Gentoo Archives: gentoo-commits

From: "Anthony G. Basile" <blueness@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] dev/blueness:master commit in: sys-kernel/hardened-sources/
Date: Thu, 23 Aug 2012 10:04:01
Message-Id: 1345716196.9ce05c284ee86b51db96897169d17f94e88fdd85.blueness@gentoo
1 commit: 9ce05c284ee86b51db96897169d17f94e88fdd85
2 Author: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
3 AuthorDate: Thu Aug 23 10:03:16 2012 +0000
4 Commit: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
5 CommitDate: Thu Aug 23 10:03:16 2012 +0000
6 URL: http://git.overlays.gentoo.org/gitweb/?p=dev/blueness.git;a=commit;h=9ce05c28
7
8 sys-kernel/hardened-sources: testing patchset 20120822
9
10 (Portage version: 2.1.11.9/git/Linux x86_64, signed Manifest commit with key 0xD0455535)
11
12 ---
13 sys-kernel/hardened-sources/ChangeLog | 8 +++
14 sys-kernel/hardened-sources/Manifest | 29 ++++++++++--
15 .../hardened-sources-2.6.32-r123.ebuild | 51 ++++++++++++++++++++
16 .../hardened-sources-3.2.28.ebuild | 50 +++++++++++++++++++
17 .../hardened-sources-3.5.2-r3.ebuild | 50 +++++++++++++++++++
18 5 files changed, 184 insertions(+), 4 deletions(-)
19
20 diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
21 index 32fc835..993c444 100644
22 --- a/sys-kernel/hardened-sources/ChangeLog
23 +++ b/sys-kernel/hardened-sources/ChangeLog
24 @@ -1,5 +1,13 @@
25
26
27 +*hardened-sources-3.5.2-r3 (23 Aug 2012)
28 +*hardened-sources-3.2.28 (23 Aug 2012)
29 +
30 + 23 Aug 2012; Anthony G. Basile <blueness@g.o>
31 + +hardened-sources-2.6.32-r123.ebuild, +hardened-sources-3.2.28.ebuild,
32 + +hardened-sources-3.5.2-r3.ebuild:
33 + testing patchset 20120822
34 +
35 19 Aug 2012; Anthony G. Basile <blueness@g.o>
36 -hardened-sources-2.6.32-r123.ebuild, -hardened-sources-3.2.27-r2.ebuild,
37 -hardened-sources-3.5.2.ebuild:
38
39 diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
40 index 93017fe..a3ecea0 100644
41 --- a/sys-kernel/hardened-sources/Manifest
42 +++ b/sys-kernel/hardened-sources/Manifest
43 @@ -1,12 +1,33 @@
44 -----BEGIN PGP SIGNED MESSAGE-----
45 Hash: SHA256
46
47 -MISC ChangeLog 34040 SHA256 b50e6f926e8bb1daf723c57b4367e0b0cf05b14d5f65a095146a49c0945d697f SHA512 a90c791295487c642c3ac1bd81d72a6ebda0b8cd98c380a2cc662b7b7c0c9c0cc128da3c1deb7ac1c68d86b11043af30ccd55c8d1651b61dac9b5f56e0203848 WHIRLPOOL 75b45f994cdb879fc98783ed57cdac561504a52b28cf5eb2494fe369be3d578814afb83f201b1f505199d89db057a00ff7b07868d0334b381be7ad8eda59f40a
48 +DIST deblob-2.6.32 84094 SHA256 de625f0bd221c9c38d4453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d SHA512 81263cf9f0e8232f9d56966082514f58c147d12cce0bce384f6830a450006006274f3009dd11c38638cd083d0efc14dc2edd1b79ca22a18835eeee4e9ea15eab WHIRLPOOL c53c3f114e7536426c7f303c8d67ee5d26929ca59b25b5fdcf18b2748acc4699cda42f63908db6f78ab338301da8cad3b3ecbab45ee5c1f15679d4e44042dec4
49 +DIST deblob-3.2 107602 SHA256 5db88405af6d51a77d84354afc3b2bdf673b1a5dcff37bb8db4ccbd12d91db20 SHA512 f34b7128adf716c908cbbbfefe72149fcd88b727d27edab43be65d4e6a55112b6d937d5c2bed86454d58781f3766ba4cc6db668cb6174a6039d276499da37cb4 WHIRLPOOL 0922457f7ca413c9d8115182964a7c051560799c4724452f81cb4c0383cf62c45b0364d6e639bd9d2b9000411d8773cabd2e8af99e8b0dc7f7bdc886db432d6d
