Gentoo Archives: gentoo-commits

From: "Anthony G. Basile" <blueness@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] dev/blueness:master commit in: sys-kernel/hardened-sources/
Date: Wed, 24 Aug 2011 19:03:39
Message-Id: 88752726a14b4eba87977ba79d2e666bd22f5743.blueness@gentoo
1 commit: 88752726a14b4eba87977ba79d2e666bd22f5743
2 Author: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
3 AuthorDate: Wed Aug 24 19:01:51 2011 +0000
4 Commit: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
5 CommitDate: Wed Aug 24 19:01:51 2011 +0000
6 URL: http://git.overlays.gentoo.org/gitweb/?p=dev/blueness.git;a=commit;h=88752726
7
8 sys-kernel/hardened-sources: testing patchset 20110823
9
10 ---
11 sys-kernel/hardened-sources/ChangeLog | 7 +++
12 sys-kernel/hardened-sources/Manifest | 14 +++++-
13 .../hardened-sources-2.6.32-r64.ebuild | 48 ++++++++++++++++++++
14 .../hardened-sources/hardened-sources-3.0.3.ebuild | 48 ++++++++++++++++++++
15 4 files changed, 116 insertions(+), 1 deletions(-)
16
17 diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
18 index 0893438..daa29a3 100644
19 --- a/sys-kernel/hardened-sources/ChangeLog
20 +++ b/sys-kernel/hardened-sources/ChangeLog
21 @@ -1,5 +1,12 @@
22
23
24 +*hardened-sources-3.0.3 (24 Aug 2011)
25 +*hardened-sources-2.6.32-r64 (24 Aug 2011)
26 +
27 + 24 Aug 2011; Anthony G. Basile <blueness@g.o>
28 + +hardened-sources-2.6.32-r64.ebuild, +hardened-sources-3.0.3.ebuild:
29 + testing patchset 20110823
30 +
31 24 Aug 2011; Anthony G. Basile <blueness@g.o>
32 -hardened-sources-2.6.32-r63.ebuild, -hardened-sources-2.6.39-r13.ebuild:
33 moved to tree
34
35 diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
36 index ae3faa9..1e26311 100644
37 --- a/sys-kernel/hardened-sources/Manifest
38 +++ b/sys-kernel/hardened-sources/Manifest
39 @@ -1,2 +1,14 @@
40 -MISC ChangeLog 3043 RMD160 60607d5b50e921db05b3622fc214b6d38fcddfb6 SHA1 7bfd18fc7f6f58b957c4bea2ecb22985d12487d9 SHA256 7041cc6d861d35705e949338ee02663470cb7f4bdb2f811dcd0e1ed141b65e49
41 +DIST deblob-2.6.32 84094 RMD160 394f46ec5b869638a7bc2e87beb118167c9bd6cb SHA1 1a2a1efb72126609d9e3b9be99ae5be2751efd06 SHA256 de625f0bd221c9c38d4453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d
42 +DIST deblob-check-2.6.32 247608 RMD160 840bf8a229ea79810519eee6241edb85b78a6562 SHA1 d45a24eb16e5ac956c0fcddbc1ac4d67e326c7b8 SHA256 da1aecdf3ab7f1207b90642d303e52262ccc2ed9e49739b729512b88950d17f3
43 +DIST genpatches-2.6.32-40.base.tar.bz2 954168 RMD160 09a4ab92cd4a0bb6200a386182d60bf94fcea5dc SHA1 4b937d27ec83398efb5af8a71a8d2b893cfd56fc SHA256 63caf952fa4351813db7c280751e71e635aa0df259ccfd153ecda5ad06960cbe
44 +DIST genpatches-2.6.32-40.extras.tar.bz2 24897 RMD160 fac4ce9c15953ad811b2c500b0145f2eebea5e2d SHA1 8f9cdf4bc06dc5e806698d93c002798faa53fda1 SHA256 309841a94e96d7076bca7fb547caae9786e24258e032da242f64768a413ddbf0
45 +DIST genpatches-3.0-4.base.tar.bz2 102113 RMD160 178fc759f4d4ee9760eab4345c9dd7ed06100020 SHA1 59057817d52f2f505c6d8212462d27ce25f01a57 SHA256 5e6b06381285d8d69b61680ff92c7f7fa1852ddafaa981d531bce3d1d6d8c6c0
46 +DIST genpatches-3.0-4.extras.tar.bz2 17216 RMD160 8b6e72d066da9d7ca5980cbc76fceb63ab150bdb SHA1 878b6c35687270f9eb4c40d505555fcb46861ffe SHA256 ecaebab1f5f7448ced2906473c1812cc33c2c8a7e50949e1aa8dffda9444fa89
47 +DIST hardened-patches-2.6.32-67.extras.tar.bz2 497135 RMD160 1a5639bffbecb5ab3cced4387ee20249633ca1d4 SHA1 56635def06d2dabe07b55b4e45a45dde2cdfe452 SHA256 1f80580c714e90a63ee712d94ce5e213980f9e6f374b24c12b77694a8649743b
48 +DIST hardened-patches-3.0.3-1.extras.tar.bz2 441098 RMD160 6d5dd6a4c8ac253bb66fbbb42fb136a30c9d9ef8 SHA1 33b9142b5691f859e30ffac9600175e1567bff1a SHA256 aaf9289f900b906410ae0b0facbf10f96f7eb7b9a8f4c4be545538746d54533f
49 +DIST linux-2.6.32.tar.bz2 64424138 RMD160 b93742cbaf8174f2200d2dbef0d47a26c618039c SHA1 410b4fc818023bfef60064e973ff0ab46d3bfb19 SHA256 5099786d80b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e
50 +DIST linux-3.0.tar.bz2 76753134 RMD160 e20c9564ec0c8128e28a4c038986d4d93bbe34bb SHA1 45b64bffc860f70ab7956da4493c488010714650 SHA256 64b0228b54ce39b0b2df086109a7b737cde58e3df4f779506ddcaccee90356a0
51 +EBUILD hardened-sources-2.6.32-r64.ebuild 1758 RMD160 d57e771cff5c229b12e2c13af477be3b93d1f57e SHA1 371ccf6c52b0f54935a82caf8591450251f047ff SHA256 bb2e0e550518fadf015aba09549fdff4087809e3a6296eedacbca6372272b560
52 +EBUILD hardened-sources-3.0.3.ebuild 1756 RMD160 144388f6e80d8c7c9bc4a2085b3c3735d01ca112 SHA1 9bd42a72c81869f52a6d5dc983c09f682f59ad62 SHA256 6b3e5989ab249e4cafbd1d9c25d56a88a75ab31e3306fa4dee8bb83371d68bef
