Thanks for pointing that out, Iv been having issues finding stuff on the debian site with stuff spread through many links. What I gave is base of unknow stuff but was finding it pattern that it was in older revisions, may be wrong on that.
had a link, I followed that tree and found this that shows this install of its version uses 6.1.124 of the kernel.
And base on this, Im seeing 6.1.xxx for the many kernel version options. So there would be static LTS with bug fix options used by debian and a real time LTS used by the bleading edge.
, This ABI flag is for user 32-bit, and this is the emulation for it in virtual environment. This in the kernel config disables that, a static build in gentoo/liguros has issue and gives errors if enabled.
This would be a better response, I have the patch worked out allready. This is whats needed to replace the clean ASOP source with a tainted source, when using the debian patch set that makes the debian kernel. It starts in the ebuild with this command, that runs my string of patches. Locations may need changed with different build environment in debian.
Code: Select all
#########################################
# 0001-giving-blank-patches-something-to-do.patch
##########################################
--- a/drivers/net/wireless/mediatek/mt76/mac80211.c 2025-01-14 07:21:38.223397384 -0000
+++ b/drivers/net/wireless/mediatek/mt76/mac80211.c 2025-01-14 22:27:11.640317226 -0000
@@ -35,7 +35,7 @@ static const struct ieee80211_channel mt
CHAN2G(5, 2432),
CHAN2G(6, 2437),
CHAN2G(7, 2442),
- CHAN2G(8, 2447),
+ CHAN2G(8, 2447),
CHAN2G(9, 2452),
CHAN2G(10, 2457),
CHAN2G(11, 2462),
--
########################################
# 0002-firmware-remove-redundant-log-messages-from-drivers-patch.patch
########################################
--- a/debian/patches/bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch 2025-01-14 18:30:41.490250680 -0000
+++ b/debian/patchea/bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch 2025-01-14 21:56:04.360308467 -0000
@@ -46,7 +46,7 @@ Index: linux/drivers/bluetooth/ath3k.c
===================================================================
--- linux.orig/drivers/bluetooth/ath3k.c
+++ linux/drivers/bluetooth/ath3k.c
-@@ -381,10 +381,8 @@ static int ath3k_load_patch(struct usb_d
+@@ -379,10 +381,8 @@ static int ath3k_load_patch(struct usb_d
le32_to_cpu(fw_version.rom_version));
ret = request_firmware(&firmware, filename, &udev->dev);
@@ -58,8 +58,8 @@ Index: linux/drivers/bluetooth/ath3k.c
pt_rom_version = get_unaligned_le32(firmware->data +
firmware->size - 8);
-@@ -444,10 +442,8 @@ static int ath3k_load_syscfg(struct usb_
- le32_to_cpu(fw_version.rom_version), clk_value, ".dfu");
+@@ -441,10 +442,8 @@ static int ath3k_load_syscfg(struct usb_
+ le32_to_cpu(fw_version.rom_version), clk_value, ".dfu");
ret = request_firmware(&firmware, filename, &udev->dev);
- if (ret < 0) {
####################################################################
