Gentoo Archives: gentoo-commits

From: "Anthony G. Basile (blueness)" <blueness@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] gentoo-x86 commit in sys-kernel/hardened-sources: ChangeLog hardened-sources-2.6.37-r3.ebuild
Date: Mon, 21 Feb 2011 18:06:10
Message-Id: 20110221180559.AAE6020054@flycatcher.gentoo.org
1 blueness 11/02/21 18:05:59
2
3 Modified: ChangeLog
4 Added: hardened-sources-2.6.37-r3.ebuild
5 Log:
6 Same codebase as hardened-sources-2.6.37-r2, updated predefined GRSEC/PaX
7
8 (Portage version: 2.1.9.25/cvs/Linux x86_64)
9
10 Revision Changes Path
11 1.391 sys-kernel/hardened-sources/ChangeLog
12
13 file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-kernel/hardened-sources/ChangeLog?rev=1.391&view=markup
14 plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-kernel/hardened-sources/ChangeLog?rev=1.391&content-type=text/plain
15 diff : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-kernel/hardened-sources/ChangeLog?r1=1.390&r2=1.391
16
17 Index: ChangeLog
18 ===================================================================
19 RCS file: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v
20 retrieving revision 1.390
21 retrieving revision 1.391
22 diff -u -r1.390 -r1.391
23 --- ChangeLog 21 Feb 2011 18:04:04 -0000 1.390
24 +++ ChangeLog 21 Feb 2011 18:05:59 -0000 1.391
25 @@ -1,6 +1,12 @@
26 # ChangeLog for sys-kernel/hardened-sources
27 # Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
28 -# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.390 2011/02/21 18:04:04 blueness Exp $
29 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.391 2011/02/21 18:05:59 blueness Exp $
30 +
31 +*hardened-sources-2.6.37-r3 (21 Feb 2011)
32 +
33 + 21 Feb 2011; Anthony G. Basile <blueness@g.o>
34 + +hardened-sources-2.6.37-r3.ebuild:
35 + Same codebase as hardened-sources-2.6.37-r2, updated predefined GRSEC/PaX
36
37 *hardened-sources-2.6.32-r38 (21 Feb 2011)
38
39
40
41
42 1.1 sys-kernel/hardened-sources/hardened-sources-2.6.37-r3.ebuild
43
44 file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.37-r3.ebuild?rev=1.1&view=markup
45 plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.37-r3.ebuild?rev=1.1&content-type=text/plain
46
47 Index: hardened-sources-2.6.37-r3.ebuild
48 ===================================================================
49 # Copyright 1999-2011 Gentoo Foundation
50 # Distributed under the terms of the GNU General Public License v2
51 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.37-r3.ebuild,v 1.1 2011/02/21 18:05:59 blueness Exp $
52
53 ETYPE="sources"
54 K_WANT_GENPATCHES="base extras"
55 K_GENPATCHES_VER="1"
56
57 inherit kernel-2
58 detect_version
59
60 HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-4"
61 HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
62 SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
63
64 UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
65 UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
66
67 DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
68 HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
69 IUSE=""
70
71 KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
72
73 pkg_postinst() {
74 kernel-2_pkg_postinst
75
76 local GRADM_COMPAT="sys-apps/gradm-2.2.1*"
77
78 ewarn
79 ewarn "Hardened Gentoo provides four different predefined grsecurity level:"
80 ewarn "[server], [server no rbac] [workstation] [workstation no rbac]"
81 ewarn
82 ewarn "Those who intend to use one of these predefined grsecurity levels"
83 ewarn "should read the help associated with the level. Users importing a"
84 ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
85 ewarn "should review their selected grsecurity/PaX options carefully."
86 ewarn
87 ewarn "Users of grsecurity's RBAC system must ensure they are using"
88 ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
89 ewarn "It is strongly recommended that the following command is issued"
90 ewarn "prior to booting a ${PF} kernel for the first time:"
91 ewarn
92 ewarn "emerge -na =${GRADM_COMPAT}"
93 ewarn
94 }