Gentoo Archives: gentoo-commits

From: "Anthony G. Basile" <blueness@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] dev/blueness:master commit in: sys-kernel/hardened-sources/
Date: Sat, 01 Sep 2012 01:34:12
Message-Id: 1346463176.ad8646a48ff7080938a474a510228993554ba88e.blueness@gentoo
1 commit: ad8646a48ff7080938a474a510228993554ba88e
2 Author: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
3 AuthorDate: Sat Sep 1 00:52:21 2012 +0000
4 Commit: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
5 CommitDate: Sat Sep 1 01:32:56 2012 +0000
6 URL: http://git.overlays.gentoo.org/gitweb/?p=dev/blueness.git;a=commit;h=ad8646a4
7
8 sys-kernel/hardened-sources: testing patchset 20120830
9
10 (Portage version: 2.1.11.9/git/Linux x86_64, signed Manifest commit with key 0xD0455535)
11
12 ---
13 sys-kernel/hardened-sources/ChangeLog | 9 ++++
14 sys-kernel/hardened-sources/Manifest | 29 ++++++++++--
15 .../hardened-sources-2.6.32-r126.ebuild | 51 ++++++++++++++++++++
16 .../hardened-sources-3.2.28-r3.ebuild | 50 +++++++++++++++++++
17 .../hardened-sources-3.5.3-r1.ebuild | 50 +++++++++++++++++++
18 5 files changed, 185 insertions(+), 4 deletions(-)
19
20 diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
21 index 8750b89..22b8fdf 100644
22 --- a/sys-kernel/hardened-sources/ChangeLog
23 +++ b/sys-kernel/hardened-sources/ChangeLog
24 @@ -1,5 +1,14 @@
25
26
27 +*hardened-sources-3.5.3-r1 (01 Sep 2012)
28 +*hardened-sources-3.2.28-r3 (01 Sep 2012)
29 +*hardened-sources-2.6.32-r126 (01 Sep 2012)
30 +
31 + 01 Sep 2012; Anthony G. Basile <blueness@g.o>
32 + +hardened-sources-2.6.32-r126.ebuild, +hardened-sources-3.2.28-r3.ebuild,
33 + +hardened-sources-3.5.3-r1.ebuild:
34 + testing patchset 20120830
35 +
36 29 Aug 2012; Anthony G. Basile <blueness@g.o>
37 -hardened-sources-2.6.32-r125.ebuild, -hardened-sources-3.2.28-r2.ebuild,
38 -hardened-sources-3.5.3.ebuild:
39
40 diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
41 index 38a0e7f..c0a0cb9 100644
42 --- a/sys-kernel/hardened-sources/Manifest
43 +++ b/sys-kernel/hardened-sources/Manifest
44 @@ -1,12 +1,33 @@
45 -----BEGIN PGP SIGNED MESSAGE-----
46 Hash: SHA256
47
48 -MISC ChangeLog 35562 SHA256 7d6a176982d58d446bd7ac731634dc9d1a7636f3d0376b1bbf2529fbbfaf3b52 SHA512 18108858bd2f00736e394c13982173cd88a730e1863f97cfada72548b93fabc612d73797cbfa0664c97317d02c733fe19a89ccc2ac038ce5856e7ee9a63c9eae WHIRLPOOL 485971559587eb26eea5b873fed532e0d6d4fe1b895a5dcd3b22d07a357ade5395c52ef8628531a7e067a8d76086fdfbd4484528e06b53d21d54dda8d1da5595
49 +DIST deblob-2.6.32 84094 SHA256 de625f0bd221c9c38d4453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d SHA512 81263cf9f0e8232f9d56966082514f58c147d12cce0bce384f6830a450006006274f3009dd11c38638cd083d0efc14dc2edd1b79ca22a18835eeee4e9ea15eab WHIRLPOOL c53c3f114e7536426c7f303c8d67ee5d26929ca59b25b5fdcf18b2748acc4699cda42f63908db6f78ab338301da8cad3b3ecbab45ee5c1f15679d4e44042dec4
