- a/debian/linux-image-6.10.3-mips64r2eb.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-mips64r2eb -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-mips64r2eb.prerm b/debian/linux-image-6.10.3-mips64r2eb.prerm deleted file mode 100644 index 6d6531a0a9..0000000000 --- a/debian/linux-image-6.10.3-mips64r2eb.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-mips64r2eb -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-mips64r2el-dbg.lintian-overrides b/debian/linux-image-6.10.3-mips64r2el-dbg.lintian-overrides deleted file mode 100644 index 770ff5abca..0000000000 --- a/debian/linux-image-6.10.3-mips64r2el-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-mips64r2el-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-mips64r2el.NEWS b/debian/linux-image-6.10.3-mips64r2el.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-mips64r2el.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-mips64r2el.lintian-overrides b/debian/linux-image-6.10.3-mips64r2el.lintian-overrides deleted file mode 100644 index b2c961f11d..0000000000 --- a/debian/linux-image-6.10.3-mips64r2el.lintian-overrides +++ /dev/null @@ -1,5 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. -linux-image-6.10.3-mips64r2el: unstripped-binary-or-object *boot/vmlinu* diff --git a/debian/linux-image-6.10.3-mips64r2el.postinst b/debian/linux-image-6.10.3-mips64r2el.postinst deleted file mode 100644 index 5412fe9bcc..0000000000 --- a/debian/linux-image-6.10.3-mips64r2el.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-mips64r2el -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-mips64r2el.postrm b/debian/linux-image-6.10.3-mips64r2el.postrm deleted file mode 100644 index b946e02216..0000000000 --- a/debian/linux-image-6.10.3-mips64r2el.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-mips64r2el -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-mips64r2el.preinst b/debian/linux-image-6.10.3-mips64r2el.preinst deleted file mode 100644 index 00586fb7a3..0000000000 --- a/debian/linux-image-6.10.3-mips64r2el.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-mips64r2el -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-mips64r2el.prerm b/debian/linux-image-6.10.3-mips64r2el.prerm deleted file mode 100644 index 4f06e8433e..0000000000 --- a/debian/linux-image-6.10.3-mips64r2el.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-mips64r2el -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-mips64r6el-dbg.lintian-overrides b/debian/linux-image-6.10.3-mips64r6el-dbg.lintian-overrides deleted file mode 100644 index 866aad13b4..0000000000 --- a/debian/linux-image-6.10.3-mips64r6el-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-mips64r6el-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-mips64r6el.NEWS b/debian/linux-image-6.10.3-mips64r6el.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-mips64r6el.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-mips64r6el.lintian-overrides b/debian/linux-image-6.10.3-mips64r6el.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-mips64r6el.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-mips64r6el.postinst b/debian/linux-image-6.10.3-mips64r6el.postinst deleted file mode 100644 index 1967befe2e..0000000000 --- a/debian/linux-image-6.10.3-mips64r6el.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-mips64r6el -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-mips64r6el.postrm b/debian/linux-image-6.10.3-mips64r6el.postrm deleted file mode 100644 index 4ba5bccb8a..0000000000 --- a/debian/linux-image-6.10.3-mips64r6el.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-mips64r6el -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-mips64r6el.preinst b/debian/linux-image-6.10.3-mips64r6el.preinst deleted file mode 100644 index 328719697e..0000000000 --- a/debian/linux-image-6.10.3-mips64r6el.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-mips64r6el -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-mips64r6el.prerm b/debian/linux-image-6.10.3-mips64r6el.prerm deleted file mode 100644 index 929b080890..0000000000 --- a/debian/linux-image-6.10.3-mips64r6el.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-mips64r6el -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-octeon-dbg.lintian-overrides b/debian/linux-image-6.10.3-octeon-dbg.lintian-overrides deleted file mode 100644 index 5bbbdcde72..0000000000 --- a/debian/linux-image-6.10.3-octeon-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-octeon-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.10.3-octeon-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.10.3-octeon.NEWS b/debian/linux-image-6.10.3-octeon.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-octeon.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-octeon.lintian-overrides b/debian/linux-image-6.10.3-octeon.lintian-overrides deleted file mode 100644 index 2239921151..0000000000 --- a/debian/linux-image-6.10.3-octeon.lintian-overrides +++ /dev/null @@ -1,7 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.10.3-octeon: binary-from-other-architecture *boot/vmlinu* -linux-image-6.10.3-octeon: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. -linux-image-6.10.3-octeon: unstripped-binary-or-object *boot/vmlinu* diff --git a/debian/linux-image-6.10.3-octeon.postinst b/debian/linux-image-6.10.3-octeon.postinst deleted file mode 100644 index 1f89d8fe8c..0000000000 --- a/debian/linux-image-6.10.3-octeon.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-octeon -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-octeon.postrm b/debian/linux-image-6.10.3-octeon.postrm deleted file mode 100644 index 683ece2970..0000000000 --- a/debian/linux-image-6.10.3-octeon.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-octeon -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-octeon.preinst b/debian/linux-image-6.10.3-octeon.preinst deleted file mode 100644 index 363c8f281e..0000000000 --- a/debian/linux-image-6.10.3-octeon.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-octeon -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-octeon.prerm b/debian/linux-image-6.10.3-octeon.prerm deleted file mode 100644 index 982c99a1c2..0000000000 --- a/debian/linux-image-6.10.3-octeon.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-octeon -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-parisc-dbg.lintian-overrides b/debian/linux-image-6.10.3-parisc-dbg.lintian-overrides deleted file mode 100644 index 1c527d814a..0000000000 --- a/debian/linux-image-6.10.3-parisc-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-parisc-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.10.3-parisc-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.10.3-parisc.NEWS b/debian/linux-image-6.10.3-parisc.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-parisc.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-parisc.lintian-overrides b/debian/linux-image-6.10.3-parisc.lintian-overrides deleted file mode 100644 index a942227891..0000000000 --- a/debian/linux-image-6.10.3-parisc.lintian-overrides +++ /dev/null @@ -1,5 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.10.3-parisc: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-parisc.postinst b/debian/linux-image-6.10.3-parisc.postinst deleted file mode 100644 index b729ac6904..0000000000 --- a/debian/linux-image-6.10.3-parisc.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-parisc -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-parisc.postrm b/debian/linux-image-6.10.3-parisc.postrm deleted file mode 100644 index 1c5218dd5c..0000000000 --- a/debian/linux-image-6.10.3-parisc.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-parisc -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-parisc.preinst b/debian/linux-image-6.10.3-parisc.preinst deleted file mode 100644 index c5a8ef900e..0000000000 --- a/debian/linux-image-6.10.3-parisc.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-parisc -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-parisc.prerm b/debian/linux-image-6.10.3-parisc.prerm deleted file mode 100644 index b0072516d6..0000000000 --- a/debian/linux-image-6.10.3-parisc.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-parisc -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-parisc64-dbg.lintian-overrides b/debian/linux-image-6.10.3-parisc64-dbg.lintian-overrides deleted file mode 100644 index 3c5eefdbfd..0000000000 --- a/debian/linux-image-6.10.3-parisc64-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-parisc64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.10.3-parisc64-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.10.3-parisc64.NEWS b/debian/linux-image-6.10.3-parisc64.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-parisc64.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-parisc64.lintian-overrides b/debian/linux-image-6.10.3-parisc64.lintian-overrides deleted file mode 100644 index 09d1868fa3..0000000000 --- a/debian/linux-image-6.10.3-parisc64.lintian-overrides +++ /dev/null @@ -1,5 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.10.3-parisc64: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-parisc64.postinst b/debian/linux-image-6.10.3-parisc64.postinst deleted file mode 100644 index 9bcf8bb74e..0000000000 --- a/debian/linux-image-6.10.3-parisc64.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-parisc64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-parisc64.postrm b/debian/linux-image-6.10.3-parisc64.postrm deleted file mode 100644 index b061850d71..0000000000 --- a/debian/linux-image-6.10.3-parisc64.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-parisc64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-parisc64.preinst b/debian/linux-image-6.10.3-parisc64.preinst deleted file mode 100644 index 2ec78f08b1..0000000000 --- a/debian/linux-image-6.10.3-parisc64.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-parisc64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-parisc64.prerm b/debian/linux-image-6.10.3-parisc64.prerm deleted file mode 100644 index c85cdf48e4..0000000000 --- a/debian/linux-image-6.10.3-parisc64.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-parisc64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc-dbg.lintian-overrides b/debian/linux-image-6.10.3-powerpc-dbg.lintian-overrides deleted file mode 100644 index fa4e8a1122..0000000000 --- a/debian/linux-image-6.10.3-powerpc-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-powerpc-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.10.3-powerpc-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.10.3-powerpc-smp-dbg.lintian-overrides b/debian/linux-image-6.10.3-powerpc-smp-dbg.lintian-overrides deleted file mode 100644 index 5f4f7738a6..0000000000 --- a/debian/linux-image-6.10.3-powerpc-smp-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-powerpc-smp-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.10.3-powerpc-smp-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.10.3-powerpc-smp.NEWS b/debian/linux-image-6.10.3-powerpc-smp.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-powerpc-smp.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-powerpc-smp.lintian-overrides b/debian/linux-image-6.10.3-powerpc-smp.lintian-overrides deleted file mode 100644 index d9c083382d..0000000000 --- a/debian/linux-image-6.10.3-powerpc-smp.lintian-overrides +++ /dev/null @@ -1,5 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.10.3-powerpc-smp: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-powerpc-smp.postinst b/debian/linux-image-6.10.3-powerpc-smp.postinst deleted file mode 100644 index c4fb7995e4..0000000000 --- a/debian/linux-image-6.10.3-powerpc-smp.