Gentoo Archives: gentoo-commits

From: "Anthony G. Basile" <blueness@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] dev/blueness:master commit in: sys-kernel/hardened-sources/
Date: Sun, 13 Feb 2011 17:07:43
Message-Id: e45907c6302b348e3a51134016728a8e71cc8b6e.blueness@gentoo
1 commit: e45907c6302b348e3a51134016728a8e71cc8b6e
2 Author: Anthony G. Basile <basile <AT> opensource <DOT> dyc <DOT> edu>
3 AuthorDate: Sun Feb 13 17:07:25 2011 +0000
4 Commit: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
5 CommitDate: Sun Feb 13 17:07:25 2011 +0000
6 URL: http://git.overlays.gentoo.org/gitweb/?p=dev/blueness.git;a=commit;h=e45907c6
7
8 sys-kernel/hardened-sources: testing patchset 20110212
9
10 (Portage version: 2.1.9.25/git/Linux x86_64, unsigned Manifest commit)
11
12 ---
13 sys-kernel/hardened-sources/ChangeLog | 4 ++
14 sys-kernel/hardened-sources/Manifest | 14 ++++++-
15 .../hardened-sources-2.6.32-r37.ebuild | 46 ++++++++++++++++++++
16 .../hardened-sources-2.6.37-r2.ebuild | 46 ++++++++++++++++++++
17 4 files changed, 109 insertions(+), 1 deletions(-)
18
19 diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
20 index 3b82e93..51ad1b4 100644
21 --- a/sys-kernel/hardened-sources/ChangeLog
22 +++ b/sys-kernel/hardened-sources/ChangeLog
23 @@ -1,5 +1,9 @@
24
25
26 + 13 Feb 2011; Anthony G. Basile <blueness@g.o>
27 + +hardened-sources-2.6.32-r37.ebuild, +hardened-sources-2.6.37-r2.ebuild:
28 + testing patchset 20110212
29 +
30 01 Feb 2011; Anthony G. Basile <blueness@g.o>
31 -hardened-sources-2.6.32-r36.ebuild, -hardened-sources-2.6.37-r1.ebuild:
32 moved to the tree
33
34 diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
35 index 6048684..66bc581 100644
36 --- a/sys-kernel/hardened-sources/Manifest
37 +++ b/sys-kernel/hardened-sources/Manifest
38 @@ -1,2 +1,14 @@
39 -MISC ChangeLog 10501 RMD160 445c3c249fa50b73a5f24646bc5861f6a84f7197 SHA1 bf7c1c5cc7506b6c467619754038cbb1305b2bd3 SHA256 f8b6c3f96b39462394fc2106dce832412486eb80eccd539ccfe2cf6c92866e92
40 +DIST deblob-2.6.32 84094 RMD160 394f46ec5b869638a7bc2e87beb118167c9bd6cb SHA1 1a2a1efb72126609d9e3b9be99ae5be2751efd06 SHA256 de625f0bd221c9c38d4453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d
41 +DIST deblob-check-2.6.32 247608 RMD160 840bf8a229ea79810519eee6241edb85b78a6562 SHA1 d45a24eb16e5ac956c0fcddbc1ac4d67e326c7b8 SHA256 da1aecdf3ab7f1207b90642d303e52262ccc2ed9e49739b729512b88950d17f3
42 +DIST genpatches-2.6.32-30.base.tar.bz2 758516 RMD160 273fa9bc213307d4e870c54d6c408b31bea2b89e SHA1 801e7ffa7fbe63b6638640e4de9827184a5d1953 SHA256 89123461336add92d391526758ddebd98cf5296e78ce2a8aaef35a2aa3930aac
43 +DIST genpatches-2.6.32-30.extras.tar.bz2 24966 RMD160 36249adefc5e3637669bbdd3d72a568be051cba5 SHA1 b341f4f3a5179957a63fdce0586b6123805d770a SHA256 8118fbbf4a2d3f2f1f931970ee2fd6b1c78130850362e9750878b4ea8d25b835
44 +DIST genpatches-2.6.37-1.base.tar.bz2 770 RMD160 64dcca357f523eeac74500e78310d56a8a07be30 SHA1 895e5c7ce4e8c9e01857457d8b3b9f030a99e173 SHA256 8bc3cd19243410dc4862e8903eb6738eebf01668de861f6fa2d2f6c654ec9a7d
45 +DIST genpatches-2.6.37-1.extras.tar.bz2 15531 RMD160 7d13a870de0db777fa776d1eb1187f0a5f3de5c2 SHA1 48fc0d22cc0579c179c3265a1da605e3854b6fec SHA256 a986ffece5f069ad7346797691030e989e73c34101a998224fc57f86b2fc4bc0
46 +DIST hardened-patches-2.6.32-40.extras.tar.bz2 374253 RMD160 077ecf0c4bd6055252b56dcc82d47ecd86cd41ce SHA1 2d8ce017a28fcb9bfc795282532f03b6c417468a SHA256 d9f30c8015d1a714f94124f27dd92a2768872f7d6de8b769d08f8ae0630f8eb6
47 +DIST hardened-patches-2.6.37-3.extras.tar.bz2 361650 RMD160 1ad56f969149d5d9305021672f81fc11d5d077d3 SHA1 c4c9ce141d7a557e677b1839af9bb6d410fb4463 SHA256 c2bd346ab5eb8f3f55dbb8b616592e38e49212a72d427c69f9e507e594218979
48 +DIST linux-2.6.32.tar.bz2 64424138 RMD160 b93742cbaf8174f2200d2dbef0d47a26c618039c SHA1 410b4fc818023bfef60064e973ff0ab46d3bfb19 SHA256 5099786d80b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e
49 +DIST linux-2.6.37.tar.bz2 73577826 RMD160 fced3801f3c94aa545c90e10981de616376a3b41 SHA1 eba83c89e71a86060ef6ff76aefff660aef819e2 SHA256 edbf091805414739cf57a3bbfeba9e87f5e74f97e38f04d12060e9e0c71e383a
50 +EBUILD hardened-sources-2.6.32-r37.ebuild 1763 RMD160 834357c476bf592d69a8951c0bbb9d2218210d7e SHA1 07e4434980fa304a2e30490f0ad2c826348a1096 SHA256 c75ca26b254c0a4ca98d2e1d7e84a1ece3b4901cff2beba9f3412dd63a4a2a0e
51 +EBUILD hardened-sources-2.6.37-r2.ebuild 1760 RMD160 16de5dd0ba87cb71d36c4a51d23e8c27d1b7d183 SHA1 6b9438fbe4e7beb0c85f6cf79f66c7672f81e15a SHA256 55d8e3af04b7678ef6e231dce5aa3850b45b264627500ac9803ff8eb234aebe0
