diff options
| author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-08-05 19:24:03 +0000 |
|---|---|---|
| committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-08-05 19:24:07 +0000 |
| commit | ceef4fb4aa52af5f18ffbd40a11834698a3b4be4 (patch) | |
| tree | ec708d941d1ca60ac36fbda6779fa551acb98f30 | |
| parent | Merging debian version 6.9.10-1. (diff) | |
| download | linux-ceef4fb4aa52af5f18ffbd40a11834698a3b4be4.tar.xz linux-ceef4fb4aa52af5f18ffbd40a11834698a3b4be4.zip | |
Regenerating debian files.
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
479 files changed, 2 insertions, 8345 deletions
diff --git a/debian/build/version-info b/debian/build/version-info new file mode 100644 index 0000000000..73828526f8 --- /dev/null +++ b/debian/build/version-info @@ -0,0 +1,2 @@ +Source: linux +Version: 6.9.10-1~progress7.99u1 diff --git a/debian/linux-headers-4kc-malta.maintscript b/debian/linux-headers-4kc-malta.maintscript deleted file mode 100644 index d81f056556..0000000000 --- a/debian/linux-headers-4kc-malta.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-4kc-malta linux-headers-6.9.10-4kc-malta 5.7~rc5-1~exp1 linux-headers-4kc-malta diff --git a/debian/linux-headers-5kc-malta.maintscript b/debian/linux-headers-5kc-malta.maintscript deleted file mode 100644 index d340b27e47..0000000000 --- a/debian/linux-headers-5kc-malta.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-5kc-malta linux-headers-6.9.10-5kc-malta 5.7~rc5-1~exp1 linux-headers-5kc-malta diff --git a/debian/linux-headers-6.9.10-4kc-malta.postinst b/debian/linux-headers-6.9.10-4kc-malta.postinst deleted file mode 100644 index 91737bd6a0..0000000000 --- a/debian/linux-headers-6.9.10-4kc-malta.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-4kc-malta"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-5kc-malta.postinst b/debian/linux-headers-6.9.10-5kc-malta.postinst deleted file mode 100644 index f859bc1fde..0000000000 --- a/debian/linux-headers-6.9.10-5kc-malta.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-5kc-malta"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-686-pae.postinst b/debian/linux-headers-6.9.10-686-pae.postinst deleted file mode 100644 index b3267ee451..0000000000 --- a/debian/linux-headers-6.9.10-686-pae.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-686-pae"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-686.postinst b/debian/linux-headers-6.9.10-686.postinst deleted file mode 100644 index 420286dd33..0000000000 --- a/debian/linux-headers-6.9.10-686.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-686"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-alpha-generic.postinst b/debian/linux-headers-6.9.10-alpha-generic.postinst deleted file mode 100644 index 25b5e64b5a..0000000000 --- a/debian/linux-headers-6.9.10-alpha-generic.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-alpha-generic"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-alpha-smp.postinst b/debian/linux-headers-6.9.10-alpha-smp.postinst deleted file mode 100644 index bcd3fa0f9b..0000000000 --- a/debian/linux-headers-6.9.10-alpha-smp.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-alpha-smp"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-amd64.postinst b/debian/linux-headers-6.9.10-amd64.postinst deleted file mode 100644 index 9408f8e3ce..0000000000 --- a/debian/linux-headers-6.9.10-amd64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-amd64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-arm64.postinst b/debian/linux-headers-6.9.10-arm64.postinst deleted file mode 100644 index 796c80fdba..0000000000 --- a/debian/linux-headers-6.9.10-arm64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-arm64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-armmp-lpae.postinst b/debian/linux-headers-6.9.10-armmp-lpae.postinst deleted file mode 100644 index c922070987..0000000000 --- a/debian/linux-headers-6.9.10-armmp-lpae.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-armmp-lpae"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-armmp.postinst b/debian/linux-headers-6.9.10-armmp.postinst deleted file mode 100644 index 8345d18885..0000000000 --- a/debian/linux-headers-6.9.10-armmp.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-armmp"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-cloud-amd64.postinst b/debian/linux-headers-6.9.10-cloud-amd64.postinst deleted file mode 100644 index 22831d5816..0000000000 --- a/debian/linux-headers-6.9.10-cloud-amd64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-cloud-amd64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-cloud-arm64.postinst b/debian/linux-headers-6.9.10-cloud-arm64.postinst deleted file mode 100644 index aed08e5275..0000000000 --- a/debian/linux-headers-6.9.10-cloud-arm64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-cloud-arm64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-loong64.postinst b/debian/linux-headers-6.9.10-loong64.postinst deleted file mode 100644 index 6ec38bfa44..0000000000 --- a/debian/linux-headers-6.9.10-loong64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-loong64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-loongson-3.postinst b/debian/linux-headers-6.9.10-loongson-3.postinst deleted file mode 100644 index e64ef202e6..0000000000 --- a/debian/linux-headers-6.9.10-loongson-3.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-loongson-3"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-m68k.postinst b/debian/linux-headers-6.9.10-m68k.postinst deleted file mode 100644 index 08829af7dd..0000000000 --- a/debian/linux-headers-6.9.10-m68k.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-m68k"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-mips32r2eb.postinst b/debian/linux-headers-6.9.10-mips32r2eb.postinst deleted file mode 100644 index 7f8c215fe4..0000000000 --- a/debian/linux-headers-6.9.10-mips32r2eb.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-mips32r2eb"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-mips32r2el.postinst b/debian/linux-headers-6.9.10-mips32r2el.postinst deleted file mode 100644 index 79ed96b465..0000000000 --- a/debian/linux-headers-6.9.10-mips32r2el.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-mips32r2el"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-mips64r2eb.postinst b/debian/linux-headers-6.9.10-mips64r2eb.postinst deleted file mode 100644 index 48556fba3c..0000000000 --- a/debian/linux-headers-6.9.10-mips64r2eb.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-mips64r2eb"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-mips64r2el.postinst b/debian/linux-headers-6.9.10-mips64r2el.postinst deleted file mode 100644 index 52c6ac1f8c..0000000000 --- a/debian/linux-headers-6.9.10-mips64r2el.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-mips64r2el"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-mips64r6el.postinst b/debian/linux-headers-6.9.10-mips64r6el.postinst deleted file mode 100644 index 0006261a2e..0000000000 --- a/debian/linux-headers-6.9.10-mips64r6el.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-mips64r6el"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-octeon.postinst b/debian/linux-headers-6.9.10-octeon.postinst deleted file mode 100644 index d14b63d7c1..0000000000 --- a/debian/linux-headers-6.9.10-octeon.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-octeon"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-parisc.postinst b/debian/linux-headers-6.9.10-parisc.postinst deleted file mode 100644 index 0b7202b7ba..0000000000 --- a/debian/linux-headers-6.9.10-parisc.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-parisc"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-parisc64.postinst b/debian/linux-headers-6.9.10-parisc64.postinst deleted file mode 100644 index 20e6571930..0000000000 --- a/debian/linux-headers-6.9.10-parisc64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-parisc64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-powerpc-smp.postinst b/debian/linux-headers-6.9.10-powerpc-smp.postinst deleted file mode 100644 index c527b5bb67..0000000000 --- a/debian/linux-headers-6.9.10-powerpc-smp.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-powerpc-smp"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-powerpc.postinst b/debian/linux-headers-6.9.10-powerpc.postinst deleted file mode 100644 index 4762337cea..0000000000 --- a/debian/linux-headers-6.9.10-powerpc.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-powerpc"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-powerpc64.postinst b/debian/linux-headers-6.9.10-powerpc64.postinst deleted file mode 100644 index 7f8ace3003..0000000000 --- a/debian/linux-headers-6.9.10-powerpc64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-powerpc64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-powerpc64le.postinst b/debian/linux-headers-6.9.10-powerpc64le.postinst deleted file mode 100644 index 93caaabc37..0000000000 --- a/debian/linux-headers-6.9.10-powerpc64le.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-powerpc64le"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-riscv64.postinst b/debian/linux-headers-6.9.10-riscv64.postinst deleted file mode 100644 index 9b71d6c853..0000000000 --- a/debian/linux-headers-6.9.10-riscv64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-riscv64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-rpi.postinst b/debian/linux-headers-6.9.10-rpi.postinst deleted file mode 100644 index 1129f34cdf..0000000000 --- a/debian/linux-headers-6.9.10-rpi.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-rpi"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-rt-686-pae.postinst b/debian/linux-headers-6.9.10-rt-686-pae.postinst deleted file mode 100644 index 627a070292..0000000000 --- a/debian/linux-headers-6.9.10-rt-686-pae.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-rt-686-pae"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-rt-amd64.postinst b/debian/linux-headers-6.9.10-rt-amd64.postinst deleted file mode 100644 index e9ecc4ccba..0000000000 --- a/debian/linux-headers-6.9.10-rt-amd64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-rt-amd64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-rt-arm64.postinst b/debian/linux-headers-6.9.10-rt-arm64.postinst deleted file mode 100644 index 1d1488f6d9..0000000000 --- a/debian/linux-headers-6.9.10-rt-arm64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-rt-arm64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-rt-armmp.postinst b/debian/linux-headers-6.9.10-rt-armmp.postinst deleted file mode 100644 index 0a6f2161c6..0000000000 --- a/debian/linux-headers-6.9.10-rt-armmp.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-rt-armmp"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-s390x.postinst b/debian/linux-headers-6.9.10-s390x.postinst deleted file mode 100644 index 167c1be2db..0000000000 --- a/debian/linux-headers-6.9.10-s390x.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-s390x"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-sh7751r.postinst b/debian/linux-headers-6.9.10-sh7751r.postinst deleted file mode 100644 index 7e34f8134c..0000000000 --- a/debian/linux-headers-6.9.10-sh7751r.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-sh7751r"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-sh7785lcr.postinst b/debian/linux-headers-6.9.10-sh7785lcr.postinst deleted file mode 100644 index 2f7152a7d2..0000000000 --- a/debian/linux-headers-6.9.10-sh7785lcr.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-sh7785lcr"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-sparc64-smp.postinst b/debian/linux-headers-6.9.10-sparc64-smp.postinst deleted file mode 100644 index c70be38edb..0000000000 --- a/debian/linux-headers-6.9.10-sparc64-smp.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-sparc64-smp"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.10-sparc64.postinst b/debian/linux-headers-6.9.10-sparc64.postinst deleted file mode 100644 index 667f787787..0000000000 --- a/debian/linux-headers-6.9.10-sparc64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.10-sparc64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-686-pae.maintscript b/debian/linux-headers-686-pae.maintscript deleted file mode 100644 index a60cc7f0c2..0000000000 --- a/debian/linux-headers-686-pae.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-686-pae linux-headers-6.9.10-686-pae 5.7~rc5-1~exp1 linux-headers-686-pae diff --git a/debian/linux-headers-686.maintscript b/debian/linux-headers-686.maintscript deleted file mode 100644 index 098d87e1c0..0000000000 --- a/debian/linux-headers-686.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-686 linux-headers-6.9.10-686 5.7~rc5-1~exp1 linux-headers-686 diff --git a/debian/linux-headers-alpha-generic.maintscript b/debian/linux-headers-alpha-generic.maintscript deleted file mode 100644 index a60198012a..0000000000 --- a/debian/linux-headers-alpha-generic.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-alpha-generic linux-headers-6.9.10-alpha-generic 5.7~rc5-1~exp1 linux-headers-alpha-generic diff --git a/debian/linux-headers-alpha-smp.maintscript b/debian/linux-headers-alpha-smp.maintscript deleted file mode 100644 index 3536ea6eb1..0000000000 --- a/debian/linux-headers-alpha-smp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-alpha-smp linux-headers-6.9.10-alpha-smp 5.7~rc5-1~exp1 linux-headers-alpha-smp diff --git a/debian/linux-headers-armmp-lpae.maintscript b/debian/linux-headers-armmp-lpae.maintscript deleted file mode 100644 index 41bb1819d8..0000000000 --- a/debian/linux-headers-armmp-lpae.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-armmp-lpae linux-headers-6.9.10-armmp-lpae 5.7~rc5-1~exp1 linux-headers-armmp-lpae diff --git a/debian/linux-headers-armmp.maintscript b/debian/linux-headers-armmp.maintscript deleted file mode 100644 index 1f6da76756..0000000000 --- a/debian/linux-headers-armmp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-armmp linux-headers-6.9.10-armmp 5.7~rc5-1~exp1 linux-headers-armmp diff --git a/debian/linux-headers-loong64.maintscript b/debian/linux-headers-loong64.maintscript deleted file mode 100644 index 4cccf9eaa1..0000000000 --- a/debian/linux-headers-loong64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-loong64 linux-headers-6.9.10-loong64 5.7~rc5-1~exp1 linux-headers-loong64 diff --git a/debian/linux-headers-loongson-3.maintscript b/debian/linux-headers-loongson-3.maintscript deleted file mode 100644 index 501ab26d83..0000000000 --- a/debian/linux-headers-loongson-3.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-loongson-3 linux-headers-6.9.10-loongson-3 5.7~rc5-1~exp1 linux-headers-loongson-3 diff --git a/debian/linux-headers-m68k.maintscript b/debian/linux-headers-m68k.maintscript deleted file mode 100644 index 659c33af29..0000000000 --- a/debian/linux-headers-m68k.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-m68k linux-headers-6.9.10-m68k 5.7~rc5-1~exp1 linux-headers-m68k diff --git a/debian/linux-headers-mips32r2eb.maintscript b/debian/linux-headers-mips32r2eb.maintscript deleted file mode 100644 index 36f4ee0739..0000000000 --- a/debian/linux-headers-mips32r2eb.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-mips32r2eb linux-headers-6.9.10-mips32r2eb 5.7~rc5-1~exp1 linux-headers-mips32r2eb diff --git a/debian/linux-headers-mips32r2el.maintscript b/debian/linux-headers-mips32r2el.maintscript deleted file mode 100644 index 0dc388ae91..0000000000 --- a/debian/linux-headers-mips32r2el.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-mips32r2el linux-headers-6.9.10-mips32r2el 5.7~rc5-1~exp1 linux-headers-mips32r2el diff --git a/debian/linux-headers-mips64r2eb.maintscript b/debian/linux-headers-mips64r2eb.maintscript deleted file mode 100644 index 749e77fa7d..0000000000 --- a/debian/linux-headers-mips64r2eb.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-mips64r2eb linux-headers-6.9.10-mips64r2eb 5.7~rc5-1~exp1 linux-headers-mips64r2eb diff --git a/debian/linux-headers-mips64r2el.maintscript b/debian/linux-headers-mips64r2el.maintscript deleted file mode 100644 index 16f5b1139d..0000000000 --- a/debian/linux-headers-mips64r2el.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-mips64r2el linux-headers-6.9.10-mips64r2el 5.7~rc5-1~exp1 linux-headers-mips64r2el diff --git a/debian/linux-headers-mips64r6el.maintscript b/debian/linux-headers-mips64r6el.maintscript deleted file mode 100644 index f270a5ca6c..0000000000 --- a/debian/linux-headers-mips64r6el.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-mips64r6el linux-headers-6.9.10-mips64r6el 5.7~rc5-1~exp1 linux-headers-mips64r6el diff --git a/debian/linux-headers-octeon.maintscript b/debian/linux-headers-octeon.maintscript deleted file mode 100644 index 4c73fcb741..0000000000 --- a/debian/linux-headers-octeon.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-octeon linux-headers-6.9.10-octeon 5.7~rc5-1~exp1 linux-headers-octeon diff --git a/debian/linux-headers-parisc.maintscript b/debian/linux-headers-parisc.maintscript deleted file mode 100644 index b0b740926c..0000000000 --- a/debian/linux-headers-parisc.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-parisc linux-headers-6.9.10-parisc 5.7~rc5-1~exp1 linux-headers-parisc diff --git a/debian/linux-headers-parisc64.maintscript b/debian/linux-headers-parisc64.maintscript deleted file mode 100644 index be9c4a10e1..0000000000 --- a/debian/linux-headers-parisc64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-parisc64 linux-headers-6.9.10-parisc64 5.7~rc5-1~exp1 linux-headers-parisc64 diff --git a/debian/linux-headers-powerpc-smp.maintscript b/debian/linux-headers-powerpc-smp.maintscript deleted file mode 100644 index 232a7bca9f..0000000000 --- a/debian/linux-headers-powerpc-smp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-powerpc-smp linux-headers-6.9.10-powerpc-smp 5.7~rc5-1~exp1 linux-headers-powerpc-smp diff --git a/debian/linux-headers-powerpc.maintscript b/debian/linux-headers-powerpc.maintscript deleted file mode 100644 index 5649a93120..0000000000 --- a/debian/linux-headers-powerpc.