diff options
Diffstat (limited to 'debian')
479 files changed, 2 insertions, 8345 deletions
diff --git a/debian/build/version-info b/debian/build/version-info new file mode 100644 index 0000000000..311646a34f --- /dev/null +++ b/debian/build/version-info @@ -0,0 +1,2 @@ +Source: linux +Version: 6.9.7-1~progress7.99u1 diff --git a/debian/linux-headers-4kc-malta.maintscript b/debian/linux-headers-4kc-malta.maintscript deleted file mode 100644 index faf7633862..0000000000 --- a/debian/linux-headers-4kc-malta.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-4kc-malta linux-headers-6.9.7-4kc-malta 5.7~rc5-1~exp1 linux-headers-4kc-malta diff --git a/debian/linux-headers-5kc-malta.maintscript b/debian/linux-headers-5kc-malta.maintscript deleted file mode 100644 index ec11fe824a..0000000000 --- a/debian/linux-headers-5kc-malta.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-5kc-malta linux-headers-6.9.7-5kc-malta 5.7~rc5-1~exp1 linux-headers-5kc-malta diff --git a/debian/linux-headers-6.9.7-4kc-malta.postinst b/debian/linux-headers-6.9.7-4kc-malta.postinst deleted file mode 100644 index 2cfa554158..0000000000 --- a/debian/linux-headers-6.9.7-4kc-malta.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-4kc-malta"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-5kc-malta.postinst b/debian/linux-headers-6.9.7-5kc-malta.postinst deleted file mode 100644 index c47999a5d8..0000000000 --- a/debian/linux-headers-6.9.7-5kc-malta.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-5kc-malta"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-686-pae.postinst b/debian/linux-headers-6.9.7-686-pae.postinst deleted file mode 100644 index f243876d60..0000000000 --- a/debian/linux-headers-6.9.7-686-pae.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-686-pae"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-686.postinst b/debian/linux-headers-6.9.7-686.postinst deleted file mode 100644 index 6fc89e0c7b..0000000000 --- a/debian/linux-headers-6.9.7-686.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-686"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-alpha-generic.postinst b/debian/linux-headers-6.9.7-alpha-generic.postinst deleted file mode 100644 index c426e78ce7..0000000000 --- a/debian/linux-headers-6.9.7-alpha-generic.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-alpha-generic"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-alpha-smp.postinst b/debian/linux-headers-6.9.7-alpha-smp.postinst deleted file mode 100644 index 5d511eda38..0000000000 --- a/debian/linux-headers-6.9.7-alpha-smp.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-alpha-smp"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-amd64.postinst b/debian/linux-headers-6.9.7-amd64.postinst deleted file mode 100644 index 797cf0e873..0000000000 --- a/debian/linux-headers-6.9.7-amd64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-amd64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-arm64.postinst b/debian/linux-headers-6.9.7-arm64.postinst deleted file mode 100644 index 84e2d16e97..0000000000 --- a/debian/linux-headers-6.9.7-arm64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-arm64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-armmp-lpae.postinst b/debian/linux-headers-6.9.7-armmp-lpae.postinst deleted file mode 100644 index 48983ee2b8..0000000000 --- a/debian/linux-headers-6.9.7-armmp-lpae.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-armmp-lpae"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-armmp.postinst b/debian/linux-headers-6.9.7-armmp.postinst deleted file mode 100644 index 2ac8dab75a..0000000000 --- a/debian/linux-headers-6.9.7-armmp.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-armmp"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-cloud-amd64.postinst b/debian/linux-headers-6.9.7-cloud-amd64.postinst deleted file mode 100644 index aa84f6da9e..0000000000 --- a/debian/linux-headers-6.9.7-cloud-amd64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-cloud-amd64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-cloud-arm64.postinst b/debian/linux-headers-6.9.7-cloud-arm64.postinst deleted file mode 100644 index 8f32b32712..0000000000 --- a/debian/linux-headers-6.9.7-cloud-arm64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-cloud-arm64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-loong64.postinst b/debian/linux-headers-6.9.7-loong64.postinst deleted file mode 100644 index 41e066c7df..0000000000 --- a/debian/linux-headers-6.9.7-loong64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-loong64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-loongson-3.postinst b/debian/linux-headers-6.9.7-loongson-3.postinst deleted file mode 100644 index d33d242e42..0000000000 --- a/debian/linux-headers-6.9.7-loongson-3.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-loongson-3"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-m68k.postinst b/debian/linux-headers-6.9.7-m68k.postinst deleted file mode 100644 index 7dbf87a476..0000000000 --- a/debian/linux-headers-6.9.7-m68k.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-m68k"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-mips32r2eb.postinst b/debian/linux-headers-6.9.7-mips32r2eb.postinst deleted file mode 100644 index 0cbda67d4a..0000000000 --- a/debian/linux-headers-6.9.7-mips32r2eb.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-mips32r2eb"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-mips32r2el.postinst b/debian/linux-headers-6.9.7-mips32r2el.postinst deleted file mode 100644 index a6de3ef32d..0000000000 --- a/debian/linux-headers-6.9.7-mips32r2el.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-mips32r2el"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-mips64r2eb.postinst b/debian/linux-headers-6.9.7-mips64r2eb.postinst deleted file mode 100644 index 3cd71261ca..0000000000 --- a/debian/linux-headers-6.9.7-mips64r2eb.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-mips64r2eb"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-mips64r2el.postinst b/debian/linux-headers-6.9.7-mips64r2el.postinst deleted file mode 100644 index 4a91c4ad94..0000000000 --- a/debian/linux-headers-6.9.7-mips64r2el.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-mips64r2el"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-mips64r6el.postinst b/debian/linux-headers-6.9.7-mips64r6el.postinst deleted file mode 100644 index d212bfa4f0..0000000000 --- a/debian/linux-headers-6.9.7-mips64r6el.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-mips64r6el"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-octeon.postinst b/debian/linux-headers-6.9.7-octeon.postinst deleted file mode 100644 index 57aae00a49..0000000000 --- a/debian/linux-headers-6.9.7-octeon.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-octeon"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-parisc.postinst b/debian/linux-headers-6.9.7-parisc.postinst deleted file mode 100644 index ad97ee3ce2..0000000000 --- a/debian/linux-headers-6.9.7-parisc.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-parisc"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-parisc64.postinst b/debian/linux-headers-6.9.7-parisc64.postinst deleted file mode 100644 index 502faca6f6..0000000000 --- a/debian/linux-headers-6.9.7-parisc64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-parisc64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-powerpc-smp.postinst b/debian/linux-headers-6.9.7-powerpc-smp.postinst deleted file mode 100644 index 77a46e7c10..0000000000 --- a/debian/linux-headers-6.9.7-powerpc-smp.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-powerpc-smp"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-powerpc.postinst b/debian/linux-headers-6.9.7-powerpc.postinst deleted file mode 100644 index a1d4123459..0000000000 --- a/debian/linux-headers-6.9.7-powerpc.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-powerpc"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-powerpc64.postinst b/debian/linux-headers-6.9.7-powerpc64.postinst deleted file mode 100644 index 3483c57283..0000000000 --- a/debian/linux-headers-6.9.7-powerpc64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-powerpc64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-powerpc64le.postinst b/debian/linux-headers-6.9.7-powerpc64le.postinst deleted file mode 100644 index 939775ad9d..0000000000 --- a/debian/linux-headers-6.9.7-powerpc64le.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-powerpc64le"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-riscv64.postinst b/debian/linux-headers-6.9.7-riscv64.postinst deleted file mode 100644 index b00327a070..0000000000 --- a/debian/linux-headers-6.9.7-riscv64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-riscv64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-rpi.postinst b/debian/linux-headers-6.9.7-rpi.postinst deleted file mode 100644 index 00b2a61747..0000000000 --- a/debian/linux-headers-6.9.7-rpi.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-rpi"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-rt-686-pae.postinst b/debian/linux-headers-6.9.7-rt-686-pae.postinst deleted file mode 100644 index 4b8e561d8d..0000000000 --- a/debian/linux-headers-6.9.7-rt-686-pae.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-rt-686-pae"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-rt-amd64.postinst b/debian/linux-headers-6.9.7-rt-amd64.postinst deleted file mode 100644 index 9aaa719e44..0000000000 --- a/debian/linux-headers-6.9.7-rt-amd64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-rt-amd64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-rt-arm64.postinst b/debian/linux-headers-6.9.7-rt-arm64.postinst deleted file mode 100644 index 9864b23f4e..0000000000 --- a/debian/linux-headers-6.9.7-rt-arm64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-rt-arm64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-rt-armmp.postinst b/debian/linux-headers-6.9.7-rt-armmp.postinst deleted file mode 100644 index 64078f2b30..0000000000 --- a/debian/linux-headers-6.9.7-rt-armmp.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-rt-armmp"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-s390x.postinst b/debian/linux-headers-6.9.7-s390x.postinst deleted file mode 100644 index 1ee0d521ac..0000000000 --- a/debian/linux-headers-6.9.7-s390x.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-s390x"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-sh7751r.postinst b/debian/linux-headers-6.9.7-sh7751r.postinst deleted file mode 100644 index ac9e690092..0000000000 --- a/debian/linux-headers-6.9.7-sh7751r.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-sh7751r"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-sh7785lcr.postinst b/debian/linux-headers-6.9.7-sh7785lcr.postinst deleted file mode 100644 index 62505d3ed1..0000000000 --- a/debian/linux-headers-6.9.7-sh7785lcr.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-sh7785lcr"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-sparc64-smp.postinst b/debian/linux-headers-6.9.7-sparc64-smp.postinst deleted file mode 100644 index 7fe55ec8ae..0000000000 --- a/debian/linux-headers-6.9.7-sparc64-smp.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-sparc64-smp"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-6.9.7-sparc64.postinst b/debian/linux-headers-6.9.7-sparc64.postinst deleted file mode 100644 index 0aad578173..0000000000 --- a/debian/linux-headers-6.9.7-sparc64.postinst +++ /dev/null @@ -1,18 +0,0 @@ -#!/usr/bin/perl -# Author: Michael Gilbert <michael.s.gilbert@gmail.com> -# Origin: Stripped down version of the linux-headers postinst from Ubuntu's -# 2.6.32-14-generic kernel, which was itself derived from a -# Debian linux-image postinst script. - -$|=1; -my $version = "6.9.7-sparc64"; - -if (-d "/etc/kernel/header_postinst.d") { - system ("run-parts --report --exit-on-error --arg=$version " . - "/etc/kernel/header_postinst.d") && - die "Failed to process /etc/kernel/header_postinst.d"; -} - -exit 0; - -__END__ diff --git a/debian/linux-headers-686-pae.maintscript b/debian/linux-headers-686-pae.maintscript deleted file mode 100644 index 4575dd71dc..0000000000 --- a/debian/linux-headers-686-pae.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-686-pae linux-headers-6.9.7-686-pae 5.7~rc5-1~exp1 linux-headers-686-pae diff --git a/debian/linux-headers-686.maintscript b/debian/linux-headers-686.maintscript deleted file mode 100644 index b89a9d551a..0000000000 --- a/debian/linux-headers-686.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-686 linux-headers-6.9.7-686 5.7~rc5-1~exp1 linux-headers-686 diff --git a/debian/linux-headers-alpha-generic.maintscript b/debian/linux-headers-alpha-generic.maintscript deleted file mode 100644 index 2da805ecdf..0000000000 --- a/debian/linux-headers-alpha-generic.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-alpha-generic linux-headers-6.9.7-alpha-generic 5.7~rc5-1~exp1 linux-headers-alpha-generic diff --git a/debian/linux-headers-alpha-smp.maintscript b/debian/linux-headers-alpha-smp.maintscript deleted file mode 100644 index 88dc7c6362..0000000000 --- a/debian/linux-headers-alpha-smp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-alpha-smp linux-headers-6.9.7-alpha-smp 5.7~rc5-1~exp1 linux-headers-alpha-smp diff --git a/debian/linux-headers-armmp-lpae.maintscript b/debian/linux-headers-armmp-lpae.maintscript deleted file mode 100644 index 070e9dc05a..0000000000 --- a/debian/linux-headers-armmp-lpae.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-armmp-lpae linux-headers-6.9.7-armmp-lpae 5.7~rc5-1~exp1 linux-headers-armmp-lpae diff --git a/debian/linux-headers-armmp.maintscript b/debian/linux-headers-armmp.maintscript deleted file mode 100644 index 015768dbc3..0000000000 --- a/debian/linux-headers-armmp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-armmp linux-headers-6.9.7-armmp 5.7~rc5-1~exp1 linux-headers-armmp diff --git a/debian/linux-headers-loong64.maintscript b/debian/linux-headers-loong64.maintscript deleted file mode 100644 index 8650d7b29e..0000000000 --- a/debian/linux-headers-loong64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-loong64 linux-headers-6.9.7-loong64 5.7~rc5-1~exp1 linux-headers-loong64 diff --git a/debian/linux-headers-loongson-3.maintscript b/debian/linux-headers-loongson-3.maintscript deleted file mode 100644 index 52ecab1063..0000000000 --- a/debian/linux-headers-loongson-3.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-loongson-3 linux-headers-6.9.7-loongson-3 5.7~rc5-1~exp1 linux-headers-loongson-3 diff --git a/debian/linux-headers-m68k.maintscript b/debian/linux-headers-m68k.maintscript deleted file mode 100644 index b114cc4fec..0000000000 --- a/debian/linux-headers-m68k.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-m68k linux-headers-6.9.7-m68k 5.7~rc5-1~exp1 linux-headers-m68k diff --git a/debian/linux-headers-mips32r2eb.maintscript b/debian/linux-headers-mips32r2eb.maintscript deleted file mode 100644 index 5758478349..0000000000 --- a/debian/linux-headers-mips32r2eb.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-mips32r2eb linux-headers-6.9.7-mips32r2eb 5.7~rc5-1~exp1 linux-headers-mips32r2eb diff --git a/debian/linux-headers-mips32r2el.maintscript b/debian/linux-headers-mips32r2el.maintscript deleted file mode 100644 index e3dd2e65e1..0000000000 --- a/debian/linux-headers-mips32r2el.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-mips32r2el linux-headers-6.9.7-mips32r2el 5.7~rc5-1~exp1 linux-headers-mips32r2el diff --git a/debian/linux-headers-mips64r2eb.maintscript b/debian/linux-headers-mips64r2eb.maintscript deleted file mode 100644 index cf186505d3..0000000000 --- a/debian/linux-headers-mips64r2eb.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-mips64r2eb linux-headers-6.9.7-mips64r2eb 5.7~rc5-1~exp1 linux-headers-mips64r2eb diff --git a/debian/linux-headers-mips64r2el.maintscript b/debian/linux-headers-mips64r2el.maintscript deleted file mode 100644 index 032d569da3..0000000000 --- a/debian/linux-headers-mips64r2el.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-mips64r2el linux-headers-6.9.7-mips64r2el 5.7~rc5-1~exp1 linux-headers-mips64r2el diff --git a/debian/linux-headers-mips64r6el.maintscript b/debian/linux-headers-mips64r6el.maintscript deleted file mode 100644 index cb65a1301c..0000000000 --- a/debian/linux-headers-mips64r6el.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-mips64r6el linux-headers-6.9.7-mips64r6el 5.7~rc5-1~exp1 linux-headers-mips64r6el diff --git a/debian/linux-headers-octeon.maintscript b/debian/linux-headers-octeon.maintscript deleted file mode 100644 index 4960d20306..0000000000 --- a/debian/linux-headers-octeon.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-octeon linux-headers-6.9.7-octeon 5.7~rc5-1~exp1 linux-headers-octeon diff --git a/debian/linux-headers-parisc.maintscript b/debian/linux-headers-parisc.maintscript deleted file mode 100644 index 51c33c4f27..0000000000 --- a/debian/linux-headers-parisc.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-parisc linux-headers-6.9.7-parisc 5.7~rc5-1~exp1 linux-headers-parisc diff --git a/debian/linux-headers-parisc64.maintscript b/debian/linux-headers-parisc64.maintscript deleted file mode 100644 index 7c7bb433b8..0000000000 --- a/debian/linux-headers-parisc64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-parisc64 linux-headers-6.9.7-parisc64 5.7~rc5-1~exp1 linux-headers-parisc64 diff --git a/debian/linux-headers-powerpc-smp.maintscript b/debian/linux-headers-powerpc-smp.maintscript deleted file mode 100644 index 6c29031259..0000000000 --- a/debian/linux-headers-powerpc-smp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-powerpc-smp linux-headers-6.9.7-powerpc-smp 5.7~rc5-1~exp1 linux-headers-powerpc-smp diff --git a/debian/linux-headers-powerpc.maintscript b/debian/linux-headers-powerpc.maintscript deleted file mode 100644 index d086b4d649..0000000000 --- a/debian/linux-headers-powerpc.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-powerpc linux-headers-6.9.7-powerpc 5.7~rc5-1~exp1 linux-headers-powerpc diff --git a/debian/linux-headers-powerpc64.maintscript b/debian/linux-headers-powerpc64.maintscript deleted file mode 100644 index aa2c4b161b..0000000000 --- a/debian/linux-headers-powerpc64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-powerpc64 linux-headers-6.9.7-powerpc64 5.7~rc5-1~exp1 linux-headers-powerpc64 diff --git a/debian/linux-headers-powerpc64le.maintscript b/debian/linux-headers-powerpc64le.maintscript deleted file mode 100644 index 79eb9c13cc..0000000000 --- a/debian/linux-headers-powerpc64le.