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc-smp -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc-smp.postrm b/debian/linux-image-6.10.3-powerpc-smp.postrm deleted file mode 100644 index a598567634..0000000000 --- a/debian/linux-image-6.10.3-powerpc-smp.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc-smp -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc-smp.preinst b/debian/linux-image-6.10.3-powerpc-smp.preinst deleted file mode 100644 index 58200b31e7..0000000000 --- a/debian/linux-image-6.10.3-powerpc-smp.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc-smp -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc-smp.prerm b/debian/linux-image-6.10.3-powerpc-smp.prerm deleted file mode 100644 index e2c2a95d3c..0000000000 --- a/debian/linux-image-6.10.3-powerpc-smp.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc-smp -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc.NEWS b/debian/linux-image-6.10.3-powerpc.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-powerpc.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-powerpc.lintian-overrides b/debian/linux-image-6.10.3-powerpc.lintian-overrides deleted file mode 100644 index d8447f3112..0000000000 --- a/debian/linux-image-6.10.3-powerpc.lintian-overrides +++ /dev/null @@ -1,5 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.10.3-powerpc: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-powerpc.postinst b/debian/linux-image-6.10.3-powerpc.postinst deleted file mode 100644 index 49b5d97484..0000000000 --- a/debian/linux-image-6.10.3-powerpc.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc.postrm b/debian/linux-image-6.10.3-powerpc.postrm deleted file mode 100644 index 84fa6f7ca4..0000000000 --- a/debian/linux-image-6.10.3-powerpc.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc.preinst b/debian/linux-image-6.10.3-powerpc.preinst deleted file mode 100644 index 69443d1fe4..0000000000 --- a/debian/linux-image-6.10.3-powerpc.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc.prerm b/debian/linux-image-6.10.3-powerpc.prerm deleted file mode 100644 index 84ec9c8bf5..0000000000 --- a/debian/linux-image-6.10.3-powerpc.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc64-64k-dbg.lintian-overrides b/debian/linux-image-6.10.3-powerpc64-64k-dbg.lintian-overrides deleted file mode 100644 index 3a5c0ab8fb..0000000000 --- a/debian/linux-image-6.10.3-powerpc64-64k-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-powerpc64-64k-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-powerpc64-64k.NEWS b/debian/linux-image-6.10.3-powerpc64-64k.NEWS deleted file mode 100644 index 788dab7828..0000000000 --- a/debian/linux-image-6.10.3-powerpc64-64k.NEWS +++ /dev/null @@ -1,108 +0,0 @@ -linux (6.10-1~exp2) unstable; urgency=medium - - * From Linux 6.10, the default kernel on ppc64 and ppc64el - architectures uses 4k page size. - - After rebooting, you need to re-create all swap files or partitions. - They depend on the page size and will be not longer usable. See - mkswap(8) on how to do that. - - Some file systems might be incompatible with the smaller page size. - At least btrfs created with default settings is known to be affected - and they will not work with this kernel any more. - - A btrfs file system can be checked with file(1) (use file -s). It - will show: - BTRFS Filesystem sectorsize 65536 - If this number is larger then 4096, the file system can not be - mounted with the default kernel anymore. - - If you are affected and require the 64k page size of older kernels, - you can install linux-image-powerpc64-64k or - linux-image-powerpc64el-64k packages. - - -- Bastian Blank <waldi@debian.org> Thu, 11 Jul 2024 11:12:35 +0200 - -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-powerpc64-64k.lintian-overrides b/debian/linux-image-6.10.3-powerpc64-64k.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-powerpc64-64k.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-powerpc64-64k.postinst b/debian/linux-image-6.10.3-powerpc64-64k.postinst deleted file mode 100644 index 7fa4bda539..0000000000 --- a/debian/linux-image-6.10.3-powerpc64-64k.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc64-64k -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc64-64k.postrm b/debian/linux-image-6.10.3-powerpc64-64k.postrm deleted file mode 100644 index 6f0f632071..0000000000 --- a/debian/linux-image-6.10.3-powerpc64-64k.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc64-64k -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc64-64k.preinst b/debian/linux-image-6.10.3-powerpc64-64k.preinst deleted file mode 100644 index c2cda155fd..0000000000 --- a/debian/linux-image-6.10.3-powerpc64-64k.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc64-64k -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc64-64k.prerm b/debian/linux-image-6.10.3-powerpc64-64k.prerm deleted file mode 100644 index a4be1d8ca3..0000000000 --- a/debian/linux-image-6.10.3-powerpc64-64k.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc64-64k -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc64-dbg.lintian-overrides b/debian/linux-image-6.10.3-powerpc64-dbg.lintian-overrides deleted file mode 100644 index b705cb657b..0000000000 --- a/debian/linux-image-6.10.3-powerpc64-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-powerpc64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-powerpc64.NEWS b/debian/linux-image-6.10.3-powerpc64.NEWS deleted file mode 100644 index 788dab7828..0000000000 --- a/debian/linux-image-6.10.3-powerpc64.NEWS +++ /dev/null @@ -1,108 +0,0 @@ -linux (6.10-1~exp2) unstable; urgency=medium - - * From Linux 6.10, the default kernel on ppc64 and ppc64el - architectures uses 4k page size. - - After rebooting, you need to re-create all swap files or partitions. - They depend on the page size and will be not longer usable. See - mkswap(8) on how to do that. - - Some file systems might be incompatible with the smaller page size. - At least btrfs created with default settings is known to be affected - and they will not work with this kernel any more. - - A btrfs file system can be checked with file(1) (use file -s). It - will show: - BTRFS Filesystem sectorsize 65536 - If this number is larger then 4096, the file system can not be - mounted with the default kernel anymore. - - If you are affected and require the 64k page size of older kernels, - you can install linux-image-powerpc64-64k or - linux-image-powerpc64el-64k packages. - - -- Bastian Blank <waldi@debian.org> Thu, 11 Jul 2024 11:12:35 +0200 - -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-powerpc64.lintian-overrides b/debian/linux-image-6.10.3-powerpc64.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-powerpc64.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-powerpc64.postinst b/debian/linux-image-6.10.3-powerpc64.postinst deleted file mode 100644 index d5456f3bb8..0000000000 --- a/debian/linux-image-6.10.3-powerpc64.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc64 -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc64.postrm b/debian/linux-image-6.10.3-powerpc64.postrm deleted file mode 100644 index 8ad2ed3ac4..0000000000 --- a/debian/linux-image-6.10.3-powerpc64.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc64 -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc64.preinst b/debian/linux-image-6.10.3-powerpc64.preinst deleted file mode 100644 index c0553d57dd..0000000000 --- a/debian/linux-image-6.10.3-powerpc64.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc64 -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc64.prerm b/debian/linux-image-6.10.3-powerpc64.prerm deleted file mode 100644 index e4059e7692..0000000000 --- a/debian/linux-image-6.10.3-powerpc64.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc64 -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc64le-64k-dbg.lintian-overrides b/debian/linux-image-6.10.3-powerpc64le-64k-dbg.lintian-overrides deleted file mode 100644 index 890de98704..0000000000 --- a/debian/linux-image-6.10.3-powerpc64le-64k-dbg.lintian-overrides +++ /dev/null @@ -1,14 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-powerpc64le-64k-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.10.3-powerpc64le-64k-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-powerpc64le-64k/vdso/vdso32.so* -linux-image-6.10.3-powerpc64le-64k-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-powerpc64le-64k/vdso/vdso64.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.10.3-powerpc64le-64k-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.10.3-powerpc64le-64k/vdso/vdso32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-powerpc64le-64k.NEWS b/debian/linux-image-6.10.3-powerpc64le-64k.NEWS deleted file mode 100644 index 788dab7828..0000000000 --- a/debian/linux-image-6.10.3-powerpc64le-64k.NEWS +++ /dev/null @@ -1,108 +0,0 @@ -linux (6.10-1~exp2) unstable; urgency=medium - - * From Linux 6.10, the default kernel on ppc64 and ppc64el - architectures uses 4k page size. - - After rebooting, you need to re-create all swap files or partitions. - They depend on the page size and will be not longer usable. See - mkswap(8) on how to do that. - - Some file systems might be incompatible with the smaller page size. - At least btrfs created with default settings is known to be affected - and they will not work with this kernel any more. - - A btrfs file system can be checked with file(1) (use file -s). It - will show: - BTRFS Filesystem sectorsize 65536 - If this number is larger then 4096, the file system can not be - mounted with the default kernel anymore. - - If you are affected and require the 64k page size of older kernels, - you can install linux-image-powerpc64-64k or - linux-image-powerpc64el-64k packages. - - -- Bastian Blank <waldi@debian.org> Thu, 11 Jul 2024 11:12:35 +0200 - -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-powerpc64le-64k.lintian-overrides b/debian/linux-image-6.10.3-powerpc64le-64k.lintian-overrides deleted file mode 100644 index 320e585200..0000000000 --- a/debian/linux-image-6.10.3-powerpc64le-64k.lintian-overrides +++ /dev/null @@ -1,5 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. -linux-image-6.10.3-powerpc64le-64k: unstripped-binary-or-object *boot/vmlinu* diff --git a/debian/linux-image-6.10.3-powerpc64le-64k.postinst b/debian/linux-image-6.10.3-powerpc64le-64k.postinst deleted file mode 100644 index 53ab89ea7a..0000000000 --- a/debian/linux-image-6.10.3-powerpc64le-64k.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc64le-64k -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc64le-64k.postrm b/debian/linux-image-6.10.3-powerpc64le-64k.postrm deleted file mode 100644 index f13186cb21..0000000000 --- a/debian/linux-image-6.10.3-powerpc64le-64k.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc64le-64k -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc64le-64k.preinst b/debian/linux-image-6.10.3-powerpc64le-64k.preinst deleted file mode 100644 index 753c54d976..0000000000 --- a/debian/linux-image-6.10.3-powerpc64le-64k.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc64le-64k -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc64le-64k.prerm b/debian/linux-image-6.10.3-powerpc64le-64k.prerm deleted file mode 100644 index 20225001bb..0000000000 --- a/debian/linux-image-6.10.3-powerpc64le-64k.