# 0003-wifi-mt76-do-not-run-mt76_unregister_device-on-unregistered-hw-patch.patch
####################################################################
--- a/debian/patches/bugfix/all/wifi-mt76-do-not-run-mt76_unregister_device-on-unregistered-hw.patch 2025-01-14 18:21:07.163581389 -0000
+++ b/debian/patches/bugfix/all/wifi-mt76-do-not-run-mt76_unregister_device-on-unregistered-hw.patch 2025-01-14 22:32:56.213652199 -0000
@@ -24,55 +24,16 @@ advance to prevent users from getting st
Signed-off-by: Cyril Brulebois <kibi@debian.org>
---
- drivers/net/wireless/mediatek/mt76/mac80211.c | 8 ++++++++
- drivers/net/wireless/mediatek/mt76/mt76.h | 1 +
- 2 files changed, 9 insertions(+)
---- a/drivers/net/wireless/mediatek/mt76/mac80211.c
-+++ b/drivers/net/wireless/mediatek/mt76/mac80211.c
-@@ -522,6 +522,7 @@ int mt76_register_phy(struct mt76_phy *p
- if (ret)
- return ret;
-
-+ set_bit(MT76_STATE_REGISTERED, &phy->state);
- phy->dev->phys[phy->band_idx] = phy;
-
- return 0;
-@@ -532,6 +533,9 @@ void mt76_unregister_phy(struct mt76_phy
- {
- struct mt76_dev *dev = phy->dev;
-
-+ if (!test_bit(MT76_STATE_REGISTERED, &phy->state))
-+ return;
-+
- mt76_tx_status_check(dev, true);
- ieee80211_unregister_hw(phy->hw);
- dev->phys[phy->band_idx] = NULL;
-@@ -654,6 +658,7 @@ int mt76_register_device(struct mt76_dev
- return ret;
-
- WARN_ON(mt76_worker_setup(hw, &dev->tx_worker, NULL, "tx"));
-+ set_bit(MT76_STATE_REGISTERED, &phy->state);
- sched_set_fifo_low(dev->tx_worker.task);
-
- return 0;
-@@ -664,6 +669,9 @@ void mt76_unregister_device(struct mt76_
- {
- struct ieee80211_hw *hw = dev->hw;
-
-+ if (!test_bit(MT76_STATE_REGISTERED, &dev->phy.state))
-+ return;
-+
- if (IS_ENABLED(CONFIG_MT76_LEDS))
- mt76_led_cleanup(dev);
- mt76_tx_status_check(dev, true);
---- a/drivers/net/wireless/mediatek/mt76/mt76.h
-+++ b/drivers/net/wireless/mediatek/mt76/mt76.h
-@@ -388,6 +388,7 @@ struct mt76_tx_cb {
-
- enum {
- MT76_STATE_INITIALIZED,
-+ MT76_STATE_REGISTERED,
- MT76_STATE_RUNNING,
- MT76_STATE_MCU_RUNNING,
- MT76_SCANNING,
+--- a/drivers/net/wireless/mediatek/mt76/mac80211.c 2025-01-14 07:21:38.223397384 -0000
++++ b/drivers/net/wireless/mediatek/mt76/mac80211.c 2025-01-14 22:04:46.046977560 -0000
+@@ -35,7 +35,7 @@ static const struct ieee80211_channel mt
+ CHAN2G(5, 2432),
+ CHAN2G(6, 2437),
+ CHAN2G(7, 2442),
+- CHAN2G(8, 2447),
++ CHAN2G(8, 2447),
+ CHAN2G(9, 2452),
+ CHAN2G(10, 2457),
+ CHAN2G(11, 2462),
+--
###################################################
# 0004-fs-enable-link-security-restrictions-by-default-patch.patch
###################################################
--- a/debian/patches/debian/fs-enable-link-security-restrictions-by-default.patch 2025-01-14 18:15:36.203579847 -0000
+++ b/debian/patches/debian/fs-enable-link-security-restrictions-by-default.patch 2025-01-15 08:34:16.057156128 -0000
@@ -7,16 +7,17 @@ Forwarded: not-needed
This reverts commit 561ec64ae67ef25cac8d72bb9c4bfc955edfd415
('VFS: don't do protected {sym,hard}links by default').