50 +DIST deblob-3.2 107602 SHA256 5db88405af6d51a77d84354afc3b2bdf673b1a5dcff37bb8db4ccbd12d91db20 SHA512 f34b7128adf716c908cbbbfefe72149fcd88b727d27edab43be65d4e6a55112b6d937d5c2bed86454d58781f3766ba4cc6db668cb6174a6039d276499da37cb4 WHIRLPOOL 0922457f7ca413c9d8115182964a7c051560799c4724452f81cb4c0383cf62c45b0364d6e639bd9d2b9000411d8773cabd2e8af99e8b0dc7f7bdc886db432d6d
51 +DIST deblob-3.5 109252 SHA256 c3273c85e04b7f69acc271da7d2ffba41cf74b364b60f174a4459eec4fae8da9 SHA512 839126a3d2655195c9ff223b98c2c89c403d89e40c37ddaaf0dcef72b28e396906842997cad136e8ed2eebfbe94d3479a77ab3071bad46008d9faeffca48372c WHIRLPOOL 93a993475c7c4342e31d59141dd8c68197243b5a96a34c2df529edadf3733be01d145f8679d01dc4ccaaa4bd8e1c887f75611256210820d27367de651e1d9b4b
52 +DIST deblob-check-2.6.32 247608 SHA256 da1aecdf3ab7f1207b90642d303e52262ccc2ed9e49739b729512b88950d17f3 SHA512 2ba5c7615164a96847afc40af9c9883dc39d8be633e8f07d0d4a6c16b1a22117faf68d5aa40c5aee843dc687a635e2195a4be3bfa40f87dc2b89554d869616b6 WHIRLPOOL ea5dcfd0ee58f1e9ff8dc16229401d37c0271fcae9d065ec648828088cd8d0b8eb8a80efc772d1ed0f075017485609ebf19c01156586728dd335af2dee2bbeff
53 +DIST deblob-check-3.2 423268 SHA256 9e67dd0885aa8ef356dbc15d487c8dea5a54f74c5b03a5d7946b65ee43f12638 SHA512 3abb9968ef4750fda90e4e2283981fd4691b7f9854244413b31d17bb60382a6d809fec929d8d3f9b52397dd9f9fa26783f4c3a25f3f4115b76ed585ea68e9916 WHIRLPOOL 891c3f809af470d680ae896c843c09612fb5124f2805e03d67b28ec4353bff0bc346ae9f680d900f0f63e681be86a0195f9baab7dcf3b5accfda739b106766fa
54 +DIST deblob-check-3.5 464105 SHA256 e7f57e2e47651ea1eb757ca3c8c989edac0f38080d923adccdcdca215eb2bdd9 SHA512 aeebd62fb3ad9550587d4a39c6b4a11a4bdea9ff096ca13df6f3d9b0137f3d05e704d105b19417282b4b70645ba96597b79e9e70d8540f6b15a7e2e9824251b4 WHIRLPOOL 0865a17865e8eabd350924b9e3cbce6994e70a54719d212227e2c22338ef43c7c52931437106cc68fa3e62d600f3ef2bee895441cca8af30b359e988a368e072
55 +DIST genpatches-2.6.32-48.base.tar.bz2 1033142 SHA256 7438e7b7c0ef32e0c639cf89c4f53a3bc7917ca466b1fcf3931adb65ad05b583 SHA512 1e06aef3bdb82e199165730b3b1542dee98a5970c611cc51eb3c0781bec49c3ab555908ad0109d0d1748f1d5d1bfeb6a5e79c1d45ceee9ec9f952290c426f0ab WHIRLPOOL edc94a7404b422dc9eaa5a2d5085938e2992a5ed09c80265c1c85daa933e892819b480b3086fdbe944943b6206748f0965159415b7764cd419f78719742c253b
56 +DIST genpatches-2.6.32-48.extras.tar.bz2 24939 SHA256 ee714d14310fd5242ce2e28a8f8e5fda63ba18957960814876506f8754b9d2a0 SHA512 0c0ddac8d9c3c91f3cdb4b6eb572cf4e7f0417c5f522ba4dea0b18957a3b89f3b6addd449d2b6fc0ffbbe36b225fb1d21b1537ab6a4bc2ae2375735e83a960a2 WHIRLPOOL 4b8f5c3aa5edf2718c013e0d5791a964ab983bb2cead319ce9a9d18cdd891eadb9d7ec5c1bfce50ce74d906c5b28f75cd30bf09e72bd500be082488c40870e98
