1 |
commit: 59de9516e7eb4c70775cac85fb01c640db8cc588 |
2 |
Author: Anthony G. Basile <blueness <AT> gentoo <DOT> org> |
3 |
AuthorDate: Sat Feb 26 02:56:03 2011 +0000 |
4 |
Commit: Anthony G. Basile <blueness <AT> gentoo <DOT> org> |
5 |
CommitDate: Sat Feb 26 02:56:03 2011 +0000 |
6 |
URL: http://git.overlays.gentoo.org/gitweb/?p=dev/blueness.git;a=commit;h=59de9516 |
7 |
|
8 |
sys-kernel/hardened-sources: testing patchset 20110222 |
9 |
|
10 |
(Portage version: 2.1.9.25/git/Linux x86_64, unsigned Manifest commit) |
11 |
|
12 |
--- |
13 |
sys-kernel/hardened-sources/ChangeLog | 7 +++ |
14 |
sys-kernel/hardened-sources/Manifest | 14 ++++++- |
15 |
.../hardened-sources-2.6.32-r39.ebuild | 46 ++++++++++++++++++++ |
16 |
.../hardened-sources-2.6.37-r4.ebuild | 46 ++++++++++++++++++++ |
17 |
4 files changed, 112 insertions(+), 1 deletions(-) |
18 |
|
19 |
diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog |
20 |
index 5edff63..c72977f 100644 |
21 |
--- a/sys-kernel/hardened-sources/ChangeLog |
22 |
+++ b/sys-kernel/hardened-sources/ChangeLog |
23 |
@@ -1,5 +1,12 @@ |
24 |
|
25 |
|
26 |
+*hardened-sources-2.6.37-r4 (26 Feb 2011) |
27 |
+*hardened-sources-2.6.32-r39 (26 Feb 2011) |
28 |
+ |
29 |
+ 26 Feb 2011; Anthony G. Basile <blueness@g.o> |
30 |
+ +hardened-sources-2.6.32-r39.ebuild, +hardened-sources-2.6.37-r4.ebuild: |
31 |
+ testing patchset 20110222 |
32 |
+ |
33 |
18 Feb 2011; Anthony G. Basile <blueness@g.o> |
34 |
-hardened-sources-2.6.32-r37.ebuild, -hardened-sources-2.6.37-r2.ebuild: |
35 |
Moved to tree. |
36 |
|
37 |
diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest |
38 |
index c86ee01..5d4ec7c 100644 |
39 |
--- a/sys-kernel/hardened-sources/Manifest |
40 |
+++ b/sys-kernel/hardened-sources/Manifest |
41 |
@@ -1,2 +1,14 @@ |
42 |
-MISC ChangeLog 10808 RMD160 14278e1afeea4d33f8a050c62c7bcaaf8c7aeb02 SHA1 10fea14207c9651d2cb9c8cc3d3743994a59f0cc SHA256 d055e739dac098b5df6ecc96540c01abc59fdb6bb5d1ac20bd1042fd5cdc0bd8 |
43 |
+DIST deblob-2.6.32 84094 RMD160 394f46ec5b869638a7bc2e87beb118167c9bd6cb SHA1 1a2a1efb72126609d9e3b9be99ae5be2751efd06 SHA256 de625f0bd221c9c38d4453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d |
44 |
+DIST deblob-check-2.6.32 247608 RMD160 840bf8a229ea79810519eee6241edb85b78a6562 SHA1 d45a24eb16e5ac956c0fcddbc1ac4d67e326c7b8 SHA256 da1aecdf3ab7f1207b90642d303e52262ccc2ed9e49739b729512b88950d17f3 |
45 |
+DIST genpatches-2.6.32-31.base.tar.bz2 794139 RMD160 02d008281353b0edc46085edf2eef5a636341f5f SHA1 036efeae2a274968cdaf1b629ad5ee1f1231d2a8 SHA256 7c9b61992b8979d2b9ce0d137a0c94662fbc091171eeaa6ea85e986e0bf3eff7 |
46 |
+DIST genpatches-2.6.32-31.extras.tar.bz2 24934 RMD160 e3e1d60fb45a3e3c818ddda36b9180d4fc46679e SHA1 d16a34dfa35d163ea4042058b3865c389f3802e9 SHA256 50b70c76461aa52f7f2ad88175e7f08eb555f7f1dfd274759ec0c2a9748bde5e |
47 |
+DIST genpatches-2.6.37-2.base.tar.bz2 113101 RMD160 d486c639f1baa01be67f2d0c985d930568918445 SHA1 21c9b7f74fd35bf84627594e116cf06f636e1fe5 SHA256 1077189edcfd21e2a1c12ddbcd840fe930ef413492b30ec593e4a6ae0f8d0241 |
48 |
+DIST genpatches-2.6.37-2.extras.tar.bz2 15548 RMD160 058404ed77eddea4ac25b5e3ae8aa47bea830d80 SHA1 21c020468c1ad8b4223d2fb76bd5e7217cc3b25c SHA256 1675dc20a7607dc4574bb64478a3807be44e70a1193cd0c26cd15d0083aef026 |