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-powerpc64le linux-headers-6.9.7-powerpc64le 5.7~rc5-1~exp1 linux-headers-powerpc64le diff --git a/debian/linux-headers-riscv64.maintscript b/debian/linux-headers-riscv64.maintscript deleted file mode 100644 index 75bccac7e6..0000000000 --- a/debian/linux-headers-riscv64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-riscv64 linux-headers-6.9.7-riscv64 5.7~rc5-1~exp1 linux-headers-riscv64 diff --git a/debian/linux-headers-rpi.maintscript b/debian/linux-headers-rpi.maintscript deleted file mode 100644 index 911988060f..0000000000 --- a/debian/linux-headers-rpi.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-rpi linux-headers-6.9.7-rpi 5.7~rc5-1~exp1 linux-headers-rpi diff --git a/debian/linux-headers-rt-686-pae.maintscript b/debian/linux-headers-rt-686-pae.maintscript deleted file mode 100644 index 017f9081fd..0000000000 --- a/debian/linux-headers-rt-686-pae.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-rt-686-pae linux-headers-6.9.7-rt-686-pae 5.7~rc5-1~exp1 linux-headers-rt-686-pae diff --git a/debian/linux-headers-rt-armmp.maintscript b/debian/linux-headers-rt-armmp.maintscript deleted file mode 100644 index 5e1afcf89d..0000000000 --- a/debian/linux-headers-rt-armmp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-rt-armmp linux-headers-6.9.7-rt-armmp 5.7~rc5-1~exp1 linux-headers-rt-armmp diff --git a/debian/linux-headers-s390x.maintscript b/debian/linux-headers-s390x.maintscript deleted file mode 100644 index ec647817ea..0000000000 --- a/debian/linux-headers-s390x.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-s390x linux-headers-6.9.7-s390x 5.7~rc5-1~exp1 linux-headers-s390x diff --git a/debian/linux-headers-sh7751r.maintscript b/debian/linux-headers-sh7751r.maintscript deleted file mode 100644 index a283e85529..0000000000 --- a/debian/linux-headers-sh7751r.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-sh7751r linux-headers-6.9.7-sh7751r 5.7~rc5-1~exp1 linux-headers-sh7751r diff --git a/debian/linux-headers-sh7785lcr.maintscript b/debian/linux-headers-sh7785lcr.maintscript deleted file mode 100644 index 00564be51c..0000000000 --- a/debian/linux-headers-sh7785lcr.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-sh7785lcr linux-headers-6.9.7-sh7785lcr 5.7~rc5-1~exp1 linux-headers-sh7785lcr diff --git a/debian/linux-headers-sparc64-smp.maintscript b/debian/linux-headers-sparc64-smp.maintscript deleted file mode 100644 index 74f3d56272..0000000000 --- a/debian/linux-headers-sparc64-smp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-sparc64-smp linux-headers-6.9.7-sparc64-smp 5.7~rc5-1~exp1 linux-headers-sparc64-smp diff --git a/debian/linux-headers-sparc64.maintscript b/debian/linux-headers-sparc64.maintscript deleted file mode 100644 index 45d9d6a16d..0000000000 --- a/debian/linux-headers-sparc64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-headers-sparc64 linux-headers-6.9.7-sparc64 5.7~rc5-1~exp1 linux-headers-sparc64 diff --git a/debian/linux-image-4kc-malta-dbg.lintian-overrides b/debian/linux-image-4kc-malta-dbg.lintian-overrides deleted file mode 100644 index ff38eee30b..0000000000 --- a/debian/linux-image-4kc-malta-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-4kc-malta-dbg: wrong-section-according-to-package-name linux-image-4kc-malta-dbg => debug diff --git a/debian/linux-image-4kc-malta-dbg.maintscript b/debian/linux-image-4kc-malta-dbg.maintscript deleted file mode 100644 index 8a99a83cd0..0000000000 --- a/debian/linux-image-4kc-malta-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-4kc-malta-dbg linux-image-6.9.7-4kc-malta-dbg 5.7~rc5-1~exp1 linux-image-4kc-malta-dbg diff --git a/debian/linux-image-4kc-malta.bug-presubj b/debian/linux-image-4kc-malta.bug-presubj deleted file mode 100644 index 6957a158ba..0000000000 --- a/debian/linux-image-4kc-malta.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-4kc-malta instead. diff --git a/debian/linux-image-4kc-malta.maintscript b/debian/linux-image-4kc-malta.maintscript deleted file mode 100644 index eeaa843f2c..0000000000 --- a/debian/linux-image-4kc-malta.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-4kc-malta linux-image-6.9.7-4kc-malta 5.7~rc5-1~exp1 linux-image-4kc-malta diff --git a/debian/linux-image-5kc-malta-dbg.lintian-overrides b/debian/linux-image-5kc-malta-dbg.lintian-overrides deleted file mode 100644 index 598b21f390..0000000000 --- a/debian/linux-image-5kc-malta-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-5kc-malta-dbg: wrong-section-according-to-package-name linux-image-5kc-malta-dbg => debug diff --git a/debian/linux-image-5kc-malta-dbg.maintscript b/debian/linux-image-5kc-malta-dbg.maintscript deleted file mode 100644 index 569a8fa1bc..0000000000 --- a/debian/linux-image-5kc-malta-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-5kc-malta-dbg linux-image-6.9.7-5kc-malta-dbg 5.7~rc5-1~exp1 linux-image-5kc-malta-dbg diff --git a/debian/linux-image-5kc-malta.bug-presubj b/debian/linux-image-5kc-malta.bug-presubj deleted file mode 100644 index 98cd78e655..0000000000 --- a/debian/linux-image-5kc-malta.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-5kc-malta instead. diff --git a/debian/linux-image-5kc-malta.maintscript b/debian/linux-image-5kc-malta.maintscript deleted file mode 100644 index af4c4e177e..0000000000 --- a/debian/linux-image-5kc-malta.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-5kc-malta linux-image-6.9.7-5kc-malta 5.7~rc5-1~exp1 linux-image-5kc-malta diff --git a/debian/linux-image-6.9.7-4kc-malta-dbg.lintian-overrides b/debian/linux-image-6.9.7-4kc-malta-dbg.lintian-overrides deleted file mode 100644 index ed0b31c699..0000000000 --- a/debian/linux-image-6.9.7-4kc-malta-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-4kc-malta-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.7-4kc-malta-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.9.7-4kc-malta.NEWS b/debian/linux-image-6.9.7-4kc-malta.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-4kc-malta.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-4kc-malta.lintian-overrides b/debian/linux-image-6.9.7-4kc-malta.lintian-overrides deleted file mode 100644 index e4abf796bd..0000000000 --- a/debian/linux-image-6.9.7-4kc-malta.lintian-overrides +++ /dev/null @@ -1,7 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.7-4kc-malta: binary-from-other-architecture *boot/vmlinu* -linux-image-6.9.7-4kc-malta: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. -linux-image-6.9.7-4kc-malta: unstripped-binary-or-object *boot/vmlinu* diff --git a/debian/linux-image-6.9.7-4kc-malta.postinst b/debian/linux-image-6.9.7-4kc-malta.postinst deleted file mode 100644 index a57957d1c9..0000000000 --- a/debian/linux-image-6.9.7-4kc-malta.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-4kc-malta -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-4kc-malta.postrm b/debian/linux-image-6.9.7-4kc-malta.postrm deleted file mode 100644 index b439e9f7f9..0000000000 --- a/debian/linux-image-6.9.7-4kc-malta.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-4kc-malta -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-4kc-malta.preinst b/debian/linux-image-6.9.7-4kc-malta.preinst deleted file mode 100644 index f2cc84001f..0000000000 --- a/debian/linux-image-6.9.7-4kc-malta.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-4kc-malta -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-4kc-malta.prerm b/debian/linux-image-6.9.7-4kc-malta.prerm deleted file mode 100644 index d8871a91f4..0000000000 --- a/debian/linux-image-6.9.7-4kc-malta.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-4kc-malta -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-5kc-malta-dbg.lintian-overrides b/debian/linux-image-6.9.7-5kc-malta-dbg.lintian-overrides deleted file mode 100644 index 7092455bc4..0000000000 --- a/debian/linux-image-6.9.7-5kc-malta-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-5kc-malta-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-5kc-malta.NEWS b/debian/linux-image-6.9.7-5kc-malta.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-5kc-malta.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-5kc-malta.lintian-overrides b/debian/linux-image-6.9.7-5kc-malta.lintian-overrides deleted file mode 100644 index 48652bcbc7..0000000000 --- a/debian/linux-image-6.9.7-5kc-malta.lintian-overrides +++ /dev/null @@ -1,5 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. -linux-image-6.9.7-5kc-malta: unstripped-binary-or-object *boot/vmlinu* diff --git a/debian/linux-image-6.9.7-5kc-malta.postinst b/debian/linux-image-6.9.7-5kc-malta.postinst deleted file mode 100644 index 8b2f8a497c..0000000000 --- a/debian/linux-image-6.9.7-5kc-malta.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-5kc-malta -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-5kc-malta.postrm b/debian/linux-image-6.9.7-5kc-malta.postrm deleted file mode 100644 index 85c926f9f0..0000000000 --- a/debian/linux-image-6.9.7-5kc-malta.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-5kc-malta -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-5kc-malta.preinst b/debian/linux-image-6.9.7-5kc-malta.preinst deleted file mode 100644 index a445b3bc15..0000000000 --- a/debian/linux-image-6.9.7-5kc-malta.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-5kc-malta -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-5kc-malta.prerm b/debian/linux-image-6.9.7-5kc-malta.prerm deleted file mode 100644 index 1521be6df1..0000000000 --- a/debian/linux-image-6.9.7-5kc-malta.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-5kc-malta -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-686-dbg.lintian-overrides b/debian/linux-image-6.9.7-686-dbg.lintian-overrides deleted file mode 100644 index 44993103ea..0000000000 --- a/debian/linux-image-6.9.7-686-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-686-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.7-686-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-686/vdso/vdso32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-686-pae-dbg.lintian-overrides b/debian/linux-image-6.9.7-686-pae-dbg.lintian-overrides deleted file mode 100644 index 801290e612..0000000000 --- a/debian/linux-image-6.9.7-686-pae-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-686-pae-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.7-686-pae-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-686-pae/vdso/vdso32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-686-pae.NEWS b/debian/linux-image-6.9.7-686-pae.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-686-pae.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-686-pae.lintian-overrides b/debian/linux-image-6.9.7-686-pae.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-686-pae.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-686-pae.postinst b/debian/linux-image-6.9.7-686-pae.postinst deleted file mode 100644 index 722330eff7..0000000000 --- a/debian/linux-image-6.9.7-686-pae.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-686-pae -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-686-pae.postrm b/debian/linux-image-6.9.7-686-pae.postrm deleted file mode 100644 index 663dc09cb3..0000000000 --- a/debian/linux-image-6.9.7-686-pae.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-686-pae -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-686-pae.preinst b/debian/linux-image-6.9.7-686-pae.preinst deleted file mode 100644 index 6a1d9d8947..0000000000 --- a/debian/linux-image-6.9.7-686-pae.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-686-pae -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-686-pae.prerm b/debian/linux-image-6.9.7-686-pae.prerm deleted file mode 100644 index b40c6de128..0000000000 --- a/debian/linux-image-6.9.7-686-pae.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-686-pae -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-686.NEWS b/debian/linux-image-6.9.7-686.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-686.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-686.lintian-overrides b/debian/linux-image-6.9.7-686.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-686.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-686.postinst b/debian/linux-image-6.9.7-686.postinst deleted file mode 100644 index 9a7204f4f2..0000000000 --- a/debian/linux-image-6.9.7-686.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-686 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-686.postrm b/debian/linux-image-6.9.7-686.postrm deleted file mode 100644 index d861d90139..0000000000 --- a/debian/linux-image-6.9.7-686.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-686 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-686.preinst b/debian/linux-image-6.9.7-686.preinst deleted file mode 100644 index efef1118a4..0000000000 --- a/debian/linux-image-6.9.7-686.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-686 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-686.prerm b/debian/linux-image-6.9.7-686.prerm deleted file mode 100644 index fd3982cb03..0000000000 --- a/debian/linux-image-6.9.7-686.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-686 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-alpha-generic-dbg.lintian-overrides b/debian/linux-image-6.9.7-alpha-generic-dbg.lintian-overrides deleted file mode 100644 index a8e37b2fb3..0000000000 --- a/debian/linux-image-6.9.7-alpha-generic-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-alpha-generic-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-alpha-generic.NEWS b/debian/linux-image-6.9.7-alpha-generic.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-alpha-generic.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-alpha-generic.lintian-overrides b/debian/linux-image-6.9.7-alpha-generic.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-alpha-generic.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-alpha-generic.postinst b/debian/linux-image-6.9.7-alpha-generic.postinst deleted file mode 100644 index f4541c921e..0000000000 --- a/debian/linux-image-6.9.7-alpha-generic.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-alpha-generic -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-alpha-generic.postrm b/debian/linux-image-6.9.7-alpha-generic.postrm deleted file mode 100644 index c941e967ab..0000000000 --- a/debian/linux-image-6.9.7-alpha-generic.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-alpha-generic -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-alpha-generic.preinst b/debian/linux-image-6.9.7-alpha-generic.preinst deleted file mode 100644 index 9149854e6c..0000000000 --- a/debian/linux-image-6.9.7-alpha-generic.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-alpha-generic -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-alpha-generic.prerm b/debian/linux-image-6.9.7-alpha-generic.prerm deleted file mode 100644 index 81e2e1fecb..0000000000 --- a/debian/linux-image-6.9.7-alpha-generic.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-alpha-generic -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-alpha-smp-dbg.lintian-overrides b/debian/linux-image-6.9.7-alpha-smp-dbg.lintian-overrides deleted file mode 100644 index 2cc43b4943..0000000000 --- a/debian/linux-image-6.9.7-alpha-smp-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-alpha-smp-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-alpha-smp.NEWS b/debian/linux-image-6.9.7-alpha-smp.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-alpha-smp.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-alpha-smp.lintian-overrides b/debian/linux-image-6.9.7-alpha-smp.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-alpha-smp.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-alpha-smp.postinst b/debian/linux-image-6.9.7-alpha-smp.postinst deleted file mode 100644 index 201ba8b8e4..0000000000 --- a/debian/linux-image-6.9.7-alpha-smp.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-alpha-smp -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-alpha-smp.postrm b/debian/linux-image-6.9.7-alpha-smp.postrm deleted file mode 100644 index 521fcef2dd..0000000000 --- a/debian/linux-image-6.9.7-alpha-smp.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-alpha-smp -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-alpha-smp.preinst b/debian/linux-image-6.9.7-alpha-smp.preinst deleted file mode 100644 index ff8815b685..0000000000 --- a/debian/linux-image-6.9.7-alpha-smp.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-alpha-smp -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-alpha-smp.prerm b/debian/linux-image-6.9.7-alpha-smp.prerm deleted file mode 100644 index 30b1f7c109..0000000000 --- a/debian/linux-image-6.9.7-alpha-smp.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-alpha-smp -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-amd64-dbg.lintian-overrides b/debian/linux-image-6.9.7-amd64-dbg.lintian-overrides deleted file mode 100644 index 31f757f286..0000000000 --- a/debian/linux-image-6.9.7-amd64-dbg.lintian-overrides +++ /dev/null @@ -1,15 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-amd64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.7-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-amd64/vdso/vdso32.so* -linux-image-6.9.7-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-amd64/vdso/vdso64.so* -linux-image-6.9.7-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-amd64/vdso/vdsox32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.9.7-amd64-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.9.7-amd64/vdso/vdsox32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-amd64-unsigned.NEWS b/debian/linux-image-6.9.7-amd64-unsigned.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-amd64-unsigned.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-amd64-unsigned.lintian-overrides b/debian/linux-image-6.9.7-amd64-unsigned.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-amd64-unsigned.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-amd64-unsigned.postinst b/debian/linux-image-6.9.7-amd64-unsigned.postinst deleted file mode 100644 index eb8fe85a99..0000000000 --- a/debian/linux-image-6.9.7-amd64-unsigned.