Gentoo Archives: gentoo-commits

From: "Anthony G. Basile" <blueness@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] dev/blueness:master commit in: sys-kernel/hardened-sources/
Date: Sun, 26 Jun 2011 11:40:00
Message-Id: 97374418c5544f736326b75f91b5b4862c9e4e8c.blueness@gentoo
1 commit: 97374418c5544f736326b75f91b5b4862c9e4e8c
2 Author: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
3 AuthorDate: Sun Jun 26 11:38:22 2011 +0000
4 Commit: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
5 CommitDate: Sun Jun 26 11:38:22 2011 +0000
6 URL: http://git.overlays.gentoo.org/gitweb/?p=dev/blueness.git;a=commit;h=97374418
7
8 sys-kernel/hardened-sources: testing patchset 20110625
9
10 (Portage version: 2.1.9.42/git/Linux x86_64, signed Manifest commit with key 0xD0455535)
11
12 ---
13 sys-kernel/hardened-sources/ChangeLog | 7 +++
14 sys-kernel/hardened-sources/Manifest | 20 +++++++--
15 .../hardened-sources-2.6.32-r54.ebuild | 48 ++++++++++++++++++++
16 .../hardened-sources-2.6.39-r4.ebuild | 48 ++++++++++++++++++++
17 4 files changed, 119 insertions(+), 4 deletions(-)
18
19 diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
20 index 514e99e..ab04c4e 100644
21 --- a/sys-kernel/hardened-sources/ChangeLog
22 +++ b/sys-kernel/hardened-sources/ChangeLog
23 @@ -1,5 +1,12 @@
24
25
26 +*hardened-sources-2.6.39-r4 (26 Jun 2011)
27 +*hardened-sources-2.6.32-r54 (26 Jun 2011)
28 +
29 + 26 Jun 2011; Anthony G. Basile <blueness@g.o>
30 + +hardened-sources-2.6.32-r54.ebuild, +hardened-sources-2.6.39-r4.ebuild:
31 + testing patchset 20110625
32 +
33 24 Jun 2011; Anthony G. Basile <blueness@g.o>
34 -hardened-sources-2.6.32-r53.ebuild, -hardened-sources-2.6.39-r3.ebuild:
35 moved to the tree
36
37 diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
38 index a591989..77f20f1 100644
39 --- a/sys-kernel/hardened-sources/Manifest
40 +++ b/sys-kernel/hardened-sources/Manifest
41 @@ -1,12 +1,24 @@
42 -----BEGIN PGP SIGNED MESSAGE-----
43 Hash: SHA256
44
45 -MISC ChangeLog 16701 RMD160 58a4d2b353353854e8f187398acce47bc4c6288c SHA1 d2ae5c5b368b1c4c67b1b872cd519157b34723fa SHA256 04074ba2c5a2149f6000f731d77f0705c06e3d9d38b510c9fda92c1ccdc0fe9b
46 +DIST deblob-2.6.32 84094 RMD160 394f46ec5b869638a7bc2e87beb118167c9bd6cb SHA1 1a2a1efb72126609d9e3b9be99ae5be2751efd06 SHA256 de625f0bd221c9c38d4453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d
47 +DIST deblob-check-2.6.32 247608 RMD160 840bf8a229ea79810519eee6241edb85b78a6562 SHA1 d45a24eb16e5ac956c0fcddbc1ac4d67e326c7b8 SHA256 da1aecdf3ab7f1207b90642d303e52262ccc2ed9e49739b729512b88950d17f3
48 +DIST genpatches-2.6.32-39.base.tar.bz2 947073 RMD160 531e72e1284f864bb970759176dab8e14a46f2f3 SHA1 80b701bf2511f7c02b45929511fb884d45e23131 SHA256 0639b3e622652f5316333de4ab6d9b94ce9a80ab26d48dc91ffee7a65a1347e9
49 +DIST genpatches-2.6.32-39.extras.tar.bz2 24934 RMD160 e3e1d60fb45a3e3c818ddda36b9180d4fc46679e SHA1 d16a34dfa35d163ea4042058b3865c389f3802e9 SHA256 50b70c76461aa52f7f2ad88175e7f08eb555f7f1dfd274759ec0c2a9748bde5e
50 +DIST genpatches-2.6.39-4.base.tar.bz2 79495 RMD160 e6e880cd00636c9830fc9a3b7c6bdaabdb76c197 SHA1 a4d357b3ab25b2fae7c85a22654039c8da5b4333 SHA256 5d9865b2124153cf61d510c2b6c71dff57479f44de90b4631b03e4d16c2b363e
