Skip to content

Commit

Permalink
[kernel]: security kernel update to 4.9.189 (sonic-net#3913)
Browse files Browse the repository at this point in the history
This patch upgrade the kernel from version
4.9.0-9-2 (4.9.168-1+deb9u3) to 4.9.0-11-2 (4.9.189-3+deb9u2)

Co-authored-by: rajendra-dendukuri <[email protected]>
  • Loading branch information
2 people authored and tiantianlv committed Apr 24, 2020
1 parent ff03d6a commit c06ca14
Show file tree
Hide file tree
Showing 32 changed files with 62 additions and 62 deletions.
2 changes: 1 addition & 1 deletion build_debian.sh
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,7 @@ if [[ $CONFIGURED_ARCH == armhf || $CONFIGURED_ARCH == arm64 ]]; then
else
DOCKER_VERSION=5:18.09.8~3-0~debian-stretch
fi
LINUX_KERNEL_VERSION=4.9.0-9-2
LINUX_KERNEL_VERSION=4.9.0-11-2

## Working directory to prepare the file system
FILESYSTEM_ROOT=./fsroot
Expand Down
2 changes: 1 addition & 1 deletion files/build_templates/single_instance/swss.service.j2
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ Requires=database.service updategraph.service
{% if sonic_asic_platform == 'broadcom' %}
Requires=opennsl-modules.service
{% elif sonic_asic_platform == 'nephos' %}
Requires=nps-modules-4.9.0-9-2-amd64.service
Requires=nps-modules-4.9.0-11-2-amd64.service
{% endif %}
After=database.service updategraph.service
After=interfaces-config.service
Expand Down
4 changes: 2 additions & 2 deletions files/build_templates/single_instance/syncd.service.j2
Original file line number Diff line number Diff line change
Expand Up @@ -4,14 +4,14 @@ Requires=database.service updategraph.service
{% if sonic_asic_platform == 'broadcom' %}
Requires=opennsl-modules.service
{% elif sonic_asic_platform == 'nephos' %}
Requires=nps-modules-4.9.0-9-2-amd64.service
Requires=nps-modules-4.9.0-11-2-amd64.service
{% endif %}
After=database.service updategraph.service
After=interfaces-config.service
{% if sonic_asic_platform == 'broadcom' %}
After=opennsl-modules.service
{% elif sonic_asic_platform == 'nephos' %}
After=nps-modules-4.9.0-9-2-amd64.service
After=nps-modules-4.9.0-11-2-amd64.service
{% endif %}
After=swss.service
Before=ntp-config.service
Expand Down
4 changes: 2 additions & 2 deletions installer/x86_64/install.sh
Original file line number Diff line number Diff line change
Expand Up @@ -606,12 +606,12 @@ menuentry '$demo_grub_entry' {
if [ x$grub_platform = xxen ]; then insmod xzio; insmod lzopio; fi
insmod part_msdos
insmod ext2
linux /$image_dir/boot/vmlinuz-4.9.0-9-2-amd64 root=$grub_cfg_root rw $GRUB_CMDLINE_LINUX \
linux /$image_dir/boot/vmlinuz-4.9.0-11-2-amd64 root=$grub_cfg_root rw $GRUB_CMDLINE_LINUX \
net.ifnames=0 biosdevname=0 \
loop=$image_dir/$FILESYSTEM_SQUASHFS loopfstype=squashfs \
apparmor=1 security=apparmor varlog_size=$VAR_LOG_SIZE usbcore.autosuspend=-1 $ONIE_PLATFORM_EXTRA_CMDLINE_LINUX
echo 'Loading $demo_volume_label $demo_type initial ramdisk ...'
initrd /$image_dir/boot/initrd.img-4.9.0-9-2-amd64
initrd /$image_dir/boot/initrd.img-4.9.0-11-2-amd64
}
EOF
Expand Down
2 changes: 1 addition & 1 deletion platform/barefoot/bfn-modules/debian/control
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,6 @@ Standards-Version: 3.9.3

Package: bfn-modules
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for bfn asic for mmap

Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,6 @@ Standards-Version: 3.9.3

Package: sonic-platform-modules-bfn-montara
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led, sfp

Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,6 @@ Standards-Version: 3.9.3

Package: sonic-platform-modules-bfn-newport
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel module for bfn platform fpga and scripts for the devices such as fan, led, sfp

Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,6 @@ Standards-Version: 3.9.3

Package: sonic-platform-modules-bfn
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led, sfp