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-powerpc linux-headers-6.9.10-powerpc 5.7~rc5-1~exp1 linux-headers-powerpc diff --git a/debian/linux-headers-powerpc64.maintscript b/debian/linux-headers-powerpc64.maintscript deleted file mode 100644 index f4ce812401..0000000000 --- a/debian/linux-headers-powerpc64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-powerpc64 linux-headers-6.9.10-powerpc64 5.7~rc5-1~exp1 linux-headers-powerpc64 diff --git a/debian/linux-headers-powerpc64le.maintscript b/debian/linux-headers-powerpc64le.maintscript deleted file mode 100644 index e34c9ff4fe..0000000000 --- a/debian/linux-headers-powerpc64le.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-powerpc64le linux-headers-6.9.10-powerpc64le 5.7~rc5-1~exp1 linux-headers-powerpc64le diff --git a/debian/linux-headers-riscv64.maintscript b/debian/linux-headers-riscv64.maintscript deleted file mode 100644 index f15f95256c..0000000000 --- a/debian/linux-headers-riscv64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-riscv64 linux-headers-6.9.10-riscv64 5.7~rc5-1~exp1 linux-headers-riscv64 diff --git a/debian/linux-headers-rpi.maintscript b/debian/linux-headers-rpi.maintscript deleted file mode 100644 index 7e4c3797fd..0000000000 --- a/debian/linux-headers-rpi.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-rpi linux-headers-6.9.10-rpi 5.7~rc5-1~exp1 linux-headers-rpi diff --git a/debian/linux-headers-rt-686-pae.maintscript b/debian/linux-headers-rt-686-pae.maintscript deleted file mode 100644 index bdff21d410..0000000000 --- a/debian/linux-headers-rt-686-pae.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-rt-686-pae linux-headers-6.9.10-rt-686-pae 5.7~rc5-1~exp1 linux-headers-rt-686-pae diff --git a/debian/linux-headers-rt-armmp.maintscript b/debian/linux-headers-rt-armmp.maintscript deleted file mode 100644 index c6134822eb..0000000000 --- a/debian/linux-headers-rt-armmp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-rt-armmp linux-headers-6.9.10-rt-armmp 5.7~rc5-1~exp1 linux-headers-rt-armmp diff --git a/debian/linux-headers-s390x.maintscript b/debian/linux-headers-s390x.maintscript deleted file mode 100644 index 2113eacc39..0000000000 --- a/debian/linux-headers-s390x.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-s390x linux-headers-6.9.10-s390x 5.7~rc5-1~exp1 linux-headers-s390x diff --git a/debian/linux-headers-sh7751r.maintscript b/debian/linux-headers-sh7751r.maintscript deleted file mode 100644 index fa3cf00248..0000000000 --- a/debian/linux-headers-sh7751r.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-sh7751r linux-headers-6.9.10-sh7751r 5.7~rc5-1~exp1 linux-headers-sh7751r diff --git a/debian/linux-headers-sh7785lcr.maintscript b/debian/linux-headers-sh7785lcr.maintscript deleted file mode 100644 index dd57780556..0000000000 --- a/debian/linux-headers-sh7785lcr.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-sh7785lcr linux-headers-6.9.10-sh7785lcr 5.7~rc5-1~exp1 linux-headers-sh7785lcr diff --git a/debian/linux-headers-sparc64-smp.maintscript b/debian/linux-headers-sparc64-smp.maintscript deleted file mode 100644 index 93c5c2e6b1..0000000000 --- a/debian/linux-headers-sparc64-smp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-sparc64-smp linux-headers-6.9.10-sparc64-smp 5.7~rc5-1~exp1 linux-headers-sparc64-smp diff --git a/debian/linux-headers-sparc64.maintscript b/debian/linux-headers-sparc64.maintscript deleted file mode 100644 index 341b3ec0ee..0000000000 --- a/debian/linux-headers-sparc64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-sparc64 linux-headers-6.9.10-sparc64 5.7~rc5-1~exp1 linux-headers-sparc64 diff --git a/debian/linux-image-4kc-malta-dbg.lintian-overrides b/debian/linux-image-4kc-malta-dbg.lintian-overrides deleted file mode 100644 index ff38eee30b..0000000000 --- a/debian/linux-image-4kc-malta-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-4kc-malta-dbg: wrong-section-according-to-package-name linux-image-4kc-malta-dbg => debug diff --git a/debian/linux-image-4kc-malta-dbg.maintscript b/debian/linux-image-4kc-malta-dbg.maintscript deleted file mode 100644 index 1cf7768abb..0000000000 --- a/debian/linux-image-4kc-malta-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-4kc-malta-dbg linux-image-6.9.10-4kc-malta-dbg 5.7~rc5-1~exp1 linux-image-4kc-malta-dbg diff --git a/debian/linux-image-4kc-malta.bug-presubj b/debian/linux-image-4kc-malta.bug-presubj deleted file mode 100644 index 0dd1536a9c..0000000000 --- a/debian/linux-image-4kc-malta.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-4kc-malta instead. diff --git a/debian/linux-image-4kc-malta.maintscript b/debian/linux-image-4kc-malta.maintscript deleted file mode 100644 index 2bf68b848d..0000000000 --- a/debian/linux-image-4kc-malta.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-4kc-malta linux-image-6.9.10-4kc-malta 5.7~rc5-1~exp1 linux-image-4kc-malta diff --git a/debian/linux-image-5kc-malta-dbg.lintian-overrides b/debian/linux-image-5kc-malta-dbg.lintian-overrides deleted file mode 100644 index 598b21f390..0000000000 --- a/debian/linux-image-5kc-malta-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-5kc-malta-dbg: wrong-section-according-to-package-name linux-image-5kc-malta-dbg => debug diff --git a/debian/linux-image-5kc-malta-dbg.maintscript b/debian/linux-image-5kc-malta-dbg.maintscript deleted file mode 100644 index 3d2d9b55df..0000000000 --- a/debian/linux-image-5kc-malta-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-5kc-malta-dbg linux-image-6.9.10-5kc-malta-dbg 5.7~rc5-1~exp1 linux-image-5kc-malta-dbg diff --git a/debian/linux-image-5kc-malta.bug-presubj b/debian/linux-image-5kc-malta.bug-presubj deleted file mode 100644 index dbe3a7d5f4..0000000000 --- a/debian/linux-image-5kc-malta.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-5kc-malta instead. diff --git a/debian/linux-image-5kc-malta.maintscript b/debian/linux-image-5kc-malta.maintscript deleted file mode 100644 index 070ca5505c..0000000000 --- a/debian/linux-image-5kc-malta.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-5kc-malta linux-image-6.9.10-5kc-malta 5.7~rc5-1~exp1 linux-image-5kc-malta diff --git a/debian/linux-image-6.9.10-4kc-malta-dbg.lintian-overrides b/debian/linux-image-6.9.10-4kc-malta-dbg.lintian-overrides deleted file mode 100644 index d946aa9538..0000000000 --- a/debian/linux-image-6.9.10-4kc-malta-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-4kc-malta-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.10-4kc-malta-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.9.10-4kc-malta.NEWS b/debian/linux-image-6.9.10-4kc-malta.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-4kc-malta.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-4kc-malta.lintian-overrides b/debian/linux-image-6.9.10-4kc-malta.lintian-overrides deleted file mode 100644 index 4f9c75613e..0000000000 --- a/debian/linux-image-6.9.10-4kc-malta.lintian-overrides +++ /dev/null @@ -1,7 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.10-4kc-malta: binary-from-other-architecture *boot/vmlinu* -linux-image-6.9.10-4kc-malta: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. -linux-image-6.9.10-4kc-malta: unstripped-binary-or-object *boot/vmlinu* diff --git a/debian/linux-image-6.9.10-4kc-malta.postinst b/debian/linux-image-6.9.10-4kc-malta.postinst deleted file mode 100644 index 2255d6eee7..0000000000 --- a/debian/linux-image-6.9.10-4kc-malta.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-4kc-malta -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-4kc-malta.postrm b/debian/linux-image-6.9.10-4kc-malta.postrm deleted file mode 100644 index 745697f667..0000000000 --- a/debian/linux-image-6.9.10-4kc-malta.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-4kc-malta -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-4kc-malta.preinst b/debian/linux-image-6.9.10-4kc-malta.preinst deleted file mode 100644 index 9628a74d19..0000000000 --- a/debian/linux-image-6.9.10-4kc-malta.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-4kc-malta -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-4kc-malta.prerm b/debian/linux-image-6.9.10-4kc-malta.prerm deleted file mode 100644 index da744bd662..0000000000 --- a/debian/linux-image-6.9.10-4kc-malta.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-4kc-malta -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-5kc-malta-dbg.lintian-overrides b/debian/linux-image-6.9.10-5kc-malta-dbg.lintian-overrides deleted file mode 100644 index c3b4b562f3..0000000000 --- a/debian/linux-image-6.9.10-5kc-malta-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-5kc-malta-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-5kc-malta.NEWS b/debian/linux-image-6.9.10-5kc-malta.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-5kc-malta.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-5kc-malta.lintian-overrides b/debian/linux-image-6.9.10-5kc-malta.lintian-overrides deleted file mode 100644 index ffabe8170d..0000000000 --- a/debian/linux-image-6.9.10-5kc-malta.lintian-overrides +++ /dev/null @@ -1,5 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. -linux-image-6.9.10-5kc-malta: unstripped-binary-or-object *boot/vmlinu* diff --git a/debian/linux-image-6.9.10-5kc-malta.postinst b/debian/linux-image-6.9.10-5kc-malta.postinst deleted file mode 100644 index 1fa382e3d1..0000000000 --- a/debian/linux-image-6.9.10-5kc-malta.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-5kc-malta -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-5kc-malta.postrm b/debian/linux-image-6.9.10-5kc-malta.postrm deleted file mode 100644 index ba07ffba09..0000000000 --- a/debian/linux-image-6.9.10-5kc-malta.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-5kc-malta -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-5kc-malta.preinst b/debian/linux-image-6.9.10-5kc-malta.preinst deleted file mode 100644 index f9d45c9e47..0000000000 --- a/debian/linux-image-6.9.10-5kc-malta.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-5kc-malta -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-5kc-malta.prerm b/debian/linux-image-6.9.10-5kc-malta.prerm deleted file mode 100644 index 1140b1632d..0000000000 --- a/debian/linux-image-6.9.10-5kc-malta.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-5kc-malta -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-686-dbg.lintian-overrides b/debian/linux-image-6.9.10-686-dbg.lintian-overrides deleted file mode 100644 index e32a5ac1e5..0000000000 --- a/debian/linux-image-6.9.10-686-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-686-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.10-686-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-686/vdso/vdso32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-686-pae-dbg.lintian-overrides b/debian/linux-image-6.9.10-686-pae-dbg.lintian-overrides deleted file mode 100644 index 9b4ce73003..0000000000 --- a/debian/linux-image-6.9.10-686-pae-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-686-pae-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.10-686-pae-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-686-pae/vdso/vdso32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-686-pae.NEWS b/debian/linux-image-6.9.10-686-pae.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-686-pae.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-686-pae.lintian-overrides b/debian/linux-image-6.9.10-686-pae.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-686-pae.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-686-pae.postinst b/debian/linux-image-6.9.10-686-pae.postinst deleted file mode 100644 index 9e5e548c08..0000000000 --- a/debian/linux-image-6.9.10-686-pae.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-686-pae -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-686-pae.postrm b/debian/linux-image-6.9.10-686-pae.postrm deleted file mode 100644 index b9e6f7f1fb..0000000000 --- a/debian/linux-image-6.9.10-686-pae.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-686-pae -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-686-pae.preinst b/debian/linux-image-6.9.10-686-pae.preinst deleted file mode 100644 index 43530000f7..0000000000 --- a/debian/linux-image-6.9.10-686-pae.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-686-pae -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-686-pae.prerm b/debian/linux-image-6.9.10-686-pae.prerm deleted file mode 100644 index 34b33195fd..0000000000 --- a/debian/linux-image-6.9.10-686-pae.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-686-pae -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-686.NEWS b/debian/linux-image-6.9.10-686.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-686.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-686.lintian-overrides b/debian/linux-image-6.9.10-686.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-686.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-686.postinst b/debian/linux-image-6.9.10-686.postinst deleted file mode 100644 index 296a046984..0000000000 --- a/debian/linux-image-6.9.10-686.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-686 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-686.postrm b/debian/linux-image-6.9.10-686.postrm deleted file mode 100644 index 7afa91869f..0000000000 --- a/debian/linux-image-6.9.10-686.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-686 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-686.preinst b/debian/linux-image-6.9.10-686.preinst deleted file mode 100644 index 6bc7a7e99c..0000000000 --- a/debian/linux-image-6.9.10-686.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-686 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-686.prerm b/debian/linux-image-6.9.10-686.prerm deleted file mode 100644 index 191fbec075..0000000000 --- a/debian/linux-image-6.9.10-686.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-686 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-alpha-generic-dbg.lintian-overrides b/debian/linux-image-6.9.10-alpha-generic-dbg.lintian-overrides deleted file mode 100644 index 233b446a73..0000000000 --- a/debian/linux-image-6.9.10-alpha-generic-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-alpha-generic-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-alpha-generic.NEWS b/debian/linux-image-6.9.10-alpha-generic.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-alpha-generic.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-alpha-generic.lintian-overrides b/debian/linux-image-6.9.10-alpha-generic.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-alpha-generic.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-alpha-generic.postinst b/debian/linux-image-6.9.10-alpha-generic.postinst deleted file mode 100644 index cb04cbb464..0000000000 --- a/debian/linux-image-6.9.10-alpha-generic.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-alpha-generic -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-alpha-generic.postrm b/debian/linux-image-6.9.10-alpha-generic.postrm deleted file mode 100644 index 549b561638..0000000000 --- a/debian/linux-image-6.9.10-alpha-generic.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-alpha-generic -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-alpha-generic.preinst b/debian/linux-image-6.9.10-alpha-generic.preinst deleted file mode 100644 index 6f88210e44..0000000000 --- a/debian/linux-image-6.9.10-alpha-generic.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-alpha-generic -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-alpha-generic.prerm b/debian/linux-image-6.9.10-alpha-generic.prerm deleted file mode 100644 index f7a75b627d..0000000000 --- a/debian/linux-image-6.9.10-alpha-generic.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-alpha-generic -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-alpha-smp-dbg.lintian-overrides b/debian/linux-image-6.9.10-alpha-smp-dbg.lintian-overrides deleted file mode 100644 index e9af566ea5..0000000000 --- a/debian/linux-image-6.9.10-alpha-smp-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-alpha-smp-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-alpha-smp.NEWS b/debian/linux-image-6.9.10-alpha-smp.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-alpha-smp.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-alpha-smp.lintian-overrides b/debian/linux-image-6.9.10-alpha-smp.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-alpha-smp.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-alpha-smp.postinst b/debian/linux-image-6.9.10-alpha-smp.postinst deleted file mode 100644 index 13b21d8602..0000000000 --- a/debian/linux-image-6.9.10-alpha-smp.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-alpha-smp -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-alpha-smp.postrm b/debian/linux-image-6.9.10-alpha-smp.postrm deleted file mode 100644 index 02dfb91f40..0000000000 --- a/debian/linux-image-6.9.10-alpha-smp.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-alpha-smp -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-alpha-smp.preinst b/debian/linux-image-6.9.10-alpha-smp.preinst deleted file mode 100644 index 9ab79b2adc..0000000000 --- a/debian/linux-image-6.9.10-alpha-smp.