---- a/fs/namei.c
-+++ b/fs/namei.c
-@@ -1020,8 +1020,8 @@ static inline void put_link(struct namei
- path_put(&last->link);
- }
-
--static int sysctl_protected_symlinks __read_mostly;
--static int sysctl_protected_hardlinks __read_mostly;
-+static int sysctl_protected_symlinks __read_mostly = 1;
-+static int sysctl_protected_hardlinks __read_mostly = 1;
- static int sysctl_protected_fifos __read_mostly;
- static int sysctl_protected_regular __read_mostly;
-
+---
+
+--- a/drivers/net/wireless/mediatek/mt76/mac80211.c 2025-01-14 07:21:38.223397384 -0000
++++ b/drivers/net/wireless/mediatek/mt76/mac80211.c 2025-01-14 22:27:11.640317226 -0000
+@@ -37,7 +37,7 @@ static const struct ieee80211_channel mt
+ CHAN2G(7, 2442),
+ CHAN2G(8, 2447),
+ CHAN2G(9, 2452),
+- CHAN2G(10, 2457),
++ CHAN2G(10, 2457),
+ CHAN2G(11, 2462),
+ CHAN2G(12, 2467),
+ CHAN2G(13, 2472),
+--
#####################################################################
# 0005-add-sysctl-to-disallow-unprivileged-CLONE_NEWUSER-by-default-patch.patch
#####################################################################
--- a/debian/patches/debian/add-sysctl-to-disallow-unprivileged-CLONE_NEWUSER-by-default.patch 2025-01-14 17:59:39.633575465 -0000
+++ b/debian/patches/debian/add-sysctl-to-disallow-unprivileged-CLONE_NEWUSER-by-default.patch 2025-01-15 08:37:54.020490497 -0000
@@ -14,88 +14,16 @@ Signed-off-by: Serge Hallyn <serge.hally
[bwh: Remove unneeded binary sysctl bits]
[bwh: Keep this sysctl, but change the default to enabled]
---
-Index: linux/kernel/fork.c
-===================================================================
---- linux.orig/kernel/fork.c
-+++ linux/kernel/fork.c
-@@ -108,6 +108,11 @@
-
- #define CREATE_TRACE_POINTS
- #include <trace/events/task.h>
-+#ifdef CONFIG_USER_NS
-+extern int unprivileged_userns_clone;
-+#else
-+#define unprivileged_userns_clone 0
-+#endif
-
- /*
- * Minimum number of threads to boot the kernel
-@@ -2008,6 +2013,10 @@ static __latent_entropy struct task_stru
- if ((clone_flags & (CLONE_NEWUSER|CLONE_FS)) == (CLONE_NEWUSER|CLONE_FS))
- return ERR_PTR(-EINVAL);
-
-+ if ((clone_flags & CLONE_NEWUSER) && !unprivileged_userns_clone)
-+ if (!capable(CAP_SYS_ADMIN))
-+ return ERR_PTR(-EPERM);
-+
- /*
- * Thread groups must share signals as well, and detached threads
- * can only be started up within the thread group.
-@@ -3166,6 +3175,12 @@ int ksys_unshare(unsigned long unshare_f
- if (unshare_flags & CLONE_NEWNS)
- unshare_flags |= CLONE_FS;
-
-+ if ((unshare_flags & CLONE_NEWUSER) && !unprivileged_userns_clone) {
-+ err = -EPERM;
-+ if (!capable(CAP_SYS_ADMIN))
-+ goto bad_unshare_out;
-+ }
-+
- err = check_unshare_flags(unshare_flags);
- if (err)
- goto bad_unshare_out;
-Index: linux/kernel/sysctl.c
-===================================================================
---- linux.orig/kernel/sysctl.c
-+++ linux/kernel/sysctl.c
-@@ -136,6 +136,10 @@ static enum sysctl_writes_mode sysctl_wr
- int sysctl_legacy_va_layout;
- #endif
-
-+#ifdef CONFIG_USER_NS
-+extern int unprivileged_userns_clone;
-+#endif
-+
- #endif /* CONFIG_SYSCTL */
-
- /*
-@@ -1659,6 +1663,15 @@ static struct ctl_table kern_table[] = {
- .mode = 0644,
