Changes in Makefile

29eb8a7b6e3bfca74a9077304b08d42274cbb4d6 - s390/tracing: Add s390-tod clock

Thu, 21 May 2026 12:41:44 +0200

s390/tracing: Add s390-tod clockIn order to allow comparing trace timestamps between differentsystems or virtual machines on s390, add a s390-tod trace clock.This clock just uses the returned TOD clock value from stckedirectly.Signed-off-by: Sven Schnelle Reviewed-by: Ilya Leoshkevich Reviewed-by: Heiko Carstens Signed-off-by: Alexander Gordeev List of files: /linux/arch/s390/kernel/Makefile

9cdca336677b4d15579ec462e33c8a330ab3a9de - Merge tag 'integrity-v7.1' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity

Sat, 18 Apr 2026 00:42:01 +0200

Merge tag 'integrity-v7.1' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrityPull integrity updates from Mimi Zohar: "There are two main changes, one feature removal, some code cleanup, and a number of bug fixes. Main changes: - Detecting secure boot mode was limited to IMA. Make detecting secure boot mode accessible to EVM and other LSMs - IMA sigv3 support was limited to fsverity. Add IMA sigv3 support for IMA regular file hashes and EVM portable signatures Remove: - Remove IMA support for asychronous hash calculation originally added for hardware acceleration Cleanup: - Remove unnecessary Kconfig CONFIG_MODULE_SIG and CONFIG_KEXEC_SIG tests - Add descriptions of the IMA atomic flags Bug fixes: - Like IMA, properly limit EVM "fix" mode - Define and call evm_fix_hmac() to update security.evm - Fallback to using i_version to detect file change for filesystems that do not support STATX_CHANGE_COOKIE - Address missing kernel support for configured (new) TPM hash algorithms - Add missing crypto_shash_final() return value"* tag 'integrity-v7.1' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity: evm: Enforce signatures version 3 with new EVM policy 'bit 3' integrity: Allow sigv3 verification on EVM_XATTR_PORTABLE_DIGSIG ima: add support to require IMA sigv3 signatures ima: add regular file data hash signature version 3 support ima: Define asymmetric_verify_v3() to verify IMA sigv3 signatures ima: remove buggy support for asynchronous hashes integrity: Eliminate weak definition of arch_get_secureboot() ima: Add code comments to explain IMA iint cache atomic_flags ima_fs: Correctly create securityfs files for unsupported hash algos ima: check return value of crypto_shash_final() in boot aggregate ima: Define and use a digest_size field in the ima_algo_desc structure powerpc/ima: Drop unnecessary check for CONFIG_MODULE_SIG ima: efi: Drop unnecessary check for CONFIG_MODULE_SIG/CONFIG_KEXEC_SIG ima: fallback to using i_version to detect file change evm: fix security.evm for a file with IMA signature s390: Drop unnecessary CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT evm: Don't enable fix mode when secure boot is enabled integrity: Make arch_ima_get_secureboot integrity-wide List of files: /linux/arch/s390/kernel/Makefile

a2e507afd9a25e333b7a58082f5db8c4de2bd12d - s390: Drop unnecessary CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT

Fri, 13 Feb 2026 02:28:48 +0100

s390: Drop unnecessary CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOTCommit b5ca117365d9 ("ima: prevent kexec_load syscall based on runtimesecureboot flag") and commit 268a78404973 ("s390/kexec_file: Disablekexec_load when IPLed secure") disabled the kexec_load syscall basedon the secureboot mode. Commit 9e2b4be377f0 ("ima: add a new CONFIGfor loading arch-specific policies") needed to detect the secure bootmode, not to load an IMA architecture specific policy. Since there isthe new CONFIG_INTEGRITY_SECURE_BOOT, dropCONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT for s390.Signed-off-by: Coiby Xu Tested-by: Alexander Egorenkov [Vasily Gorbik: Fix missing arch_get_secureboot() prototype warning]link: https://lore.kernel.org/linux-integrity/c00-01.ttbfdx5@ub.hpns/Signed-off-by: Mimi Zohar List of files: /linux/arch/s390/kernel/Makefile

6fe54677bcc2e7a42f5fcaa3c66600232ba54d44 - s390: Introduce bpf_get_lowcore() kfunc