53 +MISC ChangeLog 3280 RMD160 f61f133c27b3cba9c738f3dd5e02520fc2fecaa7 SHA1 1843e9d621001c75d9dbcb5b38c36ccb8041904e SHA256 6efefdee74d00d020b3733579b018e0e1c4a4a33bf6784c7aec74063390df198
54 MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SHA1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8fcfd351f2f39ed63da68af3a5751fc2058d0d03813
55
56 diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r64.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r64.ebuild
57 new file mode 100644
58 index 0000000..ea28ede
59 --- /dev/null
60 +++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r64.ebuild
61 @@ -0,0 +1,48 @@
62 +# Copyright 1999-2011 Gentoo Foundation
63 +# Distributed under the terms of the GNU General Public License v2
64 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r63.ebuild,v 1.1 2011/08/24 12:00:19 blueness Exp $
65 +
66 +EAPI="4"
67 +
68 +ETYPE="sources"
69 +K_WANT_GENPATCHES="base extras"
70 +K_GENPATCHES_VER="40"
71 +
72 +inherit kernel-2
73 +detect_version
74 +
75 +HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-67"
76 +HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
77 +SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
78 +
79 +UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
80 +UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
81 +
82 +DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
83 +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
84 +IUSE=""
85 +
86 +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
87 +
88 +pkg_postinst() {
89 + kernel-2_pkg_postinst
90 +
91 + local GRADM_COMPAT="sys-apps/gradm-2.2.2*"
92 +
93 + ewarn
94 + ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
95 + ewarn "[server], [workstation], and [virtualization]."
96 + ewarn
97 + ewarn "Those who intend to use one of these predefined grsecurity levels"
98 + ewarn "should read the help associated with the level. Users importing a"
99 + ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
100 + ewarn "should review their selected grsecurity/PaX options carefully."
101 + ewarn
102 + ewarn "Users of grsecurity's RBAC system must ensure they are using"
103 + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
104 + ewarn "It is strongly recommended that the following command is issued"
105 + ewarn "prior to booting a ${PF} kernel for the first time:"
106 + ewarn
107 + ewarn "emerge -na =${GRADM_COMPAT}"
108 + ewarn
109 +}
110
111 diff --git a/sys-kernel/hardened-sources/hardened-sources-3.0.3.ebuild b/sys-kernel/hardened-sources/hardened-sources-3.0.3.ebuild
112 new file mode 100644
113 index 0000000..e1698c8
114 --- /dev/null
115 +++ b/sys-kernel/hardened-sources/hardened-sources-3.0.3.ebuild
116 @@ -0,0 +1,48 @@
117 +# Copyright 1999-2011 Gentoo Foundation
118 +# Distributed under the terms of the GNU General Public License v2
119 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.39-r12.ebuild,v 1.1 2011/08/16 09:35:08 blueness Exp $
120 +
121 +EAPI="4"
122 +
123 +ETYPE="sources"
124 +K_WANT_GENPATCHES="base extras"
125 +K_GENPATCHES_VER="4"
126 +
127 +inherit kernel-2
128 +detect_version
129 +
130 +HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-1"
131 +HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
132 +SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
133 +
134 +UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
135 +UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
136 +
137 +DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
138 +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
139 +IUSE=""
140 +
141 +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
142 +
143 +pkg_postinst() {
144 + kernel-2_pkg_postinst
145 +
146 + local GRADM_COMPAT="sys-apps/gradm-2.2.2*"
147 +
148 + ewarn
149 + ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
150 + ewarn "[server], [workstation], and [virtualization]."
151 + ewarn
152 + ewarn "Those who intend to use one of these predefined grsecurity levels"
153 + ewarn "should read the help associated with the level. Users importing a"
154 + ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
155 + ewarn "should review their selected grsecurity/PaX options carefully."
156 + ewarn
157 + ewarn "Users of grsecurity's RBAC system must ensure they are using"
158 + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
159 + ewarn "It is strongly recommended that the following command is issued"
160 + ewarn "prior to booting a ${PF} kernel for the first time:"
161 + ewarn
162 + ewarn "emerge -na =${GRADM_COMPAT}"
163 + ewarn
164 +}