kernel: update to stable 6.18.49 and enable securityfs #65

Merged
binjovi-bot merged 2 commits from feat/stable-6.18.49-securityfs into trunk 2026-09-07 13:01:29 +00:00
Owner

Import the signed kernel.org 6.18.49 tarball and enable CONFIG_SECURITYFS for runtime security-policy inspection. Preserve the 861-path local overlay, built-in ZFS 2.4.2, and every other generated config setting. The 6.18.44 baseline config reproduced the fleet SHA256 6d63400ab5835821759e960fc3f6aaa22fe98d11862981f08bbf1893f91f6d72. scripts/diffconfig shows only SECURITYFS n -> y. Both upstream tarball signatures were verified against Greg Kroah-Hartman fingerprint 647F28654894E3BD457199BE38DBBDC86092693E. No overlay conflicts; repository retains one root and existing trunk ancestry. All source work performed on the cluster case-sensitive filesystem. Release and canary-first fleet deployment through native Binjovi, with per-node progress and shell logs. No PostgreSQL huge-page allocation, IPVS removal, ZFS version change, or ptrace sysctl change.

Import the signed kernel.org 6.18.49 tarball and enable CONFIG_SECURITYFS for runtime security-policy inspection. Preserve the 861-path local overlay, built-in ZFS 2.4.2, and every other generated config setting. The 6.18.44 baseline config reproduced the fleet SHA256 6d63400ab5835821759e960fc3f6aaa22fe98d11862981f08bbf1893f91f6d72. scripts/diffconfig shows only SECURITYFS n -> y. Both upstream tarball signatures were verified against Greg Kroah-Hartman fingerprint 647F28654894E3BD457199BE38DBBDC86092693E. No overlay conflicts; repository retains one root and existing trunk ancestry. All source work performed on the cluster case-sensitive filesystem. Release and canary-first fleet deployment through native Binjovi, with per-node progress and shell logs. No PostgreSQL huge-page allocation, IPVS removal, ZFS version change, or ptrace sysctl change.
Import the Greg Kroah-Hartman signed kernel.org stable tarball.
Preserve the complete seanfarm overlay, including ZFS 2.4.2, byte for byte.
Upstream tarball SHA-256: ae826f33111fea6f1d279dde7299d7463c8dfd204aeb75a8fb5432bc60a28191
Upstream tree: 3fd77c646490ad640a4cb7f37c63a1eaf8c2bd7b
Signer: 647F28654894E3BD457199BE38DBBDC86092693E
Previous upstream tree: 9853ab31251669994d0d57301d4090b04e2e9e2e
Overlay paths: 861
All modified upstream paths are unchanged across the base update.
config: enable securityfs for security policy inspection
All checks were successful
binjovi/ci Binjovi completed the frozen plan
1582848d2f
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
sean/linux!65
No description provided.