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-alpha-smp -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-alpha-smp.prerm b/debian/linux-image-6.9.10-alpha-smp.prerm deleted file mode 100644 index c48b9006ff..0000000000 --- a/debian/linux-image-6.9.10-alpha-smp.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-alpha-smp -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-amd64-dbg.lintian-overrides b/debian/linux-image-6.9.10-amd64-dbg.lintian-overrides deleted file mode 100644 index 067a842ea5..0000000000 --- a/debian/linux-image-6.9.10-amd64-dbg.lintian-overrides +++ /dev/null @@ -1,15 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-amd64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.10-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-amd64/vdso/vdso32.so* -linux-image-6.9.10-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-amd64/vdso/vdso64.so* -linux-image-6.9.10-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-amd64/vdso/vdsox32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.9.10-amd64-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.9.10-amd64/vdso/vdsox32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-amd64-unsigned.NEWS b/debian/linux-image-6.9.10-amd64-unsigned.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-amd64-unsigned.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-amd64-unsigned.lintian-overrides b/debian/linux-image-6.9.10-amd64-unsigned.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-amd64-unsigned.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-amd64-unsigned.postinst b/debian/linux-image-6.9.10-amd64-unsigned.postinst deleted file mode 100644 index b565e716aa..0000000000 --- a/debian/linux-image-6.9.10-amd64-unsigned.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-amd64-unsigned.postrm b/debian/linux-image-6.9.10-amd64-unsigned.postrm deleted file mode 100644 index 13e202f3aa..0000000000 --- a/debian/linux-image-6.9.10-amd64-unsigned.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-amd64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-amd64-unsigned.preinst b/debian/linux-image-6.9.10-amd64-unsigned.preinst deleted file mode 100644 index de572e2d13..0000000000 --- a/debian/linux-image-6.9.10-amd64-unsigned.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-amd64-unsigned.prerm b/debian/linux-image-6.9.10-amd64-unsigned.prerm deleted file mode 100644 index 75e0ee6b72..0000000000 --- a/debian/linux-image-6.9.10-amd64-unsigned.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-arm64-dbg.lintian-overrides b/debian/linux-image-6.9.10-arm64-dbg.lintian-overrides deleted file mode 100644 index c2ef8263e0..0000000000 --- a/debian/linux-image-6.9.10-arm64-dbg.lintian-overrides +++ /dev/null @@ -1,14 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-arm64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.10-arm64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-arm64/vdso/vdso.so* -linux-image-6.9.10-arm64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-arm64/vdso/vdso32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.9.10-arm64-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.9.10-arm64/vdso/vdso32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-arm64-unsigned.NEWS b/debian/linux-image-6.9.10-arm64-unsigned.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-arm64-unsigned.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-arm64-unsigned.lintian-overrides b/debian/linux-image-6.9.10-arm64-unsigned.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-arm64-unsigned.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-arm64-unsigned.postinst b/debian/linux-image-6.9.10-arm64-unsigned.postinst deleted file mode 100644 index 19af3521c4..0000000000 --- a/debian/linux-image-6.9.10-arm64-unsigned.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-arm64-unsigned.postrm b/debian/linux-image-6.9.10-arm64-unsigned.postrm deleted file mode 100644 index 3369775a8e..0000000000 --- a/debian/linux-image-6.9.10-arm64-unsigned.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-arm64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-arm64-unsigned.preinst b/debian/linux-image-6.9.10-arm64-unsigned.preinst deleted file mode 100644 index a39bcdf284..0000000000 --- a/debian/linux-image-6.9.10-arm64-unsigned.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-arm64-unsigned.prerm b/debian/linux-image-6.9.10-arm64-unsigned.prerm deleted file mode 100644 index 83d642797a..0000000000 --- a/debian/linux-image-6.9.10-arm64-unsigned.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-armmp-dbg.lintian-overrides b/debian/linux-image-6.9.10-armmp-dbg.lintian-overrides deleted file mode 100644 index 8d9b986004..0000000000 --- a/debian/linux-image-6.9.10-armmp-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-armmp-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.10-armmp-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-armmp/vdso/vdso.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-armmp-lpae-dbg.lintian-overrides b/debian/linux-image-6.9.10-armmp-lpae-dbg.lintian-overrides deleted file mode 100644 index f42dfd3dfe..0000000000 --- a/debian/linux-image-6.9.10-armmp-lpae-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-armmp-lpae-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.10-armmp-lpae-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-armmp-lpae/vdso/vdso.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-armmp-lpae.NEWS b/debian/linux-image-6.9.10-armmp-lpae.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-armmp-lpae.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-armmp-lpae.lintian-overrides b/debian/linux-image-6.9.10-armmp-lpae.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-armmp-lpae.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-armmp-lpae.postinst b/debian/linux-image-6.9.10-armmp-lpae.postinst deleted file mode 100644 index 2d5967d2a8..0000000000 --- a/debian/linux-image-6.9.10-armmp-lpae.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-armmp-lpae -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-armmp-lpae.postrm b/debian/linux-image-6.9.10-armmp-lpae.postrm deleted file mode 100644 index 5375a3570b..0000000000 --- a/debian/linux-image-6.9.10-armmp-lpae.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-armmp-lpae -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-armmp-lpae.preinst b/debian/linux-image-6.9.10-armmp-lpae.preinst deleted file mode 100644 index c241e7dc61..0000000000 --- a/debian/linux-image-6.9.10-armmp-lpae.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-armmp-lpae -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-armmp-lpae.prerm b/debian/linux-image-6.9.10-armmp-lpae.prerm deleted file mode 100644 index 4d8a296e00..0000000000 --- a/debian/linux-image-6.9.10-armmp-lpae.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-armmp-lpae -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-armmp.NEWS b/debian/linux-image-6.9.10-armmp.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-armmp.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-armmp.lintian-overrides b/debian/linux-image-6.9.10-armmp.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-armmp.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-armmp.postinst b/debian/linux-image-6.9.10-armmp.postinst deleted file mode 100644 index 6ad283d8de..0000000000 --- a/debian/linux-image-6.9.10-armmp.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-armmp -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-armmp.postrm b/debian/linux-image-6.9.10-armmp.postrm deleted file mode 100644 index e439707f55..0000000000 --- a/debian/linux-image-6.9.10-armmp.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-armmp -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-armmp.preinst b/debian/linux-image-6.9.10-armmp.preinst deleted file mode 100644 index 265215761f..0000000000 --- a/debian/linux-image-6.9.10-armmp.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-armmp -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-armmp.prerm b/debian/linux-image-6.9.10-armmp.prerm deleted file mode 100644 index 95fecf28fd..0000000000 --- a/debian/linux-image-6.9.10-armmp.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-armmp -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-cloud-amd64-dbg.lintian-overrides b/debian/linux-image-6.9.10-cloud-amd64-dbg.lintian-overrides deleted file mode 100644 index 02036c662d..0000000000 --- a/debian/linux-image-6.9.10-cloud-amd64-dbg.lintian-overrides +++ /dev/null @@ -1,15 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-cloud-amd64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.10-cloud-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-cloud-amd64/vdso/vdso32.so* -linux-image-6.9.10-cloud-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-cloud-amd64/vdso/vdso64.so* -linux-image-6.9.10-cloud-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-cloud-amd64/vdso/vdsox32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.9.10-cloud-amd64-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.9.10-cloud-amd64/vdso/vdsox32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-cloud-amd64-unsigned.NEWS b/debian/linux-image-6.9.10-cloud-amd64-unsigned.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-cloud-amd64-unsigned.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-cloud-amd64-unsigned.lintian-overrides b/debian/linux-image-6.9.10-cloud-amd64-unsigned.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-cloud-amd64-unsigned.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-cloud-amd64-unsigned.postinst b/debian/linux-image-6.9.10-cloud-amd64-unsigned.postinst deleted file mode 100644 index bccd655f8f..0000000000 --- a/debian/linux-image-6.9.10-cloud-amd64-unsigned.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-cloud-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-cloud-amd64-unsigned.postrm b/debian/linux-image-6.9.10-cloud-amd64-unsigned.postrm deleted file mode 100644 index 8f14c6adfa..0000000000 --- a/debian/linux-image-6.9.10-cloud-amd64-unsigned.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-cloud-amd64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-cloud-amd64-unsigned.preinst b/debian/linux-image-6.9.10-cloud-amd64-unsigned.preinst deleted file mode 100644 index fe62cdb4d4..0000000000 --- a/debian/linux-image-6.9.10-cloud-amd64-unsigned.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-cloud-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-cloud-amd64-unsigned.prerm b/debian/linux-image-6.9.10-cloud-amd64-unsigned.prerm deleted file mode 100644 index c44252609a..0000000000 --- a/debian/linux-image-6.9.10-cloud-amd64-unsigned.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-cloud-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-cloud-arm64-dbg.lintian-overrides b/debian/linux-image-6.9.10-cloud-arm64-dbg.lintian-overrides deleted file mode 100644 index 0f4e7f6726..0000000000 --- a/debian/linux-image-6.9.10-cloud-arm64-dbg.lintian-overrides +++ /dev/null @@ -1,14 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-cloud-arm64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.10-cloud-arm64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-cloud-arm64/vdso/vdso.so* -linux-image-6.9.10-cloud-arm64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-cloud-arm64/vdso/vdso32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.9.10-cloud-arm64-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.9.10-cloud-arm64/vdso/vdso32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-cloud-arm64-unsigned.NEWS b/debian/linux-image-6.9.10-cloud-arm64-unsigned.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-cloud-arm64-unsigned.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-cloud-arm64-unsigned.lintian-overrides b/debian/linux-image-6.9.10-cloud-arm64-unsigned.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-cloud-arm64-unsigned.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-cloud-arm64-unsigned.postinst b/debian/linux-image-6.9.10-cloud-arm64-unsigned.postinst deleted file mode 100644 index fd16dd5313..0000000000 --- a/debian/linux-image-6.9.10-cloud-arm64-unsigned.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-cloud-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-cloud-arm64-unsigned.postrm b/debian/linux-image-6.9.10-cloud-arm64-unsigned.postrm deleted file mode 100644 index 6443b84e8c..0000000000 --- a/debian/linux-image-6.9.10-cloud-arm64-unsigned.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-cloud-arm64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-cloud-arm64-unsigned.preinst b/debian/linux-image-6.9.10-cloud-arm64-unsigned.preinst deleted file mode 100644 index 66318c9aea..0000000000 --- a/debian/linux-image-6.9.10-cloud-arm64-unsigned.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-cloud-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-cloud-arm64-unsigned.prerm b/debian/linux-image-6.9.10-cloud-arm64-unsigned.prerm deleted file mode 100644 index 0deec77c12..0000000000 --- a/debian/linux-image-6.9.10-cloud-arm64-unsigned.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-cloud-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-loong64-dbg.lintian-overrides b/debian/linux-image-6.9.10-loong64-dbg.lintian-overrides deleted file mode 100644 index 6732d67fd4..0000000000 --- a/debian/linux-image-6.9.10-loong64-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-loong64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-loong64.NEWS b/debian/linux-image-6.9.10-loong64.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-loong64.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-loong64.lintian-overrides b/debian/linux-image-6.9.10-loong64.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-loong64.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-loong64.postinst b/debian/linux-image-6.9.10-loong64.postinst deleted file mode 100644 index 2c27f5628d..0000000000 --- a/debian/linux-image-6.9.10-loong64.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-loong64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-loong64.postrm b/debian/linux-image-6.9.10-loong64.postrm deleted file mode 100644 index b362489ba7..0000000000 --- a/debian/linux-image-6.9.10-loong64.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-loong64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-loong64.preinst b/debian/linux-image-6.9.10-loong64.preinst deleted file mode 100644 index 44aac977ae..0000000000 --- a/debian/linux-image-6.9.10-loong64.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-loong64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-loong64.prerm b/debian/linux-image-6.9.10-loong64.prerm deleted file mode 100644 index a7be45c2c1..0000000000 --- a/debian/linux-image-6.9.10-loong64.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-loong64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-loongson-3-dbg.lintian-overrides b/debian/linux-image-6.9.10-loongson-3-dbg.lintian-overrides deleted file mode 100644 index fb22c115a1..0000000000 --- a/debian/linux-image-6.9.10-loongson-3-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-loongson-3-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.10-loongson-3-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.9.10-loongson-3.NEWS b/debian/linux-image-6.9.10-loongson-3.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-loongson-3.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-loongson-3.lintian-overrides b/debian/linux-image-6.9.10-loongson-3.lintian-overrides deleted file mode 100644 index 8553c33dd5..0000000000 --- a/debian/linux-image-6.9.10-loongson-3.lintian-overrides +++ /dev/null @@ -1,7 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.10-loongson-3: binary-from-other-architecture *boot/vmlinu* -linux-image-6.9.10-loongson-3: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. -linux-image-6.9.10-loongson-3: unstripped-binary-or-object *boot/vmlinu* diff --git a/debian/linux-image-6.9.10-loongson-3.postinst b/debian/linux-image-6.9.10-loongson-3.postinst deleted file mode 100644 index a7ade497e3..0000000000 --- a/debian/linux-image-6.9.10-loongson-3.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-loongson-3 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-loongson-3.postrm b/debian/linux-image-6.9.10-loongson-3.postrm deleted file mode 100644 index b246317a04..0000000000 --- a/debian/linux-image-6.9.10-loongson-3.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-loongson-3 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-loongson-3.preinst b/debian/linux-image-6.9.10-loongson-3.preinst deleted file mode 100644 index 2139938019..0000000000 --- a/debian/linux-image-6.9.10-loongson-3.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-loongson-3 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-loongson-3.prerm b/debian/linux-image-6.9.10-loongson-3.prerm deleted file mode 100644 index 17a62c2250..0000000000 --- a/debian/linux-image-6.9.10-loongson-3.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-loongson-3 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-m68k-dbg.lintian-overrides b/debian/linux-image-6.9.10-m68k-dbg.lintian-overrides deleted file mode 100644 index 6b7804bca6..0000000000 --- a/debian/linux-image-6.9.10-m68k-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-m68k-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-m68k.NEWS b/debian/linux-image-6.9.10-m68k.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-m68k.