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-amd64-unsigned.postrm b/debian/linux-image-6.9.7-amd64-unsigned.postrm deleted file mode 100644 index 902d51c6a6..0000000000 --- a/debian/linux-image-6.9.7-amd64-unsigned.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-amd64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-amd64-unsigned.preinst b/debian/linux-image-6.9.7-amd64-unsigned.preinst deleted file mode 100644 index a0d8c1a57b..0000000000 --- a/debian/linux-image-6.9.7-amd64-unsigned.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-amd64-unsigned.prerm b/debian/linux-image-6.9.7-amd64-unsigned.prerm deleted file mode 100644 index d830139622..0000000000 --- a/debian/linux-image-6.9.7-amd64-unsigned.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-arm64-dbg.lintian-overrides b/debian/linux-image-6.9.7-arm64-dbg.lintian-overrides deleted file mode 100644 index 71d43bf06a..0000000000 --- a/debian/linux-image-6.9.7-arm64-dbg.lintian-overrides +++ /dev/null @@ -1,14 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-arm64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.7-arm64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-arm64/vdso/vdso.so* -linux-image-6.9.7-arm64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-arm64/vdso/vdso32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.9.7-arm64-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.9.7-arm64/vdso/vdso32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-arm64-unsigned.NEWS b/debian/linux-image-6.9.7-arm64-unsigned.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-arm64-unsigned.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-arm64-unsigned.lintian-overrides b/debian/linux-image-6.9.7-arm64-unsigned.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-arm64-unsigned.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-arm64-unsigned.postinst b/debian/linux-image-6.9.7-arm64-unsigned.postinst deleted file mode 100644 index f4f17ba012..0000000000 --- a/debian/linux-image-6.9.7-arm64-unsigned.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-arm64-unsigned.postrm b/debian/linux-image-6.9.7-arm64-unsigned.postrm deleted file mode 100644 index 182225a386..0000000000 --- a/debian/linux-image-6.9.7-arm64-unsigned.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-arm64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-arm64-unsigned.preinst b/debian/linux-image-6.9.7-arm64-unsigned.preinst deleted file mode 100644 index 1a54419163..0000000000 --- a/debian/linux-image-6.9.7-arm64-unsigned.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-arm64-unsigned.prerm b/debian/linux-image-6.9.7-arm64-unsigned.prerm deleted file mode 100644 index 005c6d3cd7..0000000000 --- a/debian/linux-image-6.9.7-arm64-unsigned.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-armmp-dbg.lintian-overrides b/debian/linux-image-6.9.7-armmp-dbg.lintian-overrides deleted file mode 100644 index 5f67941a6a..0000000000 --- a/debian/linux-image-6.9.7-armmp-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-armmp-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.7-armmp-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-armmp/vdso/vdso.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-armmp-lpae-dbg.lintian-overrides b/debian/linux-image-6.9.7-armmp-lpae-dbg.lintian-overrides deleted file mode 100644 index 6cda95c355..0000000000 --- a/debian/linux-image-6.9.7-armmp-lpae-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-armmp-lpae-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.7-armmp-lpae-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-armmp-lpae/vdso/vdso.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-armmp-lpae.NEWS b/debian/linux-image-6.9.7-armmp-lpae.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-armmp-lpae.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-armmp-lpae.lintian-overrides b/debian/linux-image-6.9.7-armmp-lpae.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-armmp-lpae.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-armmp-lpae.postinst b/debian/linux-image-6.9.7-armmp-lpae.postinst deleted file mode 100644 index de938082df..0000000000 --- a/debian/linux-image-6.9.7-armmp-lpae.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-armmp-lpae -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-armmp-lpae.postrm b/debian/linux-image-6.9.7-armmp-lpae.postrm deleted file mode 100644 index eab3183dbd..0000000000 --- a/debian/linux-image-6.9.7-armmp-lpae.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-armmp-lpae -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-armmp-lpae.preinst b/debian/linux-image-6.9.7-armmp-lpae.preinst deleted file mode 100644 index f0c491b40e..0000000000 --- a/debian/linux-image-6.9.7-armmp-lpae.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-armmp-lpae -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-armmp-lpae.prerm b/debian/linux-image-6.9.7-armmp-lpae.prerm deleted file mode 100644 index 1478f1a93d..0000000000 --- a/debian/linux-image-6.9.7-armmp-lpae.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-armmp-lpae -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-armmp.NEWS b/debian/linux-image-6.9.7-armmp.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-armmp.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-armmp.lintian-overrides b/debian/linux-image-6.9.7-armmp.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-armmp.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-armmp.postinst b/debian/linux-image-6.9.7-armmp.postinst deleted file mode 100644 index 539ed24435..0000000000 --- a/debian/linux-image-6.9.7-armmp.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-armmp -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-armmp.postrm b/debian/linux-image-6.9.7-armmp.postrm deleted file mode 100644 index 6879643dff..0000000000 --- a/debian/linux-image-6.9.7-armmp.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-armmp -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-armmp.preinst b/debian/linux-image-6.9.7-armmp.preinst deleted file mode 100644 index e503c29979..0000000000 --- a/debian/linux-image-6.9.7-armmp.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-armmp -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-armmp.prerm b/debian/linux-image-6.9.7-armmp.prerm deleted file mode 100644 index 2f7393a169..0000000000 --- a/debian/linux-image-6.9.7-armmp.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-armmp -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-cloud-amd64-dbg.lintian-overrides b/debian/linux-image-6.9.7-cloud-amd64-dbg.lintian-overrides deleted file mode 100644 index 41e4a509b7..0000000000 --- a/debian/linux-image-6.9.7-cloud-amd64-dbg.lintian-overrides +++ /dev/null @@ -1,15 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-cloud-amd64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.7-cloud-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-cloud-amd64/vdso/vdso32.so* -linux-image-6.9.7-cloud-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-cloud-amd64/vdso/vdso64.so* -linux-image-6.9.7-cloud-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-cloud-amd64/vdso/vdsox32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.9.7-cloud-amd64-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.9.7-cloud-amd64/vdso/vdsox32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-cloud-amd64-unsigned.NEWS b/debian/linux-image-6.9.7-cloud-amd64-unsigned.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-cloud-amd64-unsigned.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-cloud-amd64-unsigned.lintian-overrides b/debian/linux-image-6.9.7-cloud-amd64-unsigned.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-cloud-amd64-unsigned.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-cloud-amd64-unsigned.postinst b/debian/linux-image-6.9.7-cloud-amd64-unsigned.postinst deleted file mode 100644 index a28eea37b1..0000000000 --- a/debian/linux-image-6.9.7-cloud-amd64-unsigned.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-cloud-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-cloud-amd64-unsigned.postrm b/debian/linux-image-6.9.7-cloud-amd64-unsigned.postrm deleted file mode 100644 index d74b46e93c..0000000000 --- a/debian/linux-image-6.9.7-cloud-amd64-unsigned.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-cloud-amd64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-cloud-amd64-unsigned.preinst b/debian/linux-image-6.9.7-cloud-amd64-unsigned.preinst deleted file mode 100644 index 67cef22597..0000000000 --- a/debian/linux-image-6.9.7-cloud-amd64-unsigned.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-cloud-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-cloud-amd64-unsigned.prerm b/debian/linux-image-6.9.7-cloud-amd64-unsigned.prerm deleted file mode 100644 index 6f3b53e1ba..0000000000 --- a/debian/linux-image-6.9.7-cloud-amd64-unsigned.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-cloud-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-cloud-arm64-dbg.lintian-overrides b/debian/linux-image-6.9.7-cloud-arm64-dbg.lintian-overrides deleted file mode 100644 index db9ed0c22b..0000000000 --- a/debian/linux-image-6.9.7-cloud-arm64-dbg.lintian-overrides +++ /dev/null @@ -1,14 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-cloud-arm64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.7-cloud-arm64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-cloud-arm64/vdso/vdso.so* -linux-image-6.9.7-cloud-arm64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-cloud-arm64/vdso/vdso32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.9.7-cloud-arm64-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.9.7-cloud-arm64/vdso/vdso32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-cloud-arm64-unsigned.NEWS b/debian/linux-image-6.9.7-cloud-arm64-unsigned.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-cloud-arm64-unsigned.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-cloud-arm64-unsigned.lintian-overrides b/debian/linux-image-6.9.7-cloud-arm64-unsigned.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-cloud-arm64-unsigned.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-cloud-arm64-unsigned.postinst b/debian/linux-image-6.9.7-cloud-arm64-unsigned.postinst deleted file mode 100644 index fb47fb0a10..0000000000 --- a/debian/linux-image-6.9.7-cloud-arm64-unsigned.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-cloud-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-cloud-arm64-unsigned.postrm b/debian/linux-image-6.9.7-cloud-arm64-unsigned.postrm deleted file mode 100644 index a960222b37..0000000000 --- a/debian/linux-image-6.9.7-cloud-arm64-unsigned.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-cloud-arm64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-cloud-arm64-unsigned.preinst b/debian/linux-image-6.9.7-cloud-arm64-unsigned.preinst deleted file mode 100644 index 22bc17c2d4..0000000000 --- a/debian/linux-image-6.9.7-cloud-arm64-unsigned.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-cloud-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-cloud-arm64-unsigned.prerm b/debian/linux-image-6.9.7-cloud-arm64-unsigned.prerm deleted file mode 100644 index 00200f190b..0000000000 --- a/debian/linux-image-6.9.7-cloud-arm64-unsigned.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-cloud-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-loong64-dbg.lintian-overrides b/debian/linux-image-6.9.7-loong64-dbg.lintian-overrides deleted file mode 100644 index 36c57205fd..0000000000 --- a/debian/linux-image-6.9.7-loong64-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-loong64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-loong64.NEWS b/debian/linux-image-6.9.7-loong64.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-loong64.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-loong64.lintian-overrides b/debian/linux-image-6.9.7-loong64.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-loong64.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-loong64.postinst b/debian/linux-image-6.9.7-loong64.postinst deleted file mode 100644 index 46884eeb59..0000000000 --- a/debian/linux-image-6.9.7-loong64.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-loong64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-loong64.postrm b/debian/linux-image-6.9.7-loong64.postrm deleted file mode 100644 index 25711d5130..0000000000 --- a/debian/linux-image-6.9.7-loong64.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-loong64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-loong64.preinst b/debian/linux-image-6.9.7-loong64.preinst deleted file mode 100644 index 0cf805cdd9..0000000000 --- a/debian/linux-image-6.9.7-loong64.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-loong64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-loong64.prerm b/debian/linux-image-6.9.7-loong64.prerm deleted file mode 100644 index ea2df17e15..0000000000 --- a/debian/linux-image-6.9.7-loong64.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-loong64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-loongson-3-dbg.lintian-overrides b/debian/linux-image-6.9.7-loongson-3-dbg.lintian-overrides deleted file mode 100644 index bd689369d4..0000000000 --- a/debian/linux-image-6.9.7-loongson-3-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-loongson-3-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.7-loongson-3-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.9.7-loongson-3.NEWS b/debian/linux-image-6.9.7-loongson-3.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-loongson-3.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-loongson-3.lintian-overrides b/debian/linux-image-6.9.7-loongson-3.lintian-overrides deleted file mode 100644 index 10f4ec660d..0000000000 --- a/debian/linux-image-6.9.7-loongson-3.lintian-overrides +++ /dev/null @@ -1,7 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.7-loongson-3: binary-from-other-architecture *boot/vmlinu* -linux-image-6.9.7-loongson-3: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. -linux-image-6.9.7-loongson-3: unstripped-binary-or-object *boot/vmlinu* diff --git a/debian/linux-image-6.9.7-loongson-3.postinst b/debian/linux-image-6.9.7-loongson-3.postinst deleted file mode 100644 index 859a1925a7..0000000000 --- a/debian/linux-image-6.9.7-loongson-3.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-loongson-3 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-loongson-3.postrm b/debian/linux-image-6.9.7-loongson-3.postrm deleted file mode 100644 index a5ede825b9..0000000000 --- a/debian/linux-image-6.9.7-loongson-3.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-loongson-3 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-loongson-3.preinst b/debian/linux-image-6.9.7-loongson-3.preinst deleted file mode 100644 index 0f8abd7f1d..0000000000 --- a/debian/linux-image-6.9.7-loongson-3.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-loongson-3 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-loongson-3.prerm b/debian/linux-image-6.9.7-loongson-3.prerm deleted file mode 100644 index 5dbd8e20cf..0000000000 --- a/debian/linux-image-6.9.7-loongson-3.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-loongson-3 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-m68k-dbg.lintian-overrides b/debian/linux-image-6.9.7-m68k-dbg.lintian-overrides deleted file mode 100644 index 0816b1200e..0000000000 --- a/debian/linux-image-6.9.7-m68k-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-m68k-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-m68k.NEWS b/debian/linux-image-6.9.7-m68k.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-m68k.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-m68k.lintian-overrides b/debian/linux-image-6.9.7-m68k.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-m68k.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-m68k.postinst b/debian/linux-image-6.9.7-m68k.postinst deleted file mode 100644 index b2d218450e..0000000000 --- a/debian/linux-image-6.9.7-m68k.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-m68k -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-m68k.postrm b/debian/linux-image-6.9.7-m68k.postrm deleted file mode 100644 index cb585c5de7..0000000000 --- a/debian/linux-image-6.9.7-m68k.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-m68k -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-m68k.preinst b/debian/linux-image-6.9.7-m68k.preinst deleted file mode 100644 index b1117cc8cf..0000000000 --- a/debian/linux-image-6.9.7-m68k.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-m68k -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-m68k.prerm b/debian/linux-image-6.9.7-m68k.prerm deleted file mode 100644 index 1b2674404f..0000000000 --- a/debian/linux-image-6.9.7-m68k.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-m68k -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-mips32r2eb-dbg.lintian-overrides b/debian/linux-image-6.9.7-mips32r2eb-dbg.lintian-overrides deleted file mode 100644 index 34f1e72fc1..0000000000 --- a/debian/linux-image-6.9.7-mips32r2eb-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-mips32r2eb-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.7-mips32r2eb-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.9.7-mips32r2eb.NEWS b/debian/linux-image-6.9.7-mips32r2eb.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-mips32r2eb.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-mips32r2eb.lintian-overrides b/debian/linux-image-6.9.7-mips32r2eb.lintian-overrides deleted file mode 100644 index ee14ac6d90..0000000000 --- a/debian/linux-image-6.9.7-mips32r2eb.lintian-overrides +++ /dev/null @@ -1,6 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.7-mips32r2eb: binary-from-other-architecture *boot/vmlinu* -linux-image-6.9.7-mips32r2eb: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-mips32r2eb.postinst b/debian/linux-image-6.9.7-mips32r2eb.postinst deleted file mode 100644 index 624fec076a..0000000000 --- a/debian/linux-image-6.9.7-mips32r2eb.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-mips32r2eb -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-mips32r2eb.postrm b/debian/linux-image-6.9.7-mips32r2eb.postrm deleted file mode 100644 index 942a9beb4f..0000000000 --- a/debian/linux-image-6.9.7-mips32r2eb.