1 |
commit: 88752726a14b4eba87977ba79d2e666bd22f5743 |
2 |
Author: Anthony G. Basile <blueness <AT> gentoo <DOT> org> |
3 |
AuthorDate: Wed Aug 24 19:01:51 2011 +0000 |
4 |
Commit: Anthony G. Basile <blueness <AT> gentoo <DOT> org> |
5 |
CommitDate: Wed Aug 24 19:01:51 2011 +0000 |
6 |
URL: http://git.overlays.gentoo.org/gitweb/?p=dev/blueness.git;a=commit;h=88752726 |
7 |
|
8 |
sys-kernel/hardened-sources: testing patchset 20110823 |
9 |
|
10 |
--- |
11 |
sys-kernel/hardened-sources/ChangeLog | 7 +++ |
12 |
sys-kernel/hardened-sources/Manifest | 14 +++++- |
13 |
.../hardened-sources-2.6.32-r64.ebuild | 48 ++++++++++++++++++++ |
14 |
.../hardened-sources/hardened-sources-3.0.3.ebuild | 48 ++++++++++++++++++++ |
15 |
4 files changed, 116 insertions(+), 1 deletions(-) |
16 |
|
17 |
diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog |
18 |
index 0893438..daa29a3 100644 |
19 |
--- a/sys-kernel/hardened-sources/ChangeLog |
20 |
+++ b/sys-kernel/hardened-sources/ChangeLog |
21 |
@@ -1,5 +1,12 @@ |
22 |
|
23 |
|
24 |
+*hardened-sources-3.0.3 (24 Aug 2011) |
25 |
+*hardened-sources-2.6.32-r64 (24 Aug 2011) |
26 |
+ |
27 |
+ 24 Aug 2011; Anthony G. Basile <blueness@g.o> |
28 |
+ +hardened-sources-2.6.32-r64.ebuild, +hardened-sources-3.0.3.ebuild: |
29 |
+ testing patchset 20110823 |
30 |
+ |
31 |
24 Aug 2011; Anthony G. Basile <blueness@g.o> |
32 |
-hardened-sources-2.6.32-r63.ebuild, -hardened-sources-2.6.39-r13.ebuild: |
33 |
moved to tree |
34 |
|
35 |
diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest |
36 |
index ae3faa9..1e26311 100644 |
37 |
--- a/sys-kernel/hardened-sources/Manifest |
38 |
+++ b/sys-kernel/hardened-sources/Manifest |
39 |
@@ -1,2 +1,14 @@ |
40 |
-MISC ChangeLog 3043 RMD160 60607d5b50e921db05b3622fc214b6d38fcddfb6 SHA1 7bfd18fc7f6f58b957c4bea2ecb22985d12487d9 SHA256 7041cc6d861d35705e949338ee02663470cb7f4bdb2f811dcd0e1ed141b65e49 |
41 |
+DIST deblob-2.6.32 84094 RMD160 394f46ec5b869638a7bc2e87beb118167c9bd6cb SHA1 1a2a1efb72126609d9e3b9be99ae5be2751efd06 SHA256 de625f0bd221c9c38d4453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d |
42 |
+DIST deblob-check-2.6.32 247608 RMD160 840bf8a229ea79810519eee6241edb85b78a6562 SHA1 d45a24eb16e5ac956c0fcddbc1ac4d67e326c7b8 SHA256 da1aecdf3ab7f1207b90642d303e52262ccc2ed9e49739b729512b88950d17f3 |
43 |
+DIST genpatches-2.6.32-40.base.tar.bz2 954168 RMD160 09a4ab92cd4a0bb6200a386182d60bf94fcea5dc SHA1 4b937d27ec83398efb5af8a71a8d2b893cfd56fc SHA256 63caf952fa4351813db7c280751e71e635aa0df259ccfd153ecda5ad06960cbe |
44 |
+DIST genpatches-2.6.32-40.extras.tar.bz2 24897 RMD160 fac4ce9c15953ad811b2c500b0145f2eebea5e2d SHA1 8f9cdf4bc06dc5e806698d93c002798faa53fda1 SHA256 309841a94e96d7076bca7fb547caae9786e24258e032da242f64768a413ddbf0 |
45 |
+DIST genpatches-3.0-4.base.tar.bz2 102113 RMD160 178fc759f4d4ee9760eab4345c9dd7ed06100020 SHA1 59057817d52f2f505c6d8212462d27ce25f01a57 SHA256 5e6b06381285d8d69b61680ff92c7f7fa1852ddafaa981d531bce3d1d6d8c6c0 |
46 |
+DIST genpatches-3.0-4.extras.tar.bz2 17216 RMD160 8b6e72d066da9d7ca5980cbc76fceb63ab150bdb SHA1 878b6c35687270f9eb4c40d505555fcb46861ffe SHA256 ecaebab1f5f7448ced2906473c1812cc33c2c8a7e50949e1aa8dffda9444fa89 |
