Gentoo Archives: gentoo-commits

From: "Anthony G. Basile" <blueness@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] dev/blueness:master commit in: sys-kernel/hardened-sources/
Date: Tue, 27 Dec 2011 03:05:29
Message-Id: 6379b13d4aa22bb6a2a8f01cbc06b2e4b81fad6b.blueness@gentoo
1 commit: 6379b13d4aa22bb6a2a8f01cbc06b2e4b81fad6b
2 Author: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
3 AuthorDate: Tue Dec 27 03:05:14 2011 +0000
4 Commit: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
5 CommitDate: Tue Dec 27 03:05:14 2011 +0000
6 URL: http://git.overlays.gentoo.org/gitweb/?p=dev/blueness.git;a=commit;h=6379b13d
7
8 sys-kernel/hardened-sources: testing patchset 20111222a
9
10 ---
11 sys-kernel/hardened-sources/ChangeLog | 4 ++
12 sys-kernel/hardened-sources/Manifest | 17 +++----
13 .../hardened-sources-2.6.32-r82.ebuild | 49 ++++++++++++++++++++
14 3 files changed, 60 insertions(+), 10 deletions(-)
15
16 diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
17 index 0ee7cd6..4e6c602 100644
18 --- a/sys-kernel/hardened-sources/ChangeLog
19 +++ b/sys-kernel/hardened-sources/ChangeLog
20 @@ -1,6 +1,10 @@
21
22
23 27 Dec 2011; Anthony G. Basile <blueness@g.o>
24 + +hardened-sources-2.6.32-r82.ebuild:
25 + testing patchset 20111222a
26 +
27 + 27 Dec 2011; Anthony G. Basile <blueness@g.o>
28 -hardened-sources-2.6.32-r82.ebuild, -hardened-sources-3.1.6.ebuild:
29 moved to tree
30
31
32 diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
33 index 55f965b..0fa95f3 100644
34 --- a/sys-kernel/hardened-sources/Manifest
35 +++ b/sys-kernel/hardened-sources/Manifest
36 @@ -1,12 +1,9 @@
37 ------BEGIN PGP SIGNED MESSAGE-----
38 -Hash: SHA256
39 -
40 +DIST deblob-2.6.32 84094 RMD160 394f46ec5b869638a7bc2e87beb118167c9bd6cb SHA1 1a2a1efb72126609d9e3b9be99ae5be2751efd06 SHA256 de625f0bd221c9c38d4453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d
41 +DIST deblob-check-2.6.32 247608 RMD160 840bf8a229ea79810519eee6241edb85b78a6562 SHA1 d45a24eb16e5ac956c0fcddbc1ac4d67e326c7b8 SHA256 da1aecdf3ab7f1207b90642d303e52262ccc2ed9e49739b729512b88950d17f3
42 +DIST genpatches-2.6.32-46.base.tar.bz2 1028139 RMD160 36453ee2475c260ea02d14bb68a82c7eba4ba035 SHA1 9bb9884c6d55278542f1af473ca0d97cbbb87455 SHA256 32362617077de30ca78afb9dc363b4507b4069f9a26cf7196bc73727fee10eee
43 +DIST genpatches-2.6.32-46.extras.tar.bz2 24939 RMD160 055706793fb532caeb3d364c5e1bd0ad46aff4b2 SHA1 2a966a4d5f9a718a0d43c25df563d0377154996f SHA256 ee714d14310fd5242ce2e28a8f8e5fda63ba18957960814876506f8754b9d2a0
44 +DIST hardened-patches-2.6.32-85.extras.tar.bz2 543609 RMD160 ea1f8745772d71cb19a873347108246c2749867c SHA1 68d0608ee055fc1f40ad26656b64d0599329cf5e SHA256 c7495254261e38eb615c4c85b6f61a9829592bdb161af5fce275600f5f729d31
45 +DIST linux-2.6.32.tar.bz2 64424138 RMD160 b93742cbaf8174f2200d2dbef0d47a26c618039c SHA1 410b4fc818023bfef60064e973ff0ab46d3bfb19 SHA256 5099786d80b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e
46 +EBUILD hardened-sources-2.6.32-r82.ebuild 1840 RMD160 4d52b875e3033ba4bdffd3920bf3b696f6b6862f SHA1 a18fa20490b795ab2bbec3cfefcf8249f1bc911c SHA256 e594ffe285e09c1840c2edd4a20c0b8489b7592b5234ed9dead995b375dbc2f3
47 MISC ChangeLog 11596 RMD160 cc8c8d5d0cb5eda1cbe9c7d1cff5eb90f535bd7d SHA1 17db2c88a4671010f4bc6d2e36de0b7fb14f105a SHA256 aba4de4a9788fb9e458c6e8127258640d6ae9cd458c62ada5aa150b192531ea4
48 MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SHA1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8fcfd351f2f39ed63da68af3a5751fc2058d0d03813
49 ------BEGIN PGP SIGNATURE-----
50 -Version: GnuPG v2.0.17 (GNU/Linux)
51 -
52 -iEYEAREIAAYFAk75LkkACgkQl5yvQNBFVTW5EgCglkXlQOB8LAVxdMApRxyRJ0md
53 -aREAoIWlYJH1z6d7jCTG5RORzmM7F234
54 -=4r/q
55 ------END PGP SIGNATURE-----
56
57 diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r82.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r82.ebuild
58 new file mode 100644
59 index 0000000..ef1531c
60 --- /dev/null
61 +++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r82.ebuild
62 @@ -0,0 +1,49 @@
63 +# Copyright 1999-2011 Gentoo Foundation
64 +# Distributed under the terms of the GNU General Public License v2
65 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r81.ebuild,v 1.1 2011/12/15 12:53:39 blueness Exp $
66 +
67 +EAPI="4"
68 +
69 +ETYPE="sources"
70 +K_WANT_GENPATCHES="base extras"
71 +K_GENPATCHES_VER="46"
72 +K_DEBLOB_AVAILABLE="1"
73 +
74 +inherit kernel-2
75 +detect_version
76 +
77 +HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-85"
78 +HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
79 +SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
80 +
81 +UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
82 +UNIPATCH_EXCLUDE="2901_kbuild-fix-passing-wno-options-to-gcc-4.4.patch 4200_fbcondecor-0.9.6.patch"
83 +
84 +DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
85 +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
86 +IUSE="deblob"
87 +
88 +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
89 +
90 +pkg_postinst() {
91 + kernel-2_pkg_postinst
92 +
93 + local GRADM_COMPAT="sys-apps/gradm-2.2.2*"
94 +
95 + ewarn
96 + ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
97 + ewarn "[server], [workstation], and [virtualization]."
98 + ewarn
99 + ewarn "Those who intend to use one of these predefined grsecurity levels"
100 + ewarn "should read the help associated with the level. Users importing a"
101 + ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
102 + ewarn "should review their selected grsecurity/PaX options carefully."
103 + ewarn
104 + ewarn "Users of grsecurity's RBAC system must ensure they are using"
105 + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
106 + ewarn "It is strongly recommended that the following command is issued"
107 + ewarn "prior to booting a ${PF} kernel for the first time:"
108 + ewarn
109 + ewarn "emerge -na =${GRADM_COMPAT}"
110 + ewarn
111 +}