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-mips32r2eb -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-mips32r2eb.preinst b/debian/linux-image-6.9.7-mips32r2eb.preinst deleted file mode 100644 index 66a2ff87ab..0000000000 --- a/debian/linux-image-6.9.7-mips32r2eb.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-mips32r2eb -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-mips32r2eb.prerm b/debian/linux-image-6.9.7-mips32r2eb.prerm deleted file mode 100644 index db5ae2c449..0000000000 --- a/debian/linux-image-6.9.7-mips32r2eb.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-mips32r2eb -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-mips32r2el-dbg.lintian-overrides b/debian/linux-image-6.9.7-mips32r2el-dbg.lintian-overrides deleted file mode 100644 index bb5baac7e0..0000000000 --- a/debian/linux-image-6.9.7-mips32r2el-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-mips32r2el-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.7-mips32r2el-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.9.7-mips32r2el.NEWS b/debian/linux-image-6.9.7-mips32r2el.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-mips32r2el.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-mips32r2el.lintian-overrides b/debian/linux-image-6.9.7-mips32r2el.lintian-overrides deleted file mode 100644 index a0082a8cdb..0000000000 --- a/debian/linux-image-6.9.7-mips32r2el.lintian-overrides +++ /dev/null @@ -1,7 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.7-mips32r2el: binary-from-other-architecture *boot/vmlinu* -linux-image-6.9.7-mips32r2el: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. -linux-image-6.9.7-mips32r2el: unstripped-binary-or-object *boot/vmlinu* diff --git a/debian/linux-image-6.9.7-mips32r2el.postinst b/debian/linux-image-6.9.7-mips32r2el.postinst deleted file mode 100644 index 2dbe76a1a5..0000000000 --- a/debian/linux-image-6.9.7-mips32r2el.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-mips32r2el -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-mips32r2el.postrm b/debian/linux-image-6.9.7-mips32r2el.postrm deleted file mode 100644 index b63440dfc5..0000000000 --- a/debian/linux-image-6.9.7-mips32r2el.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-mips32r2el -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-mips32r2el.preinst b/debian/linux-image-6.9.7-mips32r2el.preinst deleted file mode 100644 index 1ac5518847..0000000000 --- a/debian/linux-image-6.9.7-mips32r2el.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-mips32r2el -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-mips32r2el.prerm b/debian/linux-image-6.9.7-mips32r2el.prerm deleted file mode 100644 index a6646985ab..0000000000 --- a/debian/linux-image-6.9.7-mips32r2el.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-mips32r2el -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-mips64r2eb-dbg.lintian-overrides b/debian/linux-image-6.9.7-mips64r2eb-dbg.lintian-overrides deleted file mode 100644 index ec4b630629..0000000000 --- a/debian/linux-image-6.9.7-mips64r2eb-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-mips64r2eb-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-mips64r2eb.NEWS b/debian/linux-image-6.9.7-mips64r2eb.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-mips64r2eb.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-mips64r2eb.lintian-overrides b/debian/linux-image-6.9.7-mips64r2eb.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-mips64r2eb.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-mips64r2eb.postinst b/debian/linux-image-6.9.7-mips64r2eb.postinst deleted file mode 100644 index f94610cda1..0000000000 --- a/debian/linux-image-6.9.7-mips64r2eb.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-mips64r2eb -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-mips64r2eb.postrm b/debian/linux-image-6.9.7-mips64r2eb.postrm deleted file mode 100644 index 8668d537e7..0000000000 --- a/debian/linux-image-6.9.7-mips64r2eb.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-mips64r2eb -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-mips64r2eb.preinst b/debian/linux-image-6.9.7-mips64r2eb.preinst deleted file mode 100644 index 7686ed048a..0000000000 --- a/debian/linux-image-6.9.7-mips64r2eb.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-mips64r2eb -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-mips64r2eb.prerm b/debian/linux-image-6.9.7-mips64r2eb.prerm deleted file mode 100644 index 74050d6be4..0000000000 --- a/debian/linux-image-6.9.7-mips64r2eb.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-mips64r2eb -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-mips64r2el-dbg.lintian-overrides b/debian/linux-image-6.9.7-mips64r2el-dbg.lintian-overrides deleted file mode 100644 index 55ca4a49fc..0000000000 --- a/debian/linux-image-6.9.7-mips64r2el-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-mips64r2el-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-mips64r2el.NEWS b/debian/linux-image-6.9.7-mips64r2el.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-mips64r2el.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-mips64r2el.lintian-overrides b/debian/linux-image-6.9.7-mips64r2el.lintian-overrides deleted file mode 100644 index 662ec9588e..0000000000 --- a/debian/linux-image-6.9.7-mips64r2el.lintian-overrides +++ /dev/null @@ -1,5 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. -linux-image-6.9.7-mips64r2el: unstripped-binary-or-object *boot/vmlinu* diff --git a/debian/linux-image-6.9.7-mips64r2el.postinst b/debian/linux-image-6.9.7-mips64r2el.postinst deleted file mode 100644 index ede4e2dd80..0000000000 --- a/debian/linux-image-6.9.7-mips64r2el.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-mips64r2el -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-mips64r2el.postrm b/debian/linux-image-6.9.7-mips64r2el.postrm deleted file mode 100644 index 49b1691b6e..0000000000 --- a/debian/linux-image-6.9.7-mips64r2el.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-mips64r2el -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-mips64r2el.preinst b/debian/linux-image-6.9.7-mips64r2el.preinst deleted file mode 100644 index 132e27114e..0000000000 --- a/debian/linux-image-6.9.7-mips64r2el.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-mips64r2el -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-mips64r2el.prerm b/debian/linux-image-6.9.7-mips64r2el.prerm deleted file mode 100644 index f2942a6137..0000000000 --- a/debian/linux-image-6.9.7-mips64r2el.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-mips64r2el -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-mips64r6el-dbg.lintian-overrides b/debian/linux-image-6.9.7-mips64r6el-dbg.lintian-overrides deleted file mode 100644 index fd04eeb254..0000000000 --- a/debian/linux-image-6.9.7-mips64r6el-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-mips64r6el-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-mips64r6el.NEWS b/debian/linux-image-6.9.7-mips64r6el.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-mips64r6el.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-mips64r6el.lintian-overrides b/debian/linux-image-6.9.7-mips64r6el.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-mips64r6el.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-mips64r6el.postinst b/debian/linux-image-6.9.7-mips64r6el.postinst deleted file mode 100644 index 553af3de8d..0000000000 --- a/debian/linux-image-6.9.7-mips64r6el.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-mips64r6el -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-mips64r6el.postrm b/debian/linux-image-6.9.7-mips64r6el.postrm deleted file mode 100644 index 6c44112157..0000000000 --- a/debian/linux-image-6.9.7-mips64r6el.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-mips64r6el -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-mips64r6el.preinst b/debian/linux-image-6.9.7-mips64r6el.preinst deleted file mode 100644 index 1865bcfea2..0000000000 --- a/debian/linux-image-6.9.7-mips64r6el.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-mips64r6el -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-mips64r6el.prerm b/debian/linux-image-6.9.7-mips64r6el.prerm deleted file mode 100644 index 8a44c1f11a..0000000000 --- a/debian/linux-image-6.9.7-mips64r6el.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-mips64r6el -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-octeon-dbg.lintian-overrides b/debian/linux-image-6.9.7-octeon-dbg.lintian-overrides deleted file mode 100644 index e42601df7d..0000000000 --- a/debian/linux-image-6.9.7-octeon-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-octeon-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.7-octeon-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.9.7-octeon.NEWS b/debian/linux-image-6.9.7-octeon.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-octeon.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-octeon.lintian-overrides b/debian/linux-image-6.9.7-octeon.lintian-overrides deleted file mode 100644 index 4781d2bd1b..0000000000 --- a/debian/linux-image-6.9.7-octeon.lintian-overrides +++ /dev/null @@ -1,7 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.7-octeon: binary-from-other-architecture *boot/vmlinu* -linux-image-6.9.7-octeon: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. -linux-image-6.9.7-octeon: unstripped-binary-or-object *boot/vmlinu* diff --git a/debian/linux-image-6.9.7-octeon.postinst b/debian/linux-image-6.9.7-octeon.postinst deleted file mode 100644 index f4d1d52e8e..0000000000 --- a/debian/linux-image-6.9.7-octeon.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-octeon -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-octeon.postrm b/debian/linux-image-6.9.7-octeon.postrm deleted file mode 100644 index 448c03bd27..0000000000 --- a/debian/linux-image-6.9.7-octeon.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-octeon -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-octeon.preinst b/debian/linux-image-6.9.7-octeon.preinst deleted file mode 100644 index a14c28d5e1..0000000000 --- a/debian/linux-image-6.9.7-octeon.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-octeon -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-octeon.prerm b/debian/linux-image-6.9.7-octeon.prerm deleted file mode 100644 index bf4fe85f82..0000000000 --- a/debian/linux-image-6.9.7-octeon.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-octeon -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-parisc-dbg.lintian-overrides b/debian/linux-image-6.9.7-parisc-dbg.lintian-overrides deleted file mode 100644 index fb18c71ccd..0000000000 --- a/debian/linux-image-6.9.7-parisc-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-parisc-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.7-parisc-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.9.7-parisc.NEWS b/debian/linux-image-6.9.7-parisc.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-parisc.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-parisc.lintian-overrides b/debian/linux-image-6.9.7-parisc.lintian-overrides deleted file mode 100644 index 76bf084cea..0000000000 --- a/debian/linux-image-6.9.7-parisc.lintian-overrides +++ /dev/null @@ -1,5 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.7-parisc: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-parisc.postinst b/debian/linux-image-6.9.7-parisc.postinst deleted file mode 100644 index 76f77ac276..0000000000 --- a/debian/linux-image-6.9.7-parisc.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-parisc -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-parisc.postrm b/debian/linux-image-6.9.7-parisc.postrm deleted file mode 100644 index 68d8a4a59a..0000000000 --- a/debian/linux-image-6.9.7-parisc.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-parisc -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-parisc.preinst b/debian/linux-image-6.9.7-parisc.preinst deleted file mode 100644 index adbefd2d4c..0000000000 --- a/debian/linux-image-6.9.7-parisc.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-parisc -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-parisc.prerm b/debian/linux-image-6.9.7-parisc.prerm deleted file mode 100644 index 12f97dddfd..0000000000 --- a/debian/linux-image-6.9.7-parisc.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-parisc -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-parisc64-dbg.lintian-overrides b/debian/linux-image-6.9.7-parisc64-dbg.lintian-overrides deleted file mode 100644 index 35b7a338ec..0000000000 --- a/debian/linux-image-6.9.7-parisc64-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-parisc64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.7-parisc64-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.9.7-parisc64.NEWS b/debian/linux-image-6.9.7-parisc64.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-parisc64.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-parisc64.lintian-overrides b/debian/linux-image-6.9.7-parisc64.lintian-overrides deleted file mode 100644 index 264f1bacdf..0000000000 --- a/debian/linux-image-6.9.7-parisc64.lintian-overrides +++ /dev/null @@ -1,5 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.7-parisc64: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-parisc64.postinst b/debian/linux-image-6.9.7-parisc64.postinst deleted file mode 100644 index 1298a10256..0000000000 --- a/debian/linux-image-6.9.7-parisc64.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-parisc64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-parisc64.postrm b/debian/linux-image-6.9.7-parisc64.postrm deleted file mode 100644 index 611e3d02c7..0000000000 --- a/debian/linux-image-6.9.7-parisc64.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-parisc64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-parisc64.preinst b/debian/linux-image-6.9.7-parisc64.preinst deleted file mode 100644 index 499d5aaa8b..0000000000 --- a/debian/linux-image-6.9.7-parisc64.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-parisc64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-parisc64.prerm b/debian/linux-image-6.9.7-parisc64.prerm deleted file mode 100644 index 1045cdb02b..0000000000 --- a/debian/linux-image-6.9.7-parisc64.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-parisc64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-powerpc-dbg.lintian-overrides b/debian/linux-image-6.9.7-powerpc-dbg.lintian-overrides deleted file mode 100644 index 7df7051672..0000000000 --- a/debian/linux-image-6.9.7-powerpc-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-powerpc-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.7-powerpc-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.9.7-powerpc-smp-dbg.lintian-overrides b/debian/linux-image-6.9.7-powerpc-smp-dbg.lintian-overrides deleted file mode 100644 index a9cc55178d..0000000000 --- a/debian/linux-image-6.9.7-powerpc-smp-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-powerpc-smp-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.7-powerpc-smp-dbg: binary-from-other-architecture *usr/lib/debug/* diff --git a/debian/linux-image-6.9.7-powerpc-smp.NEWS b/debian/linux-image-6.9.7-powerpc-smp.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-powerpc-smp.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-powerpc-smp.lintian-overrides b/debian/linux-image-6.9.7-powerpc-smp.lintian-overrides deleted file mode 100644 index fba1acd2bd..0000000000 --- a/debian/linux-image-6.9.7-powerpc-smp.lintian-overrides +++ /dev/null @@ -1,5 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.7-powerpc-smp: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-powerpc-smp.postinst b/debian/linux-image-6.9.7-powerpc-smp.postinst deleted file mode 100644 index 84763771d6..0000000000 --- a/debian/linux-image-6.9.7-powerpc-smp.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-powerpc-smp -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-powerpc-smp.postrm b/debian/linux-image-6.9.7-powerpc-smp.postrm deleted file mode 100644 index dd80b8467c..0000000000 --- a/debian/linux-image-6.9.7-powerpc-smp.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-powerpc-smp -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-powerpc-smp.preinst b/debian/linux-image-6.9.7-powerpc-smp.preinst deleted file mode 100644 index a20e99489d..0000000000 --- a/debian/linux-image-6.9.7-powerpc-smp.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-powerpc-smp -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-powerpc-smp.prerm b/debian/linux-image-6.9.7-powerpc-smp.prerm deleted file mode 100644 index 852ceca5c8..0000000000 --- a/debian/linux-image-6.9.7-powerpc-smp.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-powerpc-smp -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-powerpc.NEWS b/debian/linux-image-6.9.7-powerpc.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-powerpc.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-powerpc.lintian-overrides b/debian/linux-image-6.9.7-powerpc.lintian-overrides deleted file mode 100644 index 6ffb46718c..0000000000 --- a/debian/linux-image-6.9.7-powerpc.lintian-overrides +++ /dev/null @@ -1,5 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. -linux-image-6.9.7-powerpc: binary-from-other-architecture *lib/modules/* - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-powerpc.postinst b/debian/linux-image-6.9.7-powerpc.postinst deleted file mode 100644 index 5e68df65e0..0000000000 --- a/debian/linux-image-6.9.7-powerpc.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-powerpc -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-powerpc.postrm b/debian/linux-image-6.9.7-powerpc.postrm deleted file mode 100644 index 3c1547e07b..0000000000 --- a/debian/linux-image-6.9.7-powerpc.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-powerpc -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-powerpc.preinst b/debian/linux-image-6.9.7-powerpc.preinst deleted file mode 100644 index be0986e283..0000000000 --- a/debian/linux-image-6.9.7-powerpc.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-powerpc -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-powerpc.prerm b/debian/linux-image-6.9.7-powerpc.prerm deleted file mode 100644 index d7fd715d29..0000000000 --- a/debian/linux-image-6.9.7-powerpc.