| 1 |
blueness 13/02/26 01:11:36 |
| 2 |
|
| 3 |
Modified: ChangeLog |
| 4 |
Added: hardened-sources-3.7.5-r1.ebuild |
| 5 |
Log: |
| 6 |
Fix out-of-bounds access error in net/core/sock_diag.c: http://lwn.net/Articles/539885 |
| 7 |
|
| 8 |
(Portage version: 2.1.11.50/cvs/Linux x86_64, signed Manifest commit with key 0xF52D4BBA) |
| 9 |
|
| 10 |
Revision Changes Path |
| 11 |
1.775 sys-kernel/hardened-sources/ChangeLog |
| 12 |
|
| 13 |
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-kernel/hardened-sources/ChangeLog?rev=1.775&view=markup |
| 14 |
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-kernel/hardened-sources/ChangeLog?rev=1.775&content-type=text/plain |
| 15 |
diff : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-kernel/hardened-sources/ChangeLog?r1=1.774&r2=1.775 |
| 16 |
|
| 17 |
Index: ChangeLog |
| 18 |
=================================================================== |
| 19 |
RCS file: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v |
| 20 |
retrieving revision 1.774 |
| 21 |
retrieving revision 1.775 |
| 22 |
diff -u -r1.774 -r1.775 |
| 23 |
--- ChangeLog 24 Feb 2013 18:48:39 -0000 1.774 |
| 24 |
+++ ChangeLog 26 Feb 2013 01:11:36 -0000 1.775 |
| 25 |
@@ -1,6 +1,13 @@ |
| 26 |
# ChangeLog for sys-kernel/hardened-sources |
| 27 |
# Copyright 1999-2013 Gentoo Foundation; Distributed under the GPL v2 |
| 28 |
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.774 2013/02/24 18:48:39 blueness Exp $ |
| 29 |
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.775 2013/02/26 01:11:36 blueness Exp $ |
| 30 |
+ |
| 31 |
+*hardened-sources-3.7.5-r1 (26 Feb 2013) |
| 32 |
+ |
| 33 |
+ 26 Feb 2013; Anthony G. Basile <blueness@g.o> |
| 34 |
+ +hardened-sources-3.7.5-r1.ebuild: |
| 35 |
+ Fix out-of-bounds access error in net/core/sock_diag.c: |
| 36 |
+ http://lwn.net/Articles/539885 |
| 37 |
|
| 38 |
*hardened-sources-3.8.0 (24 Feb 2013) |
| 39 |
|
| 40 |
|
| 41 |
|
| 42 |
|
| 43 |
1.1 sys-kernel/hardened-sources/hardened-sources-3.7.5-r1.ebuild |
| 44 |
|
| 45 |
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-3.7.5-r1.ebuild?rev=1.1&view=markup |
| 46 |
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-3.7.5-r1.ebuild?rev=1.1&content-type=text/plain |
| 47 |
|
| 48 |
Index: hardened-sources-3.7.5-r1.ebuild |
| 49 |
=================================================================== |
| 50 |
# Copyright 1999-2013 Gentoo Foundation |
| 51 |
# Distributed under the terms of the GNU General Public License v2 |
| 52 |
# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-3.7.5-r1.ebuild,v 1.1 2013/02/26 01:11:36 blueness Exp $ |
| 53 |
|
| 54 |
EAPI="4" |
| 55 |
|
| 56 |
ETYPE="sources" |
| 57 |
K_WANT_GENPATCHES="base" |
| 58 |
K_GENPATCHES_VER="7" |
| 59 |
K_DEBLOB_AVAILABLE="1" |
| 60 |
|
| 61 |
inherit kernel-2 |
| 62 |
detect_version |
| 63 |
|
| 64 |
HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-2" |
| 65 |
HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2" |
| 66 |
SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}" |
| 67 |
|
| 68 |
UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2" |
| 69 |
UNIPATCH_EXCLUDE="2900_dev-root-proc-mount-fix.patch 4200_fbcondecor-0.9.6.patch" |
| 70 |
|
| 71 |
DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})" |
| 72 |
HOMEPAGE="http://www.gentoo.org/proj/en/hardened/" |
| 73 |
IUSE="deblob" |
| 74 |
|
| 75 |
KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86" |
| 76 |
|
| 77 |
RDEPEND=">=sys-devel/gcc-4.5" |
| 78 |
|
| 79 |
pkg_postinst() { |
| 80 |
kernel-2_pkg_postinst |
| 81 |
|
| 82 |
local GRADM_COMPAT="sys-apps/gradm-2.9.1*" |
| 83 |
|
| 84 |
ewarn |
| 85 |
ewarn "Hardened Gentoo provides three different predefined grsecurity level:" |
| 86 |
ewarn "[server], [workstation], and [virtualization]. Those who intend to" |
| 87 |
ewarn "use one of these predefined grsecurity levels should read the help" |
| 88 |
ewarn "associated with the level. Because some options require >=gcc-4.5," |
| 89 |
ewarn "users with more, than one version of gcc installed should use gcc-config" |
| 90 |
ewarn "to select a compatible version." |
| 91 |
ewarn |
| 92 |
ewarn "Users of grsecurity's RBAC system must ensure they are using" |
| 93 |
ewarn "${GRADM_COMPAT}, which is compatible with ${PF}." |
| 94 |
ewarn "It is strongly recommended that the following command is issued" |
| 95 |
ewarn "prior to booting a ${PF} kernel for the first time:" |
| 96 |
ewarn |
| 97 |
ewarn "emerge -na =${GRADM_COMPAT}" |
| 98 |
ewarn |
| 99 |
} |
Archives