57 +DIST genpatches-3.2-16.base.tar.bz2 445530 SHA256 3a3d16b7ffa401598bd131a7e8b2996f729b51dd6e88cae79157fd6bca972842 SHA512 6ab56b5dbf8ecf02a1ff8dd0dbf503f8c615050dd7f02b156bd1a0fdbf3655aee48176e88d30b40697d11126d06fc159c1332ddbc22c6e3f31314e1455f2467a WHIRLPOOL 69d9e11dfeb622fe615f48cd146819d264cd60577c0f77567e4b8c372901f63791567a4a210da752ae9a718d79a929519fb7997044a170327099d8a086a7eb83
58 +DIST genpatches-3.2-16.extras.tar.bz2 17208 SHA256 7f60ab18e2965d024b7a36327577bcc771061f2cfac221ed475a6fd6b2ab89c7 SHA512 bea678f7eb56eb992c99d9c49b8d1602228dec00e7fd255432ca30847aae9d4d223bb9ab27f5e72ad422e0d0f2ac319fa590d5fe0e53824b415d6d8bba686add WHIRLPOOL 875f72ab9b81e1cc7a7a06d42783c04204987cfd49042f3cf19b1ed80b0d91f8fdaaf13152b7a22a0d0c1eb9a22719d83eaa9c4fcf9d2024e62420332f081019
59 +DIST genpatches-3.5-4.base.tar.bz2 93139 SHA256 b22581cc96cff54d58b69cef579aa53fd501dde5f85610ac80ad01cb1f808b57 SHA512 0af272c7bc88f9c8f5c7726e2600d86135610b493290cf523e1ce34a34686723185dcd475010ead735e1ced195faa0f9e98202e1be8a35d205365b01f863ce39 WHIRLPOOL 6178b120ff41f2cf0345eb63588c83a24df52067b598ebc3064bc046f9424cd8e3189e365d30baaa0f00dd02ae2d261a30c3d9d29593d48c5056a0cef0673b2f
60 +DIST genpatches-3.5-4.extras.tar.bz2 17507 SHA256 1b2294687e842e6450184ce2800ba3df8006ca47d75f95437a1e1d2976162727 SHA512 2eefd45f853e9bab3f89701e470309471b5b2c9ed651dba03776a47d11e26c00170d32aaac547889ae7cee435278bb5ffa4ddc1dc769e6440d454008f62ce23d WHIRLPOOL 43dfd1c6a046e3dc07db72e8d7f062689366112ccf080a17b84bc7adda3e5257d7be551e0a34b6c79c9016b5b04bad5bdf8c52589dcc362dc675f72ca7681135
61 +DIST hardened-patches-2.6.32-129.extras.tar.bz2 770628 SHA256 f3746063c5bad01a1b073985cfc4a24b335da1f42c794e26bef6b0c5a42e97bd SHA512 0fc0461060ea675c4e275742b3b1ebab862c474a3ca724130c9477447c9abbdefdd909b42ff43e386f5d4c0d81fd64856f5606f7c8f3a2f46ed55d5cb76f7482 WHIRLPOOL 0674eaaeb6cd7239c790269d88ade1ee0555f8ceaf63c756a554cbe25ad1f946ea53b93b7f4b0b99f15a379568ca2978fee4fca46d71a0f420ece5f6a5d37191
62 +DIST hardened-patches-3.2.28-4.extras.tar.bz2 719981 SHA256 ecfd4eeb2c3f6d8e99f3c3c5a212b2372faca20837d03e0149c8ad27f29c7527 SHA512 34c5eba82d601a89577ee04f55943a339d5796138ef5b3ab8d8e404ffee21863edbd758530ac797c581ae6c320643ff04012cd1708e06d97947e50b121c34687 WHIRLPOOL 0ac78aa46ac9d821cedad2b9b2d3e5c3d9d31fcb126abd158eec279b7de3edef11bb7de270aac201d6fdbdc256e870121566c5c849279e21e30309f2e0c99390
