From 57838088c4619045f9d0c33059c3673b2781b694 Mon Sep 17 00:00:00 2001
From: Paul Menzel <pmenzel@molgen.mpg.de>
Date: Mon, 12 Dec 2016 10:50:33 +0100
Subject: [PATCH] linux: Add LTS version 4.4.38

Do as Greg says [1]:

> All users of the 4.4 kernel series must upgrade.

Changes for Linux 4.4.38 [2][3]:

> Immediately after the release of Linux kernel 4.8.14, renowned Linux
> kernel maintainer Greg Kroah-Hartman was proud to announce the
> availability of a new maintenance update to the long-term supported
> Linux 4.4 kernel series.
>
> Just like Linux kernel 4.8.14, the Linux 4.4.38 LTS kernel release hit
> the streets only two days after the previous maintenance version, in
> this case Linux kernel 4.4.37 LTS, and it looks like it's yet another
> small patch that changes a total of 35 files, with 242 insertions and 80
> deletions, according to the appended shortlog and the diff since Linux
> 4.4.37.
>
> "I'm announcing the release of the 4.4.38 kernel. All users of the 4.4
> kernel series must upgrade," said Greg Kroah-Hartman. "The updated 4.4.y
> git tree can be found at:
> git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git
> linux-4.4.y and can be browsed at the normal kernel.org git web browser:
> http://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary."
>
> ### There are mostly networking improvements and a few SPARC fixes ###
>
> New in Linux kernel 4.4.38 LTS, there's an updated networking stack with
> various minor fixes and improvements for things like IPv6, IPv4, Layer 2
> Tunneling Protocol (L2TP), Datagram Congestion Control Protocol (DCCP),
> Netlink, and the packet scheduler. There are also other networking
> changes on the driver area with bugfixes for Broadcom, Marvell, and
> Renesas Ethernet adaptors.
>
> Lastly, the Linux 4.4.38 LTS kernel introduces a couple of fixes for the
> SPARC hardware architecture. It's a recommended update for anyone using
> a GNU/Linux distribution powered by the long-term supported Linux 4.4
> kernel series, so go ahead and download the source archive from
> kernel.org or through our web portal, or wait for the patch to land in
> the stable repositories of your favorite OS.

This release also fixes the local privilege escalation CVE-2016-8655
[4][5].

[1] https://lkml.org/lkml/2016/12/10/128
[2] http://news.softpedia.com/news/linux-kernel-4-4-38-lts-adds-ipv6-ipv4-and-l2tp-fixes-updated-ethernet-drivers-510885.shtml
[3] https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.38
[4] https://www.heise.de/newsticker/meldung/Root-Rechte-durch-Linux-Luecke-3565365.html
[5] http://seclists.org/oss-sec/2016/q4/621
---
 linux-4.4.38-129.bee | 79 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 79 insertions(+)
 create mode 100755 linux-4.4.38-129.bee

diff --git a/linux-4.4.38-129.bee b/linux-4.4.38-129.bee
new file mode 100755
index 000000000..fc68c0aaa
--- /dev/null
+++ b/linux-4.4.38-129.bee
@@ -0,0 +1,79 @@
+#!/bin/env beesh
+
+# note: CONFIG=/boot/config-WHATEVER BEE_MAKEFLAGS='-j 40' ./linux-xxx.bee
+
+KERNELVERSION=${PKGVERSION}
+if [ -z "${PKGVERSION[3]}" ] ; then
+    KERNELVERSION=${KERNELVERSION}.0
+fi
+
+# append extra version to get for example 4.8.0-rc4
+KERNELVERSION=${KERNELVERSION}${PKGEXTRAVERSION_DASH}
+
+echo $KERNELVERSION
+
+SRCURL[0]="https://cdn.kernel.org/pub/linux/kernel/v${PKGVERSION[1]}.x/linux-${PKGVERSION}${PKGEXTRAVERSION_DASH}.tar.xz"
+
+# EXCLUDE=""
+
+#CONFIG=
+
+KERNELLOCAL=".mx64.${PKGREVISION}"
+FULLKERNELVERSION="${KERNELVERSION}${KERNELLOCAL}"
+
+B=${S}
+
+mee_patch() {
+    echo "PATCH $@"
+    bee_patch $@
+}
+
+mee_configure() {
+    echo "configure $@"
+    if [ -e /proc/config.gz ] ; then
+         zcat /proc/config.gz >config-current
+         RUNNING=config-current
+    else
+         RUNNING=/boot/config-$(uname -r)
+    fi
+
+    : ${CONFIG:=${RUNNING}}
+
+    if [ ! -e ${CONFIG} ] ; then
+        echo "can't find config '${CONFIG}'"
+        exit 1
+    fi
+
+    cp -v ${CONFIG} .config
+
+    LOCALVERSION="\"${KERNELLOCAL}\""
+    sed -i -e "s@CONFIG_LOCALVERSION=.*@CONFIG_LOCALVERSION=${LOCALVERSION}@" .config
+
+    echo "doing make -C ${S} olddefconfig in ${PWD} .."
+
+    make olddefconfig
+
+    echo "doing make -C ${S} menuconfig in ${PWD} .."
+
+    make menuconfig
+}
+
+mee_build() {
+    echo "build $@"
+    make ${BEE_MAKEFLAGS}
+}
+
+mee_install() {
+    echo "install $@"
+
+    make modules_install  INSTALL_MOD_PATH=${D}
+    make install          INSTALL_PATH=${D}/boot
+#    make firmware_install INSTALL_MOD_PATH=${D}
+
+    rm -v ${D}/lib/modules/${FULLKERNELVERSION}/{source,build}
+
+    ln -sv /usr/src/linux/${PKGALLPKG}/source ${D}/lib/modules/${FULLKERNELVERSION}/source
+    ln -sv /usr/src/linux/${PKGALLPKG}/build  ${D}/lib/modules/${FULLKERNELVERSION}/build
+
+    ln -sv bzImage-${FULLKERNELVERSION} ${D}/boot/mariux.${PKGREVISION}
+}