49 |
+DIST hardened-patches-2.6.32-42.extras.tar.bz2 374957 RMD160 bfdbd629e59b471f0e11004f9abe5fdc470ef718 SHA1 6f1a610de6e1bb58ccc6e86db726b154218886cb SHA256 2809041de79a0e26378d435a21c80f39d0347e2b41a30e3bdcd7b29cf8237d9d |
50 |
+DIST hardened-patches-2.6.37-5.extras.tar.bz2 362502 RMD160 d29905e8c61bd7007bcf31f2fce0fe9ce6a1dfd2 SHA1 28f044c827d8e560f429233c7f327f964b4a1881 SHA256 01f472752e69fc260846d74d9ccc287b8e751e8b09d79daf5281d5a213577389 |
51 |
+DIST linux-2.6.32.tar.bz2 64424138 RMD160 b93742cbaf8174f2200d2dbef0d47a26c618039c SHA1 410b4fc818023bfef60064e973ff0ab46d3bfb19 SHA256 5099786d80b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e |
52 |
+DIST linux-2.6.37.tar.bz2 73577826 RMD160 fced3801f3c94aa545c90e10981de616376a3b41 SHA1 eba83c89e71a86060ef6ff76aefff660aef819e2 SHA256 edbf091805414739cf57a3bbfeba9e87f5e74f97e38f04d12060e9e0c71e383a |
53 |
+EBUILD hardened-sources-2.6.32-r39.ebuild 1763 RMD160 20290bb2af2cfb001d0417664e3927be86172464 SHA1 1491a0c453699b14eb481357a711725d710275a1 SHA256 1ec9aa2a9907b83d132dbf4ec445595cbcbf612fa38463941771d530f5b730da |
54 |
+EBUILD hardened-sources-2.6.37-r4.ebuild 1786 RMD160 3b3e2c93f6a409f5f79c7008354b8a6f04394c26 SHA1 ccddeb04bf30b495ad3794908e7e54392303b0f0 SHA256 1542e7cbfe944297117f7f412e47e318023eed4fe1a71c1a37332b50fe310157 |
55 |
+MISC ChangeLog 11053 RMD160 0bf3c8c14c202f58863c6aa7b4ced4f7d6a64053 SHA1 988bea336db94d5105eff2eec19edd1f869879d2 SHA256 31edf3cf1224adbc11eecadc6acd94e64725ca1559f1eaf7bed19bebb38a667f |
56 |
MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SHA1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8fcfd351f2f39ed63da68af3a5751fc2058d0d03813 |
57 |
|
58 |
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r39.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r39.ebuild |
59 |
new file mode 100644 |
60 |
index 0000000..e584b21 |
61 |
--- /dev/null |
62 |
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r39.ebuild |
63 |
@@ -0,0 +1,46 @@ |
64 |
+# Copyright 1999-2011 Gentoo Foundation |
65 |
+# Distributed under the terms of the GNU General Public License v2 |
66 |
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r38.ebuild,v 1.1 2011/02/21 18:04:04 blueness Exp $ |
67 |
+ |
68 |
+ETYPE="sources" |
69 |
+K_WANT_GENPATCHES="base extras" |
70 |
+K_GENPATCHES_VER="31" |
71 |
+ |
72 |
+inherit kernel-2 |
73 |
+detect_version |
74 |
+ |
75 |
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-42" |
76 |
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2" |
77 |
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}" |
78 |
+ |
79 |
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2" |
80 |
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch" |
81 |
+ |
82 |
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})" |
83 |
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/" |
84 |
+IUSE="" |
85 |
+ |
86 |
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86" |
87 |
+ |
88 |
+pkg_postinst() { |
89 |
+ kernel-2_pkg_postinst |
90 |
+ |
91 |
+ local GRADM_COMPAT="sys-apps/gradm-2.2.1*" |
92 |
+ |
93 |
+ ewarn |
94 |
+ ewarn "Hardened Gentoo provides four different predefined grsecurity level:" |