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc64le-64k -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc64le-dbg.lintian-overrides b/debian/linux-image-6.10.3-powerpc64le-dbg.lintian-overrides deleted file mode 100644 index 06d4065c61..0000000000 --- a/debian/linux-image-6.10.3-powerpc64le-dbg.lintian-overrides +++ /dev/null @@ -1,14 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-powerpc64le-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.10.3-powerpc64le-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-powerpc64le/vdso/vdso32.so* -linux-image-6.10.3-powerpc64le-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-powerpc64le/vdso/vdso64.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.10.3-powerpc64le-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.10.3-powerpc64le/vdso/vdso32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-powerpc64le.NEWS b/debian/linux-image-6.10.3-powerpc64le.NEWS deleted file mode 100644 index 788dab7828..0000000000 --- a/debian/linux-image-6.10.3-powerpc64le.NEWS +++ /dev/null @@ -1,108 +0,0 @@ -linux (6.10-1~exp2) unstable; urgency=medium - - * From Linux 6.10, the default kernel on ppc64 and ppc64el - architectures uses 4k page size. - - After rebooting, you need to re-create all swap files or partitions. - They depend on the page size and will be not longer usable. See - mkswap(8) on how to do that. - - Some file systems might be incompatible with the smaller page size. - At least btrfs created with default settings is known to be affected - and they will not work with this kernel any more. - - A btrfs file system can be checked with file(1) (use file -s). It - will show: - BTRFS Filesystem sectorsize 65536 - If this number is larger then 4096, the file system can not be - mounted with the default kernel anymore. - - If you are affected and require the 64k page size of older kernels, - you can install linux-image-powerpc64-64k or - linux-image-powerpc64el-64k packages. - - -- Bastian Blank <waldi@debian.org> Thu, 11 Jul 2024 11:12:35 +0200 - -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-powerpc64le.lintian-overrides b/debian/linux-image-6.10.3-powerpc64le.lintian-overrides deleted file mode 100644 index cca55dcafb..0000000000 --- a/debian/linux-image-6.10.3-powerpc64le.lintian-overrides +++ /dev/null @@ -1,5 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. -linux-image-6.10.3-powerpc64le: unstripped-binary-or-object *boot/vmlinu* diff --git a/debian/linux-image-6.10.3-powerpc64le.postinst b/debian/linux-image-6.10.3-powerpc64le.postinst deleted file mode 100644 index 1328365946..0000000000 --- a/debian/linux-image-6.10.3-powerpc64le.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc64le -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc64le.postrm b/debian/linux-image-6.10.3-powerpc64le.postrm deleted file mode 100644 index d59450c1af..0000000000 --- a/debian/linux-image-6.10.3-powerpc64le.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc64le -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc64le.preinst b/debian/linux-image-6.10.3-powerpc64le.preinst deleted file mode 100644 index 8f2c6aa5e1..0000000000 --- a/debian/linux-image-6.10.3-powerpc64le.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc64le -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-powerpc64le.prerm b/debian/linux-image-6.10.3-powerpc64le.prerm deleted file mode 100644 index acfc0ef877..0000000000 --- a/debian/linux-image-6.10.3-powerpc64le.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-powerpc64le -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-riscv64-dbg.lintian-overrides b/debian/linux-image-6.10.3-riscv64-dbg.lintian-overrides deleted file mode 100644 index cf0d403172..0000000000 --- a/debian/linux-image-6.10.3-riscv64-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-riscv64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-riscv64.NEWS b/debian/linux-image-6.10.3-riscv64.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-riscv64.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-riscv64.lintian-overrides b/debian/linux-image-6.10.3-riscv64.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-riscv64.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-riscv64.postinst b/debian/linux-image-6.10.3-riscv64.postinst deleted file mode 100644 index 55dea52687..0000000000 --- a/debian/linux-image-6.10.3-riscv64.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-riscv64 -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-riscv64.postrm b/debian/linux-image-6.10.3-riscv64.postrm deleted file mode 100644 index d8650a45f3..0000000000 --- a/debian/linux-image-6.10.3-riscv64.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-riscv64 -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-riscv64.preinst b/debian/linux-image-6.10.3-riscv64.preinst deleted file mode 100644 index b8bd4ff93e..0000000000 --- a/debian/linux-image-6.10.3-riscv64.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-riscv64 -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-riscv64.prerm b/debian/linux-image-6.10.3-riscv64.prerm deleted file mode 100644 index 912558666a..0000000000 --- a/debian/linux-image-6.10.3-riscv64.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-riscv64 -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-rpi-dbg.lintian-overrides b/debian/linux-image-6.10.3-rpi-dbg.lintian-overrides deleted file mode 100644 index a2e429defe..0000000000 --- a/debian/linux-image-6.10.3-rpi-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-rpi-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-rpi.NEWS b/debian/linux-image-6.10.3-rpi.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-rpi.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-rpi.lintian-overrides b/debian/linux-image-6.10.3-rpi.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-rpi.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-rpi.postinst b/debian/linux-image-6.10.3-rpi.postinst deleted file mode 100644 index 20d9f4c715..0000000000 --- a/debian/linux-image-6.10.3-rpi.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-rpi -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-rpi.postrm b/debian/linux-image-6.10.3-rpi.postrm deleted file mode 100644 index ee77364c66..0000000000 --- a/debian/linux-image-6.10.3-rpi.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-rpi -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-rpi.preinst b/debian/linux-image-6.10.3-rpi.preinst deleted file mode 100644 index efe65d22a4..0000000000 --- a/debian/linux-image-6.10.3-rpi.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-rpi -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-rpi.prerm b/debian/linux-image-6.10.3-rpi.prerm deleted file mode 100644 index c9e70b5b6d..0000000000 --- a/debian/linux-image-6.10.3-rpi.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-rpi -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-rt-686-pae-dbg.lintian-overrides b/debian/linux-image-6.10.3-rt-686-pae-dbg.lintian-overrides deleted file mode 100644 index d4eb481c8e..0000000000 --- a/debian/linux-image-6.10.3-rt-686-pae-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-rt-686-pae-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.10.3-rt-686-pae-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-rt-686-pae/vdso/vdso32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-rt-686-pae.NEWS b/debian/linux-image-6.10.3-rt-686-pae.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-rt-686-pae.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-rt-686-pae.lintian-overrides b/debian/linux-image-6.10.3-rt-686-pae.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-rt-686-pae.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-rt-686-pae.postinst b/debian/linux-image-6.10.3-rt-686-pae.postinst deleted file mode 100644 index 3bb7134bb4..0000000000 --- a/debian/linux-image-6.10.3-rt-686-pae.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-rt-686-pae -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-rt-686-pae.postrm b/debian/linux-image-6.10.3-rt-686-pae.postrm deleted file mode 100644 index 86c1951528..0000000000 --- a/debian/linux-image-6.10.3-rt-686-pae.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-rt-686-pae -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-rt-686-pae.preinst b/debian/linux-image-6.10.3-rt-686-pae.preinst deleted file mode 100644 index 8ac285d3df..0000000000 --- a/debian/linux-image-6.10.3-rt-686-pae.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-rt-686-pae -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-rt-686-pae.prerm b/debian/linux-image-6.10.3-rt-686-pae.prerm deleted file mode 100644 index c1c88b0f9c..0000000000 --- a/debian/linux-image-6.10.3-rt-686-pae.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-rt-686-pae -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-rt-amd64-dbg.lintian-overrides b/debian/linux-image-6.10.3-rt-amd64-dbg.lintian-overrides deleted file mode 100644 index 695e40389f..0000000000 --- a/debian/linux-image-6.10.3-rt-amd64-dbg.lintian-overrides +++ /dev/null @@ -1,15 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-rt-amd64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.10.3-rt-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-rt-amd64/vdso/vdso32.so* -linux-image-6.10.3-rt-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-rt-amd64/vdso/vdso64.so* -linux-image-6.10.3-rt-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-rt-amd64/vdso/vdsox32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.10.3-rt-amd64-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.10.3-rt-amd64/vdso/vdsox32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-rt-amd64-unsigned.NEWS b/debian/linux-image-6.10.3-rt-amd64-unsigned.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-rt-amd64-unsigned.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-rt-amd64-unsigned.lintian-overrides b/debian/linux-image-6.10.3-rt-amd64-unsigned.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-rt-amd64-unsigned.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-rt-amd64-unsigned.postinst b/debian/linux-image-6.10.3-rt-amd64-unsigned.postinst deleted file mode 100644 index c3bf5f5107..0000000000 --- a/debian/linux-image-6.10.3-rt-amd64-unsigned.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-rt-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-rt-amd64-unsigned.postrm b/debian/linux-image-6.10.3-rt-amd64-unsigned.postrm deleted file mode 100644 index d47d92a2a0..0000000000 --- a/debian/linux-image-6.10.3-rt-amd64-unsigned.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-rt-amd64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-rt-amd64-unsigned.preinst b/debian/linux-image-6.10.3-rt-amd64-unsigned.preinst deleted file mode 100644 index 2fdf040924..0000000000 --- a/debian/linux-image-6.10.3-rt-amd64-unsigned.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-rt-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-rt-amd64-unsigned.prerm b/debian/linux-image-6.10.3-rt-amd64-unsigned.prerm deleted file mode 100644 index c8f7cd43d1..0000000000 --- a/debian/linux-image-6.10.3-rt-amd64-unsigned.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-rt-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-rt-arm64-dbg.lintian-overrides b/debian/linux-image-6.10.3-rt-arm64-dbg.lintian-overrides deleted file mode 100644 index 799e27a517..0000000000 --- a/debian/linux-image-6.10.3-rt-arm64-dbg.lintian-overrides +++ /dev/null @@ -1,14 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-rt-arm64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.10.3-rt-arm64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-rt-arm64/vdso/vdso.so* -linux-image-6.10.3-rt-arm64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-rt-arm64/vdso/vdso32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.10.3-rt-arm64-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.10.3-rt-arm64/vdso/vdso32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-rt-arm64-unsigned.NEWS b/debian/linux-image-6.10.3-rt-arm64-unsigned.