47 |
+DIST hardened-patches-2.6.32-67.extras.tar.bz2 497135 RMD160 1a5639bffbecb5ab3cced4387ee20249633ca1d4 SHA1 56635def06d2dabe07b55b4e45a45dde2cdfe452 SHA256 1f80580c714e90a63ee712d94ce5e213980f9e6f374b24c12b77694a8649743b |
48 |
+DIST hardened-patches-3.0.3-1.extras.tar.bz2 441098 RMD160 6d5dd6a4c8ac253bb66fbbb42fb136a30c9d9ef8 SHA1 33b9142b5691f859e30ffac9600175e1567bff1a SHA256 aaf9289f900b906410ae0b0facbf10f96f7eb7b9a8f4c4be545538746d54533f |
49 |
+DIST linux-2.6.32.tar.bz2 64424138 RMD160 b93742cbaf8174f2200d2dbef0d47a26c618039c SHA1 410b4fc818023bfef60064e973ff0ab46d3bfb19 SHA256 5099786d80b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e |
50 |
+DIST linux-3.0.tar.bz2 76753134 RMD160 e20c9564ec0c8128e28a4c038986d4d93bbe34bb SHA1 45b64bffc860f70ab7956da4493c488010714650 SHA256 64b0228b54ce39b0b2df086109a7b737cde58e3df4f779506ddcaccee90356a0 |
51 |
+EBUILD hardened-sources-2.6.32-r64.ebuild 1758 RMD160 d57e771cff5c229b12e2c13af477be3b93d1f57e SHA1 371ccf6c52b0f54935a82caf8591450251f047ff SHA256 bb2e0e550518fadf015aba09549fdff4087809e3a6296eedacbca6372272b560 |
52 |
+EBUILD hardened-sources-3.0.3.ebuild 1756 RMD160 144388f6e80d8c7c9bc4a2085b3c3735d01ca112 SHA1 9bd42a72c81869f52a6d5dc983c09f682f59ad62 SHA256 6b3e5989ab249e4cafbd1d9c25d56a88a75ab31e3306fa4dee8bb83371d68bef |
53 |
+MISC ChangeLog 3280 RMD160 f61f133c27b3cba9c738f3dd5e02520fc2fecaa7 SHA1 1843e9d621001c75d9dbcb5b38c36ccb8041904e SHA256 6efefdee74d00d020b3733579b018e0e1c4a4a33bf6784c7aec74063390df198 |
54 |
MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SHA1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8fcfd351f2f39ed63da68af3a5751fc2058d0d03813 |
55 |
|
56 |
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r64.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r64.ebuild |
57 |
new file mode 100644 |
58 |
index 0000000..ea28ede |
59 |
--- /dev/null |
60 |
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r64.ebuild |
61 |
@@ -0,0 +1,48 @@ |
62 |
+# Copyright 1999-2011 Gentoo Foundation |
63 |
+# Distributed under the terms of the GNU General Public License v2 |
64 |
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r63.ebuild,v 1.1 2011/08/24 12:00:19 blueness Exp $ |
65 |
+ |
66 |
+EAPI="4" |
67 |
+ |
68 |
+ETYPE="sources" |
69 |
+K_WANT_GENPATCHES="base extras" |
70 |
+K_GENPATCHES_VER="40" |
71 |
+ |
72 |
+inherit kernel-2 |
73 |
+detect_version |
74 |
+ |
75 |
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-67" |
76 |
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2" |
77 |
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}" |
78 |
+ |
79 |
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2" |
80 |
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch" |
81 |
+ |
82 |
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})" |
83 |
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/" |
84 |
+IUSE="" |
85 |
+ |
86 |
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86" |
87 |
+ |
88 |
+pkg_postinst() { |
89 |
+ kernel-2_pkg_postinst |
90 |
+ |
91 |
+ local GRADM_COMPAT="sys-apps/gradm-2.2.2*" |
92 |
+ |
93 |
+ ewarn |
94 |
+ ewarn "Hardened Gentoo provides three different predefined grsecurity level:" |