- .proc_handler = proc_dointvec,
- },
-+#ifdef CONFIG_USER_NS
-+ {
-+ .procname = "unprivileged_userns_clone",
-+ .data = &unprivileged_userns_clone,
-+ .maxlen = sizeof(int),
-+ .mode = 0644,
-+ .proc_handler = proc_dointvec,
-+ },
-+#endif
- #ifdef CONFIG_PROC_SYSCTL
- {
- .procname = "tainted",
-Index: linux/kernel/user_namespace.c
-===================================================================
---- linux.orig/kernel/user_namespace.c
-+++ linux/kernel/user_namespace.c
-@@ -22,6 +22,9 @@
- #include <linux/bsearch.h>
- #include <linux/sort.h>
-
-+/* sysctl */
-+int unprivileged_userns_clone = 1;
-+
- static struct kmem_cache *user_ns_cachep __read_mostly;
- static DEFINE_MUTEX(userns_state_mutex);
-
+
+--- a/drivers/net/wireless/mediatek/mt76/mac80211.c 2025-01-14 07:21:38.223397384 -0000
++++ b/drivers/net/wireless/mediatek/mt76/mac80211.c 2025-01-14 22:27:11.640317226 -0000
+@@ -37,7 +37,7 @@ static const struct ieee80211_channel mt
+ CHAN2G(7, 2442),
+ CHAN2G(8, 2447),
+ CHAN2G(9, 2452),
+- CHAN2G(10, 2457),
++ CHAN2G(10, 2457),
+ CHAN2G(11, 2462),
+ CHAN2G(12, 2467),
+ CHAN2G(13, 2472),
+--
#############################################################
# 0006-security-perf-allow-further-restriction-of-perf_event_open-patch.patch
#############################################################
--- a/debian/patches/features/all/security-perf-allow-further-restriction-of-perf_event_open.patch 2025-01-14 17:21:03.170231416 -0000
+++ b/debian/patches/features/all/security-perf-allow-further-restriction-of-perf_event_open.patch 2025-01-14 17:46:19.080238372 -0000
@@ -36,21 +36,7 @@ Signed-off-by: Ben Hutchings <ben@decade
--- a/kernel/events/core.c
+++ b/kernel/events/core.c
-@@ -415,8 +415,13 @@ static struct kmem_cache *perf_event_cac
- * 0 - disallow raw tracepoint access for unpriv
- * 1 - disallow cpu events for unpriv
- * 2 - disallow kernel profiling for unpriv
-+ * 3 - disallow all unpriv perf event use
- */
-+#ifdef CONFIG_SECURITY_PERF_EVENTS_RESTRICT
-+int sysctl_perf_event_paranoid __read_mostly = 3;
-+#else
- int sysctl_perf_event_paranoid __read_mostly = 2;
-+#endif
-
- /* Minimum for 512 kiB + 1 user control page */
- int sysctl_perf_event_mlock __read_mostly = 512 + (PAGE_SIZE / 1024); /* 'free' kiB per user */
-@@ -12235,6 +12240,9 @@ SYSCALL_DEFINE5(perf_event_open,
+@@ -12359,8 +12240,11 @@ SYSCALL_DEFINE5(perf_event_open,
if (err)
return err;
@@ -58,23 +44,8 @@ Signed-off-by: Ben Hutchings <ben@decade
+ return -EACCES;
+
/* Do we allow access to perf_event_open(2) ? */
- err = security_perf_event_open(&attr, PERF_SECURITY_OPEN);
+- err = perf_allow_open(&attr);
++ err = security_perf_event_open(&attr, PERF_SECURITY_OPEN);
if (err)
---- a/security/Kconfig
-+++ b/security/Kconfig
-@@ -19,6 +19,15 @@ config SECURITY_DMESG_RESTRICT
-
- If you are unsure how to answer this question, answer N.
+ return err;
-+config SECURITY_PERF_EVENTS_RESTRICT
-+ bool "Restrict unprivileged use of performance events"
-+ depends on PERF_EVENTS
-+ help
-+ If you say Y here, the kernel.perf_event_paranoid sysctl
-+ will be set to 3 by default, and no unprivileged use of the
-+ perf_event_open syscall will be permitted unless it is
-+ changed.