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-m68k.lintian-overrides b/debian/linux-image-6.9.10-m68k.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-m68k.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-m68k.postinst b/debian/linux-image-6.9.10-m68k.postinst deleted file mode 100644 index 237234f97d..0000000000 --- a/debian/linux-image-6.9.10-m68k.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-m68k -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-m68k.postrm b/debian/linux-image-6.9.10-m68k.postrm deleted file mode 100644 index 9aa370dcc5..0000000000 --- a/debian/linux-image-6.9.10-m68k.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-m68k -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-m68k.preinst b/debian/linux-image-6.9.10-m68k.preinst deleted file mode 100644 index acda04c6e0..0000000000 --- a/debian/linux-image-6.9.10-m68k.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-m68k -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-m68k.prerm b/debian/linux-image-6.9.10-m68k.prerm deleted file mode 100644 index 49a30a6823..0000000000 --- a/debian/linux-image-6.9.10-m68k.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-m68k -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-mips32r2eb-dbg.lintian-overrides b/debian/linux-image-6.9.10-mips32r2eb-dbg.lintian-overrides deleted file mode 100644 index 6ebc19d1e4..0000000000 --- a/debian/linux-image-6.9.10-mips32r2eb-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-mips32r2eb-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.10-mips32r2eb-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.9.10-mips32r2eb.NEWS b/debian/linux-image-6.9.10-mips32r2eb.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-mips32r2eb.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-mips32r2eb.lintian-overrides b/debian/linux-image-6.9.10-mips32r2eb.lintian-overrides deleted file mode 100644 index 1a0d052e0a..0000000000 --- a/debian/linux-image-6.9.10-mips32r2eb.lintian-overrides +++ /dev/null @@ -1,6 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.10-mips32r2eb: binary-from-other-architecture *boot/vmlinu* -linux-image-6.9.10-mips32r2eb: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-mips32r2eb.postinst b/debian/linux-image-6.9.10-mips32r2eb.postinst deleted file mode 100644 index bf2d5e4661..0000000000 --- a/debian/linux-image-6.9.10-mips32r2eb.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-mips32r2eb -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-mips32r2eb.postrm b/debian/linux-image-6.9.10-mips32r2eb.postrm deleted file mode 100644 index e449b538e8..0000000000 --- a/debian/linux-image-6.9.10-mips32r2eb.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-mips32r2eb -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-mips32r2eb.preinst b/debian/linux-image-6.9.10-mips32r2eb.preinst deleted file mode 100644 index 7a3a4b4ef5..0000000000 --- a/debian/linux-image-6.9.10-mips32r2eb.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-mips32r2eb -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-mips32r2eb.prerm b/debian/linux-image-6.9.10-mips32r2eb.prerm deleted file mode 100644 index 648fb7351b..0000000000 --- a/debian/linux-image-6.9.10-mips32r2eb.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-mips32r2eb -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-mips32r2el-dbg.lintian-overrides b/debian/linux-image-6.9.10-mips32r2el-dbg.lintian-overrides deleted file mode 100644 index 571cee05ea..0000000000 --- a/debian/linux-image-6.9.10-mips32r2el-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-mips32r2el-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.10-mips32r2el-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.9.10-mips32r2el.NEWS b/debian/linux-image-6.9.10-mips32r2el.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-mips32r2el.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-mips32r2el.lintian-overrides b/debian/linux-image-6.9.10-mips32r2el.lintian-overrides deleted file mode 100644 index befda59a29..0000000000 --- a/debian/linux-image-6.9.10-mips32r2el.lintian-overrides +++ /dev/null @@ -1,7 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.10-mips32r2el: binary-from-other-architecture *boot/vmlinu* -linux-image-6.9.10-mips32r2el: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. -linux-image-6.9.10-mips32r2el: unstripped-binary-or-object *boot/vmlinu* diff --git a/debian/linux-image-6.9.10-mips32r2el.postinst b/debian/linux-image-6.9.10-mips32r2el.postinst deleted file mode 100644 index 173c6c78b2..0000000000 --- a/debian/linux-image-6.9.10-mips32r2el.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-mips32r2el -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-mips32r2el.postrm b/debian/linux-image-6.9.10-mips32r2el.postrm deleted file mode 100644 index b97dd40b60..0000000000 --- a/debian/linux-image-6.9.10-mips32r2el.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-mips32r2el -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-mips32r2el.preinst b/debian/linux-image-6.9.10-mips32r2el.preinst deleted file mode 100644 index 6156600e54..0000000000 --- a/debian/linux-image-6.9.10-mips32r2el.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-mips32r2el -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-mips32r2el.prerm b/debian/linux-image-6.9.10-mips32r2el.prerm deleted file mode 100644 index ae20432ce7..0000000000 --- a/debian/linux-image-6.9.10-mips32r2el.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-mips32r2el -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-mips64r2eb-dbg.lintian-overrides b/debian/linux-image-6.9.10-mips64r2eb-dbg.lintian-overrides deleted file mode 100644 index 9d095bbe91..0000000000 --- a/debian/linux-image-6.9.10-mips64r2eb-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-mips64r2eb-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-mips64r2eb.NEWS b/debian/linux-image-6.9.10-mips64r2eb.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-mips64r2eb.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-mips64r2eb.lintian-overrides b/debian/linux-image-6.9.10-mips64r2eb.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-mips64r2eb.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-mips64r2eb.postinst b/debian/linux-image-6.9.10-mips64r2eb.postinst deleted file mode 100644 index 3a83985e70..0000000000 --- a/debian/linux-image-6.9.10-mips64r2eb.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-mips64r2eb -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-mips64r2eb.postrm b/debian/linux-image-6.9.10-mips64r2eb.postrm deleted file mode 100644 index 8c38f99099..0000000000 --- a/debian/linux-image-6.9.10-mips64r2eb.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-mips64r2eb -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-mips64r2eb.preinst b/debian/linux-image-6.9.10-mips64r2eb.preinst deleted file mode 100644 index 1c9d311ce8..0000000000 --- a/debian/linux-image-6.9.10-mips64r2eb.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-mips64r2eb -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-mips64r2eb.prerm b/debian/linux-image-6.9.10-mips64r2eb.prerm deleted file mode 100644 index 35ef5a4b1d..0000000000 --- a/debian/linux-image-6.9.10-mips64r2eb.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-mips64r2eb -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-mips64r2el-dbg.lintian-overrides b/debian/linux-image-6.9.10-mips64r2el-dbg.lintian-overrides deleted file mode 100644 index 27110d53da..0000000000 --- a/debian/linux-image-6.9.10-mips64r2el-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-mips64r2el-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-mips64r2el.NEWS b/debian/linux-image-6.9.10-mips64r2el.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-mips64r2el.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-mips64r2el.lintian-overrides b/debian/linux-image-6.9.10-mips64r2el.lintian-overrides deleted file mode 100644 index 2b56efa141..0000000000 --- a/debian/linux-image-6.9.10-mips64r2el.lintian-overrides +++ /dev/null @@ -1,5 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. -linux-image-6.9.10-mips64r2el: unstripped-binary-or-object *boot/vmlinu* diff --git a/debian/linux-image-6.9.10-mips64r2el.postinst b/debian/linux-image-6.9.10-mips64r2el.postinst deleted file mode 100644 index eac482e65b..0000000000 --- a/debian/linux-image-6.9.10-mips64r2el.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-mips64r2el -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-mips64r2el.postrm b/debian/linux-image-6.9.10-mips64r2el.postrm deleted file mode 100644 index 80eab08cf2..0000000000 --- a/debian/linux-image-6.9.10-mips64r2el.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-mips64r2el -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-mips64r2el.preinst b/debian/linux-image-6.9.10-mips64r2el.preinst deleted file mode 100644 index 832d927220..0000000000 --- a/debian/linux-image-6.9.10-mips64r2el.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-mips64r2el -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-mips64r2el.prerm b/debian/linux-image-6.9.10-mips64r2el.prerm deleted file mode 100644 index 72ec5f1ec9..0000000000 --- a/debian/linux-image-6.9.10-mips64r2el.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-mips64r2el -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-mips64r6el-dbg.lintian-overrides b/debian/linux-image-6.9.10-mips64r6el-dbg.lintian-overrides deleted file mode 100644 index 391e3a9c75..0000000000 --- a/debian/linux-image-6.9.10-mips64r6el-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-mips64r6el-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-mips64r6el.NEWS b/debian/linux-image-6.9.10-mips64r6el.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-mips64r6el.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-mips64r6el.lintian-overrides b/debian/linux-image-6.9.10-mips64r6el.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-mips64r6el.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-mips64r6el.postinst b/debian/linux-image-6.9.10-mips64r6el.postinst deleted file mode 100644 index 6ddf4c7318..0000000000 --- a/debian/linux-image-6.9.10-mips64r6el.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-mips64r6el -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-mips64r6el.postrm b/debian/linux-image-6.9.10-mips64r6el.postrm deleted file mode 100644 index 6f59ecdaef..0000000000 --- a/debian/linux-image-6.9.10-mips64r6el.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-mips64r6el -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-mips64r6el.preinst b/debian/linux-image-6.9.10-mips64r6el.preinst deleted file mode 100644 index cbc61ca7c5..0000000000 --- a/debian/linux-image-6.9.10-mips64r6el.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-mips64r6el -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-mips64r6el.prerm b/debian/linux-image-6.9.10-mips64r6el.prerm deleted file mode 100644 index 35ac9e878a..0000000000 --- a/debian/linux-image-6.9.10-mips64r6el.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-mips64r6el -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-octeon-dbg.lintian-overrides b/debian/linux-image-6.9.10-octeon-dbg.lintian-overrides deleted file mode 100644 index ed43e942cd..0000000000 --- a/debian/linux-image-6.9.10-octeon-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-octeon-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.10-octeon-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.9.10-octeon.NEWS b/debian/linux-image-6.9.10-octeon.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-octeon.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-octeon.lintian-overrides b/debian/linux-image-6.9.10-octeon.lintian-overrides deleted file mode 100644 index adf5550256..0000000000 --- a/debian/linux-image-6.9.10-octeon.lintian-overrides +++ /dev/null @@ -1,7 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.10-octeon: binary-from-other-architecture *boot/vmlinu* -linux-image-6.9.10-octeon: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. -linux-image-6.9.10-octeon: unstripped-binary-or-object *boot/vmlinu* diff --git a/debian/linux-image-6.9.10-octeon.postinst b/debian/linux-image-6.9.10-octeon.postinst deleted file mode 100644 index 1e3b00d3e6..0000000000 --- a/debian/linux-image-6.9.10-octeon.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-octeon -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-octeon.postrm b/debian/linux-image-6.9.10-octeon.postrm deleted file mode 100644 index cb33c4c96d..0000000000 --- a/debian/linux-image-6.9.10-octeon.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-octeon -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-octeon.preinst b/debian/linux-image-6.9.10-octeon.preinst deleted file mode 100644 index 61bff213c9..0000000000 --- a/debian/linux-image-6.9.10-octeon.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-octeon -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-octeon.prerm b/debian/linux-image-6.9.10-octeon.prerm deleted file mode 100644 index 22d809d0b2..0000000000 --- a/debian/linux-image-6.9.10-octeon.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-octeon -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-parisc-dbg.lintian-overrides b/debian/linux-image-6.9.10-parisc-dbg.lintian-overrides deleted file mode 100644 index 9e03b54b51..0000000000 --- a/debian/linux-image-6.9.10-parisc-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-parisc-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.10-parisc-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.9.10-parisc.NEWS b/debian/linux-image-6.9.10-parisc.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-parisc.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-parisc.lintian-overrides b/debian/linux-image-6.9.10-parisc.lintian-overrides deleted file mode 100644 index d8a4546d1e..0000000000 --- a/debian/linux-image-6.9.10-parisc.lintian-overrides +++ /dev/null @@ -1,5 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.10-parisc: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-parisc.postinst b/debian/linux-image-6.9.10-parisc.postinst deleted file mode 100644 index be9047c874..0000000000 --- a/debian/linux-image-6.9.10-parisc.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-parisc -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-parisc.postrm b/debian/linux-image-6.9.10-parisc.postrm deleted file mode 100644 index d60014d960..0000000000 --- a/debian/linux-image-6.9.10-parisc.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-parisc -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-parisc.preinst b/debian/linux-image-6.9.10-parisc.preinst deleted file mode 100644 index a3e96f5509..0000000000 --- a/debian/linux-image-6.9.10-parisc.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-parisc -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-parisc.prerm b/debian/linux-image-6.9.10-parisc.prerm deleted file mode 100644 index 572ccf2198..0000000000 --- a/debian/linux-image-6.9.10-parisc.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-parisc -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-parisc64-dbg.lintian-overrides b/debian/linux-image-6.9.10-parisc64-dbg.lintian-overrides deleted file mode 100644 index 8b947f9dc4..0000000000 --- a/debian/linux-image-6.9.10-parisc64-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-parisc64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.10-parisc64-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.9.10-parisc64.NEWS b/debian/linux-image-6.9.10-parisc64.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-parisc64.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-parisc64.lintian-overrides b/debian/linux-image-6.9.10-parisc64.lintian-overrides deleted file mode 100644 index 24aa6acf84..0000000000 --- a/debian/linux-image-6.9.10-parisc64.lintian-overrides +++ /dev/null @@ -1,5 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.10-parisc64: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-parisc64.postinst b/debian/linux-image-6.9.10-parisc64.postinst deleted file mode 100644 index af14dc2378..0000000000 --- a/debian/linux-image-6.9.10-parisc64.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-parisc64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-parisc64.postrm b/debian/linux-image-6.9.10-parisc64.postrm deleted file mode 100644 index 7bb67455a0..0000000000 --- a/debian/linux-image-6.9.10-parisc64.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-parisc64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-parisc64.preinst b/debian/linux-image-6.9.10-parisc64.preinst deleted file mode 100644 index e1b622e6e4..0000000000 --- a/debian/linux-image-6.9.10-parisc64.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-parisc64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-parisc64.prerm b/debian/linux-image-6.9.10-parisc64.prerm deleted file mode 100644 index 1f44c9d36d..0000000000 --- a/debian/linux-image-6.9.10-parisc64.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-parisc64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-powerpc-dbg.lintian-overrides b/debian/linux-image-6.9.10-powerpc-dbg.lintian-overrides deleted file mode 100644 index 8956a25fe6..0000000000 --- a/debian/linux-image-6.9.10-powerpc-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-powerpc-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.10-powerpc-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.9.10-powerpc-smp-dbg.lintian-overrides b/debian/linux-image-6.9.10-powerpc-smp-dbg.lintian-overrides deleted file mode 100644 index a8a09f9ac4..0000000000 --- a/debian/linux-image-6.9.10-powerpc-smp-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-powerpc-smp-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.10-powerpc-smp-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.9.10-powerpc-smp.NEWS b/debian/linux-image-6.9.10-powerpc-smp.