1 |
commit: e45907c6302b348e3a51134016728a8e71cc8b6e |
2 |
Author: Anthony G. Basile <basile <AT> opensource <DOT> dyc <DOT> edu> |
3 |
AuthorDate: Sun Feb 13 17:07:25 2011 +0000 |
4 |
Commit: Anthony G. Basile <blueness <AT> gentoo <DOT> org> |
5 |
CommitDate: Sun Feb 13 17:07:25 2011 +0000 |
6 |
URL: http://git.overlays.gentoo.org/gitweb/?p=dev/blueness.git;a=commit;h=e45907c6 |
7 |
|
8 |
sys-kernel/hardened-sources: testing patchset 20110212 |
9 |
|
10 |
(Portage version: 2.1.9.25/git/Linux x86_64, unsigned Manifest commit) |
11 |
|
12 |
--- |
13 |
sys-kernel/hardened-sources/ChangeLog | 4 ++ |
14 |
sys-kernel/hardened-sources/Manifest | 14 ++++++- |
15 |
.../hardened-sources-2.6.32-r37.ebuild | 46 ++++++++++++++++++++ |
16 |
.../hardened-sources-2.6.37-r2.ebuild | 46 ++++++++++++++++++++ |
17 |
4 files changed, 109 insertions(+), 1 deletions(-) |
18 |
|
19 |
diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog |
20 |
index 3b82e93..51ad1b4 100644 |
21 |
--- a/sys-kernel/hardened-sources/ChangeLog |
22 |
+++ b/sys-kernel/hardened-sources/ChangeLog |
23 |
@@ -1,5 +1,9 @@ |
24 |
|
25 |
|
26 |
+ 13 Feb 2011; Anthony G. Basile <blueness@g.o> |
27 |
+ +hardened-sources-2.6.32-r37.ebuild, +hardened-sources-2.6.37-r2.ebuild: |
28 |
+ testing patchset 20110212 |
29 |
+ |
30 |
01 Feb 2011; Anthony G. Basile <blueness@g.o> |
31 |
-hardened-sources-2.6.32-r36.ebuild, -hardened-sources-2.6.37-r1.ebuild: |
32 |
moved to the tree |
33 |
|
34 |
diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest |
35 |
index 6048684..66bc581 100644 |
36 |
--- a/sys-kernel/hardened-sources/Manifest |
37 |
+++ b/sys-kernel/hardened-sources/Manifest |
38 |
@@ -1,2 +1,14 @@ |
39 |
-MISC ChangeLog 10501 RMD160 445c3c249fa50b73a5f24646bc5861f6a84f7197 SHA1 bf7c1c5cc7506b6c467619754038cbb1305b2bd3 SHA256 f8b6c3f96b39462394fc2106dce832412486eb80eccd539ccfe2cf6c92866e92 |
40 |
+DIST deblob-2.6.32 84094 RMD160 394f46ec5b869638a7bc2e87beb118167c9bd6cb SHA1 1a2a1efb72126609d9e3b9be99ae5be2751efd06 SHA256 de625f0bd221c9c38d4453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d |
41 |
+DIST deblob-check-2.6.32 247608 RMD160 840bf8a229ea79810519eee6241edb85b78a6562 SHA1 d45a24eb16e5ac956c0fcddbc1ac4d67e326c7b8 SHA256 da1aecdf3ab7f1207b90642d303e52262ccc2ed9e49739b729512b88950d17f3 |
42 |
+DIST genpatches-2.6.32-30.base.tar.bz2 758516 RMD160 273fa9bc213307d4e870c54d6c408b31bea2b89e SHA1 801e7ffa7fbe63b6638640e4de9827184a5d1953 SHA256 89123461336add92d391526758ddebd98cf5296e78ce2a8aaef35a2aa3930aac |
43 |
+DIST genpatches-2.6.32-30.extras.tar.bz2 24966 RMD160 36249adefc5e3637669bbdd3d72a568be051cba5 SHA1 b341f4f3a5179957a63fdce0586b6123805d770a SHA256 8118fbbf4a2d3f2f1f931970ee2fd6b1c78130850362e9750878b4ea8d25b835 |
44 |
+DIST genpatches-2.6.37-1.base.tar.bz2 770 RMD160 64dcca357f523eeac74500e78310d56a8a07be30 SHA1 895e5c7ce4e8c9e01857457d8b3b9f030a99e173 SHA256 8bc3cd19243410dc4862e8903eb6738eebf01668de861f6fa2d2f6c654ec9a7d |
45 |
+DIST genpatches-2.6.37-1.extras.tar.bz2 15531 RMD160 7d13a870de0db777fa776d1eb1187f0a5f3de5c2 SHA1 48fc0d22cc0579c179c3265a1da605e3854b6fec SHA256 a986ffece5f069ad7346797691030e989e73c34101a998224fc57f86b2fc4bc0 |