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-powerpc -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-powerpc64-dbg.lintian-overrides b/debian/linux-image-6.9.7-powerpc64-dbg.lintian-overrides deleted file mode 100644 index 85e4c94c95..0000000000 --- a/debian/linux-image-6.9.7-powerpc64-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-powerpc64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-powerpc64.NEWS b/debian/linux-image-6.9.7-powerpc64.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-powerpc64.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-powerpc64.lintian-overrides b/debian/linux-image-6.9.7-powerpc64.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-powerpc64.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-powerpc64.postinst b/debian/linux-image-6.9.7-powerpc64.postinst deleted file mode 100644 index 721a13c6ff..0000000000 --- a/debian/linux-image-6.9.7-powerpc64.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-powerpc64 -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-powerpc64.postrm b/debian/linux-image-6.9.7-powerpc64.postrm deleted file mode 100644 index 2f47adc85d..0000000000 --- a/debian/linux-image-6.9.7-powerpc64.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-powerpc64 -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-powerpc64.preinst b/debian/linux-image-6.9.7-powerpc64.preinst deleted file mode 100644 index 78db4e03cf..0000000000 --- a/debian/linux-image-6.9.7-powerpc64.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-powerpc64 -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-powerpc64.prerm b/debian/linux-image-6.9.7-powerpc64.prerm deleted file mode 100644 index 0992ad5722..0000000000 --- a/debian/linux-image-6.9.7-powerpc64.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-powerpc64 -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-powerpc64le-dbg.lintian-overrides b/debian/linux-image-6.9.7-powerpc64le-dbg.lintian-overrides deleted file mode 100644 index 7f0d101f9f..0000000000 --- a/debian/linux-image-6.9.7-powerpc64le-dbg.lintian-overrides +++ /dev/null @@ -1,14 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-powerpc64le-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.7-powerpc64le-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-powerpc64le/vdso/vdso32.so* -linux-image-6.9.7-powerpc64le-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-powerpc64le/vdso/vdso64.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.9.7-powerpc64le-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.9.7-powerpc64le/vdso/vdso32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-powerpc64le.NEWS b/debian/linux-image-6.9.7-powerpc64le.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-powerpc64le.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-powerpc64le.lintian-overrides b/debian/linux-image-6.9.7-powerpc64le.lintian-overrides deleted file mode 100644 index b50ee2003a..0000000000 --- a/debian/linux-image-6.9.7-powerpc64le.lintian-overrides +++ /dev/null @@ -1,5 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. -linux-image-6.9.7-powerpc64le: unstripped-binary-or-object *boot/vmlinu* diff --git a/debian/linux-image-6.9.7-powerpc64le.postinst b/debian/linux-image-6.9.7-powerpc64le.postinst deleted file mode 100644 index 56a2219d25..0000000000 --- a/debian/linux-image-6.9.7-powerpc64le.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-powerpc64le -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-powerpc64le.postrm b/debian/linux-image-6.9.7-powerpc64le.postrm deleted file mode 100644 index 2632f3e2ab..0000000000 --- a/debian/linux-image-6.9.7-powerpc64le.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-powerpc64le -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-powerpc64le.preinst b/debian/linux-image-6.9.7-powerpc64le.preinst deleted file mode 100644 index 5265d93e35..0000000000 --- a/debian/linux-image-6.9.7-powerpc64le.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-powerpc64le -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-powerpc64le.prerm b/debian/linux-image-6.9.7-powerpc64le.prerm deleted file mode 100644 index 971879b1da..0000000000 --- a/debian/linux-image-6.9.7-powerpc64le.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-powerpc64le -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-riscv64-dbg.lintian-overrides b/debian/linux-image-6.9.7-riscv64-dbg.lintian-overrides deleted file mode 100644 index 160cb7d94c..0000000000 --- a/debian/linux-image-6.9.7-riscv64-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-riscv64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-riscv64.NEWS b/debian/linux-image-6.9.7-riscv64.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-riscv64.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-riscv64.lintian-overrides b/debian/linux-image-6.9.7-riscv64.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-riscv64.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-riscv64.postinst b/debian/linux-image-6.9.7-riscv64.postinst deleted file mode 100644 index 1e8bdaddd3..0000000000 --- a/debian/linux-image-6.9.7-riscv64.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-riscv64 -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-riscv64.postrm b/debian/linux-image-6.9.7-riscv64.postrm deleted file mode 100644 index 92bcb01391..0000000000 --- a/debian/linux-image-6.9.7-riscv64.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-riscv64 -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-riscv64.preinst b/debian/linux-image-6.9.7-riscv64.preinst deleted file mode 100644 index 09a9810d89..0000000000 --- a/debian/linux-image-6.9.7-riscv64.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-riscv64 -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-riscv64.prerm b/debian/linux-image-6.9.7-riscv64.prerm deleted file mode 100644 index 77f2dec9f7..0000000000 --- a/debian/linux-image-6.9.7-riscv64.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-riscv64 -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-rpi-dbg.lintian-overrides b/debian/linux-image-6.9.7-rpi-dbg.lintian-overrides deleted file mode 100644 index f1d57f6b41..0000000000 --- a/debian/linux-image-6.9.7-rpi-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-rpi-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-rpi.NEWS b/debian/linux-image-6.9.7-rpi.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-rpi.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-rpi.lintian-overrides b/debian/linux-image-6.9.7-rpi.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-rpi.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-rpi.postinst b/debian/linux-image-6.9.7-rpi.postinst deleted file mode 100644 index 4a96a586bd..0000000000 --- a/debian/linux-image-6.9.7-rpi.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-rpi -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-rpi.postrm b/debian/linux-image-6.9.7-rpi.postrm deleted file mode 100644 index f95c7fdb5c..0000000000 --- a/debian/linux-image-6.9.7-rpi.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-rpi -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-rpi.preinst b/debian/linux-image-6.9.7-rpi.preinst deleted file mode 100644 index 2660737f4c..0000000000 --- a/debian/linux-image-6.9.7-rpi.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-rpi -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-rpi.prerm b/debian/linux-image-6.9.7-rpi.prerm deleted file mode 100644 index ffd1c9e93d..0000000000 --- a/debian/linux-image-6.9.7-rpi.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-rpi -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-rt-686-pae-dbg.lintian-overrides b/debian/linux-image-6.9.7-rt-686-pae-dbg.lintian-overrides deleted file mode 100644 index 83e479699d..0000000000 --- a/debian/linux-image-6.9.7-rt-686-pae-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-rt-686-pae-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.7-rt-686-pae-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-rt-686-pae/vdso/vdso32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-rt-686-pae.NEWS b/debian/linux-image-6.9.7-rt-686-pae.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-rt-686-pae.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-rt-686-pae.lintian-overrides b/debian/linux-image-6.9.7-rt-686-pae.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-rt-686-pae.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-rt-686-pae.postinst b/debian/linux-image-6.9.7-rt-686-pae.postinst deleted file mode 100644 index 75673d18b3..0000000000 --- a/debian/linux-image-6.9.7-rt-686-pae.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-rt-686-pae -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-rt-686-pae.postrm b/debian/linux-image-6.9.7-rt-686-pae.postrm deleted file mode 100644 index e612754ca5..0000000000 --- a/debian/linux-image-6.9.7-rt-686-pae.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-rt-686-pae -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-rt-686-pae.preinst b/debian/linux-image-6.9.7-rt-686-pae.preinst deleted file mode 100644 index 048b7f2ce7..0000000000 --- a/debian/linux-image-6.9.7-rt-686-pae.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-rt-686-pae -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-rt-686-pae.prerm b/debian/linux-image-6.9.7-rt-686-pae.prerm deleted file mode 100644 index 4c16009f5c..0000000000 --- a/debian/linux-image-6.9.7-rt-686-pae.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-rt-686-pae -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-rt-amd64-dbg.lintian-overrides b/debian/linux-image-6.9.7-rt-amd64-dbg.lintian-overrides deleted file mode 100644 index a5b5229720..0000000000 --- a/debian/linux-image-6.9.7-rt-amd64-dbg.lintian-overrides +++ /dev/null @@ -1,15 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-rt-amd64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.7-rt-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-rt-amd64/vdso/vdso32.so* -linux-image-6.9.7-rt-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-rt-amd64/vdso/vdso64.so* -linux-image-6.9.7-rt-amd64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-rt-amd64/vdso/vdsox32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.9.7-rt-amd64-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.9.7-rt-amd64/vdso/vdsox32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-rt-amd64-unsigned.NEWS b/debian/linux-image-6.9.7-rt-amd64-unsigned.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-rt-amd64-unsigned.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-rt-amd64-unsigned.lintian-overrides b/debian/linux-image-6.9.7-rt-amd64-unsigned.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-rt-amd64-unsigned.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-rt-amd64-unsigned.postinst b/debian/linux-image-6.9.7-rt-amd64-unsigned.postinst deleted file mode 100644 index 8c61d231f9..0000000000 --- a/debian/linux-image-6.9.7-rt-amd64-unsigned.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-rt-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-rt-amd64-unsigned.postrm b/debian/linux-image-6.9.7-rt-amd64-unsigned.postrm deleted file mode 100644 index a8d3aef651..0000000000 --- a/debian/linux-image-6.9.7-rt-amd64-unsigned.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-rt-amd64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-rt-amd64-unsigned.preinst b/debian/linux-image-6.9.7-rt-amd64-unsigned.preinst deleted file mode 100644 index 4bf51d4e9b..0000000000 --- a/debian/linux-image-6.9.7-rt-amd64-unsigned.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-rt-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-rt-amd64-unsigned.prerm b/debian/linux-image-6.9.7-rt-amd64-unsigned.prerm deleted file mode 100644 index 2c431d2cb9..0000000000 --- a/debian/linux-image-6.9.7-rt-amd64-unsigned.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-rt-amd64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-rt-arm64-dbg.lintian-overrides b/debian/linux-image-6.9.7-rt-arm64-dbg.lintian-overrides deleted file mode 100644 index 51238415e7..0000000000 --- a/debian/linux-image-6.9.7-rt-arm64-dbg.lintian-overrides +++ /dev/null @@ -1,14 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-rt-arm64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.7-rt-arm64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-rt-arm64/vdso/vdso.so* -linux-image-6.9.7-rt-arm64-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-rt-arm64/vdso/vdso32.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.9.7-rt-arm64-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.9.7-rt-arm64/vdso/vdso32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-rt-arm64-unsigned.NEWS b/debian/linux-image-6.9.7-rt-arm64-unsigned.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-rt-arm64-unsigned.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-rt-arm64-unsigned.lintian-overrides b/debian/linux-image-6.9.7-rt-arm64-unsigned.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-rt-arm64-unsigned.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-rt-arm64-unsigned.postinst b/debian/linux-image-6.9.7-rt-arm64-unsigned.postinst deleted file mode 100644 index 2a0cd74c53..0000000000 --- a/debian/linux-image-6.9.7-rt-arm64-unsigned.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-rt-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-rt-arm64-unsigned.postrm b/debian/linux-image-6.9.7-rt-arm64-unsigned.postrm deleted file mode 100644 index bf48955c7c..0000000000 --- a/debian/linux-image-6.9.7-rt-arm64-unsigned.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-rt-arm64 -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-rt-arm64-unsigned.preinst b/debian/linux-image-6.9.7-rt-arm64-unsigned.preinst deleted file mode 100644 index 268781cbff..0000000000 --- a/debian/linux-image-6.9.7-rt-arm64-unsigned.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-rt-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-rt-arm64-unsigned.prerm b/debian/linux-image-6.9.7-rt-arm64-unsigned.prerm deleted file mode 100644 index 188ec9fea6..0000000000 --- a/debian/linux-image-6.9.7-rt-arm64-unsigned.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-rt-arm64 -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-rt-armmp-dbg.lintian-overrides b/debian/linux-image-6.9.7-rt-armmp-dbg.lintian-overrides deleted file mode 100644 index ff14b8c0a0..0000000000 --- a/debian/linux-image-6.9.7-rt-armmp-dbg.lintian-overrides +++ /dev/null @@ -1,12 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-rt-armmp-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.7-rt-armmp-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-rt-armmp/vdso/vdso.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-rt-armmp.NEWS b/debian/linux-image-6.9.7-rt-armmp.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-rt-armmp.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-rt-armmp.lintian-overrides b/debian/linux-image-6.9.7-rt-armmp.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-rt-armmp.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-rt-armmp.postinst b/debian/linux-image-6.9.7-rt-armmp.postinst deleted file mode 100644 index be1e69e447..0000000000 --- a/debian/linux-image-6.9.7-rt-armmp.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-rt-armmp -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-rt-armmp.postrm b/debian/linux-image-6.9.7-rt-armmp.postrm deleted file mode 100644 index 713684cb3b..0000000000 --- a/debian/linux-image-6.9.7-rt-armmp.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-rt-armmp -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-rt-armmp.preinst b/debian/linux-image-6.9.7-rt-armmp.preinst deleted file mode 100644 index c8e436b8d4..0000000000 --- a/debian/linux-image-6.9.7-rt-armmp.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-rt-armmp -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-rt-armmp.prerm b/debian/linux-image-6.9.7-rt-armmp.prerm deleted file mode 100644 index b1cad54328..0000000000 --- a/debian/linux-image-6.9.7-rt-armmp.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-rt-armmp -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-s390x-dbg.lintian-overrides b/debian/linux-image-6.9.7-s390x-dbg.lintian-overrides deleted file mode 100644 index f305dad765..0000000000 --- a/debian/linux-image-6.9.7-s390x-dbg.lintian-overrides +++ /dev/null @@ -1,14 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-s390x-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it -linux-image-6.9.7-s390x-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-s390x/vdso/vdso32.so* -linux-image-6.9.7-s390x-dbg: shared-library-lacks-stack-section *usr/lib/debug/lib/modules/6.9.7-s390x/vdso/vdso64.so* - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. -linux-image-6.9.7-s390x-dbg: binary-from-other-architecture *usr/lib/debug/lib/modules/6.9.7-s390x/vdso/vdso32.so* - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-s390x.NEWS b/debian/linux-image-6.9.7-s390x.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-s390x.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-s390x.lintian-overrides b/debian/linux-image-6.9.7-s390x.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-s390x.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-s390x.postinst b/debian/linux-image-6.9.7-s390x.postinst deleted file mode 100644 index 7ba7fb18c8..0000000000 --- a/debian/linux-image-6.9.7-s390x.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-s390x -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-s390x.postrm b/debian/linux-image-6.9.7-s390x.postrm deleted file mode 100644 index 5b6fb31b70..0000000000 --- a/debian/linux-image-6.9.7-s390x.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-s390x -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-s390x.preinst b/debian/linux-image-6.9.7-s390x.preinst deleted file mode 100644 index 5ebc5fd6b8..0000000000 --- a/debian/linux-image-6.9.7-s390x.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-s390x -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-s390x.prerm b/debian/linux-image-6.9.7-s390x.prerm deleted file mode 100644 index e56d4b55ef..0000000000 --- a/debian/linux-image-6.9.7-s390x.