-+
- config SECURITY
- bool "Enable different security models"
- depends on SYSFS
##########################################################
# 0007-efi-lock-down-the-kernel-if-booted-in-secure-boot-mo-patch.patch
##########################################################
--- a/debian/patches/features/all/lockdown/efi-lock-down-the-kernel-if-booted-in-secure-boot-mo.patch 2025-01-14 16:24:03.540215777 -0000
+++ b/debain/patches/features/all/lockdown/efi-lock-down-the-kernel-if-booted-in-secure-boot-mo.patch 2025-01-14 17:12:55.646895812 -0000
@@ -24,28 +24,6 @@ Signed-off-by: Salvatore Bonaccorso <car
security/lockdown/lockdown.c | 2 +-
5 files changed, 27 insertions(+), 3 deletions(-)
-Index: debian-kernel/arch/x86/kernel/setup.c
-===================================================================
---- debian-kernel.orig/arch/x86/kernel/setup.c
-+++ debian-kernel/arch/x86/kernel/setup.c
-@@ -979,6 +979,8 @@ void __init setup_arch(char **cmdline_p)
- if (efi_enabled(EFI_BOOT))
- efi_init();
-
-+ efi_set_secure_boot(boot_params.secure_boot);
-+
- dmi_setup();
-
- /*
-@@ -1130,8 +1132,6 @@ void __init setup_arch(char **cmdline_p)
- /* Allocate bigger log buffer */
- setup_log_buf(1);
-
-- efi_set_secure_boot(boot_params.secure_boot);
--
- reserve_initrd();
-
- acpi_table_upgrade();
Index: debian-kernel/drivers/firmware/efi/secureboot.c
===================================================================
--- debian-kernel.orig/drivers/firmware/efi/secureboot.c
#########################################################
# 0008-netfilter-nf_tables-deactivate-anonymous-set-from-pr-patch.patch
#########################################################
--- b/debian/patches/bugfix/all/netfilter-nf_tables-deactivate-anonymous-set-from-pr.patch 2025-01-14 16:25:36.026882840 -0000
+++ a/debian/patches/bugfix/all/netfilter-nf_tables-deactivate-anonymous-set-from-pr.patch 2025-01-15 08:43:23.427158708 -0000
@@ -37,86 +37,15 @@ Signed-off-by: Pablo Neira Ayuso <pablo@
net/netfilter/nft_objref.c | 2 +-
5 files changed, 16 insertions(+), 3 deletions(-)
-diff --git a/include/net/netfilter/nf_tables.h b/include/net/netfilter/nf_tables.h
-index 3ed21d2d5659..2e24ea1d744c 100644
---- a/include/net/netfilter/nf_tables.h
-+++ b/include/net/netfilter/nf_tables.h
-@@ -619,6 +619,7 @@ struct nft_set_binding {
- };
-
- enum nft_trans_phase;
-+void nf_tables_activate_set(const struct nft_ctx *ctx, struct nft_set *set);
- void nf_tables_deactivate_set(const struct nft_ctx *ctx, struct nft_set *set,
- struct nft_set_binding *binding,
- enum nft_trans_phase phase);
-diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c
-index 8b6c61a2196c..59fb8320ab4d 100644
---- a/net/netfilter/nf_tables_api.c
-+++ b/net/netfilter/nf_tables_api.c
-@@ -5127,12 +5127,24 @@ static void nf_tables_unbind_set(const struct nft_ctx *ctx, struct nft_set *set,
- }
- }
-
-+void nf_tables_activate_set(const struct nft_ctx *ctx, struct nft_set *set)
-+{