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-powerpc-smp.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-powerpc-smp.lintian-overrides b/debian/linux-image-6.9.10-powerpc-smp.lintian-overrides deleted file mode 100644 index 9ef6eb6b65..0000000000 --- a/debian/linux-image-6.9.10-powerpc-smp.lintian-overrides +++ /dev/null @@ -1,5 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.10-powerpc-smp: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-powerpc-smp.postinst b/debian/linux-image-6.9.10-powerpc-smp.postinst deleted file mode 100644 index 3c5f43ec93..0000000000 --- a/debian/linux-image-6.9.10-powerpc-smp.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-powerpc-smp -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-powerpc-smp.postrm b/debian/linux-image-6.9.10-powerpc-smp.postrm deleted file mode 100644 index ed65040399..0000000000 --- a/debian/linux-image-6.9.10-powerpc-smp.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-powerpc-smp -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-powerpc-smp.preinst b/debian/linux-image-6.9.10-powerpc-smp.preinst deleted file mode 100644 index 9e046ee810..0000000000 --- a/debian/linux-image-6.9.10-powerpc-smp.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-powerpc-smp -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-powerpc-smp.prerm b/debian/linux-image-6.9.10-powerpc-smp.prerm deleted file mode 100644 index 73906a4419..0000000000 --- a/debian/linux-image-6.9.10-powerpc-smp.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-powerpc-smp -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-powerpc.NEWS b/debian/linux-image-6.9.10-powerpc.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-powerpc.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-powerpc.lintian-overrides b/debian/linux-image-6.9.10-powerpc.lintian-overrides deleted file mode 100644 index f49addd6c2..0000000000 --- a/debian/linux-image-6.9.10-powerpc.lintian-overrides +++ /dev/null @@ -1,5 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.10-powerpc: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-powerpc.postinst b/debian/linux-image-6.9.10-powerpc.postinst deleted file mode 100644 index aa9a3d46f6..0000000000 --- a/debian/linux-image-6.9.10-powerpc.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-powerpc -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-powerpc.postrm b/debian/linux-image-6.9.10-powerpc.postrm deleted file mode 100644 index 4ad1389212..0000000000 --- a/debian/linux-image-6.9.10-powerpc.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-powerpc -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-powerpc.preinst b/debian/linux-image-6.9.10-powerpc.preinst deleted file mode 100644 index a1adcd9a72..0000000000 --- a/debian/linux-image-6.9.10-powerpc.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-powerpc -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-powerpc.prerm b/debian/linux-image-6.9.10-powerpc.prerm deleted file mode 100644 index d1c7d4e062..0000000000 --- a/debian/linux-image-6.9.10-powerpc.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-powerpc -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-powerpc64-dbg.lintian-overrides b/debian/linux-image-6.9.10-powerpc64-dbg.lintian-overrides deleted file mode 100644 index ae64e231f7..0000000000 --- a/debian/linux-image-6.9.10-powerpc64-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-powerpc64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-powerpc64.NEWS b/debian/linux-image-6.9.10-powerpc64.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-powerpc64.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-powerpc64.lintian-overrides b/debian/linux-image-6.9.10-powerpc64.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-powerpc64.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-powerpc64.postinst b/debian/linux-image-6.9.10-powerpc64.postinst deleted file mode 100644 index 3a9e90f166..0000000000 --- a/debian/linux-image-6.9.10-powerpc64.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-powerpc64 -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-powerpc64.postrm b/debian/linux-image-6.9.10-powerpc64.postrm deleted file mode 100644 index 992589c42d..0000000000 --- a/debian/linux-image-6.9.10-powerpc64.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-powerpc64 -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-powerpc64.preinst b/debian/linux-image-6.9.10-powerpc64.preinst deleted file mode 100644 index be3fd9fe0d..0000000000 --- a/debian/linux-image-6.9.10-powerpc64.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-powerpc64 -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-powerpc64.prerm b/debian/linux-image-6.9.10-powerpc64.prerm deleted file mode 100644 index 8452b4b497..0000000000 --- a/debian/linux-image-6.9.10-powerpc64.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-powerpc64 -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-powerpc64le-dbg.lintian-overrides b/debian/linux-image-6.9.10-powerpc64le-dbg.lintian-overrides deleted file mode 100644 index 5c43aca15a..0000000000 --- a/debian/linux-image-6.9.10-powerpc64le-dbg.lintian-overrides +++ /dev/null @@ -1,14 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-powerpc64le-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.10-powerpc64le-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-powerpc64le/vdso/vdso32.so* -linux-image-6.9.10-powerpc64le-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-powerpc64le/vdso/vdso64.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.9.10-powerpc64le-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.9.10-powerpc64le/vdso/vdso32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-powerpc64le.NEWS b/debian/linux-image-6.9.10-powerpc64le.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-powerpc64le.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-powerpc64le.lintian-overrides b/debian/linux-image-6.9.10-powerpc64le.lintian-overrides deleted file mode 100644 index 8feb3b3831..0000000000 --- a/debian/linux-image-6.9.10-powerpc64le.lintian-overrides +++ /dev/null @@ -1,5 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. -linux-image-6.9.10-powerpc64le: unstripped-binary-or-object *boot/vmlinu* diff --git a/debian/linux-image-6.9.10-powerpc64le.postinst b/debian/linux-image-6.9.10-powerpc64le.postinst deleted file mode 100644 index 186577b607..0000000000 --- a/debian/linux-image-6.9.10-powerpc64le.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-powerpc64le -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-powerpc64le.postrm b/debian/linux-image-6.9.10-powerpc64le.postrm deleted file mode 100644 index 4553725adb..0000000000 --- a/debian/linux-image-6.9.10-powerpc64le.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-powerpc64le -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-powerpc64le.preinst b/debian/linux-image-6.9.10-powerpc64le.preinst deleted file mode 100644 index d673a8699a..0000000000 --- a/debian/linux-image-6.9.10-powerpc64le.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-powerpc64le -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-powerpc64le.prerm b/debian/linux-image-6.9.10-powerpc64le.prerm deleted file mode 100644 index 6a0b2e1ecc..0000000000 --- a/debian/linux-image-6.9.10-powerpc64le.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-powerpc64le -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-riscv64-dbg.lintian-overrides b/debian/linux-image-6.9.10-riscv64-dbg.lintian-overrides deleted file mode 100644 index a1b7d3924a..0000000000 --- a/debian/linux-image-6.9.10-riscv64-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-riscv64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-riscv64.NEWS b/debian/linux-image-6.9.10-riscv64.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-riscv64.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-riscv64.lintian-overrides b/debian/linux-image-6.9.10-riscv64.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-riscv64.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-riscv64.postinst b/debian/linux-image-6.9.10-riscv64.postinst deleted file mode 100644 index 7d6cdd4163..0000000000 --- a/debian/linux-image-6.9.10-riscv64.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-riscv64 -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-riscv64.postrm b/debian/linux-image-6.9.10-riscv64.postrm deleted file mode 100644 index 56bd1d23ab..0000000000 --- a/debian/linux-image-6.9.10-riscv64.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-riscv64 -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-riscv64.preinst b/debian/linux-image-6.9.10-riscv64.preinst deleted file mode 100644 index c8e4e5c0a4..0000000000 --- a/debian/linux-image-6.9.10-riscv64.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-riscv64 -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-riscv64.prerm b/debian/linux-image-6.9.10-riscv64.prerm deleted file mode 100644 index 18415987fe..0000000000 --- a/debian/linux-image-6.9.10-riscv64.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-riscv64 -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-rpi-dbg.lintian-overrides b/debian/linux-image-6.9.10-rpi-dbg.lintian-overrides deleted file mode 100644 index aff8f40ab0..0000000000 --- a/debian/linux-image-6.9.10-rpi-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-rpi-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-rpi.NEWS b/debian/linux-image-6.9.10-rpi.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-rpi.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-rpi.lintian-overrides b/debian/linux-image-6.9.10-rpi.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-rpi.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-rpi.postinst b/debian/linux-image-6.9.10-rpi.postinst deleted file mode 100644 index 24c158cec4..0000000000 --- a/debian/linux-image-6.9.10-rpi.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-rpi -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-rpi.postrm b/debian/linux-image-6.9.10-rpi.postrm deleted file mode 100644 index 0ad3251740..0000000000 --- a/debian/linux-image-6.9.10-rpi.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-rpi -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-rpi.preinst b/debian/linux-image-6.9.10-rpi.preinst deleted file mode 100644 index 39d76639c7..0000000000 --- a/debian/linux-image-6.9.10-rpi.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-rpi -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-rpi.prerm b/debian/linux-image-6.9.10-rpi.prerm deleted file mode 100644 index a228fc5502..0000000000 --- a/debian/linux-image-6.9.10-rpi.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-rpi -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-rt-686-pae-dbg.lintian-overrides b/debian/linux-image-6.9.10-rt-686-pae-dbg.lintian-overrides deleted file mode 100644 index c9b9e9feae..0000000000 --- a/debian/linux-image-6.9.10-rt-686-pae-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-rt-686-pae-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.10-rt-686-pae-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-rt-686-pae/vdso/vdso32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-rt-686-pae.NEWS b/debian/linux-image-6.9.10-rt-686-pae.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-rt-686-pae.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-rt-686-pae.lintian-overrides b/debian/linux-image-6.9.10-rt-686-pae.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-rt-686-pae.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-rt-686-pae.postinst b/debian/linux-image-6.9.10-rt-686-pae.postinst deleted file mode 100644 index 8011444e5f..0000000000 --- a/debian/linux-image-6.9.10-rt-686-pae.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-rt-686-pae -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-rt-686-pae.postrm b/debian/linux-image-6.9.10-rt-686-pae.postrm deleted file mode 100644 index 137ee3d77b..0000000000 --- a/debian/linux-image-6.9.10-rt-686-pae.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-rt-686-pae -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-rt-686-pae.preinst b/debian/linux-image-6.9.10-rt-686-pae.preinst deleted file mode 100644 index 1e55a79b7f..0000000000 --- a/debian/linux-image-6.9.10-rt-686-pae.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-rt-686-pae -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-rt-686-pae.prerm b/debian/linux-image-6.9.10-rt-686-pae.prerm deleted file mode 100644 index 1d632a0b4d..0000000000 --- a/debian/linux-image-6.9.10-rt-686-pae.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-rt-686-pae -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-rt-amd64-dbg.lintian-overrides b/debian/linux-image-6.9.10-rt-amd64-dbg.lintian-overrides deleted file mode 100644 index 0f7450ac85..0000000000 --- a/debian/linux-image-6.9.10-rt-amd64-dbg.lintian-overrides +++ /dev/null @@ -1,15 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-rt-amd64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.10-rt-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-rt-amd64/vdso/vdso32.so* -linux-image-6.9.10-rt-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-rt-amd64/vdso/vdso64.so* -linux-image-6.9.10-rt-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-rt-amd64/vdso/vdsox32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.9.10-rt-amd64-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.9.10-rt-amd64/vdso/vdsox32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-rt-amd64-unsigned.NEWS b/debian/linux-image-6.9.10-rt-amd64-unsigned.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-rt-amd64-unsigned.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-rt-amd64-unsigned.lintian-overrides b/debian/linux-image-6.9.10-rt-amd64-unsigned.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-rt-amd64-unsigned.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-rt-amd64-unsigned.postinst b/debian/linux-image-6.9.10-rt-amd64-unsigned.postinst deleted file mode 100644 index 9e3baa64bd..0000000000 --- a/debian/linux-image-6.9.10-rt-amd64-unsigned.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-rt-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-rt-amd64-unsigned.postrm b/debian/linux-image-6.9.10-rt-amd64-unsigned.postrm deleted file mode 100644 index b56c720179..0000000000 --- a/debian/linux-image-6.9.10-rt-amd64-unsigned.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-rt-amd64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-rt-amd64-unsigned.preinst b/debian/linux-image-6.9.10-rt-amd64-unsigned.preinst deleted file mode 100644 index e218b7a225..0000000000 --- a/debian/linux-image-6.9.10-rt-amd64-unsigned.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-rt-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-rt-amd64-unsigned.prerm b/debian/linux-image-6.9.10-rt-amd64-unsigned.prerm deleted file mode 100644 index 165e972c51..0000000000 --- a/debian/linux-image-6.9.10-rt-amd64-unsigned.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-rt-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-rt-arm64-dbg.lintian-overrides b/debian/linux-image-6.9.10-rt-arm64-dbg.lintian-overrides deleted file mode 100644 index f923382054..0000000000 --- a/debian/linux-image-6.9.10-rt-arm64-dbg.lintian-overrides +++ /dev/null @@ -1,14 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-rt-arm64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.10-rt-arm64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-rt-arm64/vdso/vdso.so* -linux-image-6.9.10-rt-arm64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-rt-arm64/vdso/vdso32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.9.10-rt-arm64-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.9.10-rt-arm64/vdso/vdso32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-rt-arm64-unsigned.NEWS b/debian/linux-image-6.9.10-rt-arm64-unsigned.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-rt-arm64-unsigned.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-rt-arm64-unsigned.lintian-overrides b/debian/linux-image-6.9.10-rt-arm64-unsigned.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-rt-arm64-unsigned.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-rt-arm64-unsigned.postinst b/debian/linux-image-6.9.10-rt-arm64-unsigned.postinst deleted file mode 100644 index b1ede98e56..0000000000 --- a/debian/linux-image-6.9.10-rt-arm64-unsigned.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-rt-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-rt-arm64-unsigned.postrm b/debian/linux-image-6.9.10-rt-arm64-unsigned.postrm deleted file mode 100644 index 506821bb50..0000000000 --- a/debian/linux-image-6.9.10-rt-arm64-unsigned.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-rt-arm64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-rt-arm64-unsigned.preinst b/debian/linux-image-6.9.10-rt-arm64-unsigned.preinst deleted file mode 100644 index 2294f4ebac..0000000000 --- a/debian/linux-image-6.9.10-rt-arm64-unsigned.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-rt-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-rt-arm64-unsigned.prerm b/debian/linux-image-6.9.10-rt-arm64-unsigned.prerm deleted file mode 100644 index 44e51f5200..0000000000 --- a/debian/linux-image-6.9.10-rt-arm64-unsigned.