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-s390x -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-sh7751r-dbg.lintian-overrides b/debian/linux-image-6.9.7-sh7751r-dbg.lintian-overrides deleted file mode 100644 index ed78d1e973..0000000000 --- a/debian/linux-image-6.9.7-sh7751r-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-sh7751r-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-sh7751r.NEWS b/debian/linux-image-6.9.7-sh7751r.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-sh7751r.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-sh7751r.lintian-overrides b/debian/linux-image-6.9.7-sh7751r.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-sh7751r.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-sh7751r.postinst b/debian/linux-image-6.9.7-sh7751r.postinst deleted file mode 100644 index c81bbbdc35..0000000000 --- a/debian/linux-image-6.9.7-sh7751r.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-sh7751r -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-sh7751r.postrm b/debian/linux-image-6.9.7-sh7751r.postrm deleted file mode 100644 index 7c66126473..0000000000 --- a/debian/linux-image-6.9.7-sh7751r.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-sh7751r -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-sh7751r.preinst b/debian/linux-image-6.9.7-sh7751r.preinst deleted file mode 100644 index 44f689a3eb..0000000000 --- a/debian/linux-image-6.9.7-sh7751r.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-sh7751r -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-sh7751r.prerm b/debian/linux-image-6.9.7-sh7751r.prerm deleted file mode 100644 index d929dd1631..0000000000 --- a/debian/linux-image-6.9.7-sh7751r.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-sh7751r -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-sh7785lcr-dbg.lintian-overrides b/debian/linux-image-6.9.7-sh7785lcr-dbg.lintian-overrides deleted file mode 100644 index 54af02bda0..0000000000 --- a/debian/linux-image-6.9.7-sh7785lcr-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-sh7785lcr-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-sh7785lcr.NEWS b/debian/linux-image-6.9.7-sh7785lcr.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-sh7785lcr.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-sh7785lcr.lintian-overrides b/debian/linux-image-6.9.7-sh7785lcr.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-sh7785lcr.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-sh7785lcr.postinst b/debian/linux-image-6.9.7-sh7785lcr.postinst deleted file mode 100644 index 02e4669734..0000000000 --- a/debian/linux-image-6.9.7-sh7785lcr.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-sh7785lcr -image_path=/boot/vmlinuz-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-sh7785lcr.postrm b/debian/linux-image-6.9.7-sh7785lcr.postrm deleted file mode 100644 index f46c7423f3..0000000000 --- a/debian/linux-image-6.9.7-sh7785lcr.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-sh7785lcr -image_path=/boot/vmlinuz-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-sh7785lcr.preinst b/debian/linux-image-6.9.7-sh7785lcr.preinst deleted file mode 100644 index 645413b2d1..0000000000 --- a/debian/linux-image-6.9.7-sh7785lcr.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-sh7785lcr -image_path=/boot/vmlinuz-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-sh7785lcr.prerm b/debian/linux-image-6.9.7-sh7785lcr.prerm deleted file mode 100644 index b18eefe294..0000000000 --- a/debian/linux-image-6.9.7-sh7785lcr.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-sh7785lcr -image_path=/boot/vmlinuz-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-sparc64-dbg.lintian-overrides b/debian/linux-image-6.9.7-sparc64-dbg.lintian-overrides deleted file mode 100644 index 6543cc2470..0000000000 --- a/debian/linux-image-6.9.7-sparc64-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-sparc64-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-sparc64-smp-dbg.lintian-overrides b/debian/linux-image-6.9.7-sparc64-smp-dbg.lintian-overrides deleted file mode 100644 index b78d274661..0000000000 --- a/debian/linux-image-6.9.7-sparc64-smp-dbg.lintian-overrides +++ /dev/null @@ -1,11 +0,0 @@ -# Kernel dbg packages contain a full image with debug data -linux-image-6.9.7-sparc64-smp-dbg: dbg-package-missing-depends - -# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so -# it's OK that they don't have it - -# It is intended that 64-bit kernels provide vDSOs for 32-bit executables. -# lintian currently allows i386 executables on amd64. - -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. diff --git a/debian/linux-image-6.9.7-sparc64-smp.NEWS b/debian/linux-image-6.9.7-sparc64-smp.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-sparc64-smp.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-sparc64-smp.lintian-overrides b/debian/linux-image-6.9.7-sparc64-smp.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-sparc64-smp.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-sparc64-smp.postinst b/debian/linux-image-6.9.7-sparc64-smp.postinst deleted file mode 100644 index 5c3a7ab51a..0000000000 --- a/debian/linux-image-6.9.7-sparc64-smp.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-sparc64-smp -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-sparc64-smp.postrm b/debian/linux-image-6.9.7-sparc64-smp.postrm deleted file mode 100644 index 0a58e9766c..0000000000 --- a/debian/linux-image-6.9.7-sparc64-smp.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-sparc64-smp -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-sparc64-smp.preinst b/debian/linux-image-6.9.7-sparc64-smp.preinst deleted file mode 100644 index a2e1761777..0000000000 --- a/debian/linux-image-6.9.7-sparc64-smp.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-sparc64-smp -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-sparc64-smp.prerm b/debian/linux-image-6.9.7-sparc64-smp.prerm deleted file mode 100644 index ec25c7330d..0000000000 --- a/debian/linux-image-6.9.7-sparc64-smp.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-sparc64-smp -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-sparc64.NEWS b/debian/linux-image-6.9.7-sparc64.NEWS deleted file mode 100644 index f8e1fc0229..0000000000 --- a/debian/linux-image-6.9.7-sparc64.NEWS +++ /dev/null @@ -1,83 +0,0 @@ -linux (5.10.46-4) unstable; urgency=medium - - * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by - default, mitigating several security issues. However, an admin can - still change this setting later on, if needed, by writing 0 or 1 to - the kernel.unprivileged_bpf_disabled sysctl. - - If you prefer to keep unprivileged calls to bpf() enabled, set the - sysctl: - - kernel.unprivileged_bpf_disabled = 0 - - which is the upstream default. - - -- Salvatore Bonaccorso <carnil@debian.org> Mon, 02 Aug 2021 22:59:24 +0200 - -linux (5.10~rc7-1~exp2) unstable; urgency=medium - - * From Linux 5.10, all users are allowed to create user namespaces by - default. This will allow programs such as web browsers and container - managers to create more restricted sandboxes for untrusted or - less-trusted code, without the need to run as root or to use a - setuid-root helper. - - The previous Debian default was to restrict this feature to processes - running as root, because it exposed more security issues in the - kernel. However, the security benefits of more widespread sandboxing - probably now outweigh this risk. - - If you prefer to keep this feature restricted, set the sysctl: - - kernel.unprivileged_userns_clone = 0 - - -- Ben Hutchings <benh@debian.org> Sun, 13 Dec 2020 17:11:36 +0100 - -linux-latest (86) unstable; urgency=medium - - * From Linux 4.13.10-1, AppArmor is enabled by default. This allows - defining a "profile" for each installed program that can mitigate - security vulnerabilities in it. However, an incorrect profile might - disable some functionality of the program. - - In case you suspect that an AppArmor profile is incorrect, see - <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and - consider reporting a bug in the package providing the profile. The - profile may be part of the program's package or apparmor-profiles. - - -- Ben Hutchings <ben@decadent.org.uk> Thu, 30 Nov 2017 20:08:25 +0000 - -linux-latest (81) unstable; urgency=medium - - * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs - (amd64) is disabled. This breaks chroot environments and containers - that use (e)glibc 2.13 and earlier, including those based on Debian 7 - or RHEL/CentOS 6. To re-enable it, set the kernel parameter: - vsyscall=emulate - - -- Ben Hutchings <ben@decadent.org.uk> Fri, 30 Jun 2017 23:50:03 +0100 - -linux-latest (76) unstable; urgency=medium - - * From Linux 4.8, several changes have been made in the kernel - configuration to 'harden' the system, i.e. to mitigate security bugs. - Some changes may cause legitimate applications to fail, and can be - reverted by run-time configuration: - - On most architectures, the /dev/mem device can no longer be used to - access devices that also have a kernel driver. This breaks dosemu - and some old user-space graphics drivers. To allow this, set the - kernel parameter: iomem=relaxed - - The kernel log is no longer readable by unprivileged users. To - allow this, set the sysctl: kernel.dmesg_restrict=0 - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 02:05:32 +0100 - -linux-latest (75) unstable; urgency=medium - - * From Linux 4.7, the iptables connection tracking system will no longer - automatically load helper modules. If your firewall configuration - depends on connection tracking helpers, you should explicitly load the - required modules. For more information, see - <https://home.regit.org/netfilter-en/secure-use-of-helpers/>. - - -- Ben Hutchings <ben@decadent.org.uk> Sat, 29 Oct 2016 01:53:18 +0100 diff --git a/debian/linux-image-6.9.7-sparc64.lintian-overrides b/debian/linux-image-6.9.7-sparc64.lintian-overrides deleted file mode 100644 index 5e255135cd..0000000000 --- a/debian/linux-image-6.9.7-sparc64.lintian-overrides +++ /dev/null @@ -1,4 +0,0 @@ -# Some 32-bit architectures need 64-bit kernels and we still build -# these as the "wrong" architecture rather than mandating multiarch. - -# vmlinux needs extra sections that would normally be stripped. diff --git a/debian/linux-image-6.9.7-sparc64.postinst b/debian/linux-image-6.9.7-sparc64.postinst deleted file mode 100644 index 7cfb02aa22..0000000000 --- a/debian/linux-image-6.9.7-sparc64.postinst +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-sparc64 -image_path=/boot/vmlinux-$version - -if [ "$1" != configure ]; then - exit 0 -fi - -depmod $version - -if [ -f /lib/modules/$version/.fresh-install ]; then - change=install -else - change=upgrade -fi -linux-update-symlinks $change $version $image_path -rm -f /lib/modules/$version/.fresh-install - -if [ -d /etc/kernel/postinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-sparc64.postrm b/debian/linux-image-6.9.7-sparc64.postrm deleted file mode 100644 index 1fe3ef6405..0000000000 --- a/debian/linux-image-6.9.7-sparc64.postrm +++ /dev/null @@ -1,31 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-sparc64 -image_path=/boot/vmlinux-$version - -rm -f /lib/modules/$version/.fresh-install - -if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then - linux-update-symlinks remove $version $image_path -fi - -if [ -d /etc/kernel/postrm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/postrm.d -fi - -if [ "$1" = purge ]; then - for extra_file in modules.dep modules.isapnpmap modules.pcimap \ - modules.usbmap modules.parportmap \ - modules.generic_string modules.ieee1394map \ - modules.ieee1394map modules.pnpbiosmap \ - modules.alias modules.ccwmap modules.inputmap \ - modules.symbols modules.ofmap \ - modules.seriomap modules.\*.bin \ - modules.softdep modules.weakdep modules.devname; do - eval rm -f /lib/modules/$version/$extra_file - done - rmdir /lib/modules/$version || true -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-sparc64.preinst b/debian/linux-image-6.9.7-sparc64.preinst deleted file mode 100644 index a8d3372720..0000000000 --- a/debian/linux-image-6.9.7-sparc64.preinst +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-sparc64 -image_path=/boot/vmlinux-$version - -if [ "$1" = abort-upgrade ]; then - exit 0 -fi - -if [ "$1" = install ]; then - # Create a flag file for postinst - mkdir -p /lib/modules/$version - touch /lib/modules/$version/.fresh-install -fi - -if [ -d /etc/kernel/preinst.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/preinst.d -fi - -exit 0 diff --git a/debian/linux-image-6.9.7-sparc64.prerm b/debian/linux-image-6.9.7-sparc64.prerm deleted file mode 100644 index bd7c8e73ff..0000000000 --- a/debian/linux-image-6.9.7-sparc64.prerm +++ /dev/null @@ -1,17 +0,0 @@ -#!/bin/sh -e - -version=6.9.7-sparc64 -image_path=/boot/vmlinux-$version - -if [ "$1" != remove ]; then - exit 0 -fi - -linux-check-removal $version - -if [ -d /etc/kernel/prerm.d ]; then - DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \ - --arg=$image_path /etc/kernel/prerm.d -fi - -exit 0 diff --git a/debian/linux-image-686-dbg.lintian-overrides b/debian/linux-image-686-dbg.lintian-overrides deleted file mode 100644 index 6eca372900..0000000000 --- a/debian/linux-image-686-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-686-dbg: wrong-section-according-to-package-name linux-image-686-dbg => debug diff --git a/debian/linux-image-686-dbg.maintscript b/debian/linux-image-686-dbg.maintscript deleted file mode 100644 index 9d05c2d84d..0000000000 --- a/debian/linux-image-686-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-686-dbg linux-image-6.9.7-686-dbg 5.7~rc5-1~exp1 linux-image-686-dbg diff --git a/debian/linux-image-686-pae-dbg.lintian-overrides b/debian/linux-image-686-pae-dbg.lintian-overrides deleted file mode 100644 index 9f3bbc4d73..0000000000 --- a/debian/linux-image-686-pae-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-686-pae-dbg: wrong-section-according-to-package-name linux-image-686-pae-dbg => debug diff --git a/debian/linux-image-686-pae-dbg.maintscript b/debian/linux-image-686-pae-dbg.maintscript deleted file mode 100644 index 7ef57d132a..0000000000 --- a/debian/linux-image-686-pae-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-686-pae-dbg linux-image-6.9.7-686-pae-dbg 5.7~rc5-1~exp1 linux-image-686-pae-dbg diff --git a/debian/linux-image-686-pae.bug-presubj b/debian/linux-image-686-pae.bug-presubj deleted file mode 100644 index bcd620d832..0000000000 --- a/debian/linux-image-686-pae.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-686-pae instead. diff --git a/debian/linux-image-686-pae.maintscript b/debian/linux-image-686-pae.maintscript deleted file mode 100644 index a964c15996..0000000000 --- a/debian/linux-image-686-pae.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-686-pae linux-image-6.9.7-686-pae 5.7~rc5-1~exp1 linux-image-686-pae diff --git a/debian/linux-image-686.bug-presubj b/debian/linux-image-686.bug-presubj deleted file mode 100644 index 4fe2958fa2..0000000000 --- a/debian/linux-image-686.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-686 instead. diff --git a/debian/linux-image-686.maintscript b/debian/linux-image-686.maintscript deleted file mode 100644 index 118b6abc34..0000000000 --- a/debian/linux-image-686.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-686 linux-image-6.9.7-686 5.7~rc5-1~exp1 linux-image-686 diff --git a/debian/linux-image-alpha-generic-dbg.lintian-overrides b/debian/linux-image-alpha-generic-dbg.lintian-overrides deleted file mode 100644 index 0be8eb809c..0000000000 --- a/debian/linux-image-alpha-generic-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-alpha-generic-dbg: wrong-section-according-to-package-name linux-image-alpha-generic-dbg => debug diff --git a/debian/linux-image-alpha-generic-dbg.maintscript b/debian/linux-image-alpha-generic-dbg.maintscript deleted file mode 100644 index 1e45fa9871..0000000000 --- a/debian/linux-image-alpha-generic-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-alpha-generic-dbg linux-image-6.9.7-alpha-generic-dbg 5.7~rc5-1~exp1 linux-image-alpha-generic-dbg diff --git a/debian/linux-image-alpha-generic.bug-presubj b/debian/linux-image-alpha-generic.bug-presubj deleted file mode 100644 index 982a150819..0000000000 --- a/debian/linux-image-alpha-generic.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-alpha-generic instead. diff --git a/debian/linux-image-alpha-generic.maintscript b/debian/linux-image-alpha-generic.maintscript deleted file mode 100644 index af1ad13284..0000000000 --- a/debian/linux-image-alpha-generic.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-alpha-generic linux-image-6.9.7-alpha-generic 5.7~rc5-1~exp1 linux-image-alpha-generic diff --git a/debian/linux-image-alpha-smp-dbg.lintian-overrides b/debian/linux-image-alpha-smp-dbg.lintian-overrides deleted file mode 100644 index 431034ce7b..0000000000 --- a/debian/linux-image-alpha-smp-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-alpha-smp-dbg: wrong-section-according-to-package-name linux-image-alpha-smp-dbg => debug diff --git a/debian/linux-image-alpha-smp-dbg.maintscript b/debian/linux-image-alpha-smp-dbg.maintscript deleted file mode 100644 index 9d405faf1f..0000000000 --- a/debian/linux-image-alpha-smp-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-alpha-smp-dbg linux-image-6.9.7-alpha-smp-dbg 5.7~rc5-1~exp1 linux-image-alpha-smp-dbg diff --git a/debian/linux-image-alpha-smp.bug-presubj b/debian/linux-image-alpha-smp.bug-presubj deleted file mode 100644 index 7c8f21c61f..0000000000 --- a/debian/linux-image-alpha-smp.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-alpha-smp instead. diff --git a/debian/linux-image-alpha-smp.maintscript b/debian/linux-image-alpha-smp.maintscript deleted file mode 100644 index dbb67dc1e9..0000000000 --- a/debian/linux-image-alpha-smp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-alpha-smp linux-image-6.9.7-alpha-smp 5.7~rc5-1~exp1 linux-image-alpha-smp diff --git a/debian/linux-image-amd64-dbg.lintian-overrides b/debian/linux-image-amd64-dbg.lintian-overrides deleted file mode 100644 index 55f46093d7..0000000000 --- a/debian/linux-image-amd64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-amd64-dbg: wrong-section-according-to-package-name linux-image-amd64-dbg => debug diff --git a/debian/linux-image-amd64-dbg.maintscript b/debian/linux-image-amd64-dbg.maintscript deleted file mode 100644 index bdb5335d43..0000000000 --- a/debian/linux-image-amd64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-amd64-dbg linux-image-6.9.7-amd64-dbg 5.7~rc5-1~exp1 linux-image-amd64-dbg diff --git a/debian/linux-image-amd64-signed-template.lintian-overrides b/debian/linux-image-amd64-signed-template.lintian-overrides deleted file mode 100644 index 40dfd024a0..0000000000 --- a/debian/linux-image-amd64-signed-template.