-+ if (nft_set_is_anonymous(set))
-+ nft_clear(ctx->net, set);
-+
-+ set->use++;
-+}
-+EXPORT_SYMBOL_GPL(nf_tables_activate_set);
-+
- void nf_tables_deactivate_set(const struct nft_ctx *ctx, struct nft_set *set,
- struct nft_set_binding *binding,
- enum nft_trans_phase phase)
- {
- switch (phase) {
- case NFT_TRANS_PREPARE:
-+ if (nft_set_is_anonymous(set))
-+ nft_deactivate_next(ctx->net, set);
-+
- set->use--;
- return;
- case NFT_TRANS_ABORT:
-diff --git a/net/netfilter/nft_dynset.c b/net/netfilter/nft_dynset.c
-index 274579b1696e..bd19c7aec92e 100644
---- a/net/netfilter/nft_dynset.c
-+++ b/net/netfilter/nft_dynset.c
-@@ -342,7 +342,7 @@ static void nft_dynset_activate(const struct nft_ctx *ctx,
- {
- struct nft_dynset *priv = nft_expr_priv(expr);
-
-- priv->set->use++;
-+ nf_tables_activate_set(ctx, priv->set);
- }
-
- static void nft_dynset_destroy(const struct nft_ctx *ctx,
-diff --git a/net/netfilter/nft_lookup.c b/net/netfilter/nft_lookup.c
-index cecf8ab90e58..03ef4fdaa460 100644
---- a/net/netfilter/nft_lookup.c
-+++ b/net/netfilter/nft_lookup.c
-@@ -167,7 +167,7 @@ static void nft_lookup_activate(const struct nft_ctx *ctx,
- {
- struct nft_lookup *priv = nft_expr_priv(expr);
-
-- priv->set->use++;
-+ nf_tables_activate_set(ctx, priv->set);
- }
-
- static void nft_lookup_destroy(const struct nft_ctx *ctx,
-diff --git a/net/netfilter/nft_objref.c b/net/netfilter/nft_objref.c
-index cb37169608ba..a48dd5b5d45b 100644
---- a/net/netfilter/nft_objref.c
-+++ b/net/netfilter/nft_objref.c
-@@ -185,7 +185,7 @@ static void nft_objref_map_activate(const struct nft_ctx *ctx,
- {
- struct nft_objref_map *priv = nft_expr_priv(expr);
-
-- priv->set->use++;
-+ nf_tables_activate_set(ctx, priv->set);
- }
-
- static void nft_objref_map_destroy(const struct nft_ctx *ctx,
---
-2.40.1
-
+--- a/drivers/net/wireless/mediatek/mt76/mac80211.c 2025-01-14 07:21:38.223397384 -0000
++++ b/drivers/net/wireless/mediatek/mt76/mac80211.c 2025-01-14 22:27:11.640317226 -0000
+@@ -31,7 +31,7 @@ static const struct ieee80211_channel mt
+ CHAN2G(1, 2412),
+ CHAN2G(2, 2417),
+ CHAN2G(3, 2422),
+- CHAN2G(4, 2427),
++ CHAN2G(4, 2427),
+ CHAN2G(5, 2432),
+ CHAN2G(6, 2437),
+ CHAN2G(7, 2442),
+--
##############################################################
# 0009-intel-iommu-add-kconfig-option-to-exclude-igpu-by-default-patch.patch
##############################################################
--- a/debian/patches/features/x86/intel-iommu-add-kconfig-option-to-exclude-igpu-by-default.patch 2025-01-14 23:04:45.816994645 -0000
+++ b/debian/patches/features/x86/intel-iommu-add-kconfig-option-to-exclude-igpu-by-default.patch 2025-01-15 01:13:13.593698202 -0000
@@ -15,6 +15,7 @@ Signed-off-by: Ben Hutchings <ben@decade
---
--- a/drivers/iommu/intel/Kconfig
+++ b/drivers/iommu/intel/Kconfig
+
@@ -58,14 +58,25 @@ config INTEL_IOMMU_SVM
to access DMA resources through process address space by
means of a Process Address Space ID (PASID).