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-rt-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-rt-armmp-dbg.lintian-overrides b/debian/linux-image-6.9.10-rt-armmp-dbg.lintian-overrides deleted file mode 100644 index e5705c1bc3..0000000000 --- a/debian/linux-image-6.9.10-rt-armmp-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-rt-armmp-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.10-rt-armmp-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-rt-armmp/vdso/vdso.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-rt-armmp.NEWS b/debian/linux-image-6.9.10-rt-armmp.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-rt-armmp.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-rt-armmp.lintian-overrides b/debian/linux-image-6.9.10-rt-armmp.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-rt-armmp.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-rt-armmp.postinst b/debian/linux-image-6.9.10-rt-armmp.postinst deleted file mode 100644 index 5283b469f1..0000000000 --- a/debian/linux-image-6.9.10-rt-armmp.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-rt-armmp -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-rt-armmp.postrm b/debian/linux-image-6.9.10-rt-armmp.postrm deleted file mode 100644 index c2b3a36273..0000000000 --- a/debian/linux-image-6.9.10-rt-armmp.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-rt-armmp -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-rt-armmp.preinst b/debian/linux-image-6.9.10-rt-armmp.preinst deleted file mode 100644 index 3c75ec1c66..0000000000 --- a/debian/linux-image-6.9.10-rt-armmp.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-rt-armmp -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-rt-armmp.prerm b/debian/linux-image-6.9.10-rt-armmp.prerm deleted file mode 100644 index 5885f0d94f..0000000000 --- a/debian/linux-image-6.9.10-rt-armmp.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-rt-armmp -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-s390x-dbg.lintian-overrides b/debian/linux-image-6.9.10-s390x-dbg.lintian-overrides deleted file mode 100644 index 611686d09e..0000000000 --- a/debian/linux-image-6.9.10-s390x-dbg.lintian-overrides +++ /dev/null @@ -1,14 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-s390x-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.10-s390x-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-s390x/vdso/vdso32.so* -linux-image-6.9.10-s390x-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.10-s390x/vdso/vdso64.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.9.10-s390x-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.9.10-s390x/vdso/vdso32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-s390x.NEWS b/debian/linux-image-6.9.10-s390x.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-s390x.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-s390x.lintian-overrides b/debian/linux-image-6.9.10-s390x.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-s390x.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-s390x.postinst b/debian/linux-image-6.9.10-s390x.postinst deleted file mode 100644 index 2561e56abe..0000000000 --- a/debian/linux-image-6.9.10-s390x.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-s390x -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-s390x.postrm b/debian/linux-image-6.9.10-s390x.postrm deleted file mode 100644 index d9fd760888..0000000000 --- a/debian/linux-image-6.9.10-s390x.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-s390x -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-s390x.preinst b/debian/linux-image-6.9.10-s390x.preinst deleted file mode 100644 index e8839bbeba..0000000000 --- a/debian/linux-image-6.9.10-s390x.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-s390x -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-s390x.prerm b/debian/linux-image-6.9.10-s390x.prerm deleted file mode 100644 index faed79e449..0000000000 --- a/debian/linux-image-6.9.10-s390x.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-s390x -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-sh7751r-dbg.lintian-overrides b/debian/linux-image-6.9.10-sh7751r-dbg.lintian-overrides deleted file mode 100644 index fe7aa8fe84..0000000000 --- a/debian/linux-image-6.9.10-sh7751r-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-sh7751r-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-sh7751r.NEWS b/debian/linux-image-6.9.10-sh7751r.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-sh7751r.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-sh7751r.lintian-overrides b/debian/linux-image-6.9.10-sh7751r.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-sh7751r.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-sh7751r.postinst b/debian/linux-image-6.9.10-sh7751r.postinst deleted file mode 100644 index 598c6d825e..0000000000 --- a/debian/linux-image-6.9.10-sh7751r.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-sh7751r -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-sh7751r.postrm b/debian/linux-image-6.9.10-sh7751r.postrm deleted file mode 100644 index c8bb61649e..0000000000 --- a/debian/linux-image-6.9.10-sh7751r.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-sh7751r -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-sh7751r.preinst b/debian/linux-image-6.9.10-sh7751r.preinst deleted file mode 100644 index 4fba44f19d..0000000000 --- a/debian/linux-image-6.9.10-sh7751r.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-sh7751r -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-sh7751r.prerm b/debian/linux-image-6.9.10-sh7751r.prerm deleted file mode 100644 index 9b9f205178..0000000000 --- a/debian/linux-image-6.9.10-sh7751r.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-sh7751r -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-sh7785lcr-dbg.lintian-overrides b/debian/linux-image-6.9.10-sh7785lcr-dbg.lintian-overrides deleted file mode 100644 index 1a75808175..0000000000 --- a/debian/linux-image-6.9.10-sh7785lcr-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-sh7785lcr-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-sh7785lcr.NEWS b/debian/linux-image-6.9.10-sh7785lcr.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-sh7785lcr.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-sh7785lcr.lintian-overrides b/debian/linux-image-6.9.10-sh7785lcr.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-sh7785lcr.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-sh7785lcr.postinst b/debian/linux-image-6.9.10-sh7785lcr.postinst deleted file mode 100644 index 221513adde..0000000000 --- a/debian/linux-image-6.9.10-sh7785lcr.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-sh7785lcr -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-sh7785lcr.postrm b/debian/linux-image-6.9.10-sh7785lcr.postrm deleted file mode 100644 index 148df54e9c..0000000000 --- a/debian/linux-image-6.9.10-sh7785lcr.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-sh7785lcr -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-sh7785lcr.preinst b/debian/linux-image-6.9.10-sh7785lcr.preinst deleted file mode 100644 index 53e7fc6d26..0000000000 --- a/debian/linux-image-6.9.10-sh7785lcr.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-sh7785lcr -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-sh7785lcr.prerm b/debian/linux-image-6.9.10-sh7785lcr.prerm deleted file mode 100644 index e726240868..0000000000 --- a/debian/linux-image-6.9.10-sh7785lcr.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-sh7785lcr -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-sparc64-dbg.lintian-overrides b/debian/linux-image-6.9.10-sparc64-dbg.lintian-overrides deleted file mode 100644 index 9fd025c245..0000000000 --- a/debian/linux-image-6.9.10-sparc64-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-sparc64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-sparc64-smp-dbg.lintian-overrides b/debian/linux-image-6.9.10-sparc64-smp-dbg.lintian-overrides deleted file mode 100644 index 0060fa3090..0000000000 --- a/debian/linux-image-6.9.10-sparc64-smp-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.10-sparc64-smp-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.10-sparc64-smp.NEWS b/debian/linux-image-6.9.10-sparc64-smp.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-sparc64-smp.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-sparc64-smp.lintian-overrides b/debian/linux-image-6.9.10-sparc64-smp.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-sparc64-smp.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-sparc64-smp.postinst b/debian/linux-image-6.9.10-sparc64-smp.postinst deleted file mode 100644 index 08231800a4..0000000000 --- a/debian/linux-image-6.9.10-sparc64-smp.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-sparc64-smp -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-sparc64-smp.postrm b/debian/linux-image-6.9.10-sparc64-smp.postrm deleted file mode 100644 index ef3743bc2f..0000000000 --- a/debian/linux-image-6.9.10-sparc64-smp.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-sparc64-smp -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-sparc64-smp.preinst b/debian/linux-image-6.9.10-sparc64-smp.preinst deleted file mode 100644 index 3aa62afe54..0000000000 --- a/debian/linux-image-6.9.10-sparc64-smp.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-sparc64-smp -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-sparc64-smp.prerm b/debian/linux-image-6.9.10-sparc64-smp.prerm deleted file mode 100644 index 1437a9a6d8..0000000000 --- a/debian/linux-image-6.9.10-sparc64-smp.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-sparc64-smp -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-sparc64.NEWS b/debian/linux-image-6.9.10-sparc64.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.10-sparc64.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.10-sparc64.lintian-overrides b/debian/linux-image-6.9.10-sparc64.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.10-sparc64.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.10-sparc64.postinst b/debian/linux-image-6.9.10-sparc64.postinst deleted file mode 100644 index ad1e7b2b7b..0000000000 --- a/debian/linux-image-6.9.10-sparc64.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-sparc64 -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-sparc64.postrm b/debian/linux-image-6.9.10-sparc64.postrm deleted file mode 100644 index b4a3c1250f..0000000000 --- a/debian/linux-image-6.9.10-sparc64.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-sparc64 -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-sparc64.preinst b/debian/linux-image-6.9.10-sparc64.preinst deleted file mode 100644 index 602d301ecd..0000000000 --- a/debian/linux-image-6.9.10-sparc64.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-sparc64 -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.10-sparc64.prerm b/debian/linux-image-6.9.10-sparc64.prerm deleted file mode 100644 index 31a26ee471..0000000000 --- a/debian/linux-image-6.9.10-sparc64.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.10-sparc64 -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-686-dbg.lintian-overrides b/debian/linux-image-686-dbg.lintian-overrides deleted file mode 100644 index 6eca372900..0000000000 --- a/debian/linux-image-686-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-686-dbg: wrong-section-according-to-package-name linux-image-686-dbg => debug diff --git a/debian/linux-image-686-dbg.maintscript b/debian/linux-image-686-dbg.maintscript deleted file mode 100644 index 09ea83f4a7..0000000000 --- a/debian/linux-image-686-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-686-dbg linux-image-6.9.10-686-dbg 5.7~rc5-1~exp1 linux-image-686-dbg diff --git a/debian/linux-image-686-pae-dbg.lintian-overrides b/debian/linux-image-686-pae-dbg.lintian-overrides deleted file mode 100644 index 9f3bbc4d73..0000000000 --- a/debian/linux-image-686-pae-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-686-pae-dbg: wrong-section-according-to-package-name linux-image-686-pae-dbg => debug diff --git a/debian/linux-image-686-pae-dbg.maintscript b/debian/linux-image-686-pae-dbg.maintscript deleted file mode 100644 index 0b78882afe..0000000000 --- a/debian/linux-image-686-pae-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-686-pae-dbg linux-image-6.9.10-686-pae-dbg 5.7~rc5-1~exp1 linux-image-686-pae-dbg diff --git a/debian/linux-image-686-pae.bug-presubj b/debian/linux-image-686-pae.bug-presubj deleted file mode 100644 index b5ebcd6f0f..0000000000 --- a/debian/linux-image-686-pae.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-686-pae instead. diff --git a/debian/linux-image-686-pae.maintscript b/debian/linux-image-686-pae.maintscript deleted file mode 100644 index 2664018726..0000000000 --- a/debian/linux-image-686-pae.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-686-pae linux-image-6.9.10-686-pae 5.7~rc5-1~exp1 linux-image-686-pae diff --git a/debian/linux-image-686.bug-presubj b/debian/linux-image-686.bug-presubj deleted file mode 100644 index 7ce2d31888..0000000000 --- a/debian/linux-image-686.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-686 instead. diff --git a/debian/linux-image-686.maintscript b/debian/linux-image-686.maintscript deleted file mode 100644 index a0ebe24a12..0000000000 --- a/debian/linux-image-686.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-686 linux-image-6.9.10-686 5.7~rc5-1~exp1 linux-image-686 diff --git a/debian/linux-image-alpha-generic-dbg.lintian-overrides b/debian/linux-image-alpha-generic-dbg.lintian-overrides deleted file mode 100644 index 0be8eb809c..0000000000 --- a/debian/linux-image-alpha-generic-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-alpha-generic-dbg: wrong-section-according-to-package-name linux-image-alpha-generic-dbg => debug diff --git a/debian/linux-image-alpha-generic-dbg.maintscript b/debian/linux-image-alpha-generic-dbg.maintscript deleted file mode 100644 index 522eb68f94..0000000000 --- a/debian/linux-image-alpha-generic-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-alpha-generic-dbg linux-image-6.9.10-alpha-generic-dbg 5.7~rc5-1~exp1 linux-image-alpha-generic-dbg diff --git a/debian/linux-image-alpha-generic.bug-presubj b/debian/linux-image-alpha-generic.bug-presubj deleted file mode 100644 index 5ba2a89451..0000000000 --- a/debian/linux-image-alpha-generic.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-alpha-generic instead. diff --git a/debian/linux-image-alpha-generic.maintscript b/debian/linux-image-alpha-generic.maintscript deleted file mode 100644 index 4364a4e661..0000000000 --- a/debian/linux-image-alpha-generic.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-alpha-generic linux-image-6.9.10-alpha-generic 5.7~rc5-1~exp1 linux-image-alpha-generic diff --git a/debian/linux-image-alpha-smp-dbg.lintian-overrides b/debian/linux-image-alpha-smp-dbg.lintian-overrides deleted file mode 100644 index 431034ce7b..0000000000 --- a/debian/linux-image-alpha-smp-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-alpha-smp-dbg: wrong-section-according-to-package-name linux-image-alpha-smp-dbg => debug diff --git a/debian/linux-image-alpha-smp-dbg.maintscript b/debian/linux-image-alpha-smp-dbg.maintscript deleted file mode 100644 index 5de98df8e4..0000000000 --- a/debian/linux-image-alpha-smp-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-alpha-smp-dbg linux-image-6.9.10-alpha-smp-dbg 5.7~rc5-1~exp1 linux-image-alpha-smp-dbg diff --git a/debian/linux-image-alpha-smp.bug-presubj b/debian/linux-image-alpha-smp.bug-presubj deleted file mode 100644 index 972bcf755f..0000000000 --- a/debian/linux-image-alpha-smp.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-alpha-smp instead. diff --git a/debian/linux-image-alpha-smp.maintscript b/debian/linux-image-alpha-smp.maintscript deleted file mode 100644 index 0cdd332579..0000000000 --- a/debian/linux-image-alpha-smp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-alpha-smp linux-image-6.9.10-alpha-smp 5.7~rc5-1~exp1 linux-image-alpha-smp diff --git a/debian/linux-image-amd64-dbg.lintian-overrides b/debian/linux-image-amd64-dbg.lintian-overrides deleted file mode 100644 index 55f46093d7..0000000000 --- a/debian/linux-image-amd64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-amd64-dbg: wrong-section-according-to-package-name linux-image-amd64-dbg => debug diff --git a/debian/linux-image-amd64-dbg.maintscript b/debian/linux-image-amd64-dbg.maintscript deleted file mode 100644 index 2e60b53418..0000000000 --- a/debian/linux-image-amd64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-amd64-dbg linux-image-6.9.10-amd64-dbg 5.7~rc5-1~exp1 linux-image-amd64-dbg diff --git a/debian/linux-image-amd64-signed-template.lintian-overrides b/debian/linux-image-amd64-signed-template.lintian-overrides deleted file mode 100644 index 40dfd024a0..0000000000 --- a/debian/linux-image-amd64-signed-template.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-amd64-signed-template: script-not-executable diff --git a/debian/linux-image-arm64-dbg.lintian-overrides b/debian/linux-image-arm64-dbg.lintian-overrides deleted file mode 100644 index 56b0496404..0000000000 --- a/debian/linux-image-arm64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-arm64-dbg: wrong-section-according-to-package-name linux-image-arm64-dbg => debug diff --git a/debian/linux-image-arm64-dbg.maintscript b/debian/linux-image-arm64-dbg.maintscript deleted file mode 100644 index c7e0156b49..0000000000 --- a/debian/linux-image-arm64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-arm64-dbg linux-image-6.9.10-arm64-dbg 5.7~rc5-1~exp1 linux-image-arm64-dbg diff --git a/debian/linux-image-arm64-signed-template.lintian-overrides b/debian/linux-image-arm64-signed-template.lintian-overrides deleted file mode 100644 index a0dfc1afbf..0000000000 --- a/debian/linux-image-arm64-signed-template.