51 +DIST genpatches-2.6.39-4.extras.tar.bz2 17196 RMD160 65c4f86f0dbe6702fb1f8a4e05e80746093be3dd SHA1 0ddeb37fc69b4c84b01e540a8e3f5d8e03afaf18 SHA256 d804acde9d43abc7439bf8a2cb247e8a124326fdd7f1940897ab9f045d7634e7
52 +DIST hardened-patches-2.6.32-57.extras.tar.bz2 446302 RMD160 17e1405ee2bba0f41d9040ec324bfebd0871a094 SHA1 40abefa589d8e45d5cdad8309876d7a0a2c5642d SHA256 67035f3b4f2c903ee275f7e5c2c6781580c9870360fe079b0f3a1489983e731d
53 +DIST hardened-patches-2.6.39-5.extras.tar.bz2 517432 RMD160 0ca2c784840a44988a78b19d497ec04ba9b4ae96 SHA1 9e6ac97d70ce74545b4fdafce73eda1d191778ae SHA256 19af5da0bf2bbaba2619656adce2ba557a44748aa01e5143ed925bae77dfbde0
54 +DIST linux-2.6.32.tar.bz2 64424138 RMD160 b93742cbaf8174f2200d2dbef0d47a26c618039c SHA1 410b4fc818023bfef60064e973ff0ab46d3bfb19 SHA256 5099786d80b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e
55 +DIST linux-2.6.39.tar.bz2 76096559 RMD160 feddc516bc15e78f12f611ff184d38baa4eac4ee SHA1 68518112821e55f4ac1df64f2e0e809cedfcc5ef SHA256 584d17f2a3ee18a9501d7ff36907639e538cfdba4529978b8550c461d45c61f6
56 +EBUILD hardened-sources-2.6.32-r54.ebuild 1758 RMD160 a3122ca403339ee329a066e1a9f14cf6777ddd7e SHA1 3b6ff8b726a7e87adba7bb3254070e5a5db37913 SHA256 220a925061af92b9c02afc203c0232809994dadee72d3f6c28406635dc10c3ab
57 +EBUILD hardened-sources-2.6.39-r4.ebuild 1755 RMD160 527c2d54b6d3aeccda81c555d58d41b727d33f92 SHA1 4de548d399c6fa4a77c37721d5a572f21fd3a4e4 SHA256 0e72704809dedc2623494e44e711c586e66f381ad3974cfd5aa23c7edc4d1baa
58 +MISC ChangeLog 16946 RMD160 49144124c34ed01c094dd7f306a9a185e6863b7d SHA1 5f2fb691d374d0f987727acbc5970cb6e3f88089 SHA256 27cb010d0b50d6c8ceed7596a834066bdb01927967489042014d87c60b7b34c3
59 MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SHA1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8fcfd351f2f39ed63da68af3a5751fc2058d0d03813
60 -----BEGIN PGP SIGNATURE-----
61 Version: GnuPG v2.0.17 (GNU/Linux)
62
63 -iEYEAREIAAYFAk4FGusACgkQl5yvQNBFVTUKpwCgidL2izYKRFj0ONOaRI0RN3hO
64 -Xt4Anjgp/83tNEIgAo6w7bjHARPiOcCV
65 -=UxLR
66 +iEYEAREIAAYFAk4HGi4ACgkQl5yvQNBFVTXQ9ACgm0Dl4YV2m/2Eg9ozjJCAWKrg
67 +jq0An3f0WRSMBuszhFiHFomYm8r0SZJz
68 +=vptW
69 -----END PGP SIGNATURE-----
70
71 diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r54.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r54.ebuild
72 new file mode 100644
73 index 0000000..57ad300
74 --- /dev/null
75 +++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r54.ebuild
76 @@ -0,0 +1,48 @@
77 +# Copyright 1999-2011 Gentoo Foundation
78 +# Distributed under the terms of the GNU General Public License v2
79 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r53.ebuild,v 1.1 2011/06/24 12:30:19 blueness Exp $
80 +
81 +EAPI="4"
82 +
83 +ETYPE="sources"
84 +K_WANT_GENPATCHES="base extras"
85 +K_GENPATCHES_VER="39"
86 +
87 +inherit kernel-2
88 +detect_version
89 +
90 +HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-57"
91 +HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
92 +SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
93 +
94 +UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
95 +UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
96 +
97 +DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
