1 |
commit: adc8a3894c2a6331ca7003012a143107a5978cfa |
2 |
Author: Anthony G. Basile <blueness <AT> gentoo <DOT> org> |
3 |
AuthorDate: Tue May 24 01:16:58 2011 +0000 |
4 |
Commit: Anthony G. Basile <blueness <AT> gentoo <DOT> org> |
5 |
CommitDate: Tue May 24 01:16:58 2011 +0000 |
6 |
URL: http://git.overlays.gentoo.org/gitweb/?p=dev/blueness.git;a=commit;h=adc8a389 |
7 |
|
8 |
sys-kernel/hardened-sources: testing patchset 20110522 |
9 |
|
10 |
(Portage version: 2.1.9.42/git/Linux x86_64, signed Manifest commit with key 0xD0455535) |
11 |
|
12 |
--- |
13 |
sys-kernel/hardened-sources/ChangeLog | 7 +++ |
14 |
sys-kernel/hardened-sources/Manifest | 22 +++++++-- |
15 |
.../hardened-sources-2.6.32-r49.ebuild | 48 ++++++++++++++++++++ |
16 |
.../hardened-sources-2.6.38-r6.ebuild | 48 ++++++++++++++++++++ |
17 |
4 files changed, 121 insertions(+), 4 deletions(-) |
18 |
|
19 |
diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog |
20 |
index 3edb479..4f3caca 100644 |
21 |
--- a/sys-kernel/hardened-sources/ChangeLog |
22 |
+++ b/sys-kernel/hardened-sources/ChangeLog |
23 |
@@ -1,5 +1,12 @@ |
24 |
|
25 |
|
26 |
+*hardened-sources-2.6.38-r6 (24 May 2011) |
27 |
+*hardened-sources-2.6.32-r49 (24 May 2011) |
28 |
+ |
29 |
+ 24 May 2011; Anthony G. Basile <blueness@g.o> |
30 |
+ +hardened-sources-2.6.32-r49.ebuild, +hardened-sources-2.6.38-r6.ebuild: |
31 |
+ testing patchset 20110522 |
32 |
+ |
33 |
23 May 2011; Anthony G. Basile <blueness@g.o> |
34 |
-hardened-sources-2.6.32-r48.ebuild, -hardened-sources-2.6.38-r5.ebuild: |
35 |
moved to tree |
36 |
|
37 |
diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest |
38 |
index e9215a5..64950ae 100644 |
39 |
--- a/sys-kernel/hardened-sources/Manifest |
40 |
+++ b/sys-kernel/hardened-sources/Manifest |
41 |
@@ -1,12 +1,26 @@ |
42 |
-----BEGIN PGP SIGNED MESSAGE----- |
43 |
Hash: SHA256 |
44 |
|
45 |
-MISC ChangeLog 14265 RMD160 060eb82feeb508201ae3614863697b57a753076e SHA1 1443b40c9474f49544f47a259c3c34d88cb69aa3 SHA256 96be997fbe48f03d1001db5d6b63227b412a792f09f9096a993afd76180702d1 |
46 |
+DIST deblob-2.6.32 84094 RMD160 394f46ec5b869638a7bc2e87beb118167c9bd6cb SHA1 1a2a1efb72126609d9e3b9be99ae5be2751efd06 SHA256 de625f0bd221c9c38d4453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d |
47 |
+DIST deblob-2.6.38 99773 RMD160 f52e78df8e819319d0aabf24fe471e2ef9e02140 SHA1 0d176aa88f0525123d293e26617f2d287fabdddc SHA256 ddabcd846baa19b7e82adec3ca8ff17f2f7425c292516889098559f639e763eb |
48 |
+DIST deblob-check-2.6.32 247608 RMD160 840bf8a229ea79810519eee6241edb85b78a6562 SHA1 d45a24eb16e5ac956c0fcddbc1ac4d67e326c7b8 SHA256 da1aecdf3ab7f1207b90642d303e52262ccc2ed9e49739b729512b88950d17f3 |
49 |
+DIST deblob-check-2.6.38 345831 RMD160 1caea73e54a21cb1100a4ee8226201ddd8a89985 SHA1 44de3ac14d9a3e94b97553051aff0ebfada45274 SHA256 6f681dbd1c1c44cba2c9902dd77a5a51b2d1cc81567cffc60ba92bd0bdd4ff2f |
50 |
+DIST genpatches-2.6.32-37.base.tar.bz2 921165 RMD160 e764a6d7665d206689117493218224cbf5a3b0de SHA1 ffe8c89830798504f26a54b777ef1147824aa39f SHA256 04d1341acc1abf49300b23b10fc48962303509d8c5af8a5cb2c8397606444a06 |
51 |
+DIST genpatches-2.6.32-37.extras.tar.bz2 24934 RMD160 e3e1d60fb45a3e3c818ddda36b9180d4fc46679e SHA1 d16a34dfa35d163ea4042058b3865c389f3802e9 SHA256 50b70c76461aa52f7f2ad88175e7f08eb555f7f1dfd274759ec0c2a9748bde5e |
52 |
+DIST genpatches-2.6.38-7.base.tar.bz2 155312 RMD160 54caab0025f9669e4dc1e0e0cae549bf1306feb1 SHA1 ff3dcbed69695ce83ac3b692725628a0816c3749 SHA256 a01d37219dc2b2311a0994a4d0fd3a9148bfeb31ea78c64cc78cbb900de432da |