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-arm64-signed-template: script-not-executable diff --git a/debian/linux-image-armmp-dbg.lintian-overrides b/debian/linux-image-armmp-dbg.lintian-overrides deleted file mode 100644 index 02d39145b8..0000000000 --- a/debian/linux-image-armmp-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-armmp-dbg: wrong-section-according-to-package-name linux-image-armmp-dbg => debug diff --git a/debian/linux-image-armmp-dbg.maintscript b/debian/linux-image-armmp-dbg.maintscript deleted file mode 100644 index 3d406b47b9..0000000000 --- a/debian/linux-image-armmp-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-armmp-dbg linux-image-6.9.10-armmp-dbg 5.7~rc5-1~exp1 linux-image-armmp-dbg diff --git a/debian/linux-image-armmp-lpae-dbg.lintian-overrides b/debian/linux-image-armmp-lpae-dbg.lintian-overrides deleted file mode 100644 index eff6548d15..0000000000 --- a/debian/linux-image-armmp-lpae-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-armmp-lpae-dbg: wrong-section-according-to-package-name linux-image-armmp-lpae-dbg => debug diff --git a/debian/linux-image-armmp-lpae-dbg.maintscript b/debian/linux-image-armmp-lpae-dbg.maintscript deleted file mode 100644 index 743d320dcc..0000000000 --- a/debian/linux-image-armmp-lpae-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-armmp-lpae-dbg linux-image-6.9.10-armmp-lpae-dbg 5.7~rc5-1~exp1 linux-image-armmp-lpae-dbg diff --git a/debian/linux-image-armmp-lpae.bug-presubj b/debian/linux-image-armmp-lpae.bug-presubj deleted file mode 100644 index 492b08e834..0000000000 --- a/debian/linux-image-armmp-lpae.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-armmp-lpae instead. diff --git a/debian/linux-image-armmp-lpae.maintscript b/debian/linux-image-armmp-lpae.maintscript deleted file mode 100644 index a47bfe3c33..0000000000 --- a/debian/linux-image-armmp-lpae.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-armmp-lpae linux-image-6.9.10-armmp-lpae 5.7~rc5-1~exp1 linux-image-armmp-lpae diff --git a/debian/linux-image-armmp.bug-presubj b/debian/linux-image-armmp.bug-presubj deleted file mode 100644 index 8090da2328..0000000000 --- a/debian/linux-image-armmp.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-armmp instead. diff --git a/debian/linux-image-armmp.maintscript b/debian/linux-image-armmp.maintscript deleted file mode 100644 index 36850f4090..0000000000 --- a/debian/linux-image-armmp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-armmp linux-image-6.9.10-armmp 5.7~rc5-1~exp1 linux-image-armmp diff --git a/debian/linux-image-cloud-amd64-dbg.lintian-overrides b/debian/linux-image-cloud-amd64-dbg.lintian-overrides deleted file mode 100644 index be5093962f..0000000000 --- a/debian/linux-image-cloud-amd64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-cloud-amd64-dbg: wrong-section-according-to-package-name linux-image-cloud-amd64-dbg => debug diff --git a/debian/linux-image-cloud-amd64-dbg.maintscript b/debian/linux-image-cloud-amd64-dbg.maintscript deleted file mode 100644 index f64011a39a..0000000000 --- a/debian/linux-image-cloud-amd64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-cloud-amd64-dbg linux-image-6.9.10-cloud-amd64-dbg 5.7~rc5-1~exp1 linux-image-cloud-amd64-dbg diff --git a/debian/linux-image-cloud-arm64-dbg.lintian-overrides b/debian/linux-image-cloud-arm64-dbg.lintian-overrides deleted file mode 100644 index 311868dd3c..0000000000 --- a/debian/linux-image-cloud-arm64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-cloud-arm64-dbg: wrong-section-according-to-package-name linux-image-cloud-arm64-dbg => debug diff --git a/debian/linux-image-cloud-arm64-dbg.maintscript b/debian/linux-image-cloud-arm64-dbg.maintscript deleted file mode 100644 index 6c08ce6a86..0000000000 --- a/debian/linux-image-cloud-arm64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-cloud-arm64-dbg linux-image-6.9.10-cloud-arm64-dbg 5.7~rc5-1~exp1 linux-image-cloud-arm64-dbg diff --git a/debian/linux-image-loong64-dbg.lintian-overrides b/debian/linux-image-loong64-dbg.lintian-overrides deleted file mode 100644 index 7b5b9c8cfa..0000000000 --- a/debian/linux-image-loong64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-loong64-dbg: wrong-section-according-to-package-name linux-image-loong64-dbg => debug diff --git a/debian/linux-image-loong64-dbg.maintscript b/debian/linux-image-loong64-dbg.maintscript deleted file mode 100644 index 2e2003fabc..0000000000 --- a/debian/linux-image-loong64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-loong64-dbg linux-image-6.9.10-loong64-dbg 5.7~rc5-1~exp1 linux-image-loong64-dbg diff --git a/debian/linux-image-loong64.bug-presubj b/debian/linux-image-loong64.bug-presubj deleted file mode 100644 index 202b4e5492..0000000000 --- a/debian/linux-image-loong64.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-loong64 instead. diff --git a/debian/linux-image-loong64.maintscript b/debian/linux-image-loong64.maintscript deleted file mode 100644 index 57cf596190..0000000000 --- a/debian/linux-image-loong64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-loong64 linux-image-6.9.10-loong64 5.7~rc5-1~exp1 linux-image-loong64 diff --git a/debian/linux-image-loongson-3-dbg.lintian-overrides b/debian/linux-image-loongson-3-dbg.lintian-overrides deleted file mode 100644 index 182111a3c3..0000000000 --- a/debian/linux-image-loongson-3-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-loongson-3-dbg: wrong-section-according-to-package-name linux-image-loongson-3-dbg => debug diff --git a/debian/linux-image-loongson-3-dbg.maintscript b/debian/linux-image-loongson-3-dbg.maintscript deleted file mode 100644 index 25d62aa697..0000000000 --- a/debian/linux-image-loongson-3-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-loongson-3-dbg linux-image-6.9.10-loongson-3-dbg 5.7~rc5-1~exp1 linux-image-loongson-3-dbg diff --git a/debian/linux-image-loongson-3.bug-presubj b/debian/linux-image-loongson-3.bug-presubj deleted file mode 100644 index 18d40aebf3..0000000000 --- a/debian/linux-image-loongson-3.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-loongson-3 instead. diff --git a/debian/linux-image-loongson-3.maintscript b/debian/linux-image-loongson-3.maintscript deleted file mode 100644 index 606e6292e2..0000000000 --- a/debian/linux-image-loongson-3.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-loongson-3 linux-image-6.9.10-loongson-3 5.7~rc5-1~exp1 linux-image-loongson-3 diff --git a/debian/linux-image-m68k-dbg.lintian-overrides b/debian/linux-image-m68k-dbg.lintian-overrides deleted file mode 100644 index 5a8721293b..0000000000 --- a/debian/linux-image-m68k-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-m68k-dbg: wrong-section-according-to-package-name linux-image-m68k-dbg => debug diff --git a/debian/linux-image-m68k-dbg.maintscript b/debian/linux-image-m68k-dbg.maintscript deleted file mode 100644 index e5a1732604..0000000000 --- a/debian/linux-image-m68k-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-m68k-dbg linux-image-6.9.10-m68k-dbg 5.7~rc5-1~exp1 linux-image-m68k-dbg diff --git a/debian/linux-image-m68k.bug-presubj b/debian/linux-image-m68k.bug-presubj deleted file mode 100644 index 7aab178bb2..0000000000 --- a/debian/linux-image-m68k.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-m68k instead. diff --git a/debian/linux-image-m68k.maintscript b/debian/linux-image-m68k.maintscript deleted file mode 100644 index 46597230e6..0000000000 --- a/debian/linux-image-m68k.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-m68k linux-image-6.9.10-m68k 5.7~rc5-1~exp1 linux-image-m68k diff --git a/debian/linux-image-mips32r2eb-dbg.lintian-overrides b/debian/linux-image-mips32r2eb-dbg.lintian-overrides deleted file mode 100644 index df2810cbeb..0000000000 --- a/debian/linux-image-mips32r2eb-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-mips32r2eb-dbg: wrong-section-according-to-package-name linux-image-mips32r2eb-dbg => debug diff --git a/debian/linux-image-mips32r2eb-dbg.maintscript b/debian/linux-image-mips32r2eb-dbg.maintscript deleted file mode 100644 index 12481e8054..0000000000 --- a/debian/linux-image-mips32r2eb-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips32r2eb-dbg linux-image-6.9.10-mips32r2eb-dbg 5.7~rc5-1~exp1 linux-image-mips32r2eb-dbg diff --git a/debian/linux-image-mips32r2eb.bug-presubj b/debian/linux-image-mips32r2eb.bug-presubj deleted file mode 100644 index a957863488..0000000000 --- a/debian/linux-image-mips32r2eb.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-mips32r2eb instead. diff --git a/debian/linux-image-mips32r2eb.maintscript b/debian/linux-image-mips32r2eb.maintscript deleted file mode 100644 index bf8e303973..0000000000 --- a/debian/linux-image-mips32r2eb.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips32r2eb linux-image-6.9.10-mips32r2eb 5.7~rc5-1~exp1 linux-image-mips32r2eb diff --git a/debian/linux-image-mips32r2el-dbg.lintian-overrides b/debian/linux-image-mips32r2el-dbg.lintian-overrides deleted file mode 100644 index 8e900ef46c..0000000000 --- a/debian/linux-image-mips32r2el-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-mips32r2el-dbg: wrong-section-according-to-package-name linux-image-mips32r2el-dbg => debug diff --git a/debian/linux-image-mips32r2el-dbg.maintscript b/debian/linux-image-mips32r2el-dbg.maintscript deleted file mode 100644 index 713e2de0c7..0000000000 --- a/debian/linux-image-mips32r2el-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips32r2el-dbg linux-image-6.9.10-mips32r2el-dbg 5.7~rc5-1~exp1 linux-image-mips32r2el-dbg diff --git a/debian/linux-image-mips32r2el.bug-presubj b/debian/linux-image-mips32r2el.bug-presubj deleted file mode 100644 index 04a011fd04..0000000000 --- a/debian/linux-image-mips32r2el.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-mips32r2el instead. diff --git a/debian/linux-image-mips32r2el.maintscript b/debian/linux-image-mips32r2el.maintscript deleted file mode 100644 index edf52ad859..0000000000 --- a/debian/linux-image-mips32r2el.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips32r2el linux-image-6.9.10-mips32r2el 5.7~rc5-1~exp1 linux-image-mips32r2el diff --git a/debian/linux-image-mips64r2eb-dbg.lintian-overrides b/debian/linux-image-mips64r2eb-dbg.lintian-overrides deleted file mode 100644 index f8497a57e3..0000000000 --- a/debian/linux-image-mips64r2eb-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-mips64r2eb-dbg: wrong-section-according-to-package-name linux-image-mips64r2eb-dbg => debug diff --git a/debian/linux-image-mips64r2eb-dbg.maintscript b/debian/linux-image-mips64r2eb-dbg.maintscript deleted file mode 100644 index 48462b946d..0000000000 --- a/debian/linux-image-mips64r2eb-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips64r2eb-dbg linux-image-6.9.10-mips64r2eb-dbg 5.7~rc5-1~exp1 linux-image-mips64r2eb-dbg diff --git a/debian/linux-image-mips64r2eb.bug-presubj b/debian/linux-image-mips64r2eb.bug-presubj deleted file mode 100644 index d9a9ad095a..0000000000 --- a/debian/linux-image-mips64r2eb.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-mips64r2eb instead. diff --git a/debian/linux-image-mips64r2eb.maintscript b/debian/linux-image-mips64r2eb.maintscript deleted file mode 100644 index 943b0f106b..0000000000 --- a/debian/linux-image-mips64r2eb.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips64r2eb linux-image-6.9.10-mips64r2eb 5.7~rc5-1~exp1 linux-image-mips64r2eb diff --git a/debian/linux-image-mips64r2el-dbg.lintian-overrides b/debian/linux-image-mips64r2el-dbg.lintian-overrides deleted file mode 100644 index 239bf48e05..0000000000 --- a/debian/linux-image-mips64r2el-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-mips64r2el-dbg: wrong-section-according-to-package-name linux-image-mips64r2el-dbg => debug diff --git a/debian/linux-image-mips64r2el-dbg.maintscript b/debian/linux-image-mips64r2el-dbg.maintscript deleted file mode 100644 index 02e5feed26..0000000000 --- a/debian/linux-image-mips64r2el-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips64r2el-dbg linux-image-6.9.10-mips64r2el-dbg 5.7~rc5-1~exp1 linux-image-mips64r2el-dbg diff --git a/debian/linux-image-mips64r2el.bug-presubj b/debian/linux-image-mips64r2el.bug-presubj deleted file mode 100644 index 251390cbe9..0000000000 --- a/debian/linux-image-mips64r2el.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-mips64r2el instead. diff --git a/debian/linux-image-mips64r2el.maintscript b/debian/linux-image-mips64r2el.maintscript deleted file mode 100644 index 23e41bd268..0000000000 --- a/debian/linux-image-mips64r2el.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips64r2el linux-image-6.9.10-mips64r2el 5.7~rc5-1~exp1 linux-image-mips64r2el diff --git a/debian/linux-image-mips64r6el-dbg.lintian-overrides b/debian/linux-image-mips64r6el-dbg.lintian-overrides deleted file mode 100644 index 844b823001..0000000000 --- a/debian/linux-image-mips64r6el-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-mips64r6el-dbg: wrong-section-according-to-package-name linux-image-mips64r6el-dbg => debug diff --git a/debian/linux-image-mips64r6el-dbg.maintscript b/debian/linux-image-mips64r6el-dbg.maintscript deleted file mode 100644 index 432abb6e2f..0000000000 --- a/debian/linux-image-mips64r6el-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips64r6el-dbg linux-image-6.9.10-mips64r6el-dbg 5.7~rc5-1~exp1 linux-image-mips64r6el-dbg diff --git a/debian/linux-image-mips64r6el.bug-presubj b/debian/linux-image-mips64r6el.bug-presubj deleted file mode 100644 index cb3a3aec35..0000000000 --- a/debian/linux-image-mips64r6el.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-mips64r6el instead. diff --git a/debian/linux-image-mips64r6el.maintscript b/debian/linux-image-mips64r6el.maintscript deleted file mode 100644 index 478884395b..0000000000 --- a/debian/linux-image-mips64r6el.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips64r6el linux-image-6.9.10-mips64r6el 5.7~rc5-1~exp1 linux-image-mips64r6el diff --git a/debian/linux-image-octeon-dbg.lintian-overrides b/debian/linux-image-octeon-dbg.lintian-overrides deleted file mode 100644 index f52812a09f..0000000000 --- a/debian/linux-image-octeon-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-octeon-dbg: wrong-section-according-to-package-name linux-image-octeon-dbg => debug diff --git a/debian/linux-image-octeon-dbg.maintscript b/debian/linux-image-octeon-dbg.maintscript deleted file mode 100644 index 6f70e08f0e..0000000000 --- a/debian/linux-image-octeon-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-octeon-dbg linux-image-6.9.10-octeon-dbg 5.7~rc5-1~exp1 linux-image-octeon-dbg diff --git a/debian/linux-image-octeon.bug-presubj b/debian/linux-image-octeon.bug-presubj deleted file mode 100644 index 0ef38ed7fb..0000000000 --- a/debian/linux-image-octeon.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-octeon instead. diff --git a/debian/linux-image-octeon.maintscript b/debian/linux-image-octeon.maintscript deleted file mode 100644 index 0413b527b2..0000000000 --- a/debian/linux-image-octeon.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-octeon linux-image-6.9.10-octeon 5.7~rc5-1~exp1 linux-image-octeon diff --git a/debian/linux-image-parisc-dbg.lintian-overrides b/debian/linux-image-parisc-dbg.lintian-overrides deleted file mode 100644 index c5be26d852..0000000000 --- a/debian/linux-image-parisc-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-parisc-dbg: wrong-section-according-to-package-name linux-image-parisc-dbg => debug diff --git a/debian/linux-image-parisc-dbg.maintscript b/debian/linux-image-parisc-dbg.maintscript deleted file mode 100644 index 29929fa572..0000000000 --- a/debian/linux-image-parisc-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-parisc-dbg linux-image-6.9.10-parisc-dbg 5.7~rc5-1~exp1 linux-image-parisc-dbg diff --git a/debian/linux-image-parisc.bug-presubj b/debian/linux-image-parisc.bug-presubj deleted file mode 100644 index d89c59de34..0000000000 --- a/debian/linux-image-parisc.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-parisc instead. diff --git a/debian/linux-image-parisc.maintscript b/debian/linux-image-parisc.maintscript deleted file mode 100644 index a043bfcc49..0000000000 --- a/debian/linux-image-parisc.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-parisc linux-image-6.9.10-parisc 5.7~rc5-1~exp1 linux-image-parisc diff --git a/debian/linux-image-parisc64-dbg.lintian-overrides b/debian/linux-image-parisc64-dbg.lintian-overrides deleted file mode 100644 index 3736baec71..0000000000 --- a/debian/linux-image-parisc64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-parisc64-dbg: wrong-section-according-to-package-name linux-image-parisc64-dbg => debug diff --git a/debian/linux-image-parisc64-dbg.maintscript b/debian/linux-image-parisc64-dbg.maintscript deleted file mode 100644 index 0c227a8411..0000000000 --- a/debian/linux-image-parisc64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-parisc64-dbg linux-image-6.9.10-parisc64-dbg 5.7~rc5-1~exp1 linux-image-parisc64-dbg diff --git a/debian/linux-image-parisc64.bug-presubj b/debian/linux-image-parisc64.bug-presubj deleted file mode 100644 index a624bb25c0..0000000000 --- a/debian/linux-image-parisc64.