46 |
+DIST hardened-patches-2.6.32-40.extras.tar.bz2 374253 RMD160 077ecf0c4bd6055252b56dcc82d47ecd86cd41ce SHA1 2d8ce017a28fcb9bfc795282532f03b6c417468a SHA256 d9f30c8015d1a714f94124f27dd92a2768872f7d6de8b769d08f8ae0630f8eb6 |
47 |
+DIST hardened-patches-2.6.37-3.extras.tar.bz2 361650 RMD160 1ad56f969149d5d9305021672f81fc11d5d077d3 SHA1 c4c9ce141d7a557e677b1839af9bb6d410fb4463 SHA256 c2bd346ab5eb8f3f55dbb8b616592e38e49212a72d427c69f9e507e594218979 |
48 |
+DIST linux-2.6.32.tar.bz2 64424138 RMD160 b93742cbaf8174f2200d2dbef0d47a26c618039c SHA1 410b4fc818023bfef60064e973ff0ab46d3bfb19 SHA256 5099786d80b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e |
49 |
+DIST linux-2.6.37.tar.bz2 73577826 RMD160 fced3801f3c94aa545c90e10981de616376a3b41 SHA1 eba83c89e71a86060ef6ff76aefff660aef819e2 SHA256 edbf091805414739cf57a3bbfeba9e87f5e74f97e38f04d12060e9e0c71e383a |
50 |
+EBUILD hardened-sources-2.6.32-r37.ebuild 1763 RMD160 834357c476bf592d69a8951c0bbb9d2218210d7e SHA1 07e4434980fa304a2e30490f0ad2c826348a1096 SHA256 c75ca26b254c0a4ca98d2e1d7e84a1ece3b4901cff2beba9f3412dd63a4a2a0e |
51 |
+EBUILD hardened-sources-2.6.37-r2.ebuild 1760 RMD160 16de5dd0ba87cb71d36c4a51d23e8c27d1b7d183 SHA1 6b9438fbe4e7beb0c85f6cf79f66c7672f81e15a SHA256 55d8e3af04b7678ef6e231dce5aa3850b45b264627500ac9803ff8eb234aebe0 |
52 |
+MISC ChangeLog 10660 RMD160 17e99b73bdf5de1beaf081db8005f1ef5e0a7d4c SHA1 55b697dda2503b7289493238d2c0e527a84e8e0c SHA256 1bc3e3d995f06594211234145832f83ef78dbea490036cd17200bec187911af2 |
53 |
MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SHA1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8fcfd351f2f39ed63da68af3a5751fc2058d0d03813 |
54 |
|
55 |
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r37.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r37.ebuild |
56 |
new file mode 100644 |
57 |
index 0000000..bd817d8 |
58 |
--- /dev/null |
59 |
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r37.ebuild |
60 |
@@ -0,0 +1,46 @@ |
61 |
+# Copyright 1999-2011 Gentoo Foundation |
62 |
+# Distributed under the terms of the GNU General Public License v2 |
63 |
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r36.ebuild,v 1.1 2011/01/29 23:35:59 blueness Exp $ |
64 |
+ |
65 |
+ETYPE="sources" |
66 |
+K_WANT_GENPATCHES="base extras" |
67 |
+K_GENPATCHES_VER="30" |
68 |
+ |
69 |
+inherit kernel-2 |
70 |
+detect_version |
71 |
+ |
72 |
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-40" |
73 |
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2" |
74 |
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}" |
75 |
+ |
76 |
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2" |
77 |
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch" |
78 |
+ |
79 |
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})" |
80 |
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/" |
81 |
+IUSE="" |
82 |
+ |
83 |
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86" |
84 |
+ |
85 |
+pkg_postinst() { |
86 |
+ kernel-2_pkg_postinst |
87 |
+ |
88 |
+ local GRADM_COMPAT="sys-apps/gradm-2.2.1*" |
89 |
+ |
90 |
+ ewarn |
91 |
+ ewarn "Hardened Gentoo provides four different predefined grsecurity level:" |