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-rt-arm64-unsigned.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-rt-arm64-unsigned.lintian-overrides b/debian/linux-image-6.10.3-rt-arm64-unsigned.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-rt-arm64-unsigned.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-rt-arm64-unsigned.postinst b/debian/linux-image-6.10.3-rt-arm64-unsigned.postinst deleted file mode 100644 index 071bdeff4c..0000000000 --- a/debian/linux-image-6.10.3-rt-arm64-unsigned.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-rt-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-rt-arm64-unsigned.postrm b/debian/linux-image-6.10.3-rt-arm64-unsigned.postrm deleted file mode 100644 index f248d4936b..0000000000 --- a/debian/linux-image-6.10.3-rt-arm64-unsigned.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-rt-arm64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-rt-arm64-unsigned.preinst b/debian/linux-image-6.10.3-rt-arm64-unsigned.preinst deleted file mode 100644 index c65709b720..0000000000 --- a/debian/linux-image-6.10.3-rt-arm64-unsigned.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-rt-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-rt-arm64-unsigned.prerm b/debian/linux-image-6.10.3-rt-arm64-unsigned.prerm deleted file mode 100644 index d6ec24fb22..0000000000 --- a/debian/linux-image-6.10.3-rt-arm64-unsigned.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-rt-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-rt-armmp-dbg.lintian-overrides b/debian/linux-image-6.10.3-rt-armmp-dbg.lintian-overrides deleted file mode 100644 index a563e539a4..0000000000 --- a/debian/linux-image-6.10.3-rt-armmp-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-rt-armmp-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.10.3-rt-armmp-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-rt-armmp/vdso/vdso.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-rt-armmp.NEWS b/debian/linux-image-6.10.3-rt-armmp.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-rt-armmp.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-rt-armmp.lintian-overrides b/debian/linux-image-6.10.3-rt-armmp.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-rt-armmp.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-rt-armmp.postinst b/debian/linux-image-6.10.3-rt-armmp.postinst deleted file mode 100644 index 3a9801f022..0000000000 --- a/debian/linux-image-6.10.3-rt-armmp.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-rt-armmp -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-rt-armmp.postrm b/debian/linux-image-6.10.3-rt-armmp.postrm deleted file mode 100644 index 91f5d26cb5..0000000000 --- a/debian/linux-image-6.10.3-rt-armmp.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-rt-armmp -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-rt-armmp.preinst b/debian/linux-image-6.10.3-rt-armmp.preinst deleted file mode 100644 index 6460106e8f..0000000000 --- a/debian/linux-image-6.10.3-rt-armmp.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-rt-armmp -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-rt-armmp.prerm b/debian/linux-image-6.10.3-rt-armmp.prerm deleted file mode 100644 index 0f955bef91..0000000000 --- a/debian/linux-image-6.10.3-rt-armmp.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-rt-armmp -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-s390x-dbg.lintian-overrides b/debian/linux-image-6.10.3-s390x-dbg.lintian-overrides deleted file mode 100644 index 45ebe5b3f9..0000000000 --- a/debian/linux-image-6.10.3-s390x-dbg.lintian-overrides +++ /dev/null @@ -1,14 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-s390x-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.10.3-s390x-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-s390x/vdso/vdso32.so* -linux-image-6.10.3-s390x-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.10.3-s390x/vdso/vdso64.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.10.3-s390x-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.10.3-s390x/vdso/vdso32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-s390x.NEWS b/debian/linux-image-6.10.3-s390x.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-s390x.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-s390x.lintian-overrides b/debian/linux-image-6.10.3-s390x.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-s390x.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-s390x.postinst b/debian/linux-image-6.10.3-s390x.postinst deleted file mode 100644 index 13146b4bc8..0000000000 --- a/debian/linux-image-6.10.3-s390x.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-s390x -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-s390x.postrm b/debian/linux-image-6.10.3-s390x.postrm deleted file mode 100644 index 85efdb8d90..0000000000 --- a/debian/linux-image-6.10.3-s390x.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-s390x -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-s390x.preinst b/debian/linux-image-6.10.3-s390x.preinst deleted file mode 100644 index 886cfb716a..0000000000 --- a/debian/linux-image-6.10.3-s390x.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-s390x -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-s390x.prerm b/debian/linux-image-6.10.3-s390x.prerm deleted file mode 100644 index 0930d4c108..0000000000 --- a/debian/linux-image-6.10.3-s390x.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-s390x -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-sh7751r-dbg.lintian-overrides b/debian/linux-image-6.10.3-sh7751r-dbg.lintian-overrides deleted file mode 100644 index 7c116dc92e..0000000000 --- a/debian/linux-image-6.10.3-sh7751r-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-sh7751r-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-sh7751r.NEWS b/debian/linux-image-6.10.3-sh7751r.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-sh7751r.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-sh7751r.lintian-overrides b/debian/linux-image-6.10.3-sh7751r.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-sh7751r.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-sh7751r.postinst b/debian/linux-image-6.10.3-sh7751r.postinst deleted file mode 100644 index bd8a6d83ce..0000000000 --- a/debian/linux-image-6.10.3-sh7751r.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-sh7751r -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-sh7751r.postrm b/debian/linux-image-6.10.3-sh7751r.postrm deleted file mode 100644 index eb9f8f75e9..0000000000 --- a/debian/linux-image-6.10.3-sh7751r.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-sh7751r -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-sh7751r.preinst b/debian/linux-image-6.10.3-sh7751r.preinst deleted file mode 100644 index 4ef2768bf0..0000000000 --- a/debian/linux-image-6.10.3-sh7751r.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-sh7751r -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-sh7751r.prerm b/debian/linux-image-6.10.3-sh7751r.prerm deleted file mode 100644 index fe35117872..0000000000 --- a/debian/linux-image-6.10.3-sh7751r.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-sh7751r -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-sh7785lcr-dbg.lintian-overrides b/debian/linux-image-6.10.3-sh7785lcr-dbg.lintian-overrides deleted file mode 100644 index ec0e28b96c..0000000000 --- a/debian/linux-image-6.10.3-sh7785lcr-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-sh7785lcr-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-sh7785lcr.NEWS b/debian/linux-image-6.10.3-sh7785lcr.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-sh7785lcr.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-sh7785lcr.lintian-overrides b/debian/linux-image-6.10.3-sh7785lcr.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-sh7785lcr.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-sh7785lcr.postinst b/debian/linux-image-6.10.3-sh7785lcr.postinst deleted file mode 100644 index 42c1e6f667..0000000000 --- a/debian/linux-image-6.10.3-sh7785lcr.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-sh7785lcr -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-sh7785lcr.postrm b/debian/linux-image-6.10.3-sh7785lcr.postrm deleted file mode 100644 index ce25117fe3..0000000000 --- a/debian/linux-image-6.10.3-sh7785lcr.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-sh7785lcr -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-sh7785lcr.preinst b/debian/linux-image-6.10.3-sh7785lcr.preinst deleted file mode 100644 index aac14334a4..0000000000 --- a/debian/linux-image-6.10.3-sh7785lcr.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-sh7785lcr -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-sh7785lcr.prerm b/debian/linux-image-6.10.3-sh7785lcr.prerm deleted file mode 100644 index 6fc3a352c8..0000000000 --- a/debian/linux-image-6.10.3-sh7785lcr.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-sh7785lcr -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-sparc64-dbg.lintian-overrides b/debian/linux-image-6.10.3-sparc64-dbg.lintian-overrides deleted file mode 100644 index 57d3a527f9..0000000000 --- a/debian/linux-image-6.10.3-sparc64-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-sparc64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-sparc64-smp-dbg.lintian-overrides b/debian/linux-image-6.10.3-sparc64-smp-dbg.lintian-overrides deleted file mode 100644 index d9da300077..0000000000 --- a/debian/linux-image-6.10.3-sparc64-smp-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.10.3-sparc64-smp-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.10.3-sparc64-smp.NEWS b/debian/linux-image-6.10.3-sparc64-smp.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-sparc64-smp.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-sparc64-smp.lintian-overrides b/debian/linux-image-6.10.3-sparc64-smp.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-sparc64-smp.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-sparc64-smp.postinst b/debian/linux-image-6.10.3-sparc64-smp.postinst deleted file mode 100644 index 7f53fe3a5e..0000000000 --- a/debian/linux-image-6.10.3-sparc64-smp.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-sparc64-smp -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-sparc64-smp.postrm b/debian/linux-image-6.10.3-sparc64-smp.postrm deleted file mode 100644 index ce94ecd2b1..0000000000 --- a/debian/linux-image-6.10.3-sparc64-smp.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-sparc64-smp -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-sparc64-smp.preinst b/debian/linux-image-6.10.3-sparc64-smp.preinst deleted file mode 100644 index 4f489851bb..0000000000 --- a/debian/linux-image-6.10.3-sparc64-smp.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-sparc64-smp -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-sparc64-smp.prerm b/debian/linux-image-6.10.3-sparc64-smp.prerm deleted file mode 100644 index a6ec19aca4..0000000000 --- a/debian/linux-image-6.10.3-sparc64-smp.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-sparc64-smp -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-sparc64.NEWS b/debian/linux-image-6.10.3-sparc64.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.10.3-sparc64.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.10.3-sparc64.lintian-overrides b/debian/linux-image-6.10.3-sparc64.