53 |
+DIST genpatches-2.6.38-7.extras.tar.bz2 15675 RMD160 3d40e9fcad874591de0cc7497a52795ea04a9b9b SHA1 ca1b5f319e87960fa97ea6302dd0146901cacd9e SHA256 6d4c134be67714382efc8aec208c5a73d6c0f84d96acc76640b9ed3be93877a4 |
54 |
+DIST hardened-patches-2.6.32-52.extras.tar.bz2 439152 RMD160 9708cc20d57aaf87208a09d997e7075b8f6b7728 SHA1 a47d05278508fe66b0b4503588a00da7242c45e2 SHA256 5f638986ab8118d8c331115fcd3eeba7b17e6e37e9c4895805e58747e8206a77 |
55 |
+DIST hardened-patches-2.6.38-7.extras.tar.bz2 442689 RMD160 bd661205cd9f5976a702d55ff0aa0399c1cd8fcc SHA1 f1844f17fcb61a4fd569b45cddaf8a9869f932ee SHA256 a42f0c5d38621f92302a5250e59881b86858173f775a1d0a2db35bcd07066d4b |
56 |
+DIST linux-2.6.32.tar.bz2 64424138 RMD160 b93742cbaf8174f2200d2dbef0d47a26c618039c SHA1 410b4fc818023bfef60064e973ff0ab46d3bfb19 SHA256 5099786d80b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e |
57 |
+DIST linux-2.6.38.tar.bz2 74739098 RMD160 d1179be93f1309303b9aa6008a25b6247726e764 SHA1 02aade5ad3dedd70739c9b4a05de40edbe432d25 SHA256 72f0cfaefb8dc86b219d5a742dd0375332627641ecbdf5badd3158e2127b9304 |
58 |
+EBUILD hardened-sources-2.6.32-r49.ebuild 1758 RMD160 ed3525186c8b90d21397487cb701ef1c2971aab1 SHA1 c303bb4739e262f8fc75ea010fafbc9338621033 SHA256 6ee279b1cd1e7e64c3703ddaf41fea53d0bb322d0c33e6d87ae49e6b56de44be |
59 |
+EBUILD hardened-sources-2.6.38-r6.ebuild 1755 RMD160 059db20b7234ba41e77e8ea4c6d0d4fca5bc164e SHA1 6256e4ee7e68fdb654bcd346414ce3a534f4b306 SHA256 96903ef9e7ceb6751ec7d7651208fe8eb3dae7a6896984b5815d136c66d9600e |
60 |
+MISC ChangeLog 14510 RMD160 13d852f18064ccd90e8fc64a48b681522f419367 SHA1 4bffccd4b4f9f6fd1306b837af899f631cc9789e SHA256 9f0609392f6145708d0e8af904c4273f6d7c3162ab1d8b2c73228762a27ef44b |
61 |
MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SHA1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8fcfd351f2f39ed63da68af3a5751fc2058d0d03813 |
62 |
-----BEGIN PGP SIGNATURE----- |
63 |
Version: GnuPG v2.0.17 (GNU/Linux) |
64 |
|
65 |
-iEYEAREIAAYFAk3aaksACgkQl5yvQNBFVTWXuwCgjIPvfiAcAQdrQJYmK+oVIxRp |
66 |
-VmEAoIeLXws44oQ5DFDbfEhRkxedGkz1 |
67 |
-=MrRq |
68 |
+iEYEAREIAAYFAk3bBwoACgkQl5yvQNBFVTWzKACePfRtMdHwioQsiISF9uhLGnog |
69 |
+THQAmgN6++lTDa8M/X3rlTfcdYkaOdO7 |
70 |
+=mIkm |
71 |
-----END PGP SIGNATURE----- |
72 |
|
73 |
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r49.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r49.ebuild |
74 |
new file mode 100644 |
75 |
index 0000000..0211dd5 |
76 |
--- /dev/null |
77 |
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r49.ebuild |
78 |
@@ -0,0 +1,48 @@ |
79 |
+# Copyright 1999-2011 Gentoo Foundation |
80 |
+# Distributed under the terms of the GNU General Public License v2 |
81 |
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r48.ebuild,v 1.1 2011/05/20 20:30:15 blueness Exp $ |
82 |
+ |
83 |
+EAPI="2" |
84 |
+ |
85 |
+ETYPE="sources" |
86 |
+K_WANT_GENPATCHES="base extras" |
87 |
+K_GENPATCHES_VER="37" |
88 |
+ |
89 |
+inherit kernel-2 |
90 |
+detect_version |
91 |
+ |
92 |
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-52" |
93 |
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2" |
94 |
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}" |
95 |
+ |
96 |
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2" |
97 |
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch" |
98 |
+ |
99 |
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})" |
100 |
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/" |
101 |
