Gentoo Archives: gentoo-commits

From: "Anthony G. Basile" <blueness@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] dev/blueness:master commit in: sys-kernel/hardened-sources/
Date: Tue, 24 May 2011 01:17:13
Message-Id: adc8a3894c2a6331ca7003012a143107a5978cfa.blueness@gentoo
1 commit: adc8a3894c2a6331ca7003012a143107a5978cfa
2 Author: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
3 AuthorDate: Tue May 24 01:16:58 2011 +0000
4 Commit: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
5 CommitDate: Tue May 24 01:16:58 2011 +0000
6 URL: http://git.overlays.gentoo.org/gitweb/?p=dev/blueness.git;a=commit;h=adc8a389
7
8 sys-kernel/hardened-sources: testing patchset 20110522
9
10 (Portage version: 2.1.9.42/git/Linux x86_64, signed Manifest commit with key 0xD0455535)
11
12 ---
13 sys-kernel/hardened-sources/ChangeLog | 7 +++
14 sys-kernel/hardened-sources/Manifest | 22 +++++++--
15 .../hardened-sources-2.6.32-r49.ebuild | 48 ++++++++++++++++++++
16 .../hardened-sources-2.6.38-r6.ebuild | 48 ++++++++++++++++++++
17 4 files changed, 121 insertions(+), 4 deletions(-)
18
19 diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
20 index 3edb479..4f3caca 100644
21 --- a/sys-kernel/hardened-sources/ChangeLog
22 +++ b/sys-kernel/hardened-sources/ChangeLog
23 @@ -1,5 +1,12 @@
24
25
26 +*hardened-sources-2.6.38-r6 (24 May 2011)
27 +*hardened-sources-2.6.32-r49 (24 May 2011)
28 +
29 + 24 May 2011; Anthony G. Basile <blueness@g.o>
30 + +hardened-sources-2.6.32-r49.ebuild, +hardened-sources-2.6.38-r6.ebuild:
31 + testing patchset 20110522
32 +
33 23 May 2011; Anthony G. Basile <blueness@g.o>
34 -hardened-sources-2.6.32-r48.ebuild, -hardened-sources-2.6.38-r5.ebuild:
35 moved to tree
36
37 diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
38 index e9215a5..64950ae 100644
39 --- a/sys-kernel/hardened-sources/Manifest
40 +++ b/sys-kernel/hardened-sources/Manifest
41 @@ -1,12 +1,26 @@
42 -----BEGIN PGP SIGNED MESSAGE-----
43 Hash: SHA256
44
45 -MISC ChangeLog 14265 RMD160 060eb82feeb508201ae3614863697b57a753076e SHA1 1443b40c9474f49544f47a259c3c34d88cb69aa3 SHA256 96be997fbe48f03d1001db5d6b63227b412a792f09f9096a993afd76180702d1
46 +DIST deblob-2.6.32 84094 RMD160 394f46ec5b869638a7bc2e87beb118167c9bd6cb SHA1 1a2a1efb72126609d9e3b9be99ae5be2751efd06 SHA256 de625f0bd221c9c38d4453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d
47 +DIST deblob-2.6.38 99773 RMD160 f52e78df8e819319d0aabf24fe471e2ef9e02140 SHA1 0d176aa88f0525123d293e26617f2d287fabdddc SHA256 ddabcd846baa19b7e82adec3ca8ff17f2f7425c292516889098559f639e763eb
48 +DIST deblob-check-2.6.32 247608 RMD160 840bf8a229ea79810519eee6241edb85b78a6562 SHA1 d45a24eb16e5ac956c0fcddbc1ac4d67e326c7b8 SHA256 da1aecdf3ab7f1207b90642d303e52262ccc2ed9e49739b729512b88950d17f3
49 +DIST deblob-check-2.6.38 345831 RMD160 1caea73e54a21cb1100a4ee8226201ddd8a89985 SHA1 44de3ac14d9a3e94b97553051aff0ebfada45274 SHA256 6f681dbd1c1c44cba2c9902dd77a5a51b2d1cc81567cffc60ba92bd0bdd4ff2f
50 +DIST genpatches-2.6.32-37.base.tar.bz2 921165 RMD160 e764a6d7665d206689117493218224cbf5a3b0de SHA1 ffe8c89830798504f26a54b777ef1147824aa39f SHA256 04d1341acc1abf49300b23b10fc48962303509d8c5af8a5cb2c8397606444a06
51 +DIST genpatches-2.6.32-37.extras.tar.bz2 24934 RMD160 e3e1d60fb45a3e3c818ddda36b9180d4fc46679e SHA1 d16a34dfa35d163ea4042058b3865c389f3802e9 SHA256 50b70c76461aa52f7f2ad88175e7f08eb555f7f1dfd274759ec0c2a9748bde5e