98 +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
99 +IUSE=""
100 +
101 +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
102 +
103 +pkg_postinst() {
104 + kernel-2_pkg_postinst
105 +
106 + local GRADM_COMPAT="sys-apps/gradm-2.2.2*"
107 +
108 + ewarn
109 + ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
110 + ewarn "[server], [workstation], and [virtualization]."
111 + ewarn
112 + ewarn "Those who intend to use one of these predefined grsecurity levels"
113 + ewarn "should read the help associated with the level. Users importing a"
114 + ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
115 + ewarn "should review their selected grsecurity/PaX options carefully."
116 + ewarn
117 + ewarn "Users of grsecurity's RBAC system must ensure they are using"
118 + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
119 + ewarn "It is strongly recommended that the following command is issued"
120 + ewarn "prior to booting a ${PF} kernel for the first time:"
121 + ewarn
122 + ewarn "emerge -na =${GRADM_COMPAT}"
123 + ewarn
124 +}
125
126 diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.39-r4.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.39-r4.ebuild
127 new file mode 100644
128 index 0000000..7d1554d
129 --- /dev/null
130 +++ b/sys-kernel/hardened-sources/hardened-sources-2.6.39-r4.ebuild
131 @@ -0,0 +1,48 @@
132 +# Copyright 1999-2011 Gentoo Foundation
133 +# Distributed under the terms of the GNU General Public License v2
134 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.39-r3.ebuild,v 1.1 2011/06/24 12:32:23 blueness Exp $
135 +
136 +EAPI="4"
137 +
138 +ETYPE="sources"
139 +K_WANT_GENPATCHES="base extras"
140 +K_GENPATCHES_VER="4"
141 +
142 +inherit kernel-2
143 +detect_version
144 +
145 +HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-5"
146 +HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
147 +SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
148 +
149 +UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
150 +UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
151 +
152 +DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
153 +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
154 +IUSE=""
155 +
156 +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
157 +
158 +pkg_postinst() {
159 + kernel-2_pkg_postinst
160 +
161 + local GRADM_COMPAT="sys-apps/gradm-2.2.2*"
162 +
163 + ewarn
164 + ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
165 + ewarn "[server], [workstation], and [virtualization]."
166 + ewarn
167 + ewarn "Those who intend to use one of these predefined grsecurity levels"
168 + ewarn "should read the help associated with the level. Users importing a"
169 + ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
170 + ewarn "should review their selected grsecurity/PaX options carefully."
171 + ewarn
172 + ewarn "Users of grsecurity's RBAC system must ensure they are using"
173 + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
174 + ewarn "It is strongly recommended that the following command is issued"
175 + ewarn "prior to booting a ${PF} kernel for the first time:"
176 + ewarn
177 + ewarn "emerge -na =${GRADM_COMPAT}"
178 + ewarn
179 +}