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-amd64-signed-template: script-not-executable diff --git a/debian/linux-image-arm64-dbg.lintian-overrides b/debian/linux-image-arm64-dbg.lintian-overrides deleted file mode 100644 index 56b0496404..0000000000 --- a/debian/linux-image-arm64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-arm64-dbg: wrong-section-according-to-package-name linux-image-arm64-dbg => debug diff --git a/debian/linux-image-arm64-dbg.maintscript b/debian/linux-image-arm64-dbg.maintscript deleted file mode 100644 index ed109c05ea..0000000000 --- a/debian/linux-image-arm64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-arm64-dbg linux-image-6.9.7-arm64-dbg 5.7~rc5-1~exp1 linux-image-arm64-dbg diff --git a/debian/linux-image-arm64-signed-template.lintian-overrides b/debian/linux-image-arm64-signed-template.lintian-overrides deleted file mode 100644 index a0dfc1afbf..0000000000 --- a/debian/linux-image-arm64-signed-template.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-arm64-signed-template: script-not-executable diff --git a/debian/linux-image-armmp-dbg.lintian-overrides b/debian/linux-image-armmp-dbg.lintian-overrides deleted file mode 100644 index 02d39145b8..0000000000 --- a/debian/linux-image-armmp-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-armmp-dbg: wrong-section-according-to-package-name linux-image-armmp-dbg => debug diff --git a/debian/linux-image-armmp-dbg.maintscript b/debian/linux-image-armmp-dbg.maintscript deleted file mode 100644 index 8fd2eec690..0000000000 --- a/debian/linux-image-armmp-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-armmp-dbg linux-image-6.9.7-armmp-dbg 5.7~rc5-1~exp1 linux-image-armmp-dbg diff --git a/debian/linux-image-armmp-lpae-dbg.lintian-overrides b/debian/linux-image-armmp-lpae-dbg.lintian-overrides deleted file mode 100644 index eff6548d15..0000000000 --- a/debian/linux-image-armmp-lpae-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-armmp-lpae-dbg: wrong-section-according-to-package-name linux-image-armmp-lpae-dbg => debug diff --git a/debian/linux-image-armmp-lpae-dbg.maintscript b/debian/linux-image-armmp-lpae-dbg.maintscript deleted file mode 100644 index 6d49823d06..0000000000 --- a/debian/linux-image-armmp-lpae-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-armmp-lpae-dbg linux-image-6.9.7-armmp-lpae-dbg 5.7~rc5-1~exp1 linux-image-armmp-lpae-dbg diff --git a/debian/linux-image-armmp-lpae.bug-presubj b/debian/linux-image-armmp-lpae.bug-presubj deleted file mode 100644 index 58be729a10..0000000000 --- a/debian/linux-image-armmp-lpae.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-armmp-lpae instead. diff --git a/debian/linux-image-armmp-lpae.maintscript b/debian/linux-image-armmp-lpae.maintscript deleted file mode 100644 index ba476337f5..0000000000 --- a/debian/linux-image-armmp-lpae.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-armmp-lpae linux-image-6.9.7-armmp-lpae 5.7~rc5-1~exp1 linux-image-armmp-lpae diff --git a/debian/linux-image-armmp.bug-presubj b/debian/linux-image-armmp.bug-presubj deleted file mode 100644 index b5b8d9fce3..0000000000 --- a/debian/linux-image-armmp.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-armmp instead. diff --git a/debian/linux-image-armmp.maintscript b/debian/linux-image-armmp.maintscript deleted file mode 100644 index 4d53cd5e8e..0000000000 --- a/debian/linux-image-armmp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-armmp linux-image-6.9.7-armmp 5.7~rc5-1~exp1 linux-image-armmp diff --git a/debian/linux-image-cloud-amd64-dbg.lintian-overrides b/debian/linux-image-cloud-amd64-dbg.lintian-overrides deleted file mode 100644 index be5093962f..0000000000 --- a/debian/linux-image-cloud-amd64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-cloud-amd64-dbg: wrong-section-according-to-package-name linux-image-cloud-amd64-dbg => debug diff --git a/debian/linux-image-cloud-amd64-dbg.maintscript b/debian/linux-image-cloud-amd64-dbg.maintscript deleted file mode 100644 index e922873a31..0000000000 --- a/debian/linux-image-cloud-amd64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-cloud-amd64-dbg linux-image-6.9.7-cloud-amd64-dbg 5.7~rc5-1~exp1 linux-image-cloud-amd64-dbg diff --git a/debian/linux-image-cloud-arm64-dbg.lintian-overrides b/debian/linux-image-cloud-arm64-dbg.lintian-overrides deleted file mode 100644 index 311868dd3c..0000000000 --- a/debian/linux-image-cloud-arm64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-cloud-arm64-dbg: wrong-section-according-to-package-name linux-image-cloud-arm64-dbg => debug diff --git a/debian/linux-image-cloud-arm64-dbg.maintscript b/debian/linux-image-cloud-arm64-dbg.maintscript deleted file mode 100644 index b20e44a643..0000000000 --- a/debian/linux-image-cloud-arm64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-cloud-arm64-dbg linux-image-6.9.7-cloud-arm64-dbg 5.7~rc5-1~exp1 linux-image-cloud-arm64-dbg diff --git a/debian/linux-image-loong64-dbg.lintian-overrides b/debian/linux-image-loong64-dbg.lintian-overrides deleted file mode 100644 index 7b5b9c8cfa..0000000000 --- a/debian/linux-image-loong64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-loong64-dbg: wrong-section-according-to-package-name linux-image-loong64-dbg => debug diff --git a/debian/linux-image-loong64-dbg.maintscript b/debian/linux-image-loong64-dbg.maintscript deleted file mode 100644 index 40a1f3544c..0000000000 --- a/debian/linux-image-loong64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-loong64-dbg linux-image-6.9.7-loong64-dbg 5.7~rc5-1~exp1 linux-image-loong64-dbg diff --git a/debian/linux-image-loong64.bug-presubj b/debian/linux-image-loong64.bug-presubj deleted file mode 100644 index 0611ebb23d..0000000000 --- a/debian/linux-image-loong64.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-loong64 instead. diff --git a/debian/linux-image-loong64.maintscript b/debian/linux-image-loong64.maintscript deleted file mode 100644 index 3d6da060ef..0000000000 --- a/debian/linux-image-loong64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-loong64 linux-image-6.9.7-loong64 5.7~rc5-1~exp1 linux-image-loong64 diff --git a/debian/linux-image-loongson-3-dbg.lintian-overrides b/debian/linux-image-loongson-3-dbg.lintian-overrides deleted file mode 100644 index 182111a3c3..0000000000 --- a/debian/linux-image-loongson-3-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-loongson-3-dbg: wrong-section-according-to-package-name linux-image-loongson-3-dbg => debug diff --git a/debian/linux-image-loongson-3-dbg.maintscript b/debian/linux-image-loongson-3-dbg.maintscript deleted file mode 100644 index 8547d51b86..0000000000 --- a/debian/linux-image-loongson-3-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-loongson-3-dbg linux-image-6.9.7-loongson-3-dbg 5.7~rc5-1~exp1 linux-image-loongson-3-dbg diff --git a/debian/linux-image-loongson-3.bug-presubj b/debian/linux-image-loongson-3.bug-presubj deleted file mode 100644 index 1b0006c144..0000000000 --- a/debian/linux-image-loongson-3.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-loongson-3 instead. diff --git a/debian/linux-image-loongson-3.maintscript b/debian/linux-image-loongson-3.maintscript deleted file mode 100644 index 04e95bf9a0..0000000000 --- a/debian/linux-image-loongson-3.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-loongson-3 linux-image-6.9.7-loongson-3 5.7~rc5-1~exp1 linux-image-loongson-3 diff --git a/debian/linux-image-m68k-dbg.lintian-overrides b/debian/linux-image-m68k-dbg.lintian-overrides deleted file mode 100644 index 5a8721293b..0000000000 --- a/debian/linux-image-m68k-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-m68k-dbg: wrong-section-according-to-package-name linux-image-m68k-dbg => debug diff --git a/debian/linux-image-m68k-dbg.maintscript b/debian/linux-image-m68k-dbg.maintscript deleted file mode 100644 index 99bf51fe71..0000000000 --- a/debian/linux-image-m68k-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-m68k-dbg linux-image-6.9.7-m68k-dbg 5.7~rc5-1~exp1 linux-image-m68k-dbg diff --git a/debian/linux-image-m68k.bug-presubj b/debian/linux-image-m68k.bug-presubj deleted file mode 100644 index 8feb61109c..0000000000 --- a/debian/linux-image-m68k.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-m68k instead. diff --git a/debian/linux-image-m68k.maintscript b/debian/linux-image-m68k.maintscript deleted file mode 100644 index 4c57de2001..0000000000 --- a/debian/linux-image-m68k.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-m68k linux-image-6.9.7-m68k 5.7~rc5-1~exp1 linux-image-m68k diff --git a/debian/linux-image-mips32r2eb-dbg.lintian-overrides b/debian/linux-image-mips32r2eb-dbg.lintian-overrides deleted file mode 100644 index df2810cbeb..0000000000 --- a/debian/linux-image-mips32r2eb-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-mips32r2eb-dbg: wrong-section-according-to-package-name linux-image-mips32r2eb-dbg => debug diff --git a/debian/linux-image-mips32r2eb-dbg.maintscript b/debian/linux-image-mips32r2eb-dbg.maintscript deleted file mode 100644 index 6af1312298..0000000000 --- a/debian/linux-image-mips32r2eb-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips32r2eb-dbg linux-image-6.9.7-mips32r2eb-dbg 5.7~rc5-1~exp1 linux-image-mips32r2eb-dbg diff --git a/debian/linux-image-mips32r2eb.bug-presubj b/debian/linux-image-mips32r2eb.bug-presubj deleted file mode 100644 index 1cbe52cb7c..0000000000 --- a/debian/linux-image-mips32r2eb.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-mips32r2eb instead. diff --git a/debian/linux-image-mips32r2eb.maintscript b/debian/linux-image-mips32r2eb.maintscript deleted file mode 100644 index e3321fb180..0000000000 --- a/debian/linux-image-mips32r2eb.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips32r2eb linux-image-6.9.7-mips32r2eb 5.7~rc5-1~exp1 linux-image-mips32r2eb diff --git a/debian/linux-image-mips32r2el-dbg.lintian-overrides b/debian/linux-image-mips32r2el-dbg.lintian-overrides deleted file mode 100644 index 8e900ef46c..0000000000 --- a/debian/linux-image-mips32r2el-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-mips32r2el-dbg: wrong-section-according-to-package-name linux-image-mips32r2el-dbg => debug diff --git a/debian/linux-image-mips32r2el-dbg.maintscript b/debian/linux-image-mips32r2el-dbg.maintscript deleted file mode 100644 index 0db7729a1f..0000000000 --- a/debian/linux-image-mips32r2el-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips32r2el-dbg linux-image-6.9.7-mips32r2el-dbg 5.7~rc5-1~exp1 linux-image-mips32r2el-dbg diff --git a/debian/linux-image-mips32r2el.bug-presubj b/debian/linux-image-mips32r2el.bug-presubj deleted file mode 100644 index b100d843c2..0000000000 --- a/debian/linux-image-mips32r2el.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-mips32r2el instead. diff --git a/debian/linux-image-mips32r2el.maintscript b/debian/linux-image-mips32r2el.maintscript deleted file mode 100644 index 25942e51d0..0000000000 --- a/debian/linux-image-mips32r2el.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips32r2el linux-image-6.9.7-mips32r2el 5.7~rc5-1~exp1 linux-image-mips32r2el diff --git a/debian/linux-image-mips64r2eb-dbg.lintian-overrides b/debian/linux-image-mips64r2eb-dbg.lintian-overrides deleted file mode 100644 index f8497a57e3..0000000000 --- a/debian/linux-image-mips64r2eb-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-mips64r2eb-dbg: wrong-section-according-to-package-name linux-image-mips64r2eb-dbg => debug diff --git a/debian/linux-image-mips64r2eb-dbg.maintscript b/debian/linux-image-mips64r2eb-dbg.maintscript deleted file mode 100644 index ade33fad84..0000000000 --- a/debian/linux-image-mips64r2eb-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips64r2eb-dbg linux-image-6.9.7-mips64r2eb-dbg 5.7~rc5-1~exp1 linux-image-mips64r2eb-dbg diff --git a/debian/linux-image-mips64r2eb.bug-presubj b/debian/linux-image-mips64r2eb.bug-presubj deleted file mode 100644 index 37d437e363..0000000000 --- a/debian/linux-image-mips64r2eb.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-mips64r2eb instead. diff --git a/debian/linux-image-mips64r2eb.maintscript b/debian/linux-image-mips64r2eb.maintscript deleted file mode 100644 index c2384667f4..0000000000 --- a/debian/linux-image-mips64r2eb.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips64r2eb linux-image-6.9.7-mips64r2eb 5.7~rc5-1~exp1 linux-image-mips64r2eb diff --git a/debian/linux-image-mips64r2el-dbg.lintian-overrides b/debian/linux-image-mips64r2el-dbg.lintian-overrides deleted file mode 100644 index 239bf48e05..0000000000 --- a/debian/linux-image-mips64r2el-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-mips64r2el-dbg: wrong-section-according-to-package-name linux-image-mips64r2el-dbg => debug diff --git a/debian/linux-image-mips64r2el-dbg.maintscript b/debian/linux-image-mips64r2el-dbg.maintscript deleted file mode 100644 index f034a0d20f..0000000000 --- a/debian/linux-image-mips64r2el-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips64r2el-dbg linux-image-6.9.7-mips64r2el-dbg 5.7~rc5-1~exp1 linux-image-mips64r2el-dbg diff --git a/debian/linux-image-mips64r2el.bug-presubj b/debian/linux-image-mips64r2el.bug-presubj deleted file mode 100644 index 5a52ad9085..0000000000 --- a/debian/linux-image-mips64r2el.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-mips64r2el instead. diff --git a/debian/linux-image-mips64r2el.maintscript b/debian/linux-image-mips64r2el.maintscript deleted file mode 100644 index 9e4e656b3d..0000000000 --- a/debian/linux-image-mips64r2el.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips64r2el linux-image-6.9.7-mips64r2el 5.7~rc5-1~exp1 linux-image-mips64r2el diff --git a/debian/linux-image-mips64r6el-dbg.lintian-overrides b/debian/linux-image-mips64r6el-dbg.lintian-overrides deleted file mode 100644 index 844b823001..0000000000 --- a/debian/linux-image-mips64r6el-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-mips64r6el-dbg: wrong-section-according-to-package-name linux-image-mips64r6el-dbg => debug diff --git a/debian/linux-image-mips64r6el-dbg.maintscript b/debian/linux-image-mips64r6el-dbg.maintscript deleted file mode 100644 index 8884e4155f..0000000000 --- a/debian/linux-image-mips64r6el-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips64r6el-dbg linux-image-6.9.7-mips64r6el-dbg 5.7~rc5-1~exp1 linux-image-mips64r6el-dbg diff --git a/debian/linux-image-mips64r6el.bug-presubj b/debian/linux-image-mips64r6el.bug-presubj deleted file mode 100644 index aeaa7ad7e8..0000000000 --- a/debian/linux-image-mips64r6el.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-mips64r6el instead. diff --git a/debian/linux-image-mips64r6el.maintscript b/debian/linux-image-mips64r6el.maintscript deleted file mode 100644 index 4526192f09..0000000000 --- a/debian/linux-image-mips64r6el.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-mips64r6el linux-image-6.9.7-mips64r6el 5.7~rc5-1~exp1 linux-image-mips64r6el diff --git a/debian/linux-image-octeon-dbg.lintian-overrides b/debian/linux-image-octeon-dbg.lintian-overrides deleted file mode 100644 index f52812a09f..0000000000 --- a/debian/linux-image-octeon-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-octeon-dbg: wrong-section-according-to-package-name linux-image-octeon-dbg => debug diff --git a/debian/linux-image-octeon-dbg.maintscript b/debian/linux-image-octeon-dbg.maintscript deleted file mode 100644 index ec6c36eae3..0000000000 --- a/debian/linux-image-octeon-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-octeon-dbg linux-image-6.9.7-octeon-dbg 5.7~rc5-1~exp1 linux-image-octeon-dbg diff --git a/debian/linux-image-octeon.bug-presubj b/debian/linux-image-octeon.bug-presubj deleted file mode 100644 index 598065b909..0000000000 --- a/debian/linux-image-octeon.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-octeon instead. diff --git a/debian/linux-image-octeon.maintscript b/debian/linux-image-octeon.maintscript deleted file mode 100644 index c4fc7829c5..0000000000 --- a/debian/linux-image-octeon.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-octeon linux-image-6.9.7-octeon 5.7~rc5-1~exp1 linux-image-octeon diff --git a/debian/linux-image-parisc-dbg.lintian-overrides b/debian/linux-image-parisc-dbg.lintian-overrides deleted file mode 100644 index c5be26d852..0000000000 --- a/debian/linux-image-parisc-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-parisc-dbg: wrong-section-according-to-package-name linux-image-parisc-dbg => debug diff --git a/debian/linux-image-parisc-dbg.maintscript b/debian/linux-image-parisc-dbg.maintscript deleted file mode 100644 index 18c6012bc3..0000000000 --- a/debian/linux-image-parisc-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-parisc-dbg linux-image-6.9.7-parisc-dbg 5.7~rc5-1~exp1 linux-image-parisc-dbg diff --git a/debian/linux-image-parisc.bug-presubj b/debian/linux-image-parisc.bug-presubj deleted file mode 100644 index eb0344fd53..0000000000 --- a/debian/linux-image-parisc.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-parisc instead. diff --git a/debian/linux-image-parisc.maintscript b/debian/linux-image-parisc.maintscript deleted file mode 100644 index 30cedc9a89..0000000000 --- a/debian/linux-image-parisc.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-parisc linux-image-6.9.7-parisc 5.7~rc5-1~exp1 linux-image-parisc diff --git a/debian/linux-image-parisc64-dbg.lintian-overrides b/debian/linux-image-parisc64-dbg.lintian-overrides deleted file mode 100644 index 3736baec71..0000000000 --- a/debian/linux-image-parisc64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-parisc64-dbg: wrong-section-according-to-package-name linux-image-parisc64-dbg => debug diff --git a/debian/linux-image-parisc64-dbg.maintscript b/debian/linux-image-parisc64-dbg.maintscript deleted file mode 100644 index 3914fce17c..0000000000 --- a/debian/linux-image-parisc64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-parisc64-dbg linux-image-6.9.7-parisc64-dbg 5.7~rc5-1~exp1 linux-image-parisc64-dbg diff --git a/debian/linux-image-parisc64.bug-presubj b/debian/linux-image-parisc64.bug-presubj deleted file mode 100644 index f98a985ac2..0000000000 --- a/debian/linux-image-parisc64.