52 +DIST genpatches-2.6.38-7.base.tar.bz2 155312 RMD160 54caab0025f9669e4dc1e0e0cae549bf1306feb1 SHA1 ff3dcbed69695ce83ac3b692725628a0816c3749 SHA256 a01d37219dc2b2311a0994a4d0fd3a9148bfeb31ea78c64cc78cbb900de432da
53 +DIST genpatches-2.6.38-7.extras.tar.bz2 15675 RMD160 3d40e9fcad874591de0cc7497a52795ea04a9b9b SHA1 ca1b5f319e87960fa97ea6302dd0146901cacd9e SHA256 6d4c134be67714382efc8aec208c5a73d6c0f84d96acc76640b9ed3be93877a4
54 +DIST hardened-patches-2.6.32-52.extras.tar.bz2 439152 RMD160 9708cc20d57aaf87208a09d997e7075b8f6b7728 SHA1 a47d05278508fe66b0b4503588a00da7242c45e2 SHA256 5f638986ab8118d8c331115fcd3eeba7b17e6e37e9c4895805e58747e8206a77
55 +DIST hardened-patches-2.6.38-7.extras.tar.bz2 442689 RMD160 bd661205cd9f5976a702d55ff0aa0399c1cd8fcc SHA1 f1844f17fcb61a4fd569b45cddaf8a9869f932ee SHA256 a42f0c5d38621f92302a5250e59881b86858173f775a1d0a2db35bcd07066d4b
56 +DIST linux-2.6.32.tar.bz2 64424138 RMD160 b93742cbaf8174f2200d2dbef0d47a26c618039c SHA1 410b4fc818023bfef60064e973ff0ab46d3bfb19 SHA256 5099786d80b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e
57 +DIST linux-2.6.38.tar.bz2 74739098 RMD160 d1179be93f1309303b9aa6008a25b6247726e764 SHA1 02aade5ad3dedd70739c9b4a05de40edbe432d25 SHA256 72f0cfaefb8dc86b219d5a742dd0375332627641ecbdf5badd3158e2127b9304
58 +EBUILD hardened-sources-2.6.32-r49.ebuild 1758 RMD160 ed3525186c8b90d21397487cb701ef1c2971aab1 SHA1 c303bb4739e262f8fc75ea010fafbc9338621033 SHA256 6ee279b1cd1e7e64c3703ddaf41fea53d0bb322d0c33e6d87ae49e6b56de44be
59 +EBUILD hardened-sources-2.6.38-r6.ebuild 1755 RMD160 059db20b7234ba41e77e8ea4c6d0d4fca5bc164e SHA1 6256e4ee7e68fdb654bcd346414ce3a534f4b306 SHA256 96903ef9e7ceb6751ec7d7651208fe8eb3dae7a6896984b5815d136c66d9600e
60 +MISC ChangeLog 14510 RMD160 13d852f18064ccd90e8fc64a48b681522f419367 SHA1 4bffccd4b4f9f6fd1306b837af899f631cc9789e SHA256 9f0609392f6145708d0e8af904c4273f6d7c3162ab1d8b2c73228762a27ef44b
61 MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SHA1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8fcfd351f2f39ed63da68af3a5751fc2058d0d03813
62 -----BEGIN PGP SIGNATURE-----
63 Version: GnuPG v2.0.17 (GNU/Linux)
64
65 -iEYEAREIAAYFAk3aaksACgkQl5yvQNBFVTWXuwCgjIPvfiAcAQdrQJYmK+oVIxRp
66 -VmEAoIeLXws44oQ5DFDbfEhRkxedGkz1
67 -=MrRq
68 +iEYEAREIAAYFAk3bBwoACgkQl5yvQNBFVTWzKACePfRtMdHwioQsiISF9uhLGnog
69 +THQAmgN6++lTDa8M/X3rlTfcdYkaOdO7
70 +=mIkm
71 -----END PGP SIGNATURE-----
72
73 diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r49.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r49.ebuild
74 new file mode 100644
75 index 0000000..0211dd5
76 --- /dev/null
77 +++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r49.ebuild
78 @@ -0,0 +1,48 @@
79 +# Copyright 1999-2011 Gentoo Foundation
80 +# Distributed under the terms of the GNU General Public License v2
81 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r48.ebuild,v 1.1 2011/05/20 20:30:15 blueness Exp $
82 +
83 +EAPI="2"
84 +
85 +ETYPE="sources"
86 +K_WANT_GENPATCHES="base extras"
87 +K_GENPATCHES_VER="37"
88 +
89 +inherit kernel-2
90 +detect_version
91 +
92 +HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-52"
93 +HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
94 +SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
95 +
