disable evbug module

diff --git a/Makefile b/Makefile
index 3013c5dc22a488d37823530df710a6e47dd5f05d..db4060783c4c8ca43d8eb828e8f6c04de96f80c8 100644 (file)
--- a/Makefile
+++ b/Makefile
@@ -176,6 +176,7 @@ PVE_CONFIG_OPTS= \
 -e CONFIG_BLK_DEV_SD \
 -e CONFIG_BLK_DEV_SR \
 -e CONFIG_BLK_DEV_DM \
+-d CONFIG_INPUT_EVBUG \
 -d CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND \
 -e CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE \
 -d CONFIG_MODULE_SIG \

diff --git a/README b/README
index cb8e217ac685e84fbf26d0bfa62ad0a49eb74c14..163752e144b8eb3d5631c695bd5d5f33b00d3df8 100644 (file)
--- a/README
+++ b/README
@@ -122,6 +122,11 @@ see Makefile (PVE_CONFIG_OPTS)
   This is the suggested setting for KVM. We also measure bad fsync
   performance with ext4 and cfq.
 
+- disable CONFIG_INPUT_EVBUG
+
+  Module evbug is not blacklisted on debian, so we simply disable it
+  to avoid key-event logs (which is a big security problem)
+
 Testing final kernel with kvm
 -----------------------------
 

diff --git a/changelog.Debian b/changelog.Debian
index b520dd1f0bc0e7b12a9bea079d9f42404c8a54a7..194e63aa98f1032e0d15061c7aa4ccb12effa205 100644 (file)
--- a/changelog.Debian
+++ b/changelog.Debian
@@ -2,6 +2,8 @@ pve-kernel-3.19.8 (3.19.8-2) unstable; urgency=medium
 
   * include latest igb and ixgbe drivers
 
+  * disable evbug module
+
  -- Proxmox Support Team <support@proxmox.com>  Wed, 27 May 2015 15:13:05 +0200
 
 pve-kernel-3.19.8 (3.19.8-1) unstable; urgency=medium