Tue, 17 Feb 2026 17:05:08 +0100

s390: Introduce bpf_get_lowcore() kfuncImplementing BPF version of preempt_count() requires accessing lowcorefrom BPF. Since lowcore can be relocated, open-coding(struct lowcore *)0 does not work, so add a kfunc.Signed-off-by: Ilya Leoshkevich Link: https://lore.kernel.org/r/20260217160813.100855-2-iii@linux.ibm.comSigned-off-by: Alexei Starovoitov List of files: /linux/arch/s390/kernel/Makefile

c0087d807ae86cc82cc356e366d2dccf0e3bb225 - s390/vdso: Rename vdso64 to vdso

Mon, 24 Nov 2025 16:04:29 +0100

s390/vdso: Rename vdso64 to vdsoSince compat is gone there is only a 64 bit vdso left.Remove the superfluous "64" suffix everywhere.Reviewed-by: Jens Remus Signed-off-by: Heiko Carstens List of files: /linux/arch/s390/kernel/Makefile

b3bdfdf1f93c38ea54b93421efc413e91e61f6b3 - s390: Rename head64.S to head.S

Mon, 24 Nov 2025 16:04:28 +0100

s390: Rename head64.S to head.SAll the code is 64 bit, therefore remove the superfluous suffix.Reviewed-by: Jens Remus Signed-off-by: Heiko Carstens List of files: /linux/arch/s390/kernel/Makefile

f5730d44e05efb43a5cb64e5eb04e24994bbb50f - s390: Add stackprotector support

Mon, 17 Nov 2025 15:09:53 +0100

s390: Add stackprotector supportStackprotector support was previously unavailable on s390 because bydefault compilers generate code which is not suitable for the kernel:the canary value is accessed via thread local storage, where the addressof thread local storage is within access registers 0 and 1.Using those registers also for the kernel would come with a significantperformance impact and more complicated kernel entry/exit code, sinceaccess registers contents would have to be exchanged on every kernel entryand exit.With the upcoming gcc 16 release new compiler options will become availablewhich allow to generate code suitable for the kernel. [1]Compiler option -mstack-protector-guard=global instructs gcc to generatestackprotector code that refers to a global stackprotector canary value viasymbol __stack_chk_guard. Access to this value is guaranteed to occur vialarl and lgrl instructions.Furthermore, compiler option -mstack-protector-guard-record generates asection containing all code addresses that reference the canary value.To allow for per task canary values the instructions which load the addressof __stack_chk_guard are patched so they access a lowcore field instead: aper task canary value is available within the task_struct of each task, andis written to the per-cpu lowcore location on each context switch.Also add sanity checks and debugging option to be consistent with otherkernel code patching mechanisms.Full debugging output can be enabled with the following kernel command lineoptions:debug_stackprotectorbootdebugignore_loglevelearlyprintkdyndbg="file stackprotector.c +p"Example debug output:stackprot: 0000021e402d4eda: c010005a9ae3 -> c01f00070240where ": -> ".[1] gcc commit 0cd1f03939d5 ("s390: Support global stack protector")Reviewed-by: Sven Schnelle Signed-off-by: Heiko Carstens List of files: /linux/arch/s390/kernel/Makefile

8e0b986c59c67e08ada646249f834655a9e6da16 - s390: Remove compat support

Mon, 10 Nov 2025 19:54:37 +0100

s390: Remove compat supportThere shouldn't be any 31 bit code around anymore that matters.Remove the compat layer support required to run 31 bit code.Reason for removal is code simplification and reduced test effort.Note that this comes without any deprecation warnings added to configoptions, or kernel messages, since most likely those would be ignoredanyway.If it turns out there is still a reason to keep the compat layer thiscan be reverted at any time in the future.Reviewed-by: Arnd Bergmann Signed-off-by: Heiko Carstens List of files: /linux/arch/s390/kernel/Makefile

492578d3a2bce24b73f24728bc244add0bdf3fee - s390/pai: Rename perf_pai_crypto.c to perf_pai.c

Wed, 05 Nov 2025 15:39:02 +0100

s390/pai: Rename perf_pai_crypto.c to perf_pai.cRename perf_pai_crypto.c to perf_pai.c. The new perf_pai.ccontains both PAI device drivers: - pai_crypto for PAI crypto counter set - pai_ext for PAI NNPA counter setThe rename reflects this common driver supporting both PMUs.Signed-off-by: Thomas Richter Reviewed-by: Jan Polensky Signed-off-by: Heiko Carstens List of files: /linux/arch/s390/kernel/Makefile

8b65b0ba3541c738af671377872270af6ee6a8ac - s390/pai_crypto: Merge pai_ext PMU into pai_crypto

