1 |
commit: 141ef0db3703fbf56d1471da0bec948fdaf7e8f0 |
2 |
Author: Anthony G. Basile <blueness <AT> gentoo <DOT> org> |
3 |
AuthorDate: Wed Sep 21 11:32:55 2011 +0000 |
4 |
Commit: Anthony G. Basile <blueness <AT> gentoo <DOT> org> |
5 |
CommitDate: Wed Sep 21 11:32:55 2011 +0000 |
6 |
URL: http://git.overlays.gentoo.org/gitweb/?p=dev/blueness.git;a=commit;h=141ef0db |
7 |
|
8 |
sys-kernel/hardened-sources: testing patchset 20110919 |
9 |
|
10 |
(Portage version: 2.1.10.11/git/Linux x86_64, signed Manifest commit with key 0xD0455535) |
11 |
|
12 |
--- |
13 |
sys-kernel/hardened-sources/ChangeLog | 6 +++ |
14 |
sys-kernel/hardened-sources/Manifest | 13 ++++-- |
15 |
.../hardened-sources-3.0.4-r3.ebuild | 48 ++++++++++++++++++++ |
16 |
3 files changed, 63 insertions(+), 4 deletions(-) |
17 |
|
18 |
diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog |
19 |
index 5c32603..de66a90 100644 |
20 |
--- a/sys-kernel/hardened-sources/ChangeLog |
21 |
+++ b/sys-kernel/hardened-sources/ChangeLog |
22 |
@@ -1,5 +1,11 @@ |
23 |
|
24 |
|
25 |
+*hardened-sources-3.0.4-r3 (21 Sep 2011) |
26 |
+ |
27 |
+ 21 Sep 2011; Anthony G. Basile <blueness@g.o> |
28 |
+ +hardened-sources-3.0.4-r3.ebuild: |
29 |
+ testing patchset 20110919 |
30 |
+ |
31 |
18 Sep 2011; Anthony G. Basile <blueness@g.o> |
32 |
-hardened-sources-2.6.32-r68.ebuild, -hardened-sources-3.0.4-r2.ebuild: |
33 |
moved to tree |
34 |
|
35 |
diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest |
36 |
index 5018b3d..e1c0a57 100644 |
37 |
--- a/sys-kernel/hardened-sources/Manifest |
38 |
+++ b/sys-kernel/hardened-sources/Manifest |
39 |
@@ -1,12 +1,17 @@ |
40 |
-----BEGIN PGP SIGNED MESSAGE----- |
41 |
Hash: SHA256 |
42 |
|
43 |
-MISC ChangeLog 5333 RMD160 e7d79ed8e14aa2974eee4fc1faaee1dde2087d68 SHA1 20913eb39b16108dd026a7e8a57979938251748f SHA256 c025031c6fef4724afbaafceee7d5d7cd229fe96b023b706cc28165e8618e7a8 |
44 |
+DIST genpatches-3.0-5.base.tar.bz2 112593 RMD160 0f0731dd5565622817c43cc15c133e02f53bf070 SHA1 89947def4e6a2ca55a73bb35fb80f04b081e8a75 SHA256 5a93e459e4e5fb1e38fc3d8a37533aaeee9e77fc00d45105d8d49584c1ae345e |
45 |
+DIST genpatches-3.0-5.extras.tar.bz2 17207 RMD160 0f04fef1fe76c9b9cbe7c497faae19b015caff72 SHA1 89935647c22c0a8b98dd568e97312ca64378a263 SHA256 ec88ca4408c668a2c4d2d25c3d4a8c67fad4bb08133db91bbb929c0053305fda |
46 |
+DIST hardened-patches-3.0.4-4.extras.tar.bz2 459130 RMD160 7177739b41d27b6c7fd3479b2aee72b66480cd54 SHA1 2bb649c6189d3d72730d8c12e78ce92c9995973f SHA256 70748ee8952b952129e4c395b579f96413174b3366c8db1de23303ea19814a64 |
47 |
+DIST linux-3.0.tar.bz2 76753134 RMD160 e20c9564ec0c8128e28a4c038986d4d93bbe34bb SHA1 45b64bffc860f70ab7956da4493c488010714650 SHA256 64b0228b54ce39b0b2df086109a7b737cde58e3df4f779506ddcaccee90356a0 |
48 |
+EBUILD hardened-sources-3.0.4-r3.ebuild 1754 RMD160 91761c8ba054757a398492512ed470a540a2de4c SHA1 9b581d16362d6c16c9ed257ea258ed0ed57c7c4a SHA256 977da7c30ac8a484c2a629c794c811064830d8a2f3eeb34fe04907eaac6eb072 |
49 |
