Gentoo Archives: gentoo-commits

From: "Anthony G. Basile" <blueness@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] repo/gentoo:master commit in: sys-kernel/hardened-sources/
Date: Tue, 07 Mar 2017 10:36:01
Message-Id: 1488882921.a9a7a8c8328a398462fb45a836d5a81b2712e9e2.blueness@gentoo
1 commit: a9a7a8c8328a398462fb45a836d5a81b2712e9e2
2 Author: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
3 AuthorDate: Tue Mar 7 10:35:21 2017 +0000
4 Commit: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
5 CommitDate: Tue Mar 7 10:35:21 2017 +0000
6 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a9a7a8c8
7
8 sys-kernel/hardened-sources: version bump to 4.9.13-r1
9
10 vanilla-4.9 + genpatches-4.9-14 + grsecurity-3.1-4.9.13-201703052141
11
12 Package-Manager: portage-2.3.3
13
14 sys-kernel/hardened-sources/Manifest | 1 +
15 .../hardened-sources-4.9.13-r1.ebuild | 45 ++++++++++++++++++++++
16 2 files changed, 46 insertions(+)
17
18 diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
19 index d59f6ed5e1f..083225979a1 100644
20 --- a/sys-kernel/hardened-sources/Manifest
21 +++ b/sys-kernel/hardened-sources/Manifest
22 @@ -21,6 +21,7 @@ DIST hardened-patches-4.9.10-1.extras.tar.bz2 1946178 SHA256 6323255450361fda382
23 DIST hardened-patches-4.9.11-1.extras.tar.bz2 1960865 SHA256 dc35be1583d60987c0f5f03abb10bfdc3aee7fc74292dbc3a3bfdd5b3023e0d1 SHA512 c6356de0a3bbaf6d935c777161d0a7c9a556fa36eefce8ab40ca04a2f24287ca2813252329a3b99cd31ee9e04233960b9c9ce4357b47a3743aed198eb1838600 WHIRLPOOL 8436d2245e46c00790e74fdce924fb615a44d1600e97013a9c32378d64b719d7de7ce6b6d1b290172c0548966f5dd3fa6cf6f2d1979144532eeb0828c1e19fae
24 DIST hardened-patches-4.9.12-1.extras.tar.bz2 1917260 SHA256 f2f0c15bf170e4c9aea1d994fd108aa4e6f88db60037a364bc3a7d42454ea306 SHA512 e2baddd4f00320fdf9e30880659e8e87d179b0069b872ca18ec5d1ec010368521a8d16ac61adc5cd750a6e28fcbaa68cfa53abf4dcb45061bd12a868c962b3af WHIRLPOOL 8dccdcbf5e69fd93a9434c44c633a6dbb36336a73fa8b6a22e09fc9775a049cf9229ad36c65377afc4378dbbd4277c64c0f8cba4fc18add4fe7c07e8fb0fae34
25 DIST hardened-patches-4.9.13-1.extras.tar.bz2 1934798 SHA256 50201b1ed6787a37e5b9e69643637acbb088893a3667ceb15eba20d275774005 SHA512 b9a677aa9672d89eb86a1caced777f5cf0370ecfcfd8af778c51405b64fe80defd544dedede596812b105b86d0592ae00e51b6a4a54c2408c2c9acfb6ef58d80 WHIRLPOOL 6bd7e6280929c4d05e9791a3afbd8af632bb45fae4b65a10a1ce4eebcef76e2519f5a747ef1f2709fb7e4757670c4af3fc8f4ce53a45608c127065dfac312248
26 +DIST hardened-patches-4.9.13-2.extras.tar.bz2 1934070 SHA256 b51d648c2931986592d26ba06704d01a25ba39897f1d0346ce88fcc079418e49 SHA512 1675e1303df8d9b15c3a904d926931faf43ef40adc68c1f7fbc6bff9f597bc65c2111344cfb341373fece0696d5b8ffb56a33c2601f5aaf3cf2246bdf827a263 WHIRLPOOL a0d79c3319fc199d4c0b4affb8c019e612509749848d5165b0ecc59095bd2d7bd989cc2307958d7bab3e47fca13b76c7cecf654eda78d49f7f53b641ba825e0a