96 +UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
97 +UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
98 +
99 +DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
100 +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
101 +IUSE=""
102 +
103 +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
104 +
105 +pkg_postinst() {
106 + kernel-2_pkg_postinst
107 +
108 + local GRADM_COMPAT="sys-apps/gradm-2.2.2*"
109 +
110 + ewarn
111 + ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
112 + ewarn "[server], [workstation], and [virtualization]."
113 + ewarn
114 + ewarn "Those who intend to use one of these predefined grsecurity levels"
115 + ewarn "should read the help associated with the level. Users importing a"
116 + ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
117 + ewarn "should review their selected grsecurity/PaX options carefully."
118 + ewarn
119 + ewarn "Users of grsecurity's RBAC system must ensure they are using"
120 + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
121 + ewarn "It is strongly recommended that the following command is issued"
122 + ewarn "prior to booting a ${PF} kernel for the first time:"
123 + ewarn
124 + ewarn "emerge -na =${GRADM_COMPAT}"
125 + ewarn
126 +}
127
128 diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.38-r6.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.38-r6.ebuild
129 new file mode 100644
130 index 0000000..a0551f8
131 --- /dev/null
132 +++ b/sys-kernel/hardened-sources/hardened-sources-2.6.38-r6.ebuild
133 @@ -0,0 +1,48 @@
134 +# Copyright 1999-2011 Gentoo Foundation
135 +# Distributed under the terms of the GNU General Public License v2
136 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.38-r5.ebuild,v 1.1 2011/05/20 20:33:48 blueness Exp $
137 +
138 +EAPI="2"
139 +
140 +ETYPE="sources"
141 +K_WANT_GENPATCHES="base extras"
142 +K_GENPATCHES_VER="7"
143 +
144 +inherit kernel-2
145 +detect_version
146 +
147 +HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-7"
148 +HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
149 +SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
150 +
151 +UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
152 +UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
153 +
154 +DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
155 +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
156 +IUSE=""
157 +
158 +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
159 +
160 +pkg_postinst() {
161 + kernel-2_pkg_postinst
162 +
163 + local GRADM_COMPAT="sys-apps/gradm-2.2.2*"
164 +
165 + ewarn
166 + ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
167 + ewarn "[server], [workstation], and [virtualization]."
168 + ewarn
169 + ewarn "Those who intend to use one of these predefined grsecurity levels"
170 + ewarn "should read the help associated with the level. Users importing a"
171 + ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
172 + ewarn "should review their selected grsecurity/PaX options carefully."
173 + ewarn
174 + ewarn "Users of grsecurity's RBAC system must ensure they are using"
175 + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
176 + ewarn "It is strongly recommended that the following command is issued"
177 + ewarn "prior to booting a ${PF} kernel for the first time:"
178 + ewarn
179 + ewarn "emerge -na =${GRADM_COMPAT}"
180 + ewarn
181 +}