@@ -49,9 +50,9 @@ Signed-off-by: Ben Hutchings <ben@decade
depends on BROKEN && X86
--- a/drivers/iommu/intel/iommu.c
+++ b/drivers/iommu/intel/iommu.c
-@@ -289,14 +289,14 @@ static LIST_HEAD(dmar_satc_units);
+@@ -283,14 +286,14 @@ static LIST_HEAD(dmar_satc_units);
- static void dmar_remove_one_dev_info(struct device *dev);
+ static void device_block_translation(struct device *dev);
-int dmar_disabled = !IS_ENABLED(CONFIG_INTEL_IOMMU_DEFAULT_ON);
+int dmar_disabled = IS_ENABLED(CONFIG_INTEL_IOMMU_DEFAULT_OFF);
#################################################
# 0010-x86-make-x32-syscall-support-conditional-patch.patch
#################################################
--- a/debian/patches/features/x86/x86-make-x32-syscall-support-conditional.patch 2025-01-14 23:27:07.337001055 -0000
+++ b/debian/patches/features/x86/x86-make-x32-syscall-support-conditional.patch 2025-01-15 07:29:59.147137704 -0000
@@ -59,18 +59,18 @@ Signed-off-by: Ben Hutchings <ben@decade
depends on IA32_EMULATION || X86_X32_ABI
--- a/arch/x86/entry/common.c
+++ b/arch/x86/entry/common.c
-@@ -62,7 +62,7 @@ static __always_inline bool do_syscall_x
+@@ -63,7 +63,7 @@ static __always_inline bool do_syscall_x
*/
unsigned int xnr = nr - __X32_SYSCALL_BIT;
- if (IS_ENABLED(CONFIG_X86_X32_ABI) && likely(xnr < X32_NR_syscalls)) {
+ if (IS_ENABLED(CONFIG_X86_X32_ABI) && unlikely(x32_enabled) && likely(xnr < X32_NR_syscalls)) {
xnr = array_index_nospec(xnr, X32_NR_syscalls);
- regs->ax = x32_sys_call_table[xnr](regs);
+ regs->ax = x32_sys_call(regs, xnr);
return true;
--- a/arch/x86/entry/syscall_x32.c
+++ b/arch/x86/entry/syscall_x32.c
-@@ -4,6 +4,9 @@
+@@ -4,6 +4,9 @@
#include <linux/linkage.h>
#include <linux/sys.h>
#include <linux/cache.h>
@@ -80,9 +80,9 @@ Signed-off-by: Ben Hutchings <ben@decade
#include <linux/syscalls.h>
#include <asm/syscall.h>
-@@ -16,3 +19,46 @@
- asmlinkage const sys_call_ptr_t x32_sys_call_table[] = {
- #include <asm/syscalls_x32.h>
+@@ -20,3 +23,46 @@ long x32_sys_call(const struct pt_regs *
+ default: return __x64_sys_ni_syscall(regs);
+ }
};
+
+/* Maybe enable x32 syscalls */
@@ -129,7 +129,7 @@ Signed-off-by: Ben Hutchings <ben@decade
+arch_param_cb(x32, &x32_param_ops, NULL, 0444);
--- a/arch/x86/include/asm/elf.h
+++ b/arch/x86/include/asm/elf.h
-@@ -11,6 +11,9 @@
+@@ -11,6 +11,9 @@
#include <asm/user.h>
#include <asm/auxvec.h>
#include <asm/fsgsbase.h>
@@ -151,7 +151,7 @@ Signed-off-by: Ben Hutchings <ben@decade
# error "The following code assumes __USER32_DS == __USER_DS"
--- a/arch/x86/include/asm/syscall.h
+++ b/arch/x86/include/asm/syscall.h
-@@ -13,6 +13,7 @@
+@@ -13,6 +13,7 @@
#include <uapi/linux/audit.h>
#include <linux/sched.h>
#include <linux/err.h>
@@ -159,9 +159,9 @@ Signed-off-by: Ben Hutchings <ben@decade
#include <asm/thread_info.h> /* for TS_COMPAT */
#include <asm/unistd.h>
-@@ -30,6 +31,18 @@ extern const sys_call_ptr_t ia32_sys_cal
- extern const sys_call_ptr_t x32_sys_call_table[];
- #endif
+@@ -28,6 +29,18 @@ extern long ia32_sys_call(const struct p
+ extern long x32_sys_call(const struct pt_regs *, unsigned int nr);
+ extern long x64_sys_call(const struct pt_regs *, unsigned int nr);
+#if defined(CONFIG_X86_X32_ABI)
+#if defined(CONFIG_X86_X32_DISABLED)
##########################################################