+IUSE="" |
102 |
+ |
103 |
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86" |
104 |
+ |
105 |
+pkg_postinst() { |
106 |
+ kernel-2_pkg_postinst |
107 |
+ |
108 |
+ local GRADM_COMPAT="sys-apps/gradm-2.2.2*" |
109 |
+ |
110 |
+ ewarn |
111 |
+ ewarn "Hardened Gentoo provides three different predefined grsecurity level:" |
112 |
+ ewarn "[server], [workstation], and [virtualization]." |
113 |
+ ewarn |
114 |
+ ewarn "Those who intend to use one of these predefined grsecurity levels" |
115 |
+ ewarn "should read the help associated with the level. Users importing a" |
116 |
+ ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32," |
117 |
+ ewarn "should review their selected grsecurity/PaX options carefully." |
118 |
+ ewarn |
119 |
+ ewarn "Users of grsecurity's RBAC system must ensure they are using" |
120 |
+ ewarn "${GRADM_COMPAT}, which is compatible with ${PF}." |
121 |
+ ewarn "It is strongly recommended that the following command is issued" |
122 |
+ ewarn "prior to booting a ${PF} kernel for the first time:" |
123 |
+ ewarn |
124 |
+ ewarn "emerge -na =${GRADM_COMPAT}" |
125 |
+ ewarn |
126 |
+} |
127 |
|
128 |
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.38-r6.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.38-r6.ebuild |
129 |
new file mode 100644 |
130 |
index 0000000..a0551f8 |
131 |
--- /dev/null |
132 |
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.38-r6.ebuild |
133 |
@@ -0,0 +1,48 @@ |
134 |
+# Copyright 1999-2011 Gentoo Foundation |
135 |
+# Distributed under the terms of the GNU General Public License v2 |
136 |
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.38-r5.ebuild,v 1.1 2011/05/20 20:33:48 blueness Exp $ |
137 |
+ |
138 |
+EAPI="2" |
139 |
+ |
140 |
+ETYPE="sources" |
141 |
+K_WANT_GENPATCHES="base extras" |
142 |
+K_GENPATCHES_VER="7" |
143 |
+ |
144 |
+inherit kernel-2 |
145 |
+detect_version |
146 |
+ |
147 |
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-7" |
148 |
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2" |
149 |
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}" |
150 |
+ |
151 |
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2" |
152 |
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch" |
153 |
+ |
154 |
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})" |
155 |
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/" |
156 |
+IUSE="" |
157 |
+ |
158 |
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86" |
159 |
+ |
160 |
+pkg_postinst() { |
161 |
+ kernel-2_pkg_postinst |
162 |
+ |
163 |
+ local GRADM_COMPAT="sys-apps/gradm-2.2.2*" |
164 |
+ |
165 |
+ ewarn |
166 |
+ ewarn "Hardened Gentoo provides three different predefined grsecurity level:" |
167 |
+ ewarn "[server], [workstation], and [virtualization]." |
168 |
+ ewarn |
169 |
+ ewarn "Those who intend to use one of these predefined grsecurity levels" |
170 |
+ ewarn "should read the help associated with the level. Users importing a" |
171 |
+ ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32," |
172 |
+ ewarn "should review their selected grsecurity/PaX options carefully." |
173 |
+ ewarn |
174 |
+ ewarn "Users of grsecurity's RBAC system must ensure they are using" |
175 |
+ ewarn "${GRADM_COMPAT}, which is compatible with ${PF}." |
176 |
+ ewarn "It is strongly recommended that the following command is issued" |
177 |
+ ewarn "prior to booting a ${PF} kernel for the first time:" |
178 |
+ ewarn |
179 |
+ ewarn "emerge -na =${GRADM_COMPAT}" |
180 |
+ ewarn |
181 |
+} |