nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-10-02 13:00:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

[Backport release-24.11] Linux Hardened Kernel Updates for 2025-03-02 (#393109)

Browse Source
This commit is contained in:
Fabián Heredia Montiel
2025-03-25 09:23:37 -06:00
committed by GitHub
parent ed62dec024 1fd16802c8
commit 535c3dcde3
4 changed files with 30 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
nixos/tests/kernel-generic.nix
View File

@@ -41,6 +41,7 @@ let
linux_6_1_hardened
linux_6_6_hardened
linux_6_12_hardened
linux_6_13_hardened
linux_rt_5_4
linux_rt_5_10
linux_rt_5_15

40
pkgs/os-specific/linux/kernel/hardened/patches.json
View File

@@ -32,12 +32,12 @@
"6.1": {
"patch": {
"extra": "-hardened1",
"name": "linux-hardened-v6.1.128-hardened1.patch",
"sha256": "1p3j0qr8zwqz2rpfm024ardm75xzxxkdrxb9kkffkanp40zrcilr",
"url": "https://github.com/anthraxx/linux-hardened/releases/download/v6.1.128-hardened1/linux-hardened-v6.1.128-hardened1.patch"
"name": "linux-hardened-v6.1.129-hardened1.patch",
"sha256": "0lacg5p2pw56cwijiiby6isa5r4nwmi5lh1p1lr1n1yy8nzzs3kx",
"url": "https://github.com/anthraxx/linux-hardened/releases/download/v6.1.129-hardened1/linux-hardened-v6.1.129-hardened1.patch"
},
"sha256": "1wshgkgcxaf4mnm4ngngsj8gq1cg8kq56f5kqsdfcw0m339nfkc7",
"version": "6.1.128"
"sha256": "0axm373w49cjga541nxk9rxpkh75wl1b04l8w6clm93mvszy6qwx",
"version": "6.1.129"
},
"6.11": {
"patch": {
@@ -52,21 +52,31 @@
"6.12": {
"patch": {
"extra": "-hardened1",
"name": "linux-hardened-v6.12.12-hardened1.patch",
"sha256": "0k413adalc62ykrfar8dgp6480jmc6sx9c60sbk869xq8ghs6hq3",
"url": "https://github.com/anthraxx/linux-hardened/releases/download/v6.12.12-hardened1/linux-hardened-v6.12.12-hardened1.patch"
"name": "linux-hardened-v6.12.17-hardened1.patch",
"sha256": "15glq35gdh4mn69qqlv2hr79clwk1xphf6cfhh5n67xjkxri8jxw",
"url": "https://github.com/anthraxx/linux-hardened/releases/download/v6.12.17-hardened1/linux-hardened-v6.12.17-hardened1.patch"
},
"sha256": "1zwfw3lci3ihandx2cpq3h12x7l94jzr4xkd5lzkn1ppgv8l52g9",
"version": "6.12.12"
"sha256": "1cv3vrvwsj4ldbq7f9ccmal9as2ziw0cn8g3fd4lx5w09z9mq82w",
"version": "6.12.17"
},
"6.13": {
"patch": {
"extra": "-hardened1",
"name": "linux-hardened-v6.13.5-hardened1.patch",
"sha256": "04adsib4g7rfgmq1sc7przp3fpw6djb4vvf8ypn94a7dihg7f8ip",
"url": "https://github.com/anthraxx/linux-hardened/releases/download/v6.13.5-hardened1/linux-hardened-v6.13.5-hardened1.patch"
},
"sha256": "1qp6aprkkf2iwlhg2czd2msyqc728ab1vyr2v1nw3yzkhh3wngi8",
"version": "6.13.5"
},
"6.6": {
"patch": {
"extra": "-hardened1",
"name": "linux-hardened-v6.6.75-hardened1.patch",
"sha256": "12wsj7g431lb0abqs9dcryx9czycnrg4jl8760rgj2qvaa1cpfrc",
"url": "https://github.com/anthraxx/linux-hardened/releases/download/v6.6.75-hardened1/linux-hardened-v6.6.75-hardened1.patch"
"name": "linux-hardened-v6.6.80-hardened1.patch",
"sha256": "09hhswaslihs5w58jka5xfw2kz70mg7awsvhbca9il5wn7wppp0j",
"url": "https://github.com/anthraxx/linux-hardened/releases/download/v6.6.80-hardened1/linux-hardened-v6.6.80-hardened1.patch"
},
"sha256": "1402g6qjk1242gsl6n8xlbg01m0nb19n30ac1ffi7fhnjzxb3pzp",
"version": "6.6.75"
"sha256": "09qkadl9fm0c589qyjdwhgryr85xampz0k7lsafmrx142g813ybc",
"version": "6.6.80"
}
}

2
pkgs/top-level/all-packages.nix
View File

@@ -12598,6 +12598,8 @@ with pkgs;
linux_6_6_hardened = linuxKernel.kernels.linux_6_6_hardened;
linuxPackages_6_12_hardened = linuxKernel.packages.linux_6_12_hardened;
linux_6_12_hardened = linuxKernel.kernels.linux_6_12_hardened;
linuxPackages_6_13_hardened = linuxKernel.packages.linux_6_13_hardened;
linux_6_13_hardened = linuxKernel.kernels.linux_6_13_hardened;
# GNU Linux-libre kernels
linuxPackages-libre = linuxKernel.packages.linux_libre;

2
pkgs/top-level/linux-kernels.nix
View File

@@ -284,6 +284,7 @@ in {
linux_6_1_hardened = hardenedKernelFor kernels.linux_6_1 { };
linux_6_6_hardened = hardenedKernelFor kernels.linux_6_6 { };
linux_6_12_hardened = hardenedKernelFor kernels.linux_6_12 { };
linux_6_13_hardened = hardenedKernelFor kernels.linux_6_13 { };
} // lib.optionalAttrs config.allowAliases {
linux_4_14 = throw "linux 4.14 was removed because it will reach its end of life within 23.11";
@@ -694,6 +695,7 @@ in {
linux_6_1_hardened = recurseIntoAttrs (packagesFor kernels.linux_6_1_hardened);
linux_6_6_hardened = recurseIntoAttrs (packagesFor kernels.linux_6_6_hardened);
linux_6_12_hardened = recurseIntoAttrs (packagesFor kernels.linux_6_12_hardened);
linux_6_13_hardened = recurseIntoAttrs (packagesFor kernels.linux_6_13_hardened);
linux_zen = recurseIntoAttrs (packagesFor kernels.linux_zen);
linux_lqx = recurseIntoAttrs (packagesFor kernels.linux_lqx);