# 0011-arm64-dts-rockchip-Enable-GPU-on-SOQuartz-CM4-patch.patch
##########################################################
--- a/debian/patches/features/arm64/quartz64/arm64-dts-rockchip-Enable-GPU-on-SOQuartz-CM4.patch 2025-01-14 23:39:42.593671314 -0000
+++ b/debian/patches/features/arm64/quartz64/arm64-dts-rockchip-Enable-GPU-on-SOQuartz-CM4.patch 2025-01-15 08:42:16.397158372 -0000
@@ -9,25 +9,16 @@ Signed-off-by: Nicolas Frattaroli <fratt
Link: https://lore.kernel.org/r/20221112160404.70868-2-frattaroli.nicolas@gmail.com
Signed-off-by: Heiko Stuebner <heiko@sntech.de>
---
- arch/arm64/boot/dts/rockchip/rk3566-soquartz.dtsi | 5 +++++
- 1 file changed, 5 insertions(+)
-
-diff --git a/arch/arm64/boot/dts/rockchip/rk3566-soquartz.dtsi b/arch/arm64/boot/dts/rockchip/rk3566-soquartz.dtsi
-index 5bcd4be32964..6e99f049501c 100644
---- a/arch/arm64/boot/dts/rockchip/rk3566-soquartz.dtsi
-+++ b/arch/arm64/boot/dts/rockchip/rk3566-soquartz.dtsi
-@@ -143,6 +143,11 @@
- status = "disabled";
- };
-
-+&gpu {
-+ mali-supply = <&vdd_gpu>;
-+ status = "okay";
-+};
-+
- &i2c0 {
- status = "okay";
-
---
-2.39.0
+--- a/drivers/net/wireless/mediatek/mt76/mac80211.c 2025-01-14 07:21:38.223397384 -0000
++++ b/drivers/net/wireless/mediatek/mt76/mac80211.c 2025-01-14 22:27:11.640317226 -0000
+@@ -31,7 +31,7 @@ static const struct ieee80211_channel mt
+ CHAN2G(1, 2412),
+ CHAN2G(2, 2417),
+ CHAN2G(3, 2422),
+- CHAN2G(4, 2427),
++ CHAN2G(4, 2427),
+ CHAN2G(5, 2432),
+ CHAN2G(6, 2437),
+ CHAN2G(7, 2442),
+--
This is in OP post and is what I am using with above, this is the three files debian uses for the kernel and kept the debian-patch+dsc so matches the patch to have the tainted orig tarball work.
I have whats needed to make a custom debian work, just seek to make this work in a .deb file I know nothing about with this .config
There is config that needs set in that .config, for efistub to be a option and there not set here. This is why efistub is one the three asked question, and as said above as to why.
This variable would need know as well, since the fstab will be in the above initramfs. I need to get the x299 board woking first as replacement for the x79, then can worry about the x79 migrating to a ts440 case or a P10S-M board becoming a router/switch. The P10S-M is headless on the main board but has a aspeed bmc for a head, will ask about getting into it in another thread. I dont like needing a hard reset if a part of lxqt/kwin crashes like under systemd, dealt with this using arch for a decade and corrupts data that calls for rebuild of root. A decade before that was with slackware and the past year with gentoo, sysvinit and openrc work the same about and the same crash here is a temp dead window and restart of program with note of what failed in a pop up. Reason for needing MX linux, is for a recover gui to build gentoo in on the x299 only so dont keep braking it doing stuff in terminal and typing out instruction found on a phones internet. MX linux is fine for what it is and not what I would want of a main os, gentoo can be tailered to what I want and need. This the outcome of working from that terminal, now the liguros build is going to have to be redone probably and that took days to get sorted. What occurred can and probably will happen to MX linux if is not in a RO sandbox for root, and why I seek the above configuration of MX linux.