Wed, 05 Nov 2025 15:39:01 +0100

s390/pai_crypto: Merge pai_ext PMU into pai_cryptoCombine PAI cryptography and PAI extension (NNPA) PMUs in one driver.Remove file perf_pai_ext.c and registration of PMU "pai_ext"from perf_pai_crypto.c.Includes:- Shared alloc/free and sched_task handling- NNPA events with exclude_kernel enforced, exclude_user rejected- Setup CR0 bits for both PMUsSigned-off-by: Thomas Richter Reviewed-by: Jan Polensky Signed-off-by: Heiko Carstens List of files: /linux/arch/s390/kernel/Makefile

ee417a84d005f90b6c2e572dbad00a25f9fb7660 - s390/skey: Provide infrastructure for executing with non-default access key

Mon, 16 Jun 2025 17:00:30 +0200

s390/skey: Provide infrastructure for executing with non-default access keyThe current assumption is that kernel code is always executed with accesskey zero, which means that storage key protection does not apply.However this assumption is not correct: cmpxchg_user_key() may be executedwith a non-zero key; if then the storage key of the page which belongs tothe cmpxchg_user_key() code contains a key with fetch-protection enabledthe result is a protection exception.For several performance optimizations storage keys are not initialized onsystem boot. To keep these optimizations add infrastructure which allows todefine code ranges within functions which are executed with a non-defaultkey. When such code is executed such functions must explicitly callskey_regions_initialize().This will initialize all storage keys belonging to such code ranges in away that no protection exceptions happen when the code is executed with anon-default access key.Reviewed-by: Claudio Imbrenda Signed-off-by: Heiko Carstens Signed-off-by: Alexander Gordeev List of files: /linux/arch/s390/kernel/Makefile

e21efe833eae4e2a56c2c2a11caae870a65926fa - arch: use always-$(KBUILD_BUILTIN) for vmlinux.lds

Mon, 02 Jun 2025 20:12:54 +0200

arch: use always-$(KBUILD_BUILTIN) for vmlinux.ldsThe extra-y syntax is deprecated. Instead, use always-$(KBUILD_BUILTIN),which behaves equivalently.Signed-off-by: Masahiro Yamada Acked-by: Johannes Berg Reviewed-by: Nicolas Schier List of files: /linux/arch/s390/kernel/Makefile

388cf16d90f6cce74ce531f306e2c77d6d66f2f7 - s390/diag: Move diag.c to diag specific folder

Thu, 12 Dec 2024 17:17:20 +0100

s390/diag: Move diag.c to diag specific folderMove implementation of s390 diagnose code to diag specific folder.Reviewed-by: Heiko Carstens Signed-off-by: Sumanth Korikkar Signed-off-by: Alexander Gordeev List of files: /linux/arch/s390/kernel/Makefile

90e6f191e1ee094d13faae5fc29af7b5baf9d1b8 - s390/diag324: Retrieve power readings via diag 0x324

Thu, 12 Dec 2024 17:17:19 +0100

s390/diag324: Retrieve power readings via diag 0x324Retrieve electrical power readings for resources in a computingenvironment via diag 0x324. diag 0x324 stores the power readings in thepower information block (pib).Provide power readings from pib via diag324 ioctl interface. diag324ioctl provides new pib to the user only if the threshold time has passedsince the last call. Otherwise, cache data is returned. When there areno active readers, cleanup of pib buffer is performed.Reviewed-by: Heiko Carstens Signed-off-by: Sumanth Korikkar Signed-off-by: Alexander Gordeev List of files: /linux/arch/s390/kernel/Makefile

9fed8d7c46f37151037334ef5e8b30b945baaceb - s390/crypto: Display Query and Query Authentication Information in sysfs

Wed, 11 Sep 2024 09:21:09 +0200

s390/crypto: Display Query and Query Authentication Information in sysfsDisplays the query (fc=0) and query authentication information (fc=127)as binary in sysfs per CPACF instruction. Files are located in/sys/devices/system/cpu/cpacf/. These information can be fetched viaasm already except for PCKMO because this instruction is privileged. Tooffer a unified interface all CPACF instructions will have thisinformation displayed in sysfs in files _query_raw and_query_auth_info_raw.A new tool introduced into s390-tools called cpacfinfo will use thisinformation to convert and display in human readable form.Suggested-by: Harald Freudenberger Reviewed-by: Harald Freudenberger Acked-by: Heiko Carstens Signed-off-by: Finn Callies Signed-off-by: Vasily Gorbik List of files: /linux/arch/s390/kernel/Makefile

6843d6d97c03b8fa506d188a483bc494a6ac4c89 - s390/hiperdispatch: Introduce hiperdispatch