95 |
+ ewarn "[server], [server no rbac] [workstation] [workstation no rbac]" |
96 |
+ ewarn |
97 |
+ ewarn "Those who intend to use one of these predefined grsecurity levels" |
98 |
+ ewarn "should read the help associated with the level. Users importing a" |
99 |
+ ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32," |
100 |
+ ewarn "should review their selected grsecurity/PaX options carefully." |
101 |
+ ewarn |
102 |
+ ewarn "Users of grsecurity's RBAC system must ensure they are using" |
103 |
+ ewarn "${GRADM_COMPAT}, which is compatible with ${PF}." |
104 |
+ ewarn "It is strongly recommended that the following command is issued" |
105 |
+ ewarn "prior to booting a ${PF} kernel for the first time:" |
106 |
+ ewarn |
107 |
+ ewarn "emerge -na =${GRADM_COMPAT}" |
108 |
+ ewarn |
109 |
+} |
110 |
|
111 |
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.37-r4.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.37-r4.ebuild |
112 |
new file mode 100644 |
113 |
index 0000000..f58acb8 |
114 |
--- /dev/null |
115 |
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.37-r4.ebuild |
116 |
@@ -0,0 +1,46 @@ |
117 |
+# Copyright 1999-2011 Gentoo Foundation |
118 |
+# Distributed under the terms of the GNU General Public License v2 |
119 |
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.37-r3.ebuild,v 1.1 2011/02/21 18:05:59 blueness Exp $ |
120 |
+ |
121 |
+ETYPE="sources" |
122 |
+K_WANT_GENPATCHES="base extras" |
123 |
+K_GENPATCHES_VER="2" |
124 |
+ |
125 |
+inherit kernel-2 |
126 |
+detect_version |
127 |
+ |
128 |
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-5" |
129 |
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2" |
130 |
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}" |
131 |
+ |
132 |
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2" |
133 |
+UNIPATCH_EXCLUDE="1001_linux-2.6.37.2.patch 4200_fbcondecor-0.9.6.patch" |
134 |
+ |
135 |
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})" |
136 |
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/" |
137 |
+IUSE="" |
138 |
+ |
139 |
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86" |
140 |
+ |
141 |
+pkg_postinst() { |
142 |
+ kernel-2_pkg_postinst |
143 |
+ |
144 |
+ local GRADM_COMPAT="sys-apps/gradm-2.2.1*" |
145 |
+ |
146 |
+ ewarn |
147 |
+ ewarn "Hardened Gentoo provides four different predefined grsecurity level:" |
148 |
+ ewarn "[server], [server no rbac] [workstation] [workstation no rbac]" |
149 |
+ ewarn |
150 |
+ ewarn "Those who intend to use one of these predefined grsecurity levels" |
151 |
+ ewarn "should read the help associated with the level. Users importing a" |
152 |
+ ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32," |
153 |
+ ewarn "should review their selected grsecurity/PaX options carefully." |
154 |
+ ewarn |
155 |
+ ewarn "Users of grsecurity's RBAC system must ensure they are using" |
156 |
+ ewarn "${GRADM_COMPAT}, which is compatible with ${PF}." |
157 |
+ ewarn "It is strongly recommended that the following command is issued" |
158 |
+ ewarn "prior to booting a ${PF} kernel for the first time:" |
159 |
+ ewarn |
160 |
+ ewarn "emerge -na =${GRADM_COMPAT}" |
161 |
+ ewarn |
162 |
+} |