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.10.3-sparc64.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.10.3-sparc64.postinst b/debian/linux-image-6.10.3-sparc64.postinst deleted file mode 100644 index 1f1ec39dc3..0000000000 --- a/debian/linux-image-6.10.3-sparc64.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-sparc64 -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-sparc64.postrm b/debian/linux-image-6.10.3-sparc64.postrm deleted file mode 100644 index c5d89eb3c6..0000000000 --- a/debian/linux-image-6.10.3-sparc64.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-sparc64 -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-sparc64.preinst b/debian/linux-image-6.10.3-sparc64.preinst deleted file mode 100644 index e768358cb9..0000000000 --- a/debian/linux-image-6.10.3-sparc64.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-sparc64 -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.10.3-sparc64.prerm b/debian/linux-image-6.10.3-sparc64.prerm deleted file mode 100644 index bd8a0aa00a..0000000000 --- a/debian/linux-image-6.10.3-sparc64.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.10.3-sparc64 -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-686-dbg.lintian-overrides b/debian/linux-image-686-dbg.lintian-overrides deleted file mode 100644 index 6eca372900..0000000000 --- a/debian/linux-image-686-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-686-dbg: wrong-section-according-to-package-name linux-image-686-dbg => debug diff --git a/debian/linux-image-686-dbg.maintscript b/debian/linux-image-686-dbg.maintscript deleted file mode 100644 index d08e903db3..0000000000 --- a/debian/linux-image-686-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-686-dbg linux-image-6.10.3-686-dbg 5.7~rc5-1~exp1 linux-image-686-dbg diff --git a/debian/linux-image-686-pae-dbg.lintian-overrides b/debian/linux-image-686-pae-dbg.lintian-overrides deleted file mode 100644 index 9f3bbc4d73..0000000000 --- a/debian/linux-image-686-pae-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-686-pae-dbg: wrong-section-according-to-package-name linux-image-686-pae-dbg => debug diff --git a/debian/linux-image-686-pae-dbg.maintscript b/debian/linux-image-686-pae-dbg.maintscript deleted file mode 100644 index 4a7843cfde..0000000000 --- a/debian/linux-image-686-pae-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-686-pae-dbg linux-image-6.10.3-686-pae-dbg 5.7~rc5-1~exp1 linux-image-686-pae-dbg diff --git a/debian/linux-image-686-pae.bug-presubj b/debian/linux-image-686-pae.bug-presubj deleted file mode 100644 index fff62f98de..0000000000 --- a/debian/linux-image-686-pae.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-686-pae instead. diff --git a/debian/linux-image-686-pae.maintscript b/debian/linux-image-686-pae.maintscript deleted file mode 100644 index a505e6958c..0000000000 --- a/debian/linux-image-686-pae.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-686-pae linux-image-6.10.3-686-pae 5.7~rc5-1~exp1 linux-image-686-pae diff --git a/debian/linux-image-686.bug-presubj b/debian/linux-image-686.bug-presubj deleted file mode 100644 index 17803a4c35..0000000000 --- a/debian/linux-image-686.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-686 instead. diff --git a/debian/linux-image-686.maintscript b/debian/linux-image-686.maintscript deleted file mode 100644 index 27b8eb2c80..0000000000 --- a/debian/linux-image-686.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-686 linux-image-6.10.3-686 5.7~rc5-1~exp1 linux-image-686 diff --git a/debian/linux-image-alpha-generic-dbg.lintian-overrides b/debian/linux-image-alpha-generic-dbg.lintian-overrides deleted file mode 100644 index 0be8eb809c..0000000000 --- a/debian/linux-image-alpha-generic-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-alpha-generic-dbg: wrong-section-according-to-package-name linux-image-alpha-generic-dbg => debug diff --git a/debian/linux-image-alpha-generic-dbg.maintscript b/debian/linux-image-alpha-generic-dbg.maintscript deleted file mode 100644 index e6a7399873..0000000000 --- a/debian/linux-image-alpha-generic-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-alpha-generic-dbg linux-image-6.10.3-alpha-generic-dbg 5.7~rc5-1~exp1 linux-image-alpha-generic-dbg diff --git a/debian/linux-image-alpha-generic.bug-presubj b/debian/linux-image-alpha-generic.bug-presubj deleted file mode 100644 index b40f6d990a..0000000000 --- a/debian/linux-image-alpha-generic.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-alpha-generic instead. diff --git a/debian/linux-image-alpha-generic.maintscript b/debian/linux-image-alpha-generic.maintscript deleted file mode 100644 index 50fdc484e3..0000000000 --- a/debian/linux-image-alpha-generic.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-alpha-generic linux-image-6.10.3-alpha-generic 5.7~rc5-1~exp1 linux-image-alpha-generic diff --git a/debian/linux-image-alpha-smp-dbg.lintian-overrides b/debian/linux-image-alpha-smp-dbg.lintian-overrides deleted file mode 100644 index 431034ce7b..0000000000 --- a/debian/linux-image-alpha-smp-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-alpha-smp-dbg: wrong-section-according-to-package-name linux-image-alpha-smp-dbg => debug diff --git a/debian/linux-image-alpha-smp-dbg.maintscript b/debian/linux-image-alpha-smp-dbg.maintscript deleted file mode 100644 index 30d1c147dd..0000000000 --- a/debian/linux-image-alpha-smp-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-alpha-smp-dbg linux-image-6.10.3-alpha-smp-dbg 5.7~rc5-1~exp1 linux-image-alpha-smp-dbg diff --git a/debian/linux-image-alpha-smp.bug-presubj b/debian/linux-image-alpha-smp.bug-presubj deleted file mode 100644 index 0aa82f5433..0000000000 --- a/debian/linux-image-alpha-smp.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-alpha-smp instead. diff --git a/debian/linux-image-alpha-smp.maintscript b/debian/linux-image-alpha-smp.maintscript deleted file mode 100644 index c0c47dfeae..0000000000 --- a/debian/linux-image-alpha-smp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-alpha-smp linux-image-6.10.3-alpha-smp 5.7~rc5-1~exp1 linux-image-alpha-smp diff --git a/debian/linux-image-amd64-dbg.lintian-overrides b/debian/linux-image-amd64-dbg.lintian-overrides deleted file mode 100644 index 55f46093d7..0000000000 --- a/debian/linux-image-amd64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-amd64-dbg: wrong-section-according-to-package-name linux-image-amd64-dbg => debug diff --git a/debian/linux-image-amd64-dbg.maintscript b/debian/linux-image-amd64-dbg.maintscript deleted file mode 100644 index 8b674cd5a7..0000000000 --- a/debian/linux-image-amd64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-amd64-dbg linux-image-6.10.3-amd64-dbg 5.7~rc5-1~exp1 linux-image-amd64-dbg diff --git a/debian/linux-image-amd64-signed-template.lintian-overrides b/debian/linux-image-amd64-signed-template.lintian-overrides deleted file mode 100644 index 40dfd024a0..0000000000 --- a/debian/linux-image-amd64-signed-template.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-amd64-signed-template: script-not-executable diff --git a/debian/linux-image-arm64-16k-dbg.lintian-overrides b/debian/linux-image-arm64-16k-dbg.lintian-overrides deleted file mode 100644 index b821497994..0000000000 --- a/debian/linux-image-arm64-16k-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-arm64-16k-dbg: wrong-section-according-to-package-name linux-image-arm64-16k-dbg => debug diff --git a/debian/linux-image-arm64-16k-dbg.maintscript b/debian/linux-image-arm64-16k-dbg.maintscript deleted file mode 100644 index 8a7956018b..0000000000 --- a/debian/linux-image-arm64-16k-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-arm64-16k-dbg linux-image-6.10.3-arm64-16k-dbg 5.7~rc5-1~exp1 linux-image-arm64-16k-dbg diff --git a/debian/linux-image-arm64-dbg.lintian-overrides b/debian/linux-image-arm64-dbg.lintian-overrides deleted file mode 100644 index 56b0496404..0000000000 --- a/debian/linux-image-arm64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-arm64-dbg: wrong-section-according-to-package-name linux-image-arm64-dbg => debug diff --git a/debian/linux-image-arm64-dbg.maintscript b/debian/linux-image-arm64-dbg.maintscript deleted file mode 100644 index a230d42556..0000000000 --- a/debian/linux-image-arm64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-arm64-dbg linux-image-6.10.3-arm64-dbg 5.7~rc5-1~exp1 linux-image-arm64-dbg diff --git a/debian/linux-image-arm64-signed-template.lintian-overrides b/debian/linux-image-arm64-signed-template.lintian-overrides deleted file mode 100644 index a0dfc1afbf..0000000000 --- a/debian/linux-image-arm64-signed-template.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-arm64-signed-template: script-not-executable diff --git a/debian/linux-image-armmp-dbg.lintian-overrides b/debian/linux-image-armmp-dbg.lintian-overrides deleted file mode 100644 index 02d39145b8..0000000000 --- a/debian/linux-image-armmp-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-armmp-dbg: wrong-section-according-to-package-name linux-image-armmp-dbg => debug diff --git a/debian/linux-image-armmp-dbg.maintscript b/debian/linux-image-armmp-dbg.maintscript deleted file mode 100644 index 1c3efaf56f..0000000000 --- a/debian/linux-image-armmp-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-armmp-dbg linux-image-6.10.3-armmp-dbg 5.7~rc5-1~exp1 linux-image-armmp-dbg diff --git a/debian/linux-image-armmp-lpae-dbg.lintian-overrides b/debian/linux-image-armmp-lpae-dbg.lintian-overrides deleted file mode 100644 index eff6548d15..0000000000 --- a/debian/linux-image-armmp-lpae-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-armmp-lpae-dbg: wrong-section-according-to-package-name linux-image-armmp-lpae-dbg => debug diff --git a/debian/linux-image-armmp-lpae-dbg.maintscript b/debian/linux-image-armmp-lpae-dbg.maintscript deleted file mode 100644 index 4c284fee27..0000000000 --- a/debian/linux-image-armmp-lpae-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-armmp-lpae-dbg linux-image-6.10.3-armmp-lpae-dbg 5.7~rc5-1~exp1 linux-image-armmp-lpae-dbg diff --git a/debian/linux-image-armmp-lpae.bug-presubj b/debian/linux-image-armmp-lpae.bug-presubj deleted file mode 100644 index 6cba5a44b3..0000000000 --- a/debian/linux-image-armmp-lpae.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-armmp-lpae instead. diff --git a/debian/linux-image-armmp-lpae.maintscript b/debian/linux-image-armmp-lpae.maintscript deleted file mode 100644 index d184aabca0..0000000000 --- a/debian/linux-image-armmp-lpae.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-armmp-lpae linux-image-6.10.3-armmp-lpae 5.7~rc5-1~exp1 linux-image-armmp-lpae diff --git a/debian/linux-image-armmp.bug-presubj b/debian/linux-image-armmp.bug-presubj deleted file mode 100644 index 7d85bfb0b0..0000000000 --- a/debian/linux-image-armmp.