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-parisc64 instead. diff --git a/debian/linux-image-parisc64.maintscript b/debian/linux-image-parisc64.maintscript deleted file mode 100644 index 6174ec07de..0000000000 --- a/debian/linux-image-parisc64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-parisc64 linux-image-6.9.7-parisc64 5.7~rc5-1~exp1 linux-image-parisc64 diff --git a/debian/linux-image-powerpc-dbg.lintian-overrides b/debian/linux-image-powerpc-dbg.lintian-overrides deleted file mode 100644 index 4075b8b6b7..0000000000 --- a/debian/linux-image-powerpc-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-powerpc-dbg: wrong-section-according-to-package-name linux-image-powerpc-dbg => debug diff --git a/debian/linux-image-powerpc-dbg.maintscript b/debian/linux-image-powerpc-dbg.maintscript deleted file mode 100644 index dbc58b1030..0000000000 --- a/debian/linux-image-powerpc-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc-dbg linux-image-6.9.7-powerpc-dbg 5.7~rc5-1~exp1 linux-image-powerpc-dbg diff --git a/debian/linux-image-powerpc-smp-dbg.lintian-overrides b/debian/linux-image-powerpc-smp-dbg.lintian-overrides deleted file mode 100644 index e1447a9ac7..0000000000 --- a/debian/linux-image-powerpc-smp-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-powerpc-smp-dbg: wrong-section-according-to-package-name linux-image-powerpc-smp-dbg => debug diff --git a/debian/linux-image-powerpc-smp-dbg.maintscript b/debian/linux-image-powerpc-smp-dbg.maintscript deleted file mode 100644 index a69d789888..0000000000 --- a/debian/linux-image-powerpc-smp-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc-smp-dbg linux-image-6.9.7-powerpc-smp-dbg 5.7~rc5-1~exp1 linux-image-powerpc-smp-dbg diff --git a/debian/linux-image-powerpc-smp.bug-presubj b/debian/linux-image-powerpc-smp.bug-presubj deleted file mode 100644 index da39e6f8f0..0000000000 --- a/debian/linux-image-powerpc-smp.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-powerpc-smp instead. diff --git a/debian/linux-image-powerpc-smp.maintscript b/debian/linux-image-powerpc-smp.maintscript deleted file mode 100644 index 06f0bf6f92..0000000000 --- a/debian/linux-image-powerpc-smp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc-smp linux-image-6.9.7-powerpc-smp 5.7~rc5-1~exp1 linux-image-powerpc-smp diff --git a/debian/linux-image-powerpc.bug-presubj b/debian/linux-image-powerpc.bug-presubj deleted file mode 100644 index 4ad558fa69..0000000000 --- a/debian/linux-image-powerpc.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-powerpc instead. diff --git a/debian/linux-image-powerpc.maintscript b/debian/linux-image-powerpc.maintscript deleted file mode 100644 index 92816b50a2..0000000000 --- a/debian/linux-image-powerpc.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc linux-image-6.9.7-powerpc 5.7~rc5-1~exp1 linux-image-powerpc diff --git a/debian/linux-image-powerpc64-dbg.lintian-overrides b/debian/linux-image-powerpc64-dbg.lintian-overrides deleted file mode 100644 index 8a7b4b83bc..0000000000 --- a/debian/linux-image-powerpc64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-powerpc64-dbg: wrong-section-according-to-package-name linux-image-powerpc64-dbg => debug diff --git a/debian/linux-image-powerpc64-dbg.maintscript b/debian/linux-image-powerpc64-dbg.maintscript deleted file mode 100644 index 733f24cb70..0000000000 --- a/debian/linux-image-powerpc64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc64-dbg linux-image-6.9.7-powerpc64-dbg 5.7~rc5-1~exp1 linux-image-powerpc64-dbg diff --git a/debian/linux-image-powerpc64.bug-presubj b/debian/linux-image-powerpc64.bug-presubj deleted file mode 100644 index 33163c67b5..0000000000 --- a/debian/linux-image-powerpc64.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-powerpc64 instead. diff --git a/debian/linux-image-powerpc64.maintscript b/debian/linux-image-powerpc64.maintscript deleted file mode 100644 index 0d0fafabb3..0000000000 --- a/debian/linux-image-powerpc64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc64 linux-image-6.9.7-powerpc64 5.7~rc5-1~exp1 linux-image-powerpc64 diff --git a/debian/linux-image-powerpc64le-dbg.lintian-overrides b/debian/linux-image-powerpc64le-dbg.lintian-overrides deleted file mode 100644 index 69cf156538..0000000000 --- a/debian/linux-image-powerpc64le-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-powerpc64le-dbg: wrong-section-according-to-package-name linux-image-powerpc64le-dbg => debug diff --git a/debian/linux-image-powerpc64le-dbg.maintscript b/debian/linux-image-powerpc64le-dbg.maintscript deleted file mode 100644 index f07eef661a..0000000000 --- a/debian/linux-image-powerpc64le-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc64le-dbg linux-image-6.9.7-powerpc64le-dbg 5.7~rc5-1~exp1 linux-image-powerpc64le-dbg diff --git a/debian/linux-image-powerpc64le.bug-presubj b/debian/linux-image-powerpc64le.bug-presubj deleted file mode 100644 index 40103c3c49..0000000000 --- a/debian/linux-image-powerpc64le.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-powerpc64le instead. diff --git a/debian/linux-image-powerpc64le.maintscript b/debian/linux-image-powerpc64le.maintscript deleted file mode 100644 index 37481270f6..0000000000 --- a/debian/linux-image-powerpc64le.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-powerpc64le linux-image-6.9.7-powerpc64le 5.7~rc5-1~exp1 linux-image-powerpc64le diff --git a/debian/linux-image-riscv64-dbg.lintian-overrides b/debian/linux-image-riscv64-dbg.lintian-overrides deleted file mode 100644 index 247a3b1349..0000000000 --- a/debian/linux-image-riscv64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-riscv64-dbg: wrong-section-according-to-package-name linux-image-riscv64-dbg => debug diff --git a/debian/linux-image-riscv64-dbg.maintscript b/debian/linux-image-riscv64-dbg.maintscript deleted file mode 100644 index ac2e4cb73e..0000000000 --- a/debian/linux-image-riscv64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-riscv64-dbg linux-image-6.9.7-riscv64-dbg 5.7~rc5-1~exp1 linux-image-riscv64-dbg diff --git a/debian/linux-image-riscv64.bug-presubj b/debian/linux-image-riscv64.bug-presubj deleted file mode 100644 index a53ce292af..0000000000 --- a/debian/linux-image-riscv64.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-riscv64 instead. diff --git a/debian/linux-image-riscv64.maintscript b/debian/linux-image-riscv64.maintscript deleted file mode 100644 index 4f8cc5f27f..0000000000 --- a/debian/linux-image-riscv64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-riscv64 linux-image-6.9.7-riscv64 5.7~rc5-1~exp1 linux-image-riscv64 diff --git a/debian/linux-image-rpi-dbg.lintian-overrides b/debian/linux-image-rpi-dbg.lintian-overrides deleted file mode 100644 index 7cc8129d76..0000000000 --- a/debian/linux-image-rpi-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-rpi-dbg: wrong-section-according-to-package-name linux-image-rpi-dbg => debug diff --git a/debian/linux-image-rpi-dbg.maintscript b/debian/linux-image-rpi-dbg.maintscript deleted file mode 100644 index f2ba3114ed..0000000000 --- a/debian/linux-image-rpi-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rpi-dbg linux-image-6.9.7-rpi-dbg 5.7~rc5-1~exp1 linux-image-rpi-dbg diff --git a/debian/linux-image-rpi.bug-presubj b/debian/linux-image-rpi.bug-presubj deleted file mode 100644 index 1129eb7df1..0000000000 --- a/debian/linux-image-rpi.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-rpi instead. diff --git a/debian/linux-image-rpi.maintscript b/debian/linux-image-rpi.maintscript deleted file mode 100644 index 3b31793509..0000000000 --- a/debian/linux-image-rpi.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rpi linux-image-6.9.7-rpi 5.7~rc5-1~exp1 linux-image-rpi diff --git a/debian/linux-image-rt-686-pae-dbg.lintian-overrides b/debian/linux-image-rt-686-pae-dbg.lintian-overrides deleted file mode 100644 index 32c3c44ff9..0000000000 --- a/debian/linux-image-rt-686-pae-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-rt-686-pae-dbg: wrong-section-according-to-package-name linux-image-rt-686-pae-dbg => debug diff --git a/debian/linux-image-rt-686-pae-dbg.maintscript b/debian/linux-image-rt-686-pae-dbg.maintscript deleted file mode 100644 index c793cf6921..0000000000 --- a/debian/linux-image-rt-686-pae-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rt-686-pae-dbg linux-image-6.9.7-rt-686-pae-dbg 5.7~rc5-1~exp1 linux-image-rt-686-pae-dbg diff --git a/debian/linux-image-rt-686-pae.bug-presubj b/debian/linux-image-rt-686-pae.bug-presubj deleted file mode 100644 index a1f2f69a5f..0000000000 --- a/debian/linux-image-rt-686-pae.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-rt-686-pae instead. diff --git a/debian/linux-image-rt-686-pae.maintscript b/debian/linux-image-rt-686-pae.maintscript deleted file mode 100644 index c381b72dbb..0000000000 --- a/debian/linux-image-rt-686-pae.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rt-686-pae linux-image-6.9.7-rt-686-pae 5.7~rc5-1~exp1 linux-image-rt-686-pae diff --git a/debian/linux-image-rt-amd64-dbg.lintian-overrides b/debian/linux-image-rt-amd64-dbg.lintian-overrides deleted file mode 100644 index 339a6f45fb..0000000000 --- a/debian/linux-image-rt-amd64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-rt-amd64-dbg: wrong-section-according-to-package-name linux-image-rt-amd64-dbg => debug diff --git a/debian/linux-image-rt-amd64-dbg.maintscript b/debian/linux-image-rt-amd64-dbg.maintscript deleted file mode 100644 index 7fd38c8b3a..0000000000 --- a/debian/linux-image-rt-amd64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rt-amd64-dbg linux-image-6.9.7-rt-amd64-dbg 5.7~rc5-1~exp1 linux-image-rt-amd64-dbg diff --git a/debian/linux-image-rt-arm64-dbg.lintian-overrides b/debian/linux-image-rt-arm64-dbg.lintian-overrides deleted file mode 100644 index cac0893c85..0000000000 --- a/debian/linux-image-rt-arm64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-rt-arm64-dbg: wrong-section-according-to-package-name linux-image-rt-arm64-dbg => debug diff --git a/debian/linux-image-rt-arm64-dbg.maintscript b/debian/linux-image-rt-arm64-dbg.maintscript deleted file mode 100644 index 58a13e3284..0000000000 --- a/debian/linux-image-rt-arm64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rt-arm64-dbg linux-image-6.9.7-rt-arm64-dbg 5.7~rc5-1~exp1 linux-image-rt-arm64-dbg diff --git a/debian/linux-image-rt-armmp-dbg.lintian-overrides b/debian/linux-image-rt-armmp-dbg.lintian-overrides deleted file mode 100644 index 6b0cd95954..0000000000 --- a/debian/linux-image-rt-armmp-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-rt-armmp-dbg: wrong-section-according-to-package-name linux-image-rt-armmp-dbg => debug diff --git a/debian/linux-image-rt-armmp-dbg.maintscript b/debian/linux-image-rt-armmp-dbg.maintscript deleted file mode 100644 index 74514a709f..0000000000 --- a/debian/linux-image-rt-armmp-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rt-armmp-dbg linux-image-6.9.7-rt-armmp-dbg 5.7~rc5-1~exp1 linux-image-rt-armmp-dbg diff --git a/debian/linux-image-rt-armmp.bug-presubj b/debian/linux-image-rt-armmp.bug-presubj deleted file mode 100644 index 1965e7b23b..0000000000 --- a/debian/linux-image-rt-armmp.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-rt-armmp instead. diff --git a/debian/linux-image-rt-armmp.maintscript b/debian/linux-image-rt-armmp.maintscript deleted file mode 100644 index a473345060..0000000000 --- a/debian/linux-image-rt-armmp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-rt-armmp linux-image-6.9.7-rt-armmp 5.7~rc5-1~exp1 linux-image-rt-armmp diff --git a/debian/linux-image-s390x-dbg.lintian-overrides b/debian/linux-image-s390x-dbg.lintian-overrides deleted file mode 100644 index 90d4fb2be2..0000000000 --- a/debian/linux-image-s390x-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-s390x-dbg: wrong-section-according-to-package-name linux-image-s390x-dbg => debug diff --git a/debian/linux-image-s390x-dbg.maintscript b/debian/linux-image-s390x-dbg.maintscript deleted file mode 100644 index f63aa37414..0000000000 --- a/debian/linux-image-s390x-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-s390x-dbg linux-image-6.9.7-s390x-dbg 5.7~rc5-1~exp1 linux-image-s390x-dbg diff --git a/debian/linux-image-s390x.bug-presubj b/debian/linux-image-s390x.bug-presubj deleted file mode 100644 index 91796cc5b0..0000000000 --- a/debian/linux-image-s390x.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-s390x instead. diff --git a/debian/linux-image-s390x.maintscript b/debian/linux-image-s390x.maintscript deleted file mode 100644 index c4274f9946..0000000000 --- a/debian/linux-image-s390x.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-s390x linux-image-6.9.7-s390x 5.7~rc5-1~exp1 linux-image-s390x diff --git a/debian/linux-image-sh7751r-dbg.lintian-overrides b/debian/linux-image-sh7751r-dbg.lintian-overrides deleted file mode 100644 index 8aa596111a..0000000000 --- a/debian/linux-image-sh7751r-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-sh7751r-dbg: wrong-section-according-to-package-name linux-image-sh7751r-dbg => debug diff --git a/debian/linux-image-sh7751r-dbg.maintscript b/debian/linux-image-sh7751r-dbg.maintscript deleted file mode 100644 index f97d6cedb6..0000000000 --- a/debian/linux-image-sh7751r-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sh7751r-dbg linux-image-6.9.7-sh7751r-dbg 5.7~rc5-1~exp1 linux-image-sh7751r-dbg diff --git a/debian/linux-image-sh7751r.bug-presubj b/debian/linux-image-sh7751r.bug-presubj deleted file mode 100644 index 3d5e3284e3..0000000000 --- a/debian/linux-image-sh7751r.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-sh7751r instead. diff --git a/debian/linux-image-sh7751r.maintscript b/debian/linux-image-sh7751r.maintscript deleted file mode 100644 index 2f39035886..0000000000 --- a/debian/linux-image-sh7751r.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sh7751r linux-image-6.9.7-sh7751r 5.7~rc5-1~exp1 linux-image-sh7751r diff --git a/debian/linux-image-sh7785lcr-dbg.lintian-overrides b/debian/linux-image-sh7785lcr-dbg.lintian-overrides deleted file mode 100644 index ee8a5c2cd8..0000000000 --- a/debian/linux-image-sh7785lcr-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-sh7785lcr-dbg: wrong-section-according-to-package-name linux-image-sh7785lcr-dbg => debug diff --git a/debian/linux-image-sh7785lcr-dbg.maintscript b/debian/linux-image-sh7785lcr-dbg.maintscript deleted file mode 100644 index 78c690d49c..0000000000 --- a/debian/linux-image-sh7785lcr-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sh7785lcr-dbg linux-image-6.9.7-sh7785lcr-dbg 5.7~rc5-1~exp1 linux-image-sh7785lcr-dbg diff --git a/debian/linux-image-sh7785lcr.bug-presubj b/debian/linux-image-sh7785lcr.bug-presubj deleted file mode 100644 index 81c5678a00..0000000000 --- a/debian/linux-image-sh7785lcr.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-sh7785lcr instead. diff --git a/debian/linux-image-sh7785lcr.maintscript b/debian/linux-image-sh7785lcr.maintscript deleted file mode 100644 index 5589dc534e..0000000000 --- a/debian/linux-image-sh7785lcr.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sh7785lcr linux-image-6.9.7-sh7785lcr 5.7~rc5-1~exp1 linux-image-sh7785lcr diff --git a/debian/linux-image-sparc64-dbg.lintian-overrides b/debian/linux-image-sparc64-dbg.lintian-overrides deleted file mode 100644 index 7b2cfa0f1f..0000000000 --- a/debian/linux-image-sparc64-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-sparc64-dbg: wrong-section-according-to-package-name linux-image-sparc64-dbg => debug diff --git a/debian/linux-image-sparc64-dbg.maintscript b/debian/linux-image-sparc64-dbg.maintscript deleted file mode 100644 index adc83e8bfb..0000000000 --- a/debian/linux-image-sparc64-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sparc64-dbg linux-image-6.9.7-sparc64-dbg 5.7~rc5-1~exp1 linux-image-sparc64-dbg diff --git a/debian/linux-image-sparc64-smp-dbg.lintian-overrides b/debian/linux-image-sparc64-smp-dbg.lintian-overrides deleted file mode 100644 index 3a8a2e3654..0000000000 --- a/debian/linux-image-sparc64-smp-dbg.lintian-overrides +++ /dev/null @@ -1 +0,0 @@ -linux-image-sparc64-smp-dbg: wrong-section-according-to-package-name linux-image-sparc64-smp-dbg => debug diff --git a/debian/linux-image-sparc64-smp-dbg.maintscript b/debian/linux-image-sparc64-smp-dbg.maintscript deleted file mode 100644 index 17c4e3e108..0000000000 --- a/debian/linux-image-sparc64-smp-dbg.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sparc64-smp-dbg linux-image-6.9.7-sparc64-smp-dbg 5.7~rc5-1~exp1 linux-image-sparc64-smp-dbg diff --git a/debian/linux-image-sparc64-smp.bug-presubj b/debian/linux-image-sparc64-smp.bug-presubj deleted file mode 100644 index cb24a1f873..0000000000 --- a/debian/linux-image-sparc64-smp.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-sparc64-smp instead. diff --git a/debian/linux-image-sparc64-smp.maintscript b/debian/linux-image-sparc64-smp.maintscript deleted file mode 100644 index 35379422a2..0000000000 --- a/debian/linux-image-sparc64-smp.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sparc64-smp linux-image-6.9.7-sparc64-smp 5.7~rc5-1~exp1 linux-image-sparc64-smp diff --git a/debian/linux-image-sparc64.bug-presubj b/debian/linux-image-sparc64.bug-presubj deleted file mode 100644 index 8a1ade435a..0000000000 --- a/debian/linux-image-sparc64.bug-presubj +++ /dev/null @@ -1,5 +0,0 @@ -You are about to report a bug in a Linux kernel meta package. -This is probably not what you intended to do. - -If you want to report a bug in the Linux kernel or modules, you should use -the package name linux-image-6.9.7-sparc64 instead. diff --git a/debian/linux-image-sparc64.maintscript b/debian/linux-image-sparc64.maintscript deleted file mode 100644 index 9231f2ccb9..0000000000 --- a/debian/linux-image-sparc64.maintscript +++ /dev/null @@ -1 +0,0 @@ -dir_to_symlink /usr/share/doc/linux-image-sparc64 linux-image-6.9.7-sparc64 5.7~rc5-1~exp1 linux-image-sparc64 |