Gentoo Archives: gentoo-commits

From: "Anthony G. Basile" <blueness@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] dev/blueness:master commit in: sys-kernel/hardened-sources/
Date: Tue, 22 Mar 2011 13:44:01
Message-Id: f00236c16de99304e7131b968cca8e23f3e94067.blueness@gentoo
1 commit: f00236c16de99304e7131b968cca8e23f3e94067
2 Author: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
3 AuthorDate: Tue Mar 22 13:43:21 2011 +0000
4 Commit: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
5 CommitDate: Tue Mar 22 13:43:21 2011 +0000
6 URL: http://git.overlays.gentoo.org/gitweb/?p=dev/blueness.git;a=commit;h=f00236c1
7
8 sys-kernel/hardened-sources: testing experimental grsec 2.6.38
9
10 ---
11 sys-kernel/hardened-sources/Manifest | 7 +++
12 .../hardened-sources-2.6.38.ebuild | 48 ++++++++++++++++++++
13 2 files changed, 55 insertions(+), 0 deletions(-)
14
15 diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
16 index da9c988..89cad60 100644
17 --- a/sys-kernel/hardened-sources/Manifest
18 +++ b/sys-kernel/hardened-sources/Manifest
19 @@ -1,2 +1,9 @@
20 +DIST deblob-2.6.38 99773 RMD160 f52e78df8e819319d0aabf24fe471e2ef9e02140 SHA1 0d176aa88f0525123d293e26617f2d287fabdddc SHA256 ddabcd846baa19b7e82adec3ca8ff17f2f7425c292516889098559f639e763eb
21 +DIST deblob-check-2.6.38 345831 RMD160 1caea73e54a21cb1100a4ee8226201ddd8a89985 SHA1 44de3ac14d9a3e94b97553051aff0ebfada45274 SHA256 6f681dbd1c1c44cba2c9902dd77a5a51b2d1cc81567cffc60ba92bd0bdd4ff2f
22 +DIST genpatches-2.6.38-1.base.tar.bz2 775 RMD160 f254a1c4bb87a13a7a7773787107ba1fbb674ea5 SHA1 73597a69df481a79b222b452a6d34f223376fc8e SHA256 88f916556bf6dccb131c1046426c4c8ab1ae44474895a0c7d6281c012c4dae98
23 +DIST genpatches-2.6.38-1.extras.tar.bz2 15675 RMD160 3d40e9fcad874591de0cc7497a52795ea04a9b9b SHA1 ca1b5f319e87960fa97ea6302dd0146901cacd9e SHA256 6d4c134be67714382efc8aec208c5a73d6c0f84d96acc76640b9ed3be93877a4
24 +DIST hardened-patches-2.6.38-1.extras.tar.bz2 359993 RMD160 8e20ee69b4ca36563f5bc789584f2d8d5fcc822b SHA1 0c98e2d20e30fcf4f4581b93220ebb36fe4593f8 SHA256 4b4cf1ff08df31f20724e3693b4f130354d0594d6b14254699359541f2dc14a0
25 +DIST linux-2.6.38.tar.bz2 74739098 RMD160 d1179be93f1309303b9aa6008a25b6247726e764 SHA1 02aade5ad3dedd70739c9b4a05de40edbe432d25 SHA256 72f0cfaefb8dc86b219d5a742dd0375332627641ecbdf5badd3158e2127b9304
26 +EBUILD hardened-sources-2.6.38.ebuild 1755 RMD160 dd4c586af56cf87e7aa98c2866839198c7f7e18b SHA1 284060f02d37b52615704999eb30e55a823406ab SHA256 385bfdb81f1bc29c9cc15ec79820accef8f3c034de48c27f1fe20e7c5d78671c
27 MISC ChangeLog 12229 RMD160 88dc03b7c68560f7dfb7b675c2e4310f634ffb91 SHA1 e6126151529264f16edb9be92f7420923942c240 SHA256 db5786adc0ab7e31ffbc063cd3898d8c68156a02f4935a74e93ea09ab7144481
28 MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SHA1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8fcfd351f2f39ed63da68af3a5751fc2058d0d03813
29
30 diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.38.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.38.ebuild
31 new file mode 100644
32 index 0000000..e7bf164
33 --- /dev/null
34 +++ b/sys-kernel/hardened-sources/hardened-sources-2.6.38.ebuild
35 @@ -0,0 +1,48 @@
36 +# Copyright 1999-2011 Gentoo Foundation
37 +# Distributed under the terms of the GNU General Public License v2
38 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.37-r6.ebuild,v 1.1 2011/03/19 18:51:19 blueness Exp $
39 +
40 +EAPI="2"
41 +
42 +ETYPE="sources"
43 +K_WANT_GENPATCHES="base extras"
44 +K_GENPATCHES_VER="1"
45 +
46 +inherit kernel-2
47 +detect_version
48 +
49 +HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-1"
50 +HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
51 +SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
52 +
53 +UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
54 +UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
55 +
56 +DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
57 +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
58 +IUSE=""
59 +
60 +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
61 +
62 +pkg_postinst() {
63 + kernel-2_pkg_postinst
64 +
65 + local GRADM_COMPAT="sys-apps/gradm-2.2.1*"
66 +
67 + ewarn
68 + ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
69 + ewarn "[server], [workstation], and [virtualization]."
70 + ewarn
71 + ewarn "Those who intend to use one of these predefined grsecurity levels"
72 + ewarn "should read the help associated with the level. Users importing a"
73 + ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
74 + ewarn "should review their selected grsecurity/PaX options carefully."
75 + ewarn
76 + ewarn "Users of grsecurity's RBAC system must ensure they are using"
77 + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
78 + ewarn "It is strongly recommended that the following command is issued"
79 + ewarn "prior to booting a ${PF} kernel for the first time:"
80 + ewarn
81 + ewarn "emerge -na =${GRADM_COMPAT}"
82 + ewarn
83 +}