X-Original-To: alpine-devel@lists.alpinelinux.org Received: from z3.mscf.uky.edu (mscf.ascs.uky.edu [128.163.133.138]) by lists.alpinelinux.org (Postfix) with ESMTP id 085D05C4E0E for ; Sat, 25 Nov 2017 21:08:29 +0000 (GMT) Received: from [128.163.133.149] (helo=vmowz.zemows.org) by z3.mscf.uky.edu with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.88) (envelope-from ) id 1eIhi3-0007Yq-TT for alpine-devel@lists.alpinelinux.org; Sat, 25 Nov 2017 16:10:00 -0500 Received: from [74.136.221.1] (helo=[192.168.1.4]) by vmowz.zemows.org with esmtpsa (TLSv1.2:ECDHE-ECDSA-AES256-GCM-SHA384:256) (Exim 4.89) (envelope-from ) id 1eIhgY-000RXA-Qd; Sat, 25 Nov 2017 16:08:28 -0500 Content-Type: text/plain; charset=us-ascii X-Mailinglist: alpine-devel Precedence: list List-Id: Alpine Development List-Unsubscribe: List-Post: List-Help: List-Subscribe: Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Subject: [alpine-devel] Hardened kernels 4.9.65-r0 are actually 4.9.59 From: Jack Schmidt In-Reply-To: Date: Sat, 25 Nov 2017 16:08:26 -0500 Content-Transfer-Encoding: quoted-printable Message-Id: <7E9EEE36-99DE-48CD-9FDB-20F801F91E32@mowsey.org> References: To: alpine-devel@lists.alpinelinux.org X-Mailer: Apple Mail (2.3273) X-Spam-Bar: / X-MSCF-Spam-Score: -13 (+) I noticed the recently released (virt)hardened kernels (4.9.65) appear = to have been patched back to 4.9.59. The hardened-3.1-4.9.65-201704252333-alpine.patch appears to mostly = revert the source back 4.9.59 (I spot checked 5 or 6 changes in = 4.9.64--4.9.65, and all were reverted). diff --git a/Makefile b/Makefile index 87a641515e9c..a545aa72ca4f 100644 --- a/Makefile +++ b/Makefile @@ -1,6 +1,6 @@ VERSION =3D 4 PATCHLEVEL =3D 9 -SUBLEVEL =3D 65 +SUBLEVEL =3D 59 EXTRAVERSION =3D NAME =3D Roaring Lionus The distributed apks have the wrong modules directory: = http://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/linux-hardened-4.9.6= 5-r0.apk = http://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/linux-virthardened-4= .9.65-r0.apk $ apk info -W /lib/modules/4.9.59-0-*hardened/modules.builtin /lib/modules/4.9.59-0-hardened/modules.builtin is owned by = linux-hardened-4.9.65-r0 /lib/modules/4.9.59-0-virthardened/modules.builtin is owned by = linux-virthardened-4.9.65-r0 Looking in the module, it seems like they really are 4.9.59 modules: $ strings /lib/modules/4.9.59-0-virthardened/kernel/kernel/configs.ko | = grep vermagic vermagic=3D4.9.59-0-virthardened SMP mod_unload modversions KERNEXEC_BTS = RAP REFCOUNT GRSEC __UNIQUE_ID_vermagic12 Similarly, the kernel reports as 4.9.59, and does not appear to have = 4.9.65 bugfixes. Unrelated, but maybe important for 3.7 RC matters: a few of the mirrors = are a bit stale. This can also be helpful if someone needs to downgrade = a kernel (mirror.aarnet.edu.au for example still has the 4.9.63-r0 = kernels) mirror -- last updated dl-3 -- Nov 15th dl-5 -- Oct 30th mirror.rise.ph -- Oct 31st mirror.aarnet.edu.au -- Nov 22nd --- Unsubscribe: alpine-devel+unsubscribe@lists.alpinelinux.org Help: alpine-devel+help@lists.alpinelinux.org ---