92 |
+ ewarn "[server], [server no rbac] [workstation] [workstation no rbac]" |
93 |
+ ewarn |
94 |
+ ewarn "Those who intend to use one of these predefined grsecurity levels" |
95 |
+ ewarn "should read the help associated with the level. Users importing a" |
96 |
+ ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32," |
97 |
+ ewarn "should review their selected grsecurity/PaX options carefully." |
98 |
+ ewarn |
99 |
+ ewarn "Users of grsecurity's RBAC system must ensure they are using" |
100 |
+ ewarn "${GRADM_COMPAT}, which is compatible with ${PF}." |
101 |
+ ewarn "It is strongly recommended that the following command is issued" |
102 |
+ ewarn "prior to booting a ${PF} kernel for the first time:" |
103 |
+ ewarn |
104 |
+ ewarn "emerge -na =${GRADM_COMPAT}" |
105 |
+ ewarn |
106 |
+} |
107 |
|
108 |
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.37-r2.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.37-r2.ebuild |
109 |
new file mode 100644 |
110 |
index 0000000..a0ade8c |
111 |
--- /dev/null |
112 |
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.37-r2.ebuild |
113 |
@@ -0,0 +1,46 @@ |
114 |
+# Copyright 1999-2011 Gentoo Foundation |
115 |
+# Distributed under the terms of the GNU General Public License v2 |
116 |
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.37-r1.ebuild,v 1.1 2011/01/29 23:38:37 blueness Exp $ |
117 |
+ |
118 |
+ETYPE="sources" |
119 |
+K_WANT_GENPATCHES="base extras" |
120 |
+K_GENPATCHES_VER="1" |
121 |
+ |
122 |
+inherit kernel-2 |
123 |
+detect_version |
124 |
+ |
125 |
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-3" |
126 |
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2" |
127 |
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}" |
128 |
+ |
129 |
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2" |
130 |
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch" |
131 |
+ |
132 |
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})" |
133 |
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/" |
134 |
+IUSE="" |
135 |
+ |
136 |
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86" |
137 |
+ |
138 |
+pkg_postinst() { |
139 |
+ kernel-2_pkg_postinst |
140 |
+ |
141 |
+ local GRADM_COMPAT="sys-apps/gradm-2.2.1*" |
142 |
+ |
143 |
+ ewarn |
144 |
+ ewarn "Hardened Gentoo provides four different predefined grsecurity level:" |
145 |
+ ewarn "[server], [server no rbac] [workstation] [workstation no rbac]" |
146 |
+ ewarn |
147 |
+ ewarn "Those who intend to use one of these predefined grsecurity levels" |
148 |
+ ewarn "should read the help associated with the level. Users importing a" |
149 |
+ ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32," |
150 |
+ ewarn "should review their selected grsecurity/PaX options carefully." |
151 |
+ ewarn |
152 |
+ ewarn "Users of grsecurity's RBAC system must ensure they are using" |
153 |
+ ewarn "${GRADM_COMPAT}, which is compatible with ${PF}." |
154 |
+ ewarn "It is strongly recommended that the following command is issued" |
155 |
+ ewarn "prior to booting a ${PF} kernel for the first time:" |
156 |
+ ewarn |
157 |
+ ewarn "emerge -na =${GRADM_COMPAT}" |
158 |
+ ewarn |
159 |
+} |