Mon, 12 Aug 2024 13:39:34 +0200

s390/hiperdispatch: Introduce hiperdispatchWhen LPAR is in vertical polarization, CPUs get different polarizationvalues, namely vertical high, vertical medium and vertical low. Thesevalues represent the likelyhood of the CPU getting physical runtime.Vertical high CPUs will always get runtime and others get varyingruntime depending on the load the CEC is under.Vertical high and vertical medium CPUs are considered the CPUs which thecurrent LPAR has the entitlement to run on. The vertical lows are on theother hand are borrowed CPUs which would only be given to the LPAR byhipervisor when the other LPARs are not utilizing them.Using the CPU capacities, hint linux scheduler when it should prioritisevertical high and vertical medium CPUs over vertical low CPUs.By tracking various system statistics hiperdispatch determines when toadjust cpu capacities.After each adjustment, rebuilding of scheduler domains is necessary tonotify the scheduler about capacity changes but since this operation iscostly it should be done as sparsely as possible.Acked-by: Vasily Gorbik Co-developed-by: Tobias Huschle Signed-off-by: Tobias Huschle Signed-off-by: Mete Durlu Signed-off-by: Vasily Gorbik List of files: /linux/arch/s390/kernel/Makefile

cafeff5a030983bbf37b11ab766b68d7da3b8aab - s390/wti: Prepare graceful CPU pre-emption on wti reception

Mon, 12 Aug 2024 13:39:28 +0200

s390/wti: Prepare graceful CPU pre-emption on wti receptionWhen a warning track interrupt is received, the kernel has only a verylimited amount of time to make sure, that the CPU can be yielded asgracefully as possible before being pre-empted by the hypervisor.The interrupt handler for the wti therefore unparks a kernel threadwhich has being created on boot re-using the CPU hotplug kernel threadinfrastructure. These threads exist per CPU and are assigned thehighest possible real-time priority. This makes sure, that said threadswill execute as soon as possible as the scheduler should pre-empt anyother running user tasks to run the real-time thread.Furthermore, the interrupt handler disables all I/O interrupts toprevent additional interrupt processing on the soon-preempted CPU.Interrupt handlers are likely to take kernel locks, which in the worstcase, will be kept while the interrupt handler is pre-empted from itselfunderlying physical CPU. In that case, all tasks or interrupt handlerson other CPUs would have to wait for the pre-empted CPU being dispatchedagain. By preventing further interrupt processing, this risk isminimized.Once the CPU gets dispatched again, the real-time kernel thread regainscontrol, reenables interrupts and parks itself again.Acked-by: Heiko Carstens Reviewed-by: Mete Durlu Signed-off-by: Tobias Huschle Signed-off-by: Vasily Gorbik List of files: /linux/arch/s390/kernel/Makefile

f2bb5b97b51ce5425e8f59f899643ce4eadba667 - s390/entry: Move early program check handler to entry.S

Wed, 31 Jul 2024 15:25:59 +0200

s390/entry: Move early program check handler to entry.SHave all program check handlers in one file to make future changes easy.Reviewed-by: Alexander Gordeev Reviewed-by: Sven Schnelle Signed-off-by: Heiko Carstens Signed-off-by: Vasily Gorbik List of files: /linux/arch/s390/kernel/Makefile

6dc2e98d5f1de162d1777aee97e59d75d70d07c5 - s390: Remove protvirt and kvm config guards for uv code

Thu, 04 Jul 2024 13:02:46 +0200

s390: Remove protvirt and kvm config guards for uv codeRemoving the CONFIG_PROTECTED_VIRTUALIZATION_GUEST ifdefs and configoption as well as CONFIG_KVM ifdefs in uv files.Having this configurable has been more of a pain than a help.It's time to remove the ifdefs and the config option.Signed-off-by: Janosch Frank Acked-by: Christian Borntraeger Acked-by: Heiko Carstens Signed-off-by: Vasily Gorbik List of files: /linux/arch/s390/kernel/Makefile

d890e6af50e44cf49766b3d25a45586d8485ef08 - s390/kprobes: Remove custom insn slot allocator

Wed, 15 May 2024 14:52:21 +0200

s390/kprobes: Remove custom insn slot allocatorSince commit c98d2ecae08f ("s390/mm: Uncouple physical vs virtual addressspaces") the kernel image and module area are within the same 4GB area.This eliminates the need of a custom insn slot allocator for kprobes withinthe kernel image, since standard module_alloc() allocated pages aresufficient for PC relative instructions with a signed 32 bit offset.Signed-off-by: Heiko Carstens List of files: /linux/arch/s390/kernel/Makefile