2 changes: 1 addition & 1 deletion platform/broadcom/sai-modules.mk
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Broadcom SAI modules

KVERSION = 4.9.0-9-2-amd64
KVERSION = 4.9.0-11-2-amd64
BRCM_OPENNSL_KERNEL_VERSION = 3.7.3.3-1

BRCM_OPENNSL_KERNEL = opennsl-modules_$(BRCM_OPENNSL_KERNEL_VERSION)_amd64.deb
Expand Down
2 changes: 1 addition & 1 deletion platform/broadcom/saibcm-modules/debian/control
Original file line number Diff line number Diff line change
Expand Up @@ -10,5 +10,5 @@ Standards-Version: 3.9.3
Package: opennsl-modules
Architecture: amd64
Section: main
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for broadcom SAI
Original file line number Diff line number Diff line change
@@ -1 +1 @@
lib/modules/4.9.0-9-2-amd64/extra
lib/modules/4.9.0-11-2-amd64/extra
10 changes: 5 additions & 5 deletions platform/broadcom/saibcm-modules/debian/opennsl-modules.install
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
systems/linux/user/x86-smp_generic_64-2_6/linux-bcm-knet.ko lib/modules/4.9.0-9-2-amd64/extra
systems/linux/user/x86-smp_generic_64-2_6/linux-kernel-bde.ko lib/modules/4.9.0-9-2-amd64/extra
systems/linux/user/x86-smp_generic_64-2_6/linux-user-bde.ko lib/modules/4.9.0-9-2-amd64/extra
systems/linux/user/x86-smp_generic_64-2_6/linux-knet-cb.ko lib/modules/4.9.0-9-2-amd64/extra
systems/linux/user/x86-smp_generic_64-2_6/psample.ko lib/modules/4.9.0-9-2-amd64/extra
systems/linux/user/x86-smp_generic_64-2_6/linux-bcm-knet.ko lib/modules/4.9.0-11-2-amd64/extra
systems/linux/user/x86-smp_generic_64-2_6/linux-kernel-bde.ko lib/modules/4.9.0-11-2-amd64/extra
systems/linux/user/x86-smp_generic_64-2_6/linux-user-bde.ko lib/modules/4.9.0-11-2-amd64/extra
systems/linux/user/x86-smp_generic_64-2_6/linux-knet-cb.ko lib/modules/4.9.0-11-2-amd64/extra
systems/linux/user/x86-smp_generic_64-2_6/psample.ko lib/modules/4.9.0-11-2-amd64/extra
systemd/opennsl-modules.service lib/systemd/system
6 changes: 3 additions & 3 deletions platform/broadcom/saibcm-modules/debian/rules
Original file line number Diff line number Diff line change
Expand Up @@ -60,7 +60,7 @@ kdist_config: prep-deb-files
kdist_clean: clean
dh_testdir
dh_clean
SDK=$(realpath .) LINUX_UAPI_SPLIT=1 DEBIAN_LINUX_HEADER=1 BUILD_KNET_CB=1 BUILD_PSAMPLE=1 KERNDIR=/usr/src/linux-headers-4.9.0-9-2-amd64 KERNEL_SRC=/usr/src/linux-headers-4.9.0-9-2-amd64 $(MAKE) -C systems/linux/user/x86-smp_generic_64-2_6 clean
SDK=$(realpath .) LINUX_UAPI_SPLIT=1 DEBIAN_LINUX_HEADER=1 BUILD_KNET_CB=1 BUILD_PSAMPLE=1 KERNDIR=/usr/src/linux-headers-4.9.0-11-2-amd64 KERNEL_SRC=/usr/src/linux-headers-4.9.0-11-2-amd64 $(MAKE) -C systems/linux/user/x86-smp_generic_64-2_6 clean
# rm -f driver/*.o driver/*.ko
#
### end KERNEL SETUP
Expand All @@ -78,7 +78,7 @@ build-arch-stamp:
dh_testdir

