Clean the patches listed in debian/patches/series:
(1) For section [# Changes to support package build system]
Below 2 patches are kept for adding kernel version information
in debian style:
debian/version.patch
debian/uname-version-timestamp.patch
Below 4 patches are kept for working together with debian kernel
building style, or else building errors occur:
debian/kernelvariables.patch
debian/tools-perf-version.patch
debian/perf-traceevent-support-asciidoctor-for-documentatio.patch
debian/kbuild-look-for-module.lds-under-arch-directory-too.patch
(2) For section [# Lockdown missing pieces].
Only 2 patches are kept for the necessary function of kernel modules
signing. Refer to commit [Debian: enable lockdown feature patches].
They are patches under features/all/lockdown/:
efi-add-an-efi_secure_boot-flag-to-indicate-secure-b.patch
efi-lock-down-the-kernel-if-booted-in-secure-boot-mo.patch
Test Plan:
- PASS: Build kernels and oot kernel modules and boot up on qemu.
- PASS: Boot up the image on hardware using iso installation.
Some of the kernel modules are loaded by default and test
insmod ko for the other oot modules by hand.
- PASS: Redo kernel modules signing test:
boot up qemu in the way with secure boot enabled, sig_enforce
is unset by default. Insmod unsigned / missigned kernel
modules. It should fail.
- PASS: Above tests are done for both std and rt kernel.
Story: 2009221
Task: 45745
Signed-off-by: Li Zhou <li.zhou@windriver.com>
Change-Id: I8daec7581434edb2640450e16b0f4a91732d6027
15 lines
723 B
Plaintext
15 lines
723 B
Plaintext
0001-kernel-std-Remove-the-old-changelog-file.patch
|
|
0002-kernel-std-Add-a-new-changelog-file-for-linux-yocto-.patch
|
|
0003-kernel-std-Add-a-kernel-config-file-for-stx-debian.patch
|
|
0004-kernel-std-Adapt-the-debian-folder-for-new-source.patch
|
|
0005-kernel-modules-sign-kernel-modules.patch
|
|
0006-Debian-align-config-file-with-stx-centos.patch
|
|
0007-Debian-update-5.10-Kernel-to-5.10.99.patch
|
|
0008-config-set-configs-needed-for-secure-boot.patch
|
|
0009-Drop-Android-patches.patch
|
|
0010-Debian-Disable-CONFIG_BNXT.patch
|
|
0011-Debian-Hardcode-net.naming-scheme-in-CONFIG_CMDLINE.patch
|
|
0012-Debian-update-5.10-Kernel-to-5.10.112.patch
|
|
0013-kernel-std-fix-proc-version-content.patch
|
|
0014-kernel-std-clean-patches-from-debian-release.patch
|