63 +DIST hardened-patches-3.5.3-2.extras.tar.bz2 571628 SHA256 e3d6bfd9cbb1b79d4447252ff88564d98c7c2726877f6279bc81e6399c17125d SHA512 36eb3351716963ca1ea7ccd6992c343ae0caa77550a1f4e972428813bb5a60b9ff339d758db31330ab0613120679add7708fcd518d026ea5fd6b1f454551b25f WHIRLPOOL 9e8d5280fffd4721f46de50feb861c4a822e30b883e5b5d7ad7a84646e3c938c7721c227cdefa448555bcd0e3e65cb105842af61eb66fbb4e20552fe8b70e587
64 +DIST linux-2.6.32.tar.bz2 64424138 SHA256 5099786d80b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e SHA512 739c67875dcb1a80412a034e7d3dddfb6aea4d7a77f12b572fb5afbb827e6ab5a682df7501c0982966e85948ddf7251b8dc5eeb064b2d264025160d8a903bc82 WHIRLPOOL 762dfd7f4c062fdcda00b7fc45ead0f8cb4e321027769a12d92640012f5768c2033da95f24491adfcd6eb453c2658978d4f170e73e4f8a5ccd263efcbe00429d
65 +DIST linux-3.2.tar.bz2 78147838 SHA256 c881fc2b53cf0da7ca4538aa44623a7de043a41f76fd5d0f51a31f6ed699d463 SHA512 1f57b98e8da34b10f37ce94e0f13a994c111d483b104c27a8f58a4a55013a73a9f1ffcebb597be63ce0dfadb92201e93b0e072ba49bac0033026aceb0840c812 WHIRLPOOL 3dc893bde09f064e4614183964a4b9feaab938ca7a739f46f825818a577884eae815f195b52a4c55c571345de59d7ba09631fb68dac481a0837b24868ce60e3d
66 +DIST linux-3.5.tar.bz2 80978443 SHA256 6ab82beb8cbb895b7523daed7ec3ec5850cf460b96788056f1ef5135c852fd23 SHA512 f6de5aaff351097dbe4b7186baea63004ef9efb73a85ccfd718c5856b282c22fb1431dce8588cb823eb75d1f09cd89f20e4936501e2c536f53ea4aa705e09ecc WHIRLPOOL 227c73e187370f2f5be34041c99ff2ff1bc99de4685d29801558a96d7d128c6f09c4a2ce81ce33cd87148c301e43319b42a8a77443e5db37f604fd97d101b7e7
67 +EBUILD hardened-sources-2.6.32-r126.ebuild 1820 SHA256 c77676ac0823c59b5c5b6c2445e2bc09bff6949e09fcf1dee9a420701a9d3c34 SHA512 7cfb54a16d0ff2edac017ff386866833137c295e6569daa2fd8b1fe6410b7f6aa8b10bd06b326a7580ddbaa50a2935769753415aba5f450e4af28e41868046c9 WHIRLPOOL 3efa94953371cb9d95311f6cc6761ef353eb53d79e3f6bcb95d67e30e867b5a49dc7b557752f06fd4d12c50985b70253f0359441d08b48a8f253ad7dfe64c0e9
68 +EBUILD hardened-sources-3.2.28-r3.ebuild 1816 SHA256 d7f0202ca0d5079043e72c7e1f5772bfe04eedc4c3f9a9873dbde93972263060 SHA512 933d6fac4bde73002b52b5478a9299369ecddd0cd75db0c8241780b35739b3243ae317ab2ec885e0b61298e12dbbe4e62e5671499462e76461bb2a6b6704e697 WHIRLPOOL e0c4b195cebf31a494ced90d7bdefa4e6f42b95874b6a25e1a9174b318357c19b07af4eeafa9685f4054b6c43c1a42fcbdc93788e0f2f09f5c481417ec8c71cf
69 +EBUILD hardened-sources-3.5.3-r1.ebuild 1811 SHA256 c0a3284e00ca4cf175ba5557744cbbf4f7d72f63103fc9bd748dfbd6872ae6cf SHA512 1543be1537d0d6e2356769807b08a934c8883e7e943eb31c9442d50aaba43af53af30a1858a22de535da03367a5e149be00927ebd04f86086b16e006703990be WHIRLPOOL f4f3cc4d07ce01c2b372cbba63f5a1e0230e268eab04f60f03ff79c51ef656e5cccce020ce3bb3f829ad440ce0adfdd62a3556b9131678d51c136cb0b02699b5
