Gentoo Archives: gentoo-commits

From: "Anthony G. Basile" <blueness@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] repo/gentoo:master commit in: eclass/
Date: Fri, 09 Oct 2015 12:19:52
Message-Id: 1444393504.67ccafaa8c26b86264bd85bebc1dc66970f15a03.blueness@gentoo
1 commit: 67ccafaa8c26b86264bd85bebc1dc66970f15a03
2 Author: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
3 AuthorDate: Fri Oct 9 12:24:54 2015 +0000
4 Commit: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
5 CommitDate: Fri Oct 9 12:25:04 2015 +0000
6 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=67ccafaa
7
8 kernel-2.eclass: deblobbed kernels are supported for security, bug #555878.
9
10 eclass/kernel-2.eclass | 11 +++++++----
11 1 file changed, 7 insertions(+), 4 deletions(-)
12
13 diff --git a/eclass/kernel-2.eclass b/eclass/kernel-2.eclass
14 index 94231ec..0f47b8c 100644
15 --- a/eclass/kernel-2.eclass
16 +++ b/eclass/kernel-2.eclass
17 @@ -798,10 +798,13 @@ postinst_sources() {
18 # if we have USE=symlink, then force K_SYMLINK=1
19 use symlink && K_SYMLINK=1
20
21 - # if we're using a deblobbed kernel, it's not supported
22 - [[ $K_DEBLOB_AVAILABLE == 1 ]] && \
23 - use deblob && \
24 - K_SECURITY_UNSUPPORTED=deblob
25 + # We do support security on a deblobbed kernel, bug #555878.
26 + # If some particular kernel version doesn't have security
27 + # supported because of USE=deblob or otherwise, one can still
28 + # set K_SECURITY_UNSUPPORTED on a per ebuild basis.
29 + #[[ $K_DEBLOB_AVAILABLE == 1 ]] && \
30 + # use deblob && \
31 + # K_SECURITY_UNSUPPORTED=deblob
32
33 # if we are to forcably symlink, delete it if it already exists first.
34 if [[ ${K_SYMLINK} > 0 ]]; then