Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.kernel > #62001 > unrolled thread

Re: Debian Kernel info

Back to article view | Back to linux.debian.kernel

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Re: Debian Kernel info Martin Steigerwald <martin@lichtvoll.de> - 2018-09-05 14:40 +0200
    Re: Debian Kernel info Fabian Grünbichler <fabian.gruenbichler@student.tuwien.ac.at> - 2018-09-05 17:40 +0200
      Re: Debian Kernel info Martin Steigerwald <martin@lichtvoll.de> - 2018-09-05 17:40 +0200
        Re: Debian Kernel info Fabian Grünbichler <fabian.gruenbichler@student.tuwien.ac.at> - 2018-09-05 18:10 +0200
        Re: Debian Kernel info Yves-Alexis Perez <corsac@debian.org> - 2018-09-06 13:20 +0200

#62001 — Re: Debian Kernel info

Hi Tomas.

Tomas Bortoli - 05.09.18, 08:48:
> is there a place where I find the config used to compile Linux for the
> latest Debian ?
> 
> 
> The alternative idea I had is to `apt source linux-image-version` but
> that requires to download the whole package.

Probably via

https://sources.debian.org/src/linux/4.17.17-1/debian/config/amd64/

or something like that?

Ciao,
-- 
Martin

[toc] | [next] | [standalone]

#62002

On Wed, Sep 05, 2018 at 02:33:33PM +0200, Martin Steigerwald wrote:
> Hi Tomas.
> 
> Tomas Bortoli - 05.09.18, 08:48:
> > is there a place where I find the config used to compile Linux for the
> > latest Debian ?
> > 
> > 
> > The alternative idea I had is to `apt source linux-image-version` but
> > that requires to download the whole package.
> 
> Probably via
> 
> https://sources.debian.org/src/linux/4.17.17-1/debian/config/amd64/
> 
> or something like that?

linux-image-$(uname -r) ships /boot/config-$(uname -r), which AFAIK is
the actual config used to compile that kernel image.

[toc] | [prev] | [next] | [standalone]

#62003

Fabian Grünbichler - 05.09.18, 17:19:
> On Wed, Sep 05, 2018 at 02:33:33PM +0200, Martin Steigerwald wrote:
> > Tomas Bortoli - 05.09.18, 08:48:
> > > is there a place where I find the config used to compile Linux for
> > > the latest Debian ?
> > > 
> > > 
> > > The alternative idea I had is to `apt source linux-image-version`
> > > but
> > > that requires to download the whole package.
> > 
> > Probably via
> > 
> > https://sources.debian.org/src/linux/4.17.17-1/debian/config/amd64/
> > 
> > or something like that?
> 
> linux-image-$(uname -r) ships /boot/config-$(uname -r), which AFAIK is
> the actual config used to compile that kernel image.

Sure, I know that. And yes, it appears the source package puts the 
config together from various sources. But that was the closest 
approximation I came up with so far.

I am not sure whether there is something similar than sources.debian.org 
for binary packages. I thought there was, but currently I have no idea 
where that might be.

Thanks,
-- 
Martin

[toc] | [prev] | [next] | [standalone]

#62004

On Wed, Sep 05, 2018 at 05:34:15PM +0200, Martin Steigerwald wrote:
> Fabian Grünbichler - 05.09.18, 17:19:
> > On Wed, Sep 05, 2018 at 02:33:33PM +0200, Martin Steigerwald wrote:
> > > Tomas Bortoli - 05.09.18, 08:48:
> > > > is there a place where I find the config used to compile Linux for
> > > > the latest Debian ?
> > > > 
> > > > 
> > > > The alternative idea I had is to `apt source linux-image-version`
> > > > but
> > > > that requires to download the whole package.
> > > 
> > > Probably via
> > > 
> > > https://sources.debian.org/src/linux/4.17.17-1/debian/config/amd64/
> > > 
> > > or something like that?
> > 
> > linux-image-$(uname -r) ships /boot/config-$(uname -r), which AFAIK is
> > the actual config used to compile that kernel image.
> 
> Sure, I know that. And yes, it appears the source package puts the 
> config together from various sources. But that was the closest 
> approximation I came up with so far.
> 
> I am not sure whether there is something similar than sources.debian.org 
> for binary packages. I thought there was, but currently I have no idea 
> where that might be.

Not that I know of - but it's just a {wget,curl} followed by dpkg
--fsys-tarfile | tar [...] of the binary package away, since both the
package and path are known ;)

[toc] | [prev] | [next] | [standalone]

#62008

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Wed, 2018-09-05 at 19:43 +0000, Tomas Bortoli wrote:
> 
> I noted that some hardening options are disable, by testing it against:

You can check https://salsa.debian.org/kernel-team/linux/merge_requests/26 for
various hardening options.
> 
> https://github.com/a13xp0p0v/kconfig-hardened-check
> 
> such as:
> 
> CONFIG_SLAB_FREELIST_HARDENED

SLAB_FREELIST_HARDENED is enabled: 
https://sources.debian.org/src/linux/4.17.17-1/debian/config/config/#L5977
> 
> CONFIG_REFCOUNT_FULL
> 

REFCOUNT_FULL is enabled on x86, not yet on other arches: 
https://sources.debian.org/src/linux/4.17.17-1/debian/config/kernelarch-x86/config/#L5

Regards,
- -- 
Yves-Alexis
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAluRCyUACgkQ3rYcyPpX
RFv7jwgA2s2AQsHlJX3Vl/G+ORoKmYb8Xy2Bpdiuwe/cxE5k/l6odj5BsuIS9T1S
sA/3PBO89hLL+09r1Hs6q6rB7alLnaYlVEqQbWl7S1T6GzOIWQPNBA5CztdjJBTV
/friUrayA4BgyAVgWo0lwzEiDazjLpQJ0PSG5PdH6yonMwcG7Aq3ieG1w9MG3p7V
DoVluOhT8vcsWCj8d6g1LMloibq9buaU/vFcP4Uw9LacFEHcl3SvJiwALP5/QsvU
Fr+fAZLSRR4JDP9a3uXPznGdjuTlZCv6vsB6RfNihmv6CdxNd09fe9eqLdpSzBG3
amXJEFsoX5VKeNvxtFHKm3MMxhg65w==
=XcUR
-----END PGP SIGNATURE-----

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.kernel

csiph-web