From 78077f0c48ea2ba04d599f86507bc5fdd8b7e3ba Mon Sep 17 00:00:00 2001
From: Richard Acayan <mailingradian@gmail.com>
Date: Sun, 31 May 2026 15:48:56 -0400
Subject: [PATCH] linux-postmarketos-qcom-sdm670: upgrade to v7.0.10

Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8698>
---
 device/community/linux-postmarketos-qcom-sdm670/APKBUILD    | 6 +++---
 .../config-postmarketos-qcom-sdm670.aarch64                 | 5 ++---
 device/community/linux-postmarketos-qcom-sdm670/pmos.config | 1 +
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/device/community/linux-postmarketos-qcom-sdm670/APKBUILD b/device/community/linux-postmarketos-qcom-sdm670/APKBUILD
index 302296647..11eae244f 100644
--- a/device/community/linux-postmarketos-qcom-sdm670/APKBUILD
+++ b/device/community/linux-postmarketos-qcom-sdm670/APKBUILD
@@ -3,7 +3,7 @@
 maintainer="Richard Acayan <mailingradian@gmail.com>"
 _flavor="postmarketos-qcom-sdm670"
 pkgname=linux-$_flavor
-pkgver=7.0.5
+pkgver=7.0.10
 pkgrel=1
 pkgdesc="Mainline Kernel fork for SDM670/SDM710 devices"
 arch="aarch64"
@@ -73,6 +73,6 @@ package() {
 }
 
 sha512sums="
-4e2faf5034a7dff20668a8c4dbfbc10175a859cab36178fa903d91f74a486dfb2068f0cd733c15a0b5919b353aa6405d30497b7da1efb67692e3fb974083902e  linux-sdm670-v7.0.5.tar.gz
-0df00bf1b7c4b3c2052477e3241bea40b9c638e082bb33c79db0c17cd0c72cd20d6d4e5791a640915e6ab93da16281ed954a53cf24eaf183ec3d58f4a14d8bda  config-postmarketos-qcom-sdm670.aarch64
+71476207449337685a947a5ab0c3a6af619e0b1322568723ed387792f8252d329d547a491e8ec6a5cb38ad76e52c4beeb76852cd7d2fbf39fd76f9743e2671de  linux-sdm670-v7.0.10.tar.gz
+af2360a11f7182c68fb81779f13623af82d4ae5b91be31b6dfad2bec60e7d548b9ba4ba049cf5a075c06e2511d2ede720937c20fd49d9fdc6a4f158fbc4ad519  config-postmarketos-qcom-sdm670.aarch64
 "
diff --git a/device/community/linux-postmarketos-qcom-sdm670/config-postmarketos-qcom-sdm670.aarch64 b/device/community/linux-postmarketos-qcom-sdm670/config-postmarketos-qcom-sdm670.aarch64
index 0910162e4..5fca6fd65 100644
--- a/device/community/linux-postmarketos-qcom-sdm670/config-postmarketos-qcom-sdm670.aarch64
+++ b/device/community/linux-postmarketos-qcom-sdm670/config-postmarketos-qcom-sdm670.aarch64
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/arm64 7.0.5 Kernel Configuration
+# Linux/arm64 7.0.10 Kernel Configuration
 #
 CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.3"
 CONFIG_GCC_VERSION=0
@@ -3993,7 +3993,6 @@ CONFIG_VIDEO_QCOM_VENUS=m
 #
 # Sunxi media platform drivers
 #
-# CONFIG_VIDEO_DW_MIPI_CSI2RX is not set
 
 #
 # Texas Instruments drivers
@@ -7818,7 +7817,7 @@ CONFIG_SECURITYFS=y
 # CONFIG_SECURITY_TOMOYO is not set
 # CONFIG_SECURITY_APPARMOR is not set
 # CONFIG_SECURITY_LOADPIN is not set
-# CONFIG_SECURITY_YAMA is not set
+CONFIG_SECURITY_YAMA=y
 # CONFIG_SECURITY_SAFESETID is not set
 # CONFIG_SECURITY_LOCKDOWN_LSM is not set
 # CONFIG_SECURITY_LANDLOCK is not set
diff --git a/device/community/linux-postmarketos-qcom-sdm670/pmos.config b/device/community/linux-postmarketos-qcom-sdm670/pmos.config
index 047469235..1e9cd834a 100644
--- a/device/community/linux-postmarketos-qcom-sdm670/pmos.config
+++ b/device/community/linux-postmarketos-qcom-sdm670/pmos.config
@@ -491,6 +491,7 @@ CONFIG_DM_VERITY=m
 
 # hardening
 CONFIG_SECURITY_DMESG_RESTRICT=y
+CONFIG_SECURITY_YAMA=y
 CONFIG_SHADOW_CALL_STACK=y
 CONFIG_CFI=y
 # CONFIG_CFI_PERMISSIVE is not set