# Add here command to compile/build the package.
SDK=$(realpath .) LINUX_UAPI_SPLIT=1 DEBIAN_LINUX_HEADER=1 BUILD_KNET_CB=1 BUILD_PSAMPLE=1 KERNDIR=/usr/src/linux-headers-4.9.0-9-2-amd64 KERNEL_SRC=/usr/src/linux-headers-4.9.0-9-2-amd64 $(MAKE) -C systems/linux/user/x86-smp_generic_64-2_6
SDK=$(realpath .) LINUX_UAPI_SPLIT=1 DEBIAN_LINUX_HEADER=1 BUILD_KNET_CB=1 BUILD_PSAMPLE=1 KERNDIR=/usr/src/linux-headers-4.9.0-11-2-amd64 KERNEL_SRC=/usr/src/linux-headers-4.9.0-11-2-amd64 $(MAKE) -C systems/linux/user/x86-smp_generic_64-2_6

touch $@

Expand All @@ -103,7 +103,7 @@ clean:
rm -f build-arch-stamp build-indep-stamp configure-stamp

# Add here commands to clean up after the build process.
SDK=$(realpath .) LINUX_UAPI_SPLIT=1 DEBIAN_LINUX_HEADER=1 BUILD_KNET_CB=1 BUILD_PSAMPLE=1 KERNDIR=/usr/src/linux-headers-4.9.0-9-2-amd64 KERNEL_SRC=/usr/src/linux-headers-4.9.0-9-2-amd64 $(MAKE) -C systems/linux/user/x86-smp_generic_64-2_6 clean
SDK=$(realpath .) LINUX_UAPI_SPLIT=1 DEBIAN_LINUX_HEADER=1 BUILD_KNET_CB=1 BUILD_PSAMPLE=1 KERNDIR=/usr/src/linux-headers-4.9.0-11-2-amd64 KERNEL_SRC=/usr/src/linux-headers-4.9.0-11-2-amd64 $(MAKE) -C systems/linux/user/x86-smp_generic_64-2_6 clean

dh_clean

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -7,11 +7,11 @@ Standards-Version: 3.9.3

Package: sonic-platform-alphanetworks-snh60a0-320fv2
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led, sfp

Package: sonic-platform-alphanetworks-snh60b0-640f
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led, sfp

6 changes: 3 additions & 3 deletions platform/broadcom/sonic-platform-modules-cel/debian/control
Original file line number Diff line number Diff line change
Expand Up @@ -7,16 +7,16 @@ Standards-Version: 3.9.3

Package: platform-modules-dx010
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led, sfp


Package: platform-modules-haliburton
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led, sfp

Package: platform-modules-silverstone
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as led, sfp.
12 changes: 6 additions & 6 deletions platform/broadcom/sonic-platform-modules-dell/debian/control
Original file line number Diff line number Diff line change
Expand Up @@ -7,30 +7,30 @@ Standards-Version: 3.9.3

Package: platform-modules-s6000
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led, sfp

Package: platform-modules-z9100
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led, sfp

Package: platform-modules-s6100
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led, sfp

Package: platform-modules-z9264f
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led, sfp

Package: platform-modules-s5232f
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led, sfp

Package: platform-modules-s5248f
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led, sfp
10 changes: 5 additions & 5 deletions platform/broadcom/sonic-platform-modules-delta/debian/control
Original file line number Diff line number Diff line change
Expand Up @@ -7,25 +7,25 @@ Standards-Version: 3.9.3

Package: platform-modules-ag9032v1
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led, sfp

Package: platform-modules-ag9064
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led, sfp

Package: platform-modules-ag5648
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led, sfp

Package: platform-modules-et-6248brb
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led, sfp

Package: platform-modules-ag9032v2a
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as syseeprom, sfp
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ start)
modprobe dni_gpio
modprobe delta_et-6248brb_platform

if [ `uname -a | awk '{print $3}'` = "4.9.0-9-2-amd64" ]; then
if [ `uname -a | awk '{print $3}'` = "4.9.0-11-2-amd64" ]; then
echo "453" > "/sys/class/gpio/export"
echo "454" > "/sys/class/gpio/export"
echo "455" > "/sys/class/gpio/export"
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ FAN2_RPM="/sys/bus/i2c/devices/0-002e/fan2_input"
FAN_TRAY1_LED="/sys/devices/platform/delta-et6248brb-gpio.0/FAN/fan1_led_ag"
FAN_TRAY2_LED="/sys/devices/platform/delta-et6248brb-gpio.0/FAN/fan2_led_ag"

if [ `uname -a | awk '{print $3}'` = "4.9.0-9-2-amd64" ]; then
if [ `uname -a | awk '{print $3}'` = "4.9.0-11-2-amd64" ]; then
SYS_LED_G="/sys/class/gpio/gpio453/value"
SYS_LED_R="/sys/class/gpio/gpio454/value"
PWR_LED_G="/sys/class/gpio/gpio455/value"
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -141,7 +141,7 @@ def system_install():
status, output = exec_cmd("rmmod lpc_ich ", 1)

