14c14
< %global signmodules 1
---
> %global signmodules 0
25c25
< # define buildid .local
---
> %define buildid .u2mfntest1
489c489
< Source5005: kbuild-AFTER_LINK.patch
---
> #Source5005: kbuild-AFTER_LINK.patch
497,646c497
< Patch451: lib-cpumask-Make-CPUMASK_OFFSTACK-usable-without-deb.patch
< 
< Patch454: arm64-avoid-needing-console-to-enable-serial-console.patch
< 
< Patch456: arm64-acpi-drop-expert-patch.patch
< 
< Patch457: ARM-tegra-usb-no-reset.patch
< 
< Patch460: mfd-wm8994-Ensure-that-the-whole-MFD-is-built-into-a.patch
< 
< Patch463: arm-i.MX6-Utilite-device-dtb.patch
< 
< Patch466: input-kill-stupid-messages.patch
< 
< Patch467: die-floppy-die.patch
< 
< Patch468: no-pcspkr-modalias.patch
< 
< Patch470: silence-fbcon-logo.patch
< 
< Patch471: Kbuild-Add-an-option-to-enable-GCC-VTA.patch
< 
< Patch472: crash-driver.patch
< 
< Patch473: Add-secure_modules-call.patch
< 
< Patch474: PCI-Lock-down-BAR-access-when-module-security-is-ena.patch
< 
< Patch475: x86-Lock-down-IO-port-access-when-module-security-is.patch
< 
< Patch476: ACPI-Limit-access-to-custom_method.patch
< 
< Patch477: asus-wmi-Restrict-debugfs-interface-when-module-load.patch
< 
< Patch478: Restrict-dev-mem-and-dev-kmem-when-module-loading-is.patch
< 
< Patch479: acpi-Ignore-acpi_rsdp-kernel-parameter-when-module-l.patch
< 
< Patch480: kexec-Disable-at-runtime-if-the-kernel-enforces-modu.patch
< 
< Patch481: x86-Restrict-MSR-access-when-module-loading-is-restr.patch
< 
< Patch482: Add-option-to-automatically-enforce-module-signature.patch
< 
< Patch483: efi-Disable-secure-boot-if-shim-is-in-insecure-mode.patch
< 
< Patch484: efi-Make-EFI_SECURE_BOOT_SIG_ENFORCE-depend-on-EFI.patch
< 
< Patch485: efi-Add-EFI_SECURE_BOOT-bit.patch
< 
< Patch486: hibernate-Disable-in-a-signed-modules-environment.patch
< 
< Patch487: Add-EFI-signature-data-types.patch
< 
< Patch488: Add-an-EFI-signature-blob-parser-and-key-loader.patch
< 
< Patch489: KEYS-Add-a-system-blacklist-keyring.patch
< 
< Patch490: MODSIGN-Import-certificates-from-UEFI-Secure-Boot.patch
< 
< Patch491: MODSIGN-Support-not-importing-certs-from-db.patch
< 
< Patch492: Add-sysrq-option-to-disable-secure-boot-mode.patch
< 
< Patch493: drm-i915-hush-check-crtc-state.patch
< 
< Patch494: disable-i8042-check-on-apple-mac.patch
< 
< Patch495: lis3-improve-handling-of-null-rate.patch
< 
< Patch496: watchdog-Disable-watchdog-on-virtual-machines.patch
< 
< Patch497: scsi-sd_revalidate_disk-prevent-NULL-ptr-deref.patch
< 
< Patch498: criu-no-expert.patch
< 
< Patch499: ath9k-rx-dma-stop-check.patch
< 
< Patch500: xen-pciback-Don-t-disable-PCI_COMMAND-on-PCI-device-.patch
< 
< Patch501: Input-synaptics-pin-3-touches-when-the-firmware-repo.patch
< 
< Patch502: firmware-Drop-WARN-from-usermodehelper_read_trylock-.patch
< 
< Patch503: drm-i915-turn-off-wc-mmaps.patch
< 
< Patch508: kexec-uefi-copy-secure_boot-flag-in-boot-params.patch
< 
< #rhbz 1287819
< Patch570: HID-multitouch-enable-palm-rejection-if-device-imple.patch
< 
< #rhbz 1286293
< Patch571: ideapad-laptop-Add-Lenovo-ideapad-Y700-17ISK-to-no_h.patch
< 
< #rhbz 1288687
< Patch572: alua_fix.patch
< 
< #rhbz 1083853
< Patch610: PNP-Add-Broadwell-to-Intel-MCH-size-workaround.patch
< 
< #rhbz 1300955
< Patch640: PNP-Add-Haswell-ULT-to-Intel-MCH-size-workaround.patch
< 
< #rhbz 1278942
< Patch643: media-ivtv-avoid-going-past-input-audio-array.patch
< 
< #rhbz 1255325
< Patch646: HID-sony-do-not-bail-out-when-the-sixaxis-refuses-th.patch
< 
< #Known use after free, possibly rhbz 1310579
< Patch654: 0001-usb-hub-fix-panic-in-usb_reset_and_verify_device.patch
< 
< #Mitigates CVE-2013-4312 rhbz 1313428 1313433
< Patch659: pipe-limit-the-per-user-amount-of-pages-allocated-in.patch
< 
< #rhbz 1310252 1313318
< Patch660: 0001-drm-i915-Pretend-cursor-is-always-on-for-ILK-style-W.patch
< 
< #CVE-2016-3135 rhbz 1317386 1317387
< Patch664: netfilter-x_tables-check-for-size-overflow.patch
< 
< #CVE-2016-3134 rhbz 1317383 1317384
< Patch665: netfilter-x_tables-deal-with-bogus-nextoffset-values.patch
< 
< #CVE-2016-2187 rhbz 1317017 1317010
< Patch686: input-gtco-fix-crash-on-detecting-device-without-end.patch
< 
< # CVE-2016-3672 rhbz 1324749 1324750
< Patch690: x86-mm-32-Enable-full-randomization-on-i386-and-X86_.patch
< 
< #CVE-2015-8839 rhbz 1323577 1323579
< Patch691: ext4-fix-races-between-page-faults-and-hole-punching.patch
< Patch692: ext4-move-unlocked-dio-protection-from-ext4_alloc_fi.patch
< Patch693: ext4-fix-races-between-buffered-IO-and-collapse-inse.patch
< Patch694: ext4-fix-races-of-writeback-with-punch-hole-and-zero.patch
< 
< #CVE-2016-3951 rhbz 1324782 1324815
< Patch695: cdc_ncm-do-not-call-usbnet_link_change-from-cdc_ncm_.patch
< 
< #rhbz 1309980
< Patch698: 0001-ACPI-processor-Request-native-thermal-interrupt-hand.patch
< 
< # CVE-2016-3961 rhbz 1327219 1323956
< Patch699: x86-xen-suppress-hugetlbfs-in-PV-guests.patch
< 
< # CVE-2016-3955 rhbz 1328478 1328479
< Patch700: USB-usbip-fix-potential-out-of-bounds-write.patch
< 
< #rhbz 1309487
< Patch701: antenna_select.patch
---
> Patch3000: grsecurity-3.1-4.4.8-201604252206.patch
1226c1077
< git am %{SOURCE5005}
---
> #git am %{SOURCE5005}
1255c1106
< for i in *.config
---
> for i in *x86_64.config