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-armmp instead. diff --git a/debian/linux-image-armmp.maintscript b/debian/linux-image-armmp.maintscript deleted file mode 100644 index c73c4cc5a7..0000000000 --- a/debian/linux-image-armmp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-armmp linux-image-6.10.3-armmp 5.7~rc5-1~exp1 linux-image-armmp diff --git a/debian/linux-image-cloud-amd64-dbg.lintian-overrides b/debian/linux-image-cloud-amd64-dbg.lintian-overrides deleted file mode 100644 index be5093962f..0000000000 --- a/debian/linux-image-cloud-amd64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-cloud-amd64-dbg: wrong-section-according-to-package-name linux-image-cloud-amd64-dbg => debug diff --git a/debian/linux-image-cloud-amd64-dbg.maintscript b/debian/linux-image-cloud-amd64-dbg.maintscript deleted file mode 100644 index e14973e0e1..0000000000 --- a/debian/linux-image-cloud-amd64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-cloud-amd64-dbg linux-image-6.10.3-cloud-amd64-dbg 5.7~rc5-1~exp1 linux-image-cloud-amd64-dbg diff --git a/debian/linux-image-cloud-arm64-dbg.lintian-overrides b/debian/linux-image-cloud-arm64-dbg.lintian-overrides deleted file mode 100644 index 311868dd3c..0000000000 --- a/debian/linux-image-cloud-arm64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-cloud-arm64-dbg: wrong-section-according-to-package-name linux-image-cloud-arm64-dbg => debug diff --git a/debian/linux-image-cloud-arm64-dbg.maintscript b/debian/linux-image-cloud-arm64-dbg.maintscript deleted file mode 100644 index ff030db0bc..0000000000 --- a/debian/linux-image-cloud-arm64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-cloud-arm64-dbg linux-image-6.10.3-cloud-arm64-dbg 5.7~rc5-1~exp1 linux-image-cloud-arm64-dbg diff --git a/debian/linux-image-loong64-dbg.lintian-overrides b/debian/linux-image-loong64-dbg.lintian-overrides deleted file mode 100644 index 7b5b9c8cfa..0000000000 --- a/debian/linux-image-loong64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-loong64-dbg: wrong-section-according-to-package-name linux-image-loong64-dbg => debug diff --git a/debian/linux-image-loong64-dbg.maintscript b/debian/linux-image-loong64-dbg.maintscript deleted file mode 100644 index 75c9ac723c..0000000000 --- a/debian/linux-image-loong64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-loong64-dbg linux-image-6.10.3-loong64-dbg 5.7~rc5-1~exp1 linux-image-loong64-dbg diff --git a/debian/linux-image-loong64.bug-presubj b/debian/linux-image-loong64.bug-presubj deleted file mode 100644 index 63318b62cc..0000000000 --- a/debian/linux-image-loong64.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-loong64 instead. diff --git a/debian/linux-image-loong64.maintscript b/debian/linux-image-loong64.maintscript deleted file mode 100644 index 0c923169dc..0000000000 --- a/debian/linux-image-loong64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-loong64 linux-image-6.10.3-loong64 5.7~rc5-1~exp1 linux-image-loong64 diff --git a/debian/linux-image-loongson-3-dbg.lintian-overrides b/debian/linux-image-loongson-3-dbg.lintian-overrides deleted file mode 100644 index 182111a3c3..0000000000 --- a/debian/linux-image-loongson-3-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-loongson-3-dbg: wrong-section-according-to-package-name linux-image-loongson-3-dbg => debug diff --git a/debian/linux-image-loongson-3-dbg.maintscript b/debian/linux-image-loongson-3-dbg.maintscript deleted file mode 100644 index 4c2b38111b..0000000000 --- a/debian/linux-image-loongson-3-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-loongson-3-dbg linux-image-6.10.3-loongson-3-dbg 5.7~rc5-1~exp1 linux-image-loongson-3-dbg diff --git a/debian/linux-image-loongson-3.bug-presubj b/debian/linux-image-loongson-3.bug-presubj deleted file mode 100644 index 0231b162fe..0000000000 --- a/debian/linux-image-loongson-3.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-loongson-3 instead. diff --git a/debian/linux-image-loongson-3.maintscript b/debian/linux-image-loongson-3.maintscript deleted file mode 100644 index 7f34ad8556..0000000000 --- a/debian/linux-image-loongson-3.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-loongson-3 linux-image-6.10.3-loongson-3 5.7~rc5-1~exp1 linux-image-loongson-3 diff --git a/debian/linux-image-m68k-dbg.lintian-overrides b/debian/linux-image-m68k-dbg.lintian-overrides deleted file mode 100644 index 5a8721293b..0000000000 --- a/debian/linux-image-m68k-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-m68k-dbg: wrong-section-according-to-package-name linux-image-m68k-dbg => debug diff --git a/debian/linux-image-m68k-dbg.maintscript b/debian/linux-image-m68k-dbg.maintscript deleted file mode 100644 index 41eb4e9ae0..0000000000 --- a/debian/linux-image-m68k-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-m68k-dbg linux-image-6.10.3-m68k-dbg 5.7~rc5-1~exp1 linux-image-m68k-dbg diff --git a/debian/linux-image-m68k.bug-presubj b/debian/linux-image-m68k.bug-presubj deleted file mode 100644 index d16844a76e..0000000000 --- a/debian/linux-image-m68k.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-m68k instead. diff --git a/debian/linux-image-m68k.maintscript b/debian/linux-image-m68k.maintscript deleted file mode 100644 index 0c1efade91..0000000000 --- a/debian/linux-image-m68k.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-m68k linux-image-6.10.3-m68k 5.7~rc5-1~exp1 linux-image-m68k diff --git a/debian/linux-image-mips32r2eb-dbg.lintian-overrides b/debian/linux-image-mips32r2eb-dbg.lintian-overrides deleted file mode 100644 index df2810cbeb..0000000000 --- a/debian/linux-image-mips32r2eb-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-mips32r2eb-dbg: wrong-section-according-to-package-name linux-image-mips32r2eb-dbg => debug diff --git a/debian/linux-image-mips32r2eb-dbg.maintscript b/debian/linux-image-mips32r2eb-dbg.maintscript deleted file mode 100644 index 44fa3266ec..0000000000 --- a/debian/linux-image-mips32r2eb-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips32r2eb-dbg linux-image-6.10.3-mips32r2eb-dbg 5.7~rc5-1~exp1 linux-image-mips32r2eb-dbg diff --git a/debian/linux-image-mips32r2eb.bug-presubj b/debian/linux-image-mips32r2eb.bug-presubj deleted file mode 100644 index 6b01af5dcd..0000000000 --- a/debian/linux-image-mips32r2eb.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-mips32r2eb instead. diff --git a/debian/linux-image-mips32r2eb.maintscript b/debian/linux-image-mips32r2eb.maintscript deleted file mode 100644 index f9bc571f65..0000000000 --- a/debian/linux-image-mips32r2eb.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips32r2eb linux-image-6.10.3-mips32r2eb 5.7~rc5-1~exp1 linux-image-mips32r2eb diff --git a/debian/linux-image-mips32r2el-dbg.lintian-overrides b/debian/linux-image-mips32r2el-dbg.lintian-overrides deleted file mode 100644 index 8e900ef46c..0000000000 --- a/debian/linux-image-mips32r2el-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-mips32r2el-dbg: wrong-section-according-to-package-name linux-image-mips32r2el-dbg => debug diff --git a/debian/linux-image-mips32r2el-dbg.maintscript b/debian/linux-image-mips32r2el-dbg.maintscript deleted file mode 100644 index f9a0f7284c..0000000000 --- a/debian/linux-image-mips32r2el-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips32r2el-dbg linux-image-6.10.3-mips32r2el-dbg 5.7~rc5-1~exp1 linux-image-mips32r2el-dbg diff --git a/debian/linux-image-mips32r2el.bug-presubj b/debian/linux-image-mips32r2el.bug-presubj deleted file mode 100644 index 18beb5b87c..0000000000 --- a/debian/linux-image-mips32r2el.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-mips32r2el instead. diff --git a/debian/linux-image-mips32r2el.maintscript b/debian/linux-image-mips32r2el.maintscript deleted file mode 100644 index 8528662339..0000000000 --- a/debian/linux-image-mips32r2el.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips32r2el linux-image-6.10.3-mips32r2el 5.7~rc5-1~exp1 linux-image-mips32r2el diff --git a/debian/linux-image-mips64r2eb-dbg.lintian-overrides b/debian/linux-image-mips64r2eb-dbg.lintian-overrides deleted file mode 100644 index f8497a57e3..0000000000 --- a/debian/linux-image-mips64r2eb-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-mips64r2eb-dbg: wrong-section-according-to-package-name linux-image-mips64r2eb-dbg => debug diff --git a/debian/linux-image-mips64r2eb-dbg.maintscript b/debian/linux-image-mips64r2eb-dbg.maintscript deleted file mode 100644 index 4c67cffe52..0000000000 --- a/debian/linux-image-mips64r2eb-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips64r2eb-dbg linux-image-6.10.3-mips64r2eb-dbg 5.7~rc5-1~exp1 linux-image-mips64r2eb-dbg diff --git a/debian/linux-image-mips64r2eb.bug-presubj b/debian/linux-image-mips64r2eb.bug-presubj deleted file mode 100644 index 5013188124..0000000000 --- a/debian/linux-image-mips64r2eb.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-mips64r2eb instead. diff --git a/debian/linux-image-mips64r2eb.maintscript b/debian/linux-image-mips64r2eb.maintscript deleted file mode 100644 index 0790cd0dfc..0000000000 --- a/debian/linux-image-mips64r2eb.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips64r2eb linux-image-6.10.3-mips64r2eb 5.7~rc5-1~exp1 linux-image-mips64r2eb diff --git a/debian/linux-image-mips64r2el-dbg.lintian-overrides b/debian/linux-image-mips64r2el-dbg.lintian-overrides deleted file mode 100644 index 239bf48e05..0000000000 --- a/debian/linux-image-mips64r2el-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-mips64r2el-dbg: wrong-section-according-to-package-name linux-image-mips64r2el-dbg => debug diff --git a/debian/linux-image-mips64r2el-dbg.maintscript b/debian/linux-image-mips64r2el-dbg.maintscript deleted file mode 100644 index 9406c8d1dd..0000000000 --- a/debian/linux-image-mips64r2el-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips64r2el-dbg linux-image-6.10.3-mips64r2el-dbg 5.7~rc5-1~exp1 linux-image-mips64r2el-dbg diff --git a/debian/linux-image-mips64r2el.bug-presubj b/debian/linux-image-mips64r2el.bug-presubj deleted file mode 100644 index c8640dae93..0000000000 --- a/debian/linux-image-mips64r2el.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-mips64r2el instead. diff --git a/debian/linux-image-mips64r2el.maintscript b/debian/linux-image-mips64r2el.maintscript deleted file mode 100644 index 5aa0db5299..0000000000 --- a/debian/linux-image-mips64r2el.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips64r2el linux-image-6.10.3-mips64r2el 5.7~rc5-1~exp1 linux-image-mips64r2el diff --git a/debian/linux-image-mips64r6el-dbg.lintian-overrides b/debian/linux-image-mips64r6el-dbg.lintian-overrides deleted file mode 100644 index 844b823001..0000000000 --- a/debian/linux-image-mips64r6el-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-mips64r6el-dbg: wrong-section-according-to-package-name linux-image-mips64r6el-dbg => debug diff --git a/debian/linux-image-mips64r6el-dbg.maintscript b/debian/linux-image-mips64r6el-dbg.maintscript deleted file mode 100644 index cd5aa14538..0000000000 --- a/debian/linux-image-mips64r6el-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips64r6el-dbg linux-image-6.10.3-mips64r6el-dbg 5.7~rc5-1~exp1 linux-image-mips64r6el-dbg diff --git a/debian/linux-image-mips64r6el.bug-presubj b/debian/linux-image-mips64r6el.bug-presubj deleted file mode 100644 index 40f1364327..0000000000 --- a/debian/linux-image-mips64r6el.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-mips64r6el instead. diff --git a/debian/linux-image-mips64r6el.maintscript b/debian/linux-image-mips64r6el.maintscript deleted file mode 100644 index f3a87601f5..0000000000 --- a/debian/linux-image-mips64r6el.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips64r6el linux-image-6.10.3-mips64r6el 5.7~rc5-1~exp1 linux-image-mips64r6el diff --git a/debian/linux-image-octeon-dbg.lintian-overrides b/debian/linux-image-octeon-dbg.lintian-overrides deleted file mode 100644 index f52812a09f..0000000000 --- a/debian/linux-image-octeon-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-octeon-dbg: wrong-section-according-to-package-name linux-image-octeon-dbg => debug diff --git a/debian/linux-image-octeon-dbg.maintscript b/debian/linux-image-octeon-dbg.maintscript deleted file mode 100644 index 20b978b9ad..0000000000 --- a/debian/linux-image-octeon-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-octeon-dbg linux-image-6.10.3-octeon-dbg 5.7~rc5-1~exp1 linux-image-octeon-dbg diff --git a/debian/linux-image-octeon.bug-presubj b/debian/linux-image-octeon.bug-presubj deleted file mode 100644 index 6afe135683..0000000000 --- a/debian/linux-image-octeon.