27 DIST hardened-patches-4.9.9-1.extras.tar.bz2 1956430 SHA256 fc0effbe47fe19cc85a2b4ca08981c28f35cdb45445ba827f60afae15fefa8f3 SHA512 cc10d938b25b2b92e4e9537e4e62bbe7ec70e1c0836ed912098053547b90dfc7888f89d93ee4f200d9c7af9ecc6e7105093b46b6b6ce120f5826652f44f40b91 WHIRLPOOL 46790722e07c4282107eae5fad013f82d6f1d9c074337df74647c2dda61855c580cda0a7ace4e543dc848f58aaef379bc72731ceabe6dc37c0440b7181423692
28 DIST linux-4.4.tar.xz 87295988 SHA256 401d7c8fef594999a460d10c72c5a94e9c2e1022f16795ec51746b0d165418b2 SHA512 13c8459933a8b80608e226a1398e3d1848352ace84bcfb7e6a4a33cb230bbe1ab719d4b58e067283df91ce5311be6d2d595fc8c19e2ae6ecc652499415614b3e WHIRLPOOL 02abc203d867404b9934aaa4c1e5b5dcbb0b0021e91a03f3a7e7fd224eed106821d8b4949f32a590536db150e5a88c16fcde88538777a26d0c17900f0257b1bc
29 DIST linux-4.7.tar.xz 90412100 SHA256 5190c3d1209aeda04168145bf50569dc0984f80467159b1dc50ad731e3285f10 SHA512 e8c02583e17e4fc4214fef694825fcb78c898266f1624deb1cdf56ab5c5fdfa669c5221122a7cf0d502ed6f921ff3797634acd9d294d29e98e3faa8a21920185 WHIRLPOOL e968c89ce714c8d918db6074dabac4b0200c57ff111260313cf5798eeefb8b5b10c1509b64e2ee611a78e81075c588a473b67f9802609b2fef9ebb87ae514d98
30
31 diff --git a/sys-kernel/hardened-sources/hardened-sources-4.9.13-r1.ebuild b/sys-kernel/hardened-sources/hardened-sources-4.9.13-r1.ebuild
32 new file mode 100644
33 index 00000000000..c1e33680755
34 --- /dev/null
35 +++ b/sys-kernel/hardened-sources/hardened-sources-4.9.13-r1.ebuild
36 @@ -0,0 +1,45 @@
37 +# Copyright 1999-2017 Gentoo Foundation
38 +# Distributed under the terms of the GNU General Public License v2
39 +
40 +EAPI="5"
41 +
42 +ETYPE="sources"
43 +K_WANT_GENPATCHES="base"
44 +K_GENPATCHES_VER="14"
45 +K_DEBLOB_AVAILABLE="1"
46 +
47 +inherit kernel-2
48 +detect_version
49 +
50 +HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-2"
51 +HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
52 +SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
53 +
54 +UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
55 +UNIPATCH_EXCLUDE="
56 + 1500_XATTR_USER_PREFIX.patch
57 + 1520_CVE-2017-6074-dccp-skb-freeing-fix.patch
58 + 2900_dev-root-proc-mount-fix.patch"
59 +
60 +DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
61 +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
62 +IUSE="deblob"
63 +
64 +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
65 +
66 +RDEPEND=">=sys-devel/gcc-4.5"
67 +
68 +pkg_postinst() {
69 + kernel-2_pkg_postinst
70 +
71 + local GRADM_COMPAT="sys-apps/gradm-3.1*"
72 +
73 + ewarn
74 + ewarn "Users of grsecurity's RBAC system must ensure they are using"
75 + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
76 + ewarn "It is strongly recommended that the following command is issued"
77 + ewarn "prior to booting a ${PF} kernel for the first time:"
78 + ewarn
79 + ewarn "emerge -na =${GRADM_COMPAT}"
80 + ewarn
81 +}