95 |
+ ewarn "[server], [workstation], and [virtualization]." |
96 |
+ ewarn |
97 |
+ ewarn "Those who intend to use one of these predefined grsecurity levels" |
98 |
+ ewarn "should read the help associated with the level. Users importing a" |
99 |
+ ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32," |
100 |
+ ewarn "should review their selected grsecurity/PaX options carefully." |
101 |
+ ewarn |
102 |
+ ewarn "Users of grsecurity's RBAC system must ensure they are using" |
103 |
+ ewarn "${GRADM_COMPAT}, which is compatible with ${PF}." |
104 |
+ ewarn "It is strongly recommended that the following command is issued" |
105 |
+ ewarn "prior to booting a ${PF} kernel for the first time:" |
106 |
+ ewarn |
107 |
+ ewarn "emerge -na =${GRADM_COMPAT}" |
108 |
+ ewarn |
109 |
+} |
110 |
|
111 |
diff --git a/sys-kernel/hardened-sources/hardened-sources-3.0.3.ebuild b/sys-kernel/hardened-sources/hardened-sources-3.0.3.ebuild |
112 |
new file mode 100644 |
113 |
index 0000000..e1698c8 |
114 |
--- /dev/null |
115 |
+++ b/sys-kernel/hardened-sources/hardened-sources-3.0.3.ebuild |
116 |
@@ -0,0 +1,48 @@ |
117 |
+# Copyright 1999-2011 Gentoo Foundation |
118 |
+# Distributed under the terms of the GNU General Public License v2 |
119 |
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.39-r12.ebuild,v 1.1 2011/08/16 09:35:08 blueness Exp $ |
120 |
+ |
121 |
+EAPI="4" |
122 |
+ |
123 |
+ETYPE="sources" |
124 |
+K_WANT_GENPATCHES="base extras" |
125 |
+K_GENPATCHES_VER="4" |
126 |
+ |
127 |
+inherit kernel-2 |
128 |
+detect_version |
129 |
+ |
130 |
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-1" |
131 |
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2" |
132 |
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}" |
133 |
+ |
134 |
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2" |
135 |
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch" |
136 |
+ |
137 |
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})" |
138 |
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/" |
139 |
+IUSE="" |
140 |
+ |
141 |
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86" |
142 |
+ |
143 |
+pkg_postinst() { |
144 |
+ kernel-2_pkg_postinst |
145 |
+ |
146 |
+ local GRADM_COMPAT="sys-apps/gradm-2.2.2*" |
147 |
+ |
148 |
+ ewarn |
149 |
+ ewarn "Hardened Gentoo provides three different predefined grsecurity level:" |
150 |
+ ewarn "[server], [workstation], and [virtualization]." |
151 |
+ ewarn |
152 |
+ ewarn "Those who intend to use one of these predefined grsecurity levels" |
153 |
+ ewarn "should read the help associated with the level. Users importing a" |
154 |
+ ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32," |
155 |
+ ewarn "should review their selected grsecurity/PaX options carefully." |
156 |
+ ewarn |
157 |
+ ewarn "Users of grsecurity's RBAC system must ensure they are using" |
158 |
+ ewarn "${GRADM_COMPAT}, which is compatible with ${PF}." |
159 |
+ ewarn "It is strongly recommended that the following command is issued" |
160 |
+ ewarn "prior to booting a ${PF} kernel for the first time:" |
161 |
+ ewarn |
162 |
+ ewarn "emerge -na =${GRADM_COMPAT}" |
163 |
+ ewarn |
164 |
+} |