summaryrefslogtreecommitdiff
path: root/PKGBUILD
diff options
context:
space:
mode:
authorjc_gargma <jc_gargma@iserlohn-fortress.net>2020-08-30 22:30:22 -0700
committerjc_gargma <jc_gargma@iserlohn-fortress.net>2020-08-30 22:30:22 -0700
commitb5325bf7fce7f023b9b32ea444ac5e7b126c542f (patch)
treea2ec4c31d4ec65f73c154f45494d4effd130425a /PKGBUILD
parentUpdated to 5.7.19.a (diff)
downloadlinux-libre-hardened-b5325bf7fce7f023b9b32ea444ac5e7b126c542f.tar.xz
Disable HDCP,IME,PSP
Restore ISDN,Infiniband,Staging,VirtualBox Reflink where possible Format PKGBUILD
Diffstat (limited to 'PKGBUILD')
-rw-r--r--PKGBUILD28
1 files changed, 15 insertions, 13 deletions
diff --git a/PKGBUILD b/PKGBUILD
index 51e581b..e3d3c3f 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -11,9 +11,10 @@
# Parabola version lacks ath9k regdom and raid6 algo patches
# Parabola version is 300 Hz
# Parabola version does not disable lockdown eee
-# Parabola version allows insecure filesystems
-# Parabola version enables ISDN and Infiniband
-# Parabola version enables VMware and HyperV
+# Parabola version does not disable hdcp
+# Parabola version does not disable IME/PSP
+# Parabola version does not disable VMware and HyperV
+# Parabola version does not disable insecure filesystems
_pkgbase=linux-hardened
pkgbase=linux-libre-hardened
@@ -72,7 +73,7 @@ b2sums=('bb65e65c69d1c38943327a0859028c843439590e9f1af66705a0fe01aaf006daf14a5a0
'c8d0697f99fe6105815217b8ec059d8f587415ea8dd2b88a65e1087feedf697341a64cd56810fde9e7aeada79125fc8235faccc7e7b06492c099e27a8abbe99c'
'2e58bb89b247b1678355368956e67c1de51fcde97a227b2162f6771e30f17fa5520faafe7be4b6816a542e7ae10d05f64c6b6354f352c12746d4b8da632936dd'
'fde132f3705d908e6f2147c78a2193289916d72304ca5efa2229d79fc3e57a857314ce94e71425caef2f7f7b6cf87f05ef86335dc8bd4be78e7035afe608005a'
- '2b88d45a8478ecfb28bde002dcc3d771c9f14b8e4fd425e8a3244eec6604fef12e19b18af58dcb21b54dd880cdba1066b6a59a2a50540ab3c95985c08af6879d'
+ '80ce16523bce3910f92e8d824094a1bc2c089b5f9daea4d3257ed938d024cb7a9a5da91d95e20acaf59b224e5591d5792eb151f7424ce3b49bd3d87822573701'
'b4e1377d97ad7e8144d6e55b6d43731e3271a5aec65b65ca6d81026a95f15f549b9303fb3c6f492099ca691e3f65f4cf7f0c3aa742df03b396d7f6d81813aa95'
'0d2e336dae6213f78d3dce26c80751f0a0e18f401ea061960e735a4ec010cec3e8fe73380a7d5b89d097a374ab2eb7560020f39d60f0eb9ae214a77a605ea206'
'SKIP')
@@ -134,7 +135,7 @@ prepare() {
make olddefconfig
- make menuconfig
+# make menuconfig
# Remove sublevel when no sublevel exists
if [ "$_minver" == "0" ]; then
@@ -172,8 +173,8 @@ _package() {
optdepends=('crda: to set the correct wireless channels of your country'
'linux-libre-firmware: firmware images needed for some devices'
'usbctl-libre: deny_new_usb control')
- provides=(WIREGUARD-MODULE)
- replaces=(wireguard-arch)
+ provides=(VIRTUALBOX-GUEST-MODULES WIREGUARD-MODULE)
+ replaces=(virtualbox-guest-modules-arch wireguard-arch)
cd $_srcname
local kernver="$(<version)"
@@ -205,7 +206,7 @@ _package-headers() {
localversion.* version vmlinux
install -Dt "$builddir/kernel" -m644 kernel/Makefile
install -Dt "$builddir/arch/x86" -m644 arch/x86/Makefile
- cp -t "$builddir" -a scripts
+ cp --reflink -t "$builddir" -a scripts
# add objtool for external module building and enabled VALIDATION_STACK option
if [[ -e tools/objtool/objtool ]]; then
@@ -216,8 +217,8 @@ _package-headers() {
mkdir -p "$builddir"/{fs/xfs,mm}
echo "Installing headers..."
- cp -t "$builddir" -a include
- cp -t "$builddir/arch/x86" -a arch/x86/include
+ cp --reflink -t "$builddir" -a include
+ cp --reflink -t "$builddir/arch/x86" -a arch/x86/include
install -Dt "$builddir/arch/x86/kernel" -m644 arch/x86/kernel/asm-offsets.s
install -Dt "$builddir/drivers/md" -m644 drivers/md/*.h
@@ -265,6 +266,7 @@ _package-headers() {
strip -v $STRIP_SHARED "$file" ;;
esac
done < <(find "$builddir" -type f -perm -u+x ! -name vmlinux -print0)
+
echo "Stripping vmlinux..."
strip -v $STRIP_STATIC "$builddir/vmlinux"
@@ -282,9 +284,9 @@ _package-docs() {
echo "Installing documentation..."
local src dst
while read -rd '' src; do
- dst="${src#Documentation/}"
- dst="$builddir/Documentation/${dst#output/}"
- install -Dm644 "$src" "$dst"
+ dst="${src#Documentation/}"
+ dst="$builddir/Documentation/${dst#output/}"
+ install -Dm644 "$src" "$dst"
done < <(find Documentation -name '.*' -prune -o ! -type d -print0)
echo "Adding symlink..."