The trusty/aws kernel package ships too many modules

Bug #1777080 reported by Stefan Bader
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-aws (Ubuntu)
Invalid
Medium
Unassigned
Trusty
Fix Released
Medium
Khaled El Mously

Bug Description

= SRU Justification =

== Impact ==

When building the linux-aws kernel for 16.04/Xenial and 18.04/Bionic, only a limited subset of modules is added to the binary package. However the build environment for the 14.04/Trusty variant was incorrectly set up and includes all modules which get built.

== Fix ==

Change the setup, so all linux-aws kernel packages do the same thing.

== Testcase ==

Downloading the binary kernel package and check that the number of .ko files in there are below 1000. Also the package size is an indicator as correctly its about 19MB and right now more like 38MB.

== Risk of regression ==

Considering low since those modules that get stripped should be hardware drivers which are not really useful inside a cloud environment.

CVE References

Stefan Bader (smb)
Changed in linux-aws (Ubuntu Trusty):
assignee: nobody → Khaled El Mously (kmously)
importance: Undecided → Medium
status: New → Triaged
Changed in linux-aws (Ubuntu):
status: Triaged → Invalid
Changed in linux-aws (Ubuntu Trusty):
status: Triaged → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (30.3 KiB)

This bug was fixed in the package linux-aws - 4.4.0-1024.25

---------------
linux-aws (4.4.0-1024.25) trusty; urgency=medium

  * linux-aws: 4.4.0-1024.25 -proposed tracker (LP: #1776824)

  * The trusty/aws kernel package ships too many modules (LP: #1777080)
    - [config] AWS: ship_extras_package=false

  * Xenial update to 4.4.134 stable release (LP: #1775771)
    - [Config] CONFIG_TCG_CRB=y

  * Adapt configuration to match the master kernel config. This change
    has no effect for the AWS kernel as the resulting module is not
    shipped (LP: #1774563)
    - [Config] CONFIG_CAN_HMS_USB=m

  [ Ubuntu: 4.4.0-130.156 ]

  * linux: 4.4.0-130.156 -proposed tracker (LP: #1776822)
  * CVE-2018-3665 (x86)
    - x86/fpu: Fix early FPU command-line parsing
    - x86/fpu: Fix 'no387' regression
    - x86/fpu: Disable MPX when eagerfpu is off
    - x86/fpu: Default eagerfpu=on on all CPUs
    - x86/fpu: Fix FNSAVE usage in eagerfpu mode
    - x86/fpu: Fix math emulation in eager fpu mode
    - x86/fpu: Fix eager-FPU handling on legacy FPU machines

  [ Ubuntu: 4.4.0-129.155 ]

  * linux: 4.4.0-129.155 -proposed tracker (LP: #1776352)
  * Xenial update to 4.4.134 stable release (LP: #1775771)
    - MIPS: ptrace: Expose FIR register through FP regset
    - MIPS: Fix ptrace(2) PTRACE_PEEKUSR and PTRACE_POKEUSR accesses to o32 FGRs
    - KVM: Fix spelling mistake: "cop_unsuable" -> "cop_unusable"
    - affs_lookup(): close a race with affs_remove_link()
    - aio: fix io_destroy(2) vs. lookup_ioctx() race
    - ALSA: timer: Fix pause event notification
    - mmc: sdhci-iproc: fix 32bit writes for TRANSFER_MODE register
    - libata: Blacklist some Sandisk SSDs for NCQ
    - libata: blacklist Micron 500IT SSD with MU01 firmware
    - xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent
    - Revert "ipc/shm: Fix shmat mmap nil-page protection"
    - ipc/shm: fix shmat() nil address after round-down when remapping
    - kasan: fix memory hotplug during boot
    - kernel/sys.c: fix potential Spectre v1 issue
    - kernel/signal.c: avoid undefined behaviour in kill_something_info
    - xfs: remove racy hasattr check from attr ops
    - do d_instantiate/unlock_new_inode combinations safely
    - firewire-ohci: work around oversized DMA reads on JMicron controllers
    - NFSv4: always set NFS_LOCK_LOST when a lock is lost.
    - ALSA: hda - Use IS_REACHABLE() for dependency on input
    - ASoC: au1x: Fix timeout tests in au1xac97c_ac97_read()
    - kvm: x86: fix KVM_XEN_HVM_CONFIG ioctl
    - tracing/hrtimer: Fix tracing bugs by taking all clock bases and modes into
      account
    - PCI: Add function 1 DMA alias quirk for Marvell 9128
    - tools lib traceevent: Simplify pointer print logic and fix %pF
    - perf callchain: Fix attr.sample_max_stack setting
    - tools lib traceevent: Fix get_field_str() for dynamic strings
    - dm thin: fix documentation relative to low water mark threshold
    - nfs: Do not convert nfs_idmap_cache_timeout to jiffies
    - watchdog: sp5100_tco: Fix watchdog disable bit
    - kconfig: Don't leak main menus during parsing
    - kconfig: Fix automatic menu creation mem leak
    - kconfig: Fix expr_free() E_...

Changed in linux-aws (Ubuntu Trusty):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.