70 +MISC ChangeLog 35887 SHA256 9dce9832b9d4f1ee6297db26af13679c97f011f0b01d3b0a3ea26135bc5b3b9e SHA512 d58e61b2469cae05c16851def8061d58d4030bc7a5c7c6ba3ec75934cfdae2c086de804431009f0af759d273252b87ff59865eb3b33839205757f3bb33992c88 WHIRLPOOL f6d0719ee987b3f1e09e0a77a9c5df57262804349ae62298e62a0be8124bf95187c10aa7fd0e2d810c6c4f807480d1d37301a2b380d8fdb3b7807fc220feb319
71 MISC metadata.xml 576 SHA256 53e0d3bfb958bcbf62457a89abe76a7a6f5a2b1df5decb04bf8b840184cc5828 SHA512 aabb8324fc608a74fecda5e4fff0f29d47d34ff20bdea2af8a69726772268d7b3b9d2639cd9c2308b3c79b89d9e923d2a96b212e7cfe59a0bf0008e3fb1c7e6a WHIRLPOOL 11fc891bd478667fe4ca5d203b366fdcf1680dac31bf997ea7c707c6f00a1c03b6ca7a00045b75dc1604e9eb57c2cab03a12f46318320ed6abdb5d6feb06b71f
72 -----BEGIN PGP SIGNATURE-----
73 Version: GnuPG v2.0.19 (GNU/Linux)
74
75 -iEYEAREIAAYFAlA+n1MACgkQl5yvQNBFVTWdbQCgo7jDJdmlUMZXRa1JgoiwRzSP
76 -hq8AnjugF1/UhE2k6gRHdUFNJllk3IC1
77 -=4+K6
78 +iEYEAREIAAYFAlBBXEUACgkQl5yvQNBFVTV9aQCgmw2xIz57fOU61IRpQIFWf7Ln
79 +otkAoI1aP/ORsIYryAEie65FH/wFlLcK
80 +=yzbp
81 -----END PGP SIGNATURE-----
82
83 diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r126.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r126.ebuild
84 new file mode 100644
85 index 0000000..79e1257
86 --- /dev/null
87 +++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r126.ebuild
88 @@ -0,0 +1,51 @@
89 +# Copyright 1999-2012 Gentoo Foundation
90 +# Distributed under the terms of the GNU General Public License v2
91 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r125.ebuild,v 1.1 2012/08/29 22:56:09 blueness Exp $
92 +
93 +EAPI="4"
94 +
95 +ETYPE="sources"
96 +K_WANT_GENPATCHES="base extras"
97 +K_GENPATCHES_VER="48"
98 +K_DEBLOB_AVAILABLE="1"
99 +
100 +inherit kernel-2
101 +detect_version
102 +
103 +HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-129"
104 +HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
105 +SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
106 +
107 +UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
108 +UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
109 +
110 +DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
111 +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
112 +IUSE="deblob"
113 +
114 +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
115 +
116 +RDEPEND=">=sys-devel/gcc-4.5"
117 +
118 +pkg_postinst() {
119 + kernel-2_pkg_postinst
120 +
121 + local GRADM_COMPAT="sys-apps/gradm-2.9.1*"
122 +
123 + ewarn
124 + ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
125 + ewarn "[server], [workstation], and [virtualization]."
126 + ewarn
127 + ewarn "Those who intend to use one of these predefined grsecurity levels"
128 + ewarn "should read the help associated with the level. Users importing a"
129 + ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
130 + ewarn "should review their selected grsecurity/PaX options carefully."
