• Files Changed
• Browse Source

  * 0026-fixup-nx-set-attrs-in-our-kernel-loaders.patch

• Files Changed
• Browse Source

- UEFI NX support (bsc#1205588)
  * 0001-modules-make-.module_license-read-only.patch
  * 0002-modules-strip-.llvm_addrsig-sections-and-similar.patch
  * 0003-modules-Don-t-allocate-space-for-non-allocable-secti.patch
  * 0004-pe-add-the-DOS-header-struct-and-fix-some-bad-naming.patch
  * 0005-loader-i386-efi-linux-Avoid-a-use-after-free-in-the-.patch
  * 0006-loader-i386-efi-linux-Use-grub_loader_set_ex.patch
  * 0007-loader-i386-efi-linux-Fix-a-memory-leak-in-the-initr.patch
  * 0008-EFI-allocate-kernel-in-EFI_RUNTIME_SERVICES_CODE-ins.patch
  * 0009-modules-load-module-sections-at-page-aligned-address.patch
  * 0010-nx-add-memory-attribute-get-set-API.patch
  * 0011-nx-set-page-permissions-for-loaded-modules.patch
  * 0012-nx-set-attrs-in-our-kernel-loaders.patch
  * 0013-nx-set-the-nx-compatible-flag-in-EFI-grub-images.patch
  * 0014-efi-use-enumerated-array-positions-for-our-allocatio.patch
  * 0015-efi-split-allocation-policy-for-kernel-vs-initrd-mem.patch
  * 0016-efi-allocate-the-initrd-within-the-bounds-expressed-.patch
  * 0017-efi-use-EFI_LOADER_-CODE-DATA-for-kernel-and-initrd-.patch
  * 0018-mm-Drop-unused-unloading-of-modules-on-OOM.patch
  * 0019-grub_dl_set_mem_attrs-fix-format-string.patch
  * 0020-grub_dl_set_mem_attrs-add-self-check-for-the-tramp-G.patch
  * 0021-grub_dl_load_segments-page-align-the-tramp-GOT-areas.patch
  * 0022-x86-efi-Fix-an-incorrect-array-size-in-kernel-alloca.patch
  * 0023-Add-secureboot-support-on-efi-chainloader.patch
  * 0024-Fix-type-specifier-error.patch
  * 0025-fixup-nx-set-attrs-in-our-kernel-loaders.patch

• Files Changed
• Browse Source

- Change the bash-completion directory (bsc#1213855)
  * grub2-change-bash-completion-dir.patch 

- Fix error message "unknown command tpm_record_pcrs" with encrypted boot and
  no tpm device present (bsc#1213547)
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch 

- add 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch,
  0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch:
  * support more featureful extX filesystems (backport from
  upstream git)

- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563) 

- Exclude the deprecated EFI location, /usr/lib64/efi/, from
  Tumbleweed and ALP

- Update TPM 2.0 key unsealing patches
  * Add the new upstreaming patches
    0001-protectors-Add-key-protectors-framework.patch
    0002-tpm2-Add-TPM-Software-Stack-TSS.patch
    0003-protectors-Add-TPM2-Key-Protector.patch
    0004-cryptodisk-Support-key-protectors.patch
    0005-util-grub-protect-Add-new-tool.patch
  * Add the authorized policy patches based on the upstreaming
    patches
    0001-tpm2-Add-TPM2-types-structures-and-command-constants.patch
    0002-tpm2-Add-more-marshal-unmarshal-functions.patch
    0003-tpm2-Implement-more-TPM2-commands.patch
    0004-tpm2-Support-authorized-policy.patch

• Browse Source