52 +MISC ChangeLog 10660 RMD160 17e99b73bdf5de1beaf081db8005f1ef5e0a7d4c SHA1 55b697dda2503b7289493238d2c0e527a84e8e0c SHA256 1bc3e3d995f06594211234145832f83ef78dbea490036cd17200bec187911af2
53 MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SHA1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8fcfd351f2f39ed63da68af3a5751fc2058d0d03813
54
55 diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r37.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r37.ebuild
56 new file mode 100644
57 index 0000000..bd817d8
58 --- /dev/null
59 +++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r37.ebuild
60 @@ -0,0 +1,46 @@
61 +# Copyright 1999-2011 Gentoo Foundation
62 +# Distributed under the terms of the GNU General Public License v2
63 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r36.ebuild,v 1.1 2011/01/29 23:35:59 blueness Exp $
64 +
65 +ETYPE="sources"
66 +K_WANT_GENPATCHES="base extras"
67 +K_GENPATCHES_VER="30"
68 +
69 +inherit kernel-2
70 +detect_version
71 +
72 +HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-40"
73 +HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
74 +SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
75 +
76 +UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
77 +UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
78 +
79 +DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
80 +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
81 +IUSE=""
82 +
83 +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
84 +
85 +pkg_postinst() {
86 + kernel-2_pkg_postinst
87 +
88 + local GRADM_COMPAT="sys-apps/gradm-2.2.1*"
89 +
90 + ewarn
91 + ewarn "Hardened Gentoo provides four different predefined grsecurity level:"
92 + ewarn "[server], [server no rbac] [workstation] [workstation no rbac]"
93 + ewarn
94 + ewarn "Those who intend to use one of these predefined grsecurity levels"
95 + ewarn "should read the help associated with the level. Users importing a"
96 + ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
97 + ewarn "should review their selected grsecurity/PaX options carefully."
98 + ewarn
99 + ewarn "Users of grsecurity's RBAC system must ensure they are using"
100 + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
101 + ewarn "It is strongly recommended that the following command is issued"
102 + ewarn "prior to booting a ${PF} kernel for the first time:"
103 + ewarn
104 + ewarn "emerge -na =${GRADM_COMPAT}"
105 + ewarn
106 +}
107
108 diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.37-r2.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.37-r2.ebuild
109 new file mode 100644
110 index 0000000..a0ade8c
111 --- /dev/null
112 +++ b/sys-kernel/hardened-sources/hardened-sources-2.6.37-r2.ebuild
113 @@ -0,0 +1,46 @@
114 +# Copyright 1999-2011 Gentoo Foundation
115 +# Distributed under the terms of the GNU General Public License v2
116 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.37-r1.ebuild,v 1.1 2011/01/29 23:38:37 blueness Exp $
117 +
118 +ETYPE="sources"
119 +K_WANT_GENPATCHES="base extras"
120 +K_GENPATCHES_VER="1"
121 +
122 +inherit kernel-2
123 +detect_version
124 +
125 +HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-3"
126 +HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
127 +SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
128 +
129 +UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
130 +UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
131 +
132 +DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
133 +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
134 +IUSE=""
135 +
136 +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
137 +
138 +pkg_postinst() {
139 + kernel-2_pkg_postinst
140 +
141 + local GRADM_COMPAT="sys-apps/gradm-2.2.1*"
142 +
143 + ewarn
144 + ewarn "Hardened Gentoo provides four different predefined grsecurity level:"
145 + ewarn "[server], [server no rbac] [workstation] [workstation no rbac]"
146 + ewarn
147 + ewarn "Those who intend to use one of these predefined grsecurity levels"
148 + ewarn "should read the help associated with the level. Users importing a"
149 + ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
150 + ewarn "should review their selected grsecurity/PaX options carefully."
151 + ewarn
152 + ewarn "Users of grsecurity's RBAC system must ensure they are using"
153 + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
154 + ewarn "It is strongly recommended that the following command is issued"
155 + ewarn "prior to booting a ${PF} kernel for the first time:"
156 + ewarn
157 + ewarn "emerge -na =${GRADM_COMPAT}"
158 + ewarn
159 +}