131 + ewarn
132 + ewarn "Users of grsecurity's RBAC system must ensure they are using"
133 + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
134 + ewarn "It is strongly recommended that the following command is issued"
135 + ewarn "prior to booting a ${PF} kernel for the first time:"
136 + ewarn
137 + ewarn "emerge -na =${GRADM_COMPAT}"
138 + ewarn
139 +}
140
141 diff --git a/sys-kernel/hardened-sources/hardened-sources-3.2.28-r3.ebuild b/sys-kernel/hardened-sources/hardened-sources-3.2.28-r3.ebuild
142 new file mode 100644
143 index 0000000..0b8f9dc
144 --- /dev/null
145 +++ b/sys-kernel/hardened-sources/hardened-sources-3.2.28-r3.ebuild
146 @@ -0,0 +1,50 @@
147 +# Copyright 1999-2012 Gentoo Foundation
148 +# Distributed under the terms of the GNU General Public License v2
149 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-3.2.28-r2.ebuild,v 1.1 2012/08/29 22:58:30 blueness Exp $
150 +
151 +EAPI="4"
152 +
153 +ETYPE="sources"
154 +K_WANT_GENPATCHES="base extras"
155 +K_GENPATCHES_VER="16"
156 +K_DEBLOB_AVAILABLE="1"
157 +
158 +inherit kernel-2
159 +detect_version
160 +
161 +HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-4"
162 +HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
163 +SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
164 +
165 +UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
166 +UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
167 +
168 +DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
169 +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
170 +IUSE="deblob"
171 +
172 +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
173 +
174 +RDEPEND=">=sys-devel/gcc-4.5"
175 +
176 +pkg_postinst() {
177 + kernel-2_pkg_postinst
178 +
179 + local GRADM_COMPAT="sys-apps/gradm-2.9.1*"
180 +
181 + ewarn
182 + ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
183 + ewarn "[server], [workstation], and [virtualization]. Those who intend to"
184 + ewarn "use one of these predefined grsecurity levels should read the help"
185 + ewarn "associated with the level. Because some options require >=gcc-4.5,"
186 + ewarn "users with more, than one version of gcc installed should use gcc-config"
187 + ewarn "to select a compatible version."
188 + ewarn
189 + ewarn "Users of grsecurity's RBAC system must ensure they are using"
190 + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
191 + ewarn "It is strongly recommended that the following command is issued"
192 + ewarn "prior to booting a ${PF} kernel for the first time:"
193 + ewarn
194 + ewarn "emerge -na =${GRADM_COMPAT}"
195 + ewarn
196 +}
197
198 diff --git a/sys-kernel/hardened-sources/hardened-sources-3.5.3-r1.ebuild b/sys-kernel/hardened-sources/hardened-sources-3.5.3-r1.ebuild
199 new file mode 100644
200 index 0000000..3c41cb8
201 --- /dev/null
202 +++ b/sys-kernel/hardened-sources/hardened-sources-3.5.3-r1.ebuild
203 @@ -0,0 +1,50 @@
204 +# Copyright 1999-2012 Gentoo Foundation
205 +# Distributed under the terms of the GNU General Public License v2
206 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-3.5.3.ebuild,v 1.1 2012/08/29 23:00:54 blueness Exp $
207 +
208 +EAPI="4"
209 +
210 +ETYPE="sources"
211 +K_WANT_GENPATCHES="base extras"
212 +K_GENPATCHES_VER="4"
213 +K_DEBLOB_AVAILABLE="1"
214 +
215 +inherit kernel-2
216 +detect_version
217 +
218 +HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-2"
219 +HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
220 +SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
221 +
222 +UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
223 +UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
224 +
225 +DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
226 +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
227 +IUSE="deblob"
228 +
229 +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
230 +
231 +RDEPEND=">=sys-devel/gcc-4.5"
232 +
233 +pkg_postinst() {
234 + kernel-2_pkg_postinst
235 +
236 + local GRADM_COMPAT="sys-apps/gradm-2.9.1*"
237 +
238 + ewarn
239 + ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
240 + ewarn "[server], [workstation], and [virtualization]. Those who intend to"
241 + ewarn "use one of these predefined grsecurity levels should read the help"
242 + ewarn "associated with the level. Because some options require >=gcc-4.5,"
243 + ewarn "users with more, than one version of gcc installed should use gcc-config"
244 + ewarn "to select a compatible version."
245 + ewarn
246 + ewarn "Users of grsecurity's RBAC system must ensure they are using"
247 + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
248 + ewarn "It is strongly recommended that the following command is issued"
249 + ewarn "prior to booting a ${PF} kernel for the first time:"
250 + ewarn
251 + ewarn "emerge -na =${GRADM_COMPAT}"
252 + ewarn
253 +}