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-parisc64 instead. diff --git a/debian/linux-image-parisc64.maintscript b/debian/linux-image-parisc64.maintscript deleted file mode 100644 index 2ee95071d4..0000000000 --- a/debian/linux-image-parisc64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-parisc64 linux-image-6.9.10-parisc64 5.7~rc5-1~exp1 linux-image-parisc64 diff --git a/debian/linux-image-powerpc-dbg.lintian-overrides b/debian/linux-image-powerpc-dbg.lintian-overrides deleted file mode 100644 index 4075b8b6b7..0000000000 --- a/debian/linux-image-powerpc-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-powerpc-dbg: wrong-section-according-to-package-name linux-image-powerpc-dbg => debug diff --git a/debian/linux-image-powerpc-dbg.maintscript b/debian/linux-image-powerpc-dbg.maintscript deleted file mode 100644 index 07d6b8339f..0000000000 --- a/debian/linux-image-powerpc-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc-dbg linux-image-6.9.10-powerpc-dbg 5.7~rc5-1~exp1 linux-image-powerpc-dbg diff --git a/debian/linux-image-powerpc-smp-dbg.lintian-overrides b/debian/linux-image-powerpc-smp-dbg.lintian-overrides deleted file mode 100644 index e1447a9ac7..0000000000 --- a/debian/linux-image-powerpc-smp-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-powerpc-smp-dbg: wrong-section-according-to-package-name linux-image-powerpc-smp-dbg => debug diff --git a/debian/linux-image-powerpc-smp-dbg.maintscript b/debian/linux-image-powerpc-smp-dbg.maintscript deleted file mode 100644 index a5a70cc908..0000000000 --- a/debian/linux-image-powerpc-smp-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc-smp-dbg linux-image-6.9.10-powerpc-smp-dbg 5.7~rc5-1~exp1 linux-image-powerpc-smp-dbg diff --git a/debian/linux-image-powerpc-smp.bug-presubj b/debian/linux-image-powerpc-smp.bug-presubj deleted file mode 100644 index 89db45ff4f..0000000000 --- a/debian/linux-image-powerpc-smp.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-powerpc-smp instead. diff --git a/debian/linux-image-powerpc-smp.maintscript b/debian/linux-image-powerpc-smp.maintscript deleted file mode 100644 index e055bdf7fe..0000000000 --- a/debian/linux-image-powerpc-smp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc-smp linux-image-6.9.10-powerpc-smp 5.7~rc5-1~exp1 linux-image-powerpc-smp diff --git a/debian/linux-image-powerpc.bug-presubj b/debian/linux-image-powerpc.bug-presubj deleted file mode 100644 index ca7be324a5..0000000000 --- a/debian/linux-image-powerpc.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-powerpc instead. diff --git a/debian/linux-image-powerpc.maintscript b/debian/linux-image-powerpc.maintscript deleted file mode 100644 index 8b925b70b1..0000000000 --- a/debian/linux-image-powerpc.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc linux-image-6.9.10-powerpc 5.7~rc5-1~exp1 linux-image-powerpc diff --git a/debian/linux-image-powerpc64-dbg.lintian-overrides b/debian/linux-image-powerpc64-dbg.lintian-overrides deleted file mode 100644 index 8a7b4b83bc..0000000000 --- a/debian/linux-image-powerpc64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-powerpc64-dbg: wrong-section-according-to-package-name linux-image-powerpc64-dbg => debug diff --git a/debian/linux-image-powerpc64-dbg.maintscript b/debian/linux-image-powerpc64-dbg.maintscript deleted file mode 100644 index 13fd744d38..0000000000 --- a/debian/linux-image-powerpc64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc64-dbg linux-image-6.9.10-powerpc64-dbg 5.7~rc5-1~exp1 linux-image-powerpc64-dbg diff --git a/debian/linux-image-powerpc64.bug-presubj b/debian/linux-image-powerpc64.bug-presubj deleted file mode 100644 index 2a1d7102a5..0000000000 --- a/debian/linux-image-powerpc64.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-powerpc64 instead. diff --git a/debian/linux-image-powerpc64.maintscript b/debian/linux-image-powerpc64.maintscript deleted file mode 100644 index 4faae41784..0000000000 --- a/debian/linux-image-powerpc64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc64 linux-image-6.9.10-powerpc64 5.7~rc5-1~exp1 linux-image-powerpc64 diff --git a/debian/linux-image-powerpc64le-dbg.lintian-overrides b/debian/linux-image-powerpc64le-dbg.lintian-overrides deleted file mode 100644 index 69cf156538..0000000000 --- a/debian/linux-image-powerpc64le-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-powerpc64le-dbg: wrong-section-according-to-package-name linux-image-powerpc64le-dbg => debug diff --git a/debian/linux-image-powerpc64le-dbg.maintscript b/debian/linux-image-powerpc64le-dbg.maintscript deleted file mode 100644 index 482f2b83d9..0000000000 --- a/debian/linux-image-powerpc64le-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc64le-dbg linux-image-6.9.10-powerpc64le-dbg 5.7~rc5-1~exp1 linux-image-powerpc64le-dbg diff --git a/debian/linux-image-powerpc64le.bug-presubj b/debian/linux-image-powerpc64le.bug-presubj deleted file mode 100644 index 7d07d81e0a..0000000000 --- a/debian/linux-image-powerpc64le.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-powerpc64le instead. diff --git a/debian/linux-image-powerpc64le.maintscript b/debian/linux-image-powerpc64le.maintscript deleted file mode 100644 index 7705ac08b5..0000000000 --- a/debian/linux-image-powerpc64le.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc64le linux-image-6.9.10-powerpc64le 5.7~rc5-1~exp1 linux-image-powerpc64le diff --git a/debian/linux-image-riscv64-dbg.lintian-overrides b/debian/linux-image-riscv64-dbg.lintian-overrides deleted file mode 100644 index 247a3b1349..0000000000 --- a/debian/linux-image-riscv64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-riscv64-dbg: wrong-section-according-to-package-name linux-image-riscv64-dbg => debug diff --git a/debian/linux-image-riscv64-dbg.maintscript b/debian/linux-image-riscv64-dbg.maintscript deleted file mode 100644 index 7454bcf26f..0000000000 --- a/debian/linux-image-riscv64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-riscv64-dbg linux-image-6.9.10-riscv64-dbg 5.7~rc5-1~exp1 linux-image-riscv64-dbg diff --git a/debian/linux-image-riscv64.bug-presubj b/debian/linux-image-riscv64.bug-presubj deleted file mode 100644 index d2353f59c0..0000000000 --- a/debian/linux-image-riscv64.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-riscv64 instead. diff --git a/debian/linux-image-riscv64.maintscript b/debian/linux-image-riscv64.maintscript deleted file mode 100644 index 70305c64c8..0000000000 --- a/debian/linux-image-riscv64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-riscv64 linux-image-6.9.10-riscv64 5.7~rc5-1~exp1 linux-image-riscv64 diff --git a/debian/linux-image-rpi-dbg.lintian-overrides b/debian/linux-image-rpi-dbg.lintian-overrides deleted file mode 100644 index 7cc8129d76..0000000000 --- a/debian/linux-image-rpi-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-rpi-dbg: wrong-section-according-to-package-name linux-image-rpi-dbg => debug diff --git a/debian/linux-image-rpi-dbg.maintscript b/debian/linux-image-rpi-dbg.maintscript deleted file mode 100644 index 2a3566887c..0000000000 --- a/debian/linux-image-rpi-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rpi-dbg linux-image-6.9.10-rpi-dbg 5.7~rc5-1~exp1 linux-image-rpi-dbg diff --git a/debian/linux-image-rpi.bug-presubj b/debian/linux-image-rpi.bug-presubj deleted file mode 100644 index 5680507d5f..0000000000 --- a/debian/linux-image-rpi.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-rpi instead. diff --git a/debian/linux-image-rpi.maintscript b/debian/linux-image-rpi.maintscript deleted file mode 100644 index d3ae246f1c..0000000000 --- a/debian/linux-image-rpi.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rpi linux-image-6.9.10-rpi 5.7~rc5-1~exp1 linux-image-rpi diff --git a/debian/linux-image-rt-686-pae-dbg.lintian-overrides b/debian/linux-image-rt-686-pae-dbg.lintian-overrides deleted file mode 100644 index 32c3c44ff9..0000000000 --- a/debian/linux-image-rt-686-pae-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-rt-686-pae-dbg: wrong-section-according-to-package-name linux-image-rt-686-pae-dbg => debug diff --git a/debian/linux-image-rt-686-pae-dbg.maintscript b/debian/linux-image-rt-686-pae-dbg.maintscript deleted file mode 100644 index 238cad8e40..0000000000 --- a/debian/linux-image-rt-686-pae-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rt-686-pae-dbg linux-image-6.9.10-rt-686-pae-dbg 5.7~rc5-1~exp1 linux-image-rt-686-pae-dbg diff --git a/debian/linux-image-rt-686-pae.bug-presubj b/debian/linux-image-rt-686-pae.bug-presubj deleted file mode 100644 index 810085a6c7..0000000000 --- a/debian/linux-image-rt-686-pae.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-rt-686-pae instead. diff --git a/debian/linux-image-rt-686-pae.maintscript b/debian/linux-image-rt-686-pae.maintscript deleted file mode 100644 index fc8d19b422..0000000000 --- a/debian/linux-image-rt-686-pae.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rt-686-pae linux-image-6.9.10-rt-686-pae 5.7~rc5-1~exp1 linux-image-rt-686-pae diff --git a/debian/linux-image-rt-amd64-dbg.lintian-overrides b/debian/linux-image-rt-amd64-dbg.lintian-overrides deleted file mode 100644 index 339a6f45fb..0000000000 --- a/debian/linux-image-rt-amd64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-rt-amd64-dbg: wrong-section-according-to-package-name linux-image-rt-amd64-dbg => debug diff --git a/debian/linux-image-rt-amd64-dbg.maintscript b/debian/linux-image-rt-amd64-dbg.maintscript deleted file mode 100644 index bdf4d36db4..0000000000 --- a/debian/linux-image-rt-amd64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rt-amd64-dbg linux-image-6.9.10-rt-amd64-dbg 5.7~rc5-1~exp1 linux-image-rt-amd64-dbg diff --git a/debian/linux-image-rt-arm64-dbg.lintian-overrides b/debian/linux-image-rt-arm64-dbg.lintian-overrides deleted file mode 100644 index cac0893c85..0000000000 --- a/debian/linux-image-rt-arm64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-rt-arm64-dbg: wrong-section-according-to-package-name linux-image-rt-arm64-dbg => debug diff --git a/debian/linux-image-rt-arm64-dbg.maintscript b/debian/linux-image-rt-arm64-dbg.maintscript deleted file mode 100644 index bb20434a19..0000000000 --- a/debian/linux-image-rt-arm64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rt-arm64-dbg linux-image-6.9.10-rt-arm64-dbg 5.7~rc5-1~exp1 linux-image-rt-arm64-dbg diff --git a/debian/linux-image-rt-armmp-dbg.lintian-overrides b/debian/linux-image-rt-armmp-dbg.lintian-overrides deleted file mode 100644 index 6b0cd95954..0000000000 --- a/debian/linux-image-rt-armmp-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-rt-armmp-dbg: wrong-section-according-to-package-name linux-image-rt-armmp-dbg => debug diff --git a/debian/linux-image-rt-armmp-dbg.maintscript b/debian/linux-image-rt-armmp-dbg.maintscript deleted file mode 100644 index c1eb5e3f61..0000000000 --- a/debian/linux-image-rt-armmp-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rt-armmp-dbg linux-image-6.9.10-rt-armmp-dbg 5.7~rc5-1~exp1 linux-image-rt-armmp-dbg diff --git a/debian/linux-image-rt-armmp.bug-presubj b/debian/linux-image-rt-armmp.bug-presubj deleted file mode 100644 index 588448df91..0000000000 --- a/debian/linux-image-rt-armmp.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-rt-armmp instead. diff --git a/debian/linux-image-rt-armmp.maintscript b/debian/linux-image-rt-armmp.maintscript deleted file mode 100644 index daea824df7..0000000000 --- a/debian/linux-image-rt-armmp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rt-armmp linux-image-6.9.10-rt-armmp 5.7~rc5-1~exp1 linux-image-rt-armmp diff --git a/debian/linux-image-s390x-dbg.lintian-overrides b/debian/linux-image-s390x-dbg.lintian-overrides deleted file mode 100644 index 90d4fb2be2..0000000000 --- a/debian/linux-image-s390x-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-s390x-dbg: wrong-section-according-to-package-name linux-image-s390x-dbg => debug diff --git a/debian/linux-image-s390x-dbg.maintscript b/debian/linux-image-s390x-dbg.maintscript deleted file mode 100644 index c359da1b38..0000000000 --- a/debian/linux-image-s390x-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-s390x-dbg linux-image-6.9.10-s390x-dbg 5.7~rc5-1~exp1 linux-image-s390x-dbg diff --git a/debian/linux-image-s390x.bug-presubj b/debian/linux-image-s390x.bug-presubj deleted file mode 100644 index 9bbd52a7fd..0000000000 --- a/debian/linux-image-s390x.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-s390x instead. diff --git a/debian/linux-image-s390x.maintscript b/debian/linux-image-s390x.maintscript deleted file mode 100644 index 6e5f184ca1..0000000000 --- a/debian/linux-image-s390x.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-s390x linux-image-6.9.10-s390x 5.7~rc5-1~exp1 linux-image-s390x diff --git a/debian/linux-image-sh7751r-dbg.lintian-overrides b/debian/linux-image-sh7751r-dbg.lintian-overrides deleted file mode 100644 index 8aa596111a..0000000000 --- a/debian/linux-image-sh7751r-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-sh7751r-dbg: wrong-section-according-to-package-name linux-image-sh7751r-dbg => debug diff --git a/debian/linux-image-sh7751r-dbg.maintscript b/debian/linux-image-sh7751r-dbg.maintscript deleted file mode 100644 index 1613ed203f..0000000000 --- a/debian/linux-image-sh7751r-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sh7751r-dbg linux-image-6.9.10-sh7751r-dbg 5.7~rc5-1~exp1 linux-image-sh7751r-dbg diff --git a/debian/linux-image-sh7751r.bug-presubj b/debian/linux-image-sh7751r.bug-presubj deleted file mode 100644 index 789f91ee9e..0000000000 --- a/debian/linux-image-sh7751r.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-sh7751r instead. diff --git a/debian/linux-image-sh7751r.maintscript b/debian/linux-image-sh7751r.maintscript deleted file mode 100644 index ac515fa21d..0000000000 --- a/debian/linux-image-sh7751r.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sh7751r linux-image-6.9.10-sh7751r 5.7~rc5-1~exp1 linux-image-sh7751r diff --git a/debian/linux-image-sh7785lcr-dbg.lintian-overrides b/debian/linux-image-sh7785lcr-dbg.lintian-overrides deleted file mode 100644 index ee8a5c2cd8..0000000000 --- a/debian/linux-image-sh7785lcr-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-sh7785lcr-dbg: wrong-section-according-to-package-name linux-image-sh7785lcr-dbg => debug diff --git a/debian/linux-image-sh7785lcr-dbg.maintscript b/debian/linux-image-sh7785lcr-dbg.maintscript deleted file mode 100644 index 3fd3b7c59b..0000000000 --- a/debian/linux-image-sh7785lcr-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sh7785lcr-dbg linux-image-6.9.10-sh7785lcr-dbg 5.7~rc5-1~exp1 linux-image-sh7785lcr-dbg diff --git a/debian/linux-image-sh7785lcr.bug-presubj b/debian/linux-image-sh7785lcr.bug-presubj deleted file mode 100644 index 340b24efb6..0000000000 --- a/debian/linux-image-sh7785lcr.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-sh7785lcr instead. diff --git a/debian/linux-image-sh7785lcr.maintscript b/debian/linux-image-sh7785lcr.maintscript deleted file mode 100644 index 6a1e8455f9..0000000000 --- a/debian/linux-image-sh7785lcr.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sh7785lcr linux-image-6.9.10-sh7785lcr 5.7~rc5-1~exp1 linux-image-sh7785lcr diff --git a/debian/linux-image-sparc64-dbg.lintian-overrides b/debian/linux-image-sparc64-dbg.lintian-overrides deleted file mode 100644 index 7b2cfa0f1f..0000000000 --- a/debian/linux-image-sparc64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-sparc64-dbg: wrong-section-according-to-package-name linux-image-sparc64-dbg => debug diff --git a/debian/linux-image-sparc64-dbg.maintscript b/debian/linux-image-sparc64-dbg.maintscript deleted file mode 100644 index a1fee92dee..0000000000 --- a/debian/linux-image-sparc64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sparc64-dbg linux-image-6.9.10-sparc64-dbg 5.7~rc5-1~exp1 linux-image-sparc64-dbg diff --git a/debian/linux-image-sparc64-smp-dbg.lintian-overrides b/debian/linux-image-sparc64-smp-dbg.lintian-overrides deleted file mode 100644 index 3a8a2e3654..0000000000 --- a/debian/linux-image-sparc64-smp-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-sparc64-smp-dbg: wrong-section-according-to-package-name linux-image-sparc64-smp-dbg => debug diff --git a/debian/linux-image-sparc64-smp-dbg.maintscript b/debian/linux-image-sparc64-smp-dbg.maintscript deleted file mode 100644 index dfbf7e6595..0000000000 --- a/debian/linux-image-sparc64-smp-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sparc64-smp-dbg linux-image-6.9.10-sparc64-smp-dbg 5.7~rc5-1~exp1 linux-image-sparc64-smp-dbg diff --git a/debian/linux-image-sparc64-smp.bug-presubj b/debian/linux-image-sparc64-smp.bug-presubj deleted file mode 100644 index b610b09c8f..0000000000 --- a/debian/linux-image-sparc64-smp.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-sparc64-smp instead. diff --git a/debian/linux-image-sparc64-smp.maintscript b/debian/linux-image-sparc64-smp.maintscript deleted file mode 100644 index 33c57ee9c8..0000000000 --- a/debian/linux-image-sparc64-smp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sparc64-smp linux-image-6.9.10-sparc64-smp 5.7~rc5-1~exp1 linux-image-sparc64-smp diff --git a/debian/linux-image-sparc64.bug-presubj b/debian/linux-image-sparc64.bug-presubj deleted file mode 100644 index 3d383f64ee..0000000000 --- a/debian/linux-image-sparc64.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.10-sparc64 instead. diff --git a/debian/linux-image-sparc64.maintscript b/debian/linux-image-sparc64.maintscript deleted file mode 100644 index 3e72f62303..0000000000 --- a/debian/linux-image-sparc64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sparc64 linux-image-6.9.10-sparc64 5.7~rc5-1~exp1 linux-image-sparc64 |