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-octeon instead. diff --git a/debian/linux-image-octeon.maintscript b/debian/linux-image-octeon.maintscript deleted file mode 100644 index d3bf78ab27..0000000000 --- a/debian/linux-image-octeon.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-octeon linux-image-6.10.3-octeon 5.7~rc5-1~exp1 linux-image-octeon diff --git a/debian/linux-image-parisc-dbg.lintian-overrides b/debian/linux-image-parisc-dbg.lintian-overrides deleted file mode 100644 index c5be26d852..0000000000 --- a/debian/linux-image-parisc-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-parisc-dbg: wrong-section-according-to-package-name linux-image-parisc-dbg => debug diff --git a/debian/linux-image-parisc-dbg.maintscript b/debian/linux-image-parisc-dbg.maintscript deleted file mode 100644 index 4d6cc810a9..0000000000 --- a/debian/linux-image-parisc-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-parisc-dbg linux-image-6.10.3-parisc-dbg 5.7~rc5-1~exp1 linux-image-parisc-dbg diff --git a/debian/linux-image-parisc.bug-presubj b/debian/linux-image-parisc.bug-presubj deleted file mode 100644 index 1108ad107e..0000000000 --- a/debian/linux-image-parisc.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-parisc instead. diff --git a/debian/linux-image-parisc.maintscript b/debian/linux-image-parisc.maintscript deleted file mode 100644 index 62159c0171..0000000000 --- a/debian/linux-image-parisc.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-parisc linux-image-6.10.3-parisc 5.7~rc5-1~exp1 linux-image-parisc diff --git a/debian/linux-image-parisc64-dbg.lintian-overrides b/debian/linux-image-parisc64-dbg.lintian-overrides deleted file mode 100644 index 3736baec71..0000000000 --- a/debian/linux-image-parisc64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-parisc64-dbg: wrong-section-according-to-package-name linux-image-parisc64-dbg => debug diff --git a/debian/linux-image-parisc64-dbg.maintscript b/debian/linux-image-parisc64-dbg.maintscript deleted file mode 100644 index 39fd09084f..0000000000 --- a/debian/linux-image-parisc64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-parisc64-dbg linux-image-6.10.3-parisc64-dbg 5.7~rc5-1~exp1 linux-image-parisc64-dbg diff --git a/debian/linux-image-parisc64.bug-presubj b/debian/linux-image-parisc64.bug-presubj deleted file mode 100644 index b5e72505e2..0000000000 --- a/debian/linux-image-parisc64.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-parisc64 instead. diff --git a/debian/linux-image-parisc64.maintscript b/debian/linux-image-parisc64.maintscript deleted file mode 100644 index deb7921254..0000000000 --- a/debian/linux-image-parisc64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-parisc64 linux-image-6.10.3-parisc64 5.7~rc5-1~exp1 linux-image-parisc64 diff --git a/debian/linux-image-powerpc-dbg.lintian-overrides b/debian/linux-image-powerpc-dbg.lintian-overrides deleted file mode 100644 index 4075b8b6b7..0000000000 --- a/debian/linux-image-powerpc-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-powerpc-dbg: wrong-section-according-to-package-name linux-image-powerpc-dbg => debug diff --git a/debian/linux-image-powerpc-dbg.maintscript b/debian/linux-image-powerpc-dbg.maintscript deleted file mode 100644 index 3b9cd1bbb9..0000000000 --- a/debian/linux-image-powerpc-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc-dbg linux-image-6.10.3-powerpc-dbg 5.7~rc5-1~exp1 linux-image-powerpc-dbg diff --git a/debian/linux-image-powerpc-smp-dbg.lintian-overrides b/debian/linux-image-powerpc-smp-dbg.lintian-overrides deleted file mode 100644 index e1447a9ac7..0000000000 --- a/debian/linux-image-powerpc-smp-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-powerpc-smp-dbg: wrong-section-according-to-package-name linux-image-powerpc-smp-dbg => debug diff --git a/debian/linux-image-powerpc-smp-dbg.maintscript b/debian/linux-image-powerpc-smp-dbg.maintscript deleted file mode 100644 index 4c396b10a7..0000000000 --- a/debian/linux-image-powerpc-smp-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc-smp-dbg linux-image-6.10.3-powerpc-smp-dbg 5.7~rc5-1~exp1 linux-image-powerpc-smp-dbg diff --git a/debian/linux-image-powerpc-smp.bug-presubj b/debian/linux-image-powerpc-smp.bug-presubj deleted file mode 100644 index 1595b6969e..0000000000 --- a/debian/linux-image-powerpc-smp.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-powerpc-smp instead. diff --git a/debian/linux-image-powerpc-smp.maintscript b/debian/linux-image-powerpc-smp.maintscript deleted file mode 100644 index 727746a058..0000000000 --- a/debian/linux-image-powerpc-smp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc-smp linux-image-6.10.3-powerpc-smp 5.7~rc5-1~exp1 linux-image-powerpc-smp diff --git a/debian/linux-image-powerpc.bug-presubj b/debian/linux-image-powerpc.bug-presubj deleted file mode 100644 index f1f9ccea08..0000000000 --- a/debian/linux-image-powerpc.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-powerpc instead. diff --git a/debian/linux-image-powerpc.maintscript b/debian/linux-image-powerpc.maintscript deleted file mode 100644 index a3cda9ad30..0000000000 --- a/debian/linux-image-powerpc.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc linux-image-6.10.3-powerpc 5.7~rc5-1~exp1 linux-image-powerpc diff --git a/debian/linux-image-powerpc64-64k-dbg.lintian-overrides b/debian/linux-image-powerpc64-64k-dbg.lintian-overrides deleted file mode 100644 index 2074d8d08b..0000000000 --- a/debian/linux-image-powerpc64-64k-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-powerpc64-64k-dbg: wrong-section-according-to-package-name linux-image-powerpc64-64k-dbg => debug diff --git a/debian/linux-image-powerpc64-64k-dbg.maintscript b/debian/linux-image-powerpc64-64k-dbg.maintscript deleted file mode 100644 index 1a005eda90..0000000000 --- a/debian/linux-image-powerpc64-64k-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc64-64k-dbg linux-image-6.10.3-powerpc64-64k-dbg 5.7~rc5-1~exp1 linux-image-powerpc64-64k-dbg diff --git a/debian/linux-image-powerpc64-64k.bug-presubj b/debian/linux-image-powerpc64-64k.bug-presubj deleted file mode 100644 index 89820f3a57..0000000000 --- a/debian/linux-image-powerpc64-64k.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-powerpc64-64k instead. diff --git a/debian/linux-image-powerpc64-64k.maintscript b/debian/linux-image-powerpc64-64k.maintscript deleted file mode 100644 index a66ffe5cfa..0000000000 --- a/debian/linux-image-powerpc64-64k.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc64-64k linux-image-6.10.3-powerpc64-64k 5.7~rc5-1~exp1 linux-image-powerpc64-64k diff --git a/debian/linux-image-powerpc64-dbg.lintian-overrides b/debian/linux-image-powerpc64-dbg.lintian-overrides deleted file mode 100644 index 8a7b4b83bc..0000000000 --- a/debian/linux-image-powerpc64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-powerpc64-dbg: wrong-section-according-to-package-name linux-image-powerpc64-dbg => debug diff --git a/debian/linux-image-powerpc64-dbg.maintscript b/debian/linux-image-powerpc64-dbg.maintscript deleted file mode 100644 index d4520703b9..0000000000 --- a/debian/linux-image-powerpc64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc64-dbg linux-image-6.10.3-powerpc64-dbg 5.7~rc5-1~exp1 linux-image-powerpc64-dbg diff --git a/debian/linux-image-powerpc64.bug-presubj b/debian/linux-image-powerpc64.bug-presubj deleted file mode 100644 index cc8e5655ea..0000000000 --- a/debian/linux-image-powerpc64.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-powerpc64 instead. diff --git a/debian/linux-image-powerpc64.maintscript b/debian/linux-image-powerpc64.maintscript deleted file mode 100644 index 4b82eed234..0000000000 --- a/debian/linux-image-powerpc64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc64 linux-image-6.10.3-powerpc64 5.7~rc5-1~exp1 linux-image-powerpc64 diff --git a/debian/linux-image-powerpc64le-64k-dbg.lintian-overrides b/debian/linux-image-powerpc64le-64k-dbg.lintian-overrides deleted file mode 100644 index ec991f1ec9..0000000000 --- a/debian/linux-image-powerpc64le-64k-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-powerpc64le-64k-dbg: wrong-section-according-to-package-name linux-image-powerpc64le-64k-dbg => debug diff --git a/debian/linux-image-powerpc64le-64k-dbg.maintscript b/debian/linux-image-powerpc64le-64k-dbg.maintscript deleted file mode 100644 index 665eee67a0..0000000000 --- a/debian/linux-image-powerpc64le-64k-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc64le-64k-dbg linux-image-6.10.3-powerpc64le-64k-dbg 5.7~rc5-1~exp1 linux-image-powerpc64le-64k-dbg diff --git a/debian/linux-image-powerpc64le-64k.bug-presubj b/debian/linux-image-powerpc64le-64k.bug-presubj deleted file mode 100644 index 5e42ccf8f8..0000000000 --- a/debian/linux-image-powerpc64le-64k.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-powerpc64le-64k instead. diff --git a/debian/linux-image-powerpc64le-64k.maintscript b/debian/linux-image-powerpc64le-64k.maintscript deleted file mode 100644 index 2e23233557..0000000000 --- a/debian/linux-image-powerpc64le-64k.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc64le-64k linux-image-6.10.3-powerpc64le-64k 5.7~rc5-1~exp1 linux-image-powerpc64le-64k diff --git a/debian/linux-image-powerpc64le-dbg.lintian-overrides b/debian/linux-image-powerpc64le-dbg.lintian-overrides deleted file mode 100644 index 69cf156538..0000000000 --- a/debian/linux-image-powerpc64le-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-powerpc64le-dbg: wrong-section-according-to-package-name linux-image-powerpc64le-dbg => debug diff --git a/debian/linux-image-powerpc64le-dbg.maintscript b/debian/linux-image-powerpc64le-dbg.maintscript deleted file mode 100644 index ece6df188e..0000000000 --- a/debian/linux-image-powerpc64le-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc64le-dbg linux-image-6.10.3-powerpc64le-dbg 5.7~rc5-1~exp1 linux-image-powerpc64le-dbg diff --git a/debian/linux-image-powerpc64le.bug-presubj b/debian/linux-image-powerpc64le.bug-presubj deleted file mode 100644 index 1a584d72d2..0000000000 --- a/debian/linux-image-powerpc64le.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-powerpc64le instead. diff --git a/debian/linux-image-powerpc64le.maintscript b/debian/linux-image-powerpc64le.maintscript deleted file mode 100644 index 9e5261a935..0000000000 --- a/debian/linux-image-powerpc64le.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc64le linux-image-6.10.3-powerpc64le 5.7~rc5-1~exp1 linux-image-powerpc64le diff --git a/debian/linux-image-riscv64-dbg.lintian-overrides b/debian/linux-image-riscv64-dbg.lintian-overrides deleted file mode 100644 index 247a3b1349..0000000000 --- a/debian/linux-image-riscv64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-riscv64-dbg: wrong-section-according-to-package-name linux-image-riscv64-dbg => debug diff --git a/debian/linux-image-riscv64-dbg.maintscript b/debian/linux-image-riscv64-dbg.maintscript deleted file mode 100644 index c28d78b71b..0000000000 --- a/debian/linux-image-riscv64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-riscv64-dbg linux-image-6.10.3-riscv64-dbg 5.7~rc5-1~exp1 linux-image-riscv64-dbg diff --git a/debian/linux-image-riscv64.bug-presubj b/debian/linux-image-riscv64.bug-presubj deleted file mode 100644 index e17526e623..0000000000 --- a/debian/linux-image-riscv64.