#insert extra module
status, output = exec_cmd("insmod /lib/modules/4.9.0-9-2-amd64/kernel/drivers/gpio/gpio-ich.ko gpiobase=0",1)
status, output = exec_cmd("insmod /lib/modules/4.9.0-11-2-amd64/kernel/drivers/gpio/gpio-ich.ko gpiobase=0",1)

#install drivers
for i in range(0,len(drivers)):
Expand Down
12 changes: 6 additions & 6 deletions platform/broadcom/sonic-platform-modules-inventec/debian/control
Original file line number Diff line number Diff line change
Expand Up @@ -7,30 +7,30 @@ Standards-Version: 3.9.3

Package: platform-modules-d7032q28b
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led

Package: platform-modules-d7054q28b
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led

Package: platform-modules-d6254qs
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led

Package: platform-modules-d6556
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led

Package: platform-modules-d6356
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led

Package: platform-modules-d7264q28b
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led
4 changes: 2 additions & 2 deletions platform/centec/sonic-platform-modules-e582/debian/control
Original file line number Diff line number Diff line change
Expand Up @@ -7,11 +7,11 @@ Standards-Version: 3.9.3

Package: platform-modules-e582-48x2q4z
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led, sfp

Package: platform-modules-e582-48x6q
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led, sfp

Original file line number Diff line number Diff line change
Expand Up @@ -7,5 +7,5 @@ Standards-Version: 3.9.3

Package: platform-modules-midstone-200i
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ Standards-Version: 3.9.3

Package: platform-modules-et-c032if
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led, sfp


2 changes: 1 addition & 1 deletion platform/marvell-armhf/linux-kernel-armhf.mk
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
# linux kernel package for marvell armhf

# Add platform specific DTB
LINUX_KERNEL_DTB = linux-image-4.9.168-armhf.deb
LINUX_KERNEL_DTB = linux-image-4.9.189-armhf.deb
$(LINUX_KERNEL_DTB)_URL = https://github.com/Marvell-switching/sonic-marvell-binaries/raw/master/armhf/kernel/$(LINUX_KERNEL_DTB)
SONIC_ONLINE_DEBS += $(LINUX_KERNEL_DTB)
SONIC_STRETCH_DEBS += $(LINUX_KERNEL_DTB)
2 changes: 1 addition & 1 deletion platform/nephos/nephos-modules.mk
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ SDK_FROM_LOCAL = n
endif

SDK_VERSION = 3.0.0
LINUX_VER = 4.9.0-9-2
LINUX_VER = 4.9.0-11-2
SDK_COMMIT_ID = 529202

ifeq ($(SAI_FROM_LOCAL), y)
Expand Down
2 changes: 1 addition & 1 deletion platform/nephos/nephos-modules/debian/control
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,6 @@ Standards-Version: 3.9.3

Package: nephos-modules
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for nephos asic

Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@ force-reload|restart)
;;

*)
echo "Usage: /etc/init.d/nps-modules-4.9.0-9-2-amd64.init {start|stop}"
echo "Usage: /etc/init.d/nps-modules-4.9.0-11-2-amd64.init {start|stop}"
exit 1
;;
esac
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,8 @@ Before=syncd.service

[Service]
Type=oneshot
ExecStart=-/etc/init.d/nps-modules-4.9.0-9-2-amd64 start
ExecStop=-/etc/init.d/nps-modules-4.9.0-9-2-amd64 stop
ExecStart=-/etc/init.d/nps-modules-4.9.0-11-2-amd64 start
ExecStop=-/etc/init.d/nps-modules-4.9.0-11-2-amd64 stop
RemainAfterExit=yes

[Install]
Expand Down
4 changes: 2 additions & 2 deletions platform/nephos/sonic-platform-modules-accton/debian/control
Original file line number Diff line number Diff line change
Expand Up @@ -7,5 +7,5 @@ Standards-Version: 3.9.3

Package: sonic-platform-accton-as7116-54x
Architecture: amd64
Depends: linux-image-4.9.0-9-2-amd64
Description: kernel modules for platform devices such as fan, led, sfp
Depends: linux-image-4.9.0-11-2-amd64
Description: kernel modules for platform devices such as fan, led, sfp
Loading

0 comments on commit c06ca14

Please sign in to comment.