+MISC ChangeLog 5496 RMD160 fc59f419f662c3e995e8e32bac28a03e175fd346 SHA1 3e1a79bcdf228fbfce9dde583970dae2078cf334 SHA256 4f55fac7921aa6c0bf606b7f8abd732e88e7ea2971a798cfb2a610e903e8b42e |
50 |
MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SHA1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8fcfd351f2f39ed63da68af3a5751fc2058d0d03813 |
51 |
-----BEGIN PGP SIGNATURE----- |
52 |
Version: GnuPG v2.0.17 (GNU/Linux) |
53 |
|
54 |
-iEYEAREIAAYFAk52AEcACgkQl5yvQNBFVTXhOgCfUSm5P/YxlpgWwWwRfRqsnx7H |
55 |
-gAQAnR46cW+c24ymcaIQ5od/kC9rSIt/ |
56 |
-=PWLm |
57 |
+iEYEAREIAAYFAk55y2cACgkQl5yvQNBFVTVXYQCcCEOKHPTjA0rgwQvyFcHkGmYo |
58 |
+sloAoJZOU3gBVL9iR0vTYcad+8OwM0zB |
59 |
+=Q3pc |
60 |
-----END PGP SIGNATURE----- |
61 |
|
62 |
diff --git a/sys-kernel/hardened-sources/hardened-sources-3.0.4-r3.ebuild b/sys-kernel/hardened-sources/hardened-sources-3.0.4-r3.ebuild |
63 |
new file mode 100644 |
64 |
index 0000000..4f1fadb |
65 |
--- /dev/null |
66 |
+++ b/sys-kernel/hardened-sources/hardened-sources-3.0.4-r3.ebuild |
67 |
@@ -0,0 +1,48 @@ |
68 |
+# Copyright 1999-2011 Gentoo Foundation |
69 |
+# Distributed under the terms of the GNU General Public License v2 |
70 |
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-3.0.4-r2.ebuild,v 1.1 2011/09/15 22:16:19 blueness Exp $ |
71 |
+ |
72 |
+EAPI="4" |
73 |
+ |
74 |
+ETYPE="sources" |
75 |
+K_WANT_GENPATCHES="base extras" |
76 |
+K_GENPATCHES_VER="5" |
77 |
+ |
78 |
+inherit kernel-2 |
79 |
+detect_version |
80 |
+ |
81 |
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-4" |
82 |
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2" |
83 |
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}" |
84 |
+ |
85 |
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2" |
86 |
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch" |
87 |
+ |
88 |
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})" |
89 |
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/" |
90 |
+IUSE="" |
91 |
+ |
92 |
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86" |
93 |
+ |
94 |
+pkg_postinst() { |
95 |
+ kernel-2_pkg_postinst |
96 |
+ |
97 |
+ local GRADM_COMPAT="sys-apps/gradm-2.2.2*" |
98 |
+ |
99 |
+ ewarn |
100 |
+ ewarn "Hardened Gentoo provides three different predefined grsecurity level:" |
101 |
+ ewarn "[server], [workstation], and [virtualization]." |
102 |
+ ewarn |
103 |
+ ewarn "Those who intend to use one of these predefined grsecurity levels" |
104 |
+ ewarn "should read the help associated with the level. Users importing a" |
105 |
+ ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32," |
106 |
+ ewarn "should review their selected grsecurity/PaX options carefully." |
107 |
+ ewarn |
108 |
+ ewarn "Users of grsecurity's RBAC system must ensure they are using" |
109 |
+ ewarn "${GRADM_COMPAT}, which is compatible with ${PF}." |
110 |
+ ewarn "It is strongly recommended that the following command is issued" |
111 |
+ ewarn "prior to booting a ${PF} kernel for the first time:" |
112 |
+ ewarn |
113 |
+ ewarn "emerge -na =${GRADM_COMPAT}" |
114 |
+ ewarn |
115 |
+} |