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-riscv64 instead. diff --git a/debian/linux-image-riscv64.maintscript b/debian/linux-image-riscv64.maintscript deleted file mode 100644 index 8b9c16061a..0000000000 --- a/debian/linux-image-riscv64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-riscv64 linux-image-6.10.3-riscv64 5.7~rc5-1~exp1 linux-image-riscv64 diff --git a/debian/linux-image-rpi-dbg.lintian-overrides b/debian/linux-image-rpi-dbg.lintian-overrides deleted file mode 100644 index 7cc8129d76..0000000000 --- a/debian/linux-image-rpi-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-rpi-dbg: wrong-section-according-to-package-name linux-image-rpi-dbg => debug diff --git a/debian/linux-image-rpi-dbg.maintscript b/debian/linux-image-rpi-dbg.maintscript deleted file mode 100644 index 2de9baf869..0000000000 --- a/debian/linux-image-rpi-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rpi-dbg linux-image-6.10.3-rpi-dbg 5.7~rc5-1~exp1 linux-image-rpi-dbg diff --git a/debian/linux-image-rpi.bug-presubj b/debian/linux-image-rpi.bug-presubj deleted file mode 100644 index 12c846181e..0000000000 --- a/debian/linux-image-rpi.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-rpi instead. diff --git a/debian/linux-image-rpi.maintscript b/debian/linux-image-rpi.maintscript deleted file mode 100644 index 80f829ebc9..0000000000 --- a/debian/linux-image-rpi.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rpi linux-image-6.10.3-rpi 5.7~rc5-1~exp1 linux-image-rpi diff --git a/debian/linux-image-rt-686-pae-dbg.lintian-overrides b/debian/linux-image-rt-686-pae-dbg.lintian-overrides deleted file mode 100644 index 32c3c44ff9..0000000000 --- a/debian/linux-image-rt-686-pae-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-rt-686-pae-dbg: wrong-section-according-to-package-name linux-image-rt-686-pae-dbg => debug diff --git a/debian/linux-image-rt-686-pae-dbg.maintscript b/debian/linux-image-rt-686-pae-dbg.maintscript deleted file mode 100644 index 565d0e4906..0000000000 --- a/debian/linux-image-rt-686-pae-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rt-686-pae-dbg linux-image-6.10.3-rt-686-pae-dbg 5.7~rc5-1~exp1 linux-image-rt-686-pae-dbg diff --git a/debian/linux-image-rt-686-pae.bug-presubj b/debian/linux-image-rt-686-pae.bug-presubj deleted file mode 100644 index 4a16f608b1..0000000000 --- a/debian/linux-image-rt-686-pae.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-rt-686-pae instead. diff --git a/debian/linux-image-rt-686-pae.maintscript b/debian/linux-image-rt-686-pae.maintscript deleted file mode 100644 index dbbd81bc89..0000000000 --- a/debian/linux-image-rt-686-pae.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rt-686-pae linux-image-6.10.3-rt-686-pae 5.7~rc5-1~exp1 linux-image-rt-686-pae diff --git a/debian/linux-image-rt-amd64-dbg.lintian-overrides b/debian/linux-image-rt-amd64-dbg.lintian-overrides deleted file mode 100644 index 339a6f45fb..0000000000 --- a/debian/linux-image-rt-amd64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-rt-amd64-dbg: wrong-section-according-to-package-name linux-image-rt-amd64-dbg => debug diff --git a/debian/linux-image-rt-amd64-dbg.maintscript b/debian/linux-image-rt-amd64-dbg.maintscript deleted file mode 100644 index 18ab2eaefc..0000000000 --- a/debian/linux-image-rt-amd64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rt-amd64-dbg linux-image-6.10.3-rt-amd64-dbg 5.7~rc5-1~exp1 linux-image-rt-amd64-dbg diff --git a/debian/linux-image-rt-arm64-dbg.lintian-overrides b/debian/linux-image-rt-arm64-dbg.lintian-overrides deleted file mode 100644 index cac0893c85..0000000000 --- a/debian/linux-image-rt-arm64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-rt-arm64-dbg: wrong-section-according-to-package-name linux-image-rt-arm64-dbg => debug diff --git a/debian/linux-image-rt-arm64-dbg.maintscript b/debian/linux-image-rt-arm64-dbg.maintscript deleted file mode 100644 index 74d983f8fa..0000000000 --- a/debian/linux-image-rt-arm64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rt-arm64-dbg linux-image-6.10.3-rt-arm64-dbg 5.7~rc5-1~exp1 linux-image-rt-arm64-dbg diff --git a/debian/linux-image-rt-armmp-dbg.lintian-overrides b/debian/linux-image-rt-armmp-dbg.lintian-overrides deleted file mode 100644 index 6b0cd95954..0000000000 --- a/debian/linux-image-rt-armmp-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-rt-armmp-dbg: wrong-section-according-to-package-name linux-image-rt-armmp-dbg => debug diff --git a/debian/linux-image-rt-armmp-dbg.maintscript b/debian/linux-image-rt-armmp-dbg.maintscript deleted file mode 100644 index cc020a7e55..0000000000 --- a/debian/linux-image-rt-armmp-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rt-armmp-dbg linux-image-6.10.3-rt-armmp-dbg 5.7~rc5-1~exp1 linux-image-rt-armmp-dbg diff --git a/debian/linux-image-rt-armmp.bug-presubj b/debian/linux-image-rt-armmp.bug-presubj deleted file mode 100644 index 0af45f36a3..0000000000 --- a/debian/linux-image-rt-armmp.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-rt-armmp instead. diff --git a/debian/linux-image-rt-armmp.maintscript b/debian/linux-image-rt-armmp.maintscript deleted file mode 100644 index 81ee8c0f29..0000000000 --- a/debian/linux-image-rt-armmp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rt-armmp linux-image-6.10.3-rt-armmp 5.7~rc5-1~exp1 linux-image-rt-armmp diff --git a/debian/linux-image-s390x-dbg.lintian-overrides b/debian/linux-image-s390x-dbg.lintian-overrides deleted file mode 100644 index 90d4fb2be2..0000000000 --- a/debian/linux-image-s390x-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-s390x-dbg: wrong-section-according-to-package-name linux-image-s390x-dbg => debug diff --git a/debian/linux-image-s390x-dbg.maintscript b/debian/linux-image-s390x-dbg.maintscript deleted file mode 100644 index 69d3f8c6ed..0000000000 --- a/debian/linux-image-s390x-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-s390x-dbg linux-image-6.10.3-s390x-dbg 5.7~rc5-1~exp1 linux-image-s390x-dbg diff --git a/debian/linux-image-s390x.bug-presubj b/debian/linux-image-s390x.bug-presubj deleted file mode 100644 index 0a771ec50d..0000000000 --- a/debian/linux-image-s390x.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-s390x instead. diff --git a/debian/linux-image-s390x.maintscript b/debian/linux-image-s390x.maintscript deleted file mode 100644 index f7ce3c8b1c..0000000000 --- a/debian/linux-image-s390x.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-s390x linux-image-6.10.3-s390x 5.7~rc5-1~exp1 linux-image-s390x diff --git a/debian/linux-image-sh7751r-dbg.lintian-overrides b/debian/linux-image-sh7751r-dbg.lintian-overrides deleted file mode 100644 index 8aa596111a..0000000000 --- a/debian/linux-image-sh7751r-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-sh7751r-dbg: wrong-section-according-to-package-name linux-image-sh7751r-dbg => debug diff --git a/debian/linux-image-sh7751r-dbg.maintscript b/debian/linux-image-sh7751r-dbg.maintscript deleted file mode 100644 index 33e5d9d024..0000000000 --- a/debian/linux-image-sh7751r-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sh7751r-dbg linux-image-6.10.3-sh7751r-dbg 5.7~rc5-1~exp1 linux-image-sh7751r-dbg diff --git a/debian/linux-image-sh7751r.bug-presubj b/debian/linux-image-sh7751r.bug-presubj deleted file mode 100644 index bf14f58af5..0000000000 --- a/debian/linux-image-sh7751r.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-sh7751r instead. diff --git a/debian/linux-image-sh7751r.maintscript b/debian/linux-image-sh7751r.maintscript deleted file mode 100644 index 12d18bef6a..0000000000 --- a/debian/linux-image-sh7751r.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sh7751r linux-image-6.10.3-sh7751r 5.7~rc5-1~exp1 linux-image-sh7751r diff --git a/debian/linux-image-sh7785lcr-dbg.lintian-overrides b/debian/linux-image-sh7785lcr-dbg.lintian-overrides deleted file mode 100644 index ee8a5c2cd8..0000000000 --- a/debian/linux-image-sh7785lcr-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-sh7785lcr-dbg: wrong-section-according-to-package-name linux-image-sh7785lcr-dbg => debug diff --git a/debian/linux-image-sh7785lcr-dbg.maintscript b/debian/linux-image-sh7785lcr-dbg.maintscript deleted file mode 100644 index 30f2af2c9c..0000000000 --- a/debian/linux-image-sh7785lcr-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sh7785lcr-dbg linux-image-6.10.3-sh7785lcr-dbg 5.7~rc5-1~exp1 linux-image-sh7785lcr-dbg diff --git a/debian/linux-image-sh7785lcr.bug-presubj b/debian/linux-image-sh7785lcr.bug-presubj deleted file mode 100644 index d3db3e0590..0000000000 --- a/debian/linux-image-sh7785lcr.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-sh7785lcr instead. diff --git a/debian/linux-image-sh7785lcr.maintscript b/debian/linux-image-sh7785lcr.maintscript deleted file mode 100644 index 9fc82a09d7..0000000000 --- a/debian/linux-image-sh7785lcr.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sh7785lcr linux-image-6.10.3-sh7785lcr 5.7~rc5-1~exp1 linux-image-sh7785lcr diff --git a/debian/linux-image-sparc64-dbg.lintian-overrides b/debian/linux-image-sparc64-dbg.lintian-overrides deleted file mode 100644 index 7b2cfa0f1f..0000000000 --- a/debian/linux-image-sparc64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-sparc64-dbg: wrong-section-according-to-package-name linux-image-sparc64-dbg => debug diff --git a/debian/linux-image-sparc64-dbg.maintscript b/debian/linux-image-sparc64-dbg.maintscript deleted file mode 100644 index 0675e11e28..0000000000 --- a/debian/linux-image-sparc64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sparc64-dbg linux-image-6.10.3-sparc64-dbg 5.7~rc5-1~exp1 linux-image-sparc64-dbg diff --git a/debian/linux-image-sparc64-smp-dbg.lintian-overrides b/debian/linux-image-sparc64-smp-dbg.lintian-overrides deleted file mode 100644 index 3a8a2e3654..0000000000 --- a/debian/linux-image-sparc64-smp-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-sparc64-smp-dbg: wrong-section-according-to-package-name linux-image-sparc64-smp-dbg => debug diff --git a/debian/linux-image-sparc64-smp-dbg.maintscript b/debian/linux-image-sparc64-smp-dbg.maintscript deleted file mode 100644 index fd53f24940..0000000000 --- a/debian/linux-image-sparc64-smp-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sparc64-smp-dbg linux-image-6.10.3-sparc64-smp-dbg 5.7~rc5-1~exp1 linux-image-sparc64-smp-dbg diff --git a/debian/linux-image-sparc64-smp.bug-presubj b/debian/linux-image-sparc64-smp.bug-presubj deleted file mode 100644 index e3145e9ec8..0000000000 --- a/debian/linux-image-sparc64-smp.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-sparc64-smp instead. diff --git a/debian/linux-image-sparc64-smp.maintscript b/debian/linux-image-sparc64-smp.maintscript deleted file mode 100644 index f530fd7544..0000000000 --- a/debian/linux-image-sparc64-smp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sparc64-smp linux-image-6.10.3-sparc64-smp 5.7~rc5-1~exp1 linux-image-sparc64-smp diff --git a/debian/linux-image-sparc64.bug-presubj b/debian/linux-image-sparc64.bug-presubj deleted file mode 100644 index 6dd6d35de9..0000000000 --- a/debian/linux-image-sparc64.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.10.3-sparc64 instead. diff --git a/debian/linux-image-sparc64.maintscript b/debian/linux-image-sparc64.maintscript deleted file mode 100644 index 584c001662..0000000000 --- a/debian/linux-image-sparc64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sparc64 linux-image-6.10.3-sparc64 5.7~rc5-1~exp1 linux-image-sparc64 |