50 +DIST deblob-3.5 109252 SHA256 c3273c85e04b7f69acc271da7d2ffba41cf74b364b60f174a4459eec4fae8da9 SHA512 839126a3d2655195c9ff223b98c2c89c403d89e40c37ddaaf0dcef72b28e396906842997cad136e8ed2eebfbe94d3479a77ab3071bad46008d9faeffca48372c WHIRLPOOL 93a993475c7c4342e31d59141dd8c68197243b5a96a34c2df529edadf3733be01d145f8679d01dc4ccaaa4bd8e1c887f75611256210820d27367de651e1d9b4b
51 +DIST deblob-check-2.6.32 247608 SHA256 da1aecdf3ab7f1207b90642d303e52262ccc2ed9e49739b729512b88950d17f3 SHA512 2ba5c7615164a96847afc40af9c9883dc39d8be633e8f07d0d4a6c16b1a22117faf68d5aa40c5aee843dc687a635e2195a4be3bfa40f87dc2b89554d869616b6 WHIRLPOOL ea5dcfd0ee58f1e9ff8dc16229401d37c0271fcae9d065ec648828088cd8d0b8eb8a80efc772d1ed0f075017485609ebf19c01156586728dd335af2dee2bbeff
52 +DIST deblob-check-3.2 423268 SHA256 9e67dd0885aa8ef356dbc15d487c8dea5a54f74c5b03a5d7946b65ee43f12638 SHA512 3abb9968ef4750fda90e4e2283981fd4691b7f9854244413b31d17bb60382a6d809fec929d8d3f9b52397dd9f9fa26783f4c3a25f3f4115b76ed585ea68e9916 WHIRLPOOL 891c3f809af470d680ae896c843c09612fb5124f2805e03d67b28ec4353bff0bc346ae9f680d900f0f63e681be86a0195f9baab7dcf3b5accfda739b106766fa
53 +DIST deblob-check-3.5 464105 SHA256 e7f57e2e47651ea1eb757ca3c8c989edac0f38080d923adccdcdca215eb2bdd9 SHA512 aeebd62fb3ad9550587d4a39c6b4a11a4bdea9ff096ca13df6f3d9b0137f3d05e704d105b19417282b4b70645ba96597b79e9e70d8540f6b15a7e2e9824251b4 WHIRLPOOL 0865a17865e8eabd350924b9e3cbce6994e70a54719d212227e2c22338ef43c7c52931437106cc68fa3e62d600f3ef2bee895441cca8af30b359e988a368e072
54 +DIST genpatches-2.6.32-48.base.tar.bz2 1033142 SHA256 7438e7b7c0ef32e0c639cf89c4f53a3bc7917ca466b1fcf3931adb65ad05b583 SHA512 1e06aef3bdb82e199165730b3b1542dee98a5970c611cc51eb3c0781bec49c3ab555908ad0109d0d1748f1d5d1bfeb6a5e79c1d45ceee9ec9f952290c426f0ab WHIRLPOOL edc94a7404b422dc9eaa5a2d5085938e2992a5ed09c80265c1c85daa933e892819b480b3086fdbe944943b6206748f0965159415b7764cd419f78719742c253b
55 +DIST genpatches-2.6.32-48.extras.tar.bz2 24939 SHA256 ee714d14310fd5242ce2e28a8f8e5fda63ba18957960814876506f8754b9d2a0 SHA512 0c0ddac8d9c3c91f3cdb4b6eb572cf4e7f0417c5f522ba4dea0b18957a3b89f3b6addd449d2b6fc0ffbbe36b225fb1d21b1537ab6a4bc2ae2375735e83a960a2 WHIRLPOOL 4b8f5c3aa5edf2718c013e0d5791a964ab983bb2cead319ce9a9d18cdd891eadb9d7ec5c1bfce50ce74d906c5b28f75cd30bf09e72bd500be082488c40870e98
56 +DIST genpatches-3.2-16.base.tar.bz2 445530 SHA256 3a3d16b7ffa401598bd131a7e8b2996f729b51dd6e88cae79157fd6bca972842 SHA512 6ab56b5dbf8ecf02a1ff8dd0dbf503f8c615050dd7f02b156bd1a0fdbf3655aee48176e88d30b40697d11126d06fc159c1332ddbc22c6e3f31314e1455f2467a WHIRLPOOL 69d9e11dfeb622fe615f48cd146819d264cd60577c0f77567e4b8c372901f63791567a4a210da752ae9a718d79a929519fb7997044a170327099d8a086a7eb83
57 +DIST genpatches-3.2-16.extras.tar.bz2 17208 SHA256 7f60ab18e2965d024b7a36327577bcc771061f2cfac221ed475a6fd6b2ab89c7 SHA512 bea678f7eb56eb992c99d9c49b8d1602228dec00e7fd255432ca30847aae9d4d223bb9ab27f5e72ad422e0d0f2ac319fa590d5fe0e53824b415d6d8bba686add WHIRLPOOL 875f72ab9b81e1cc7a7a06d42783c04204987cfd49042f3cf19b1ed80b0d91f8fdaaf13152b7a22a0d0c1eb9a22719d83eaa9c4fcf9d2024e62420332f081019
58 +DIST genpatches-3.5-3.base.tar.bz2 78425 SHA256 34d7d80a2c0e9d14503871795355c0e435577ec464dc794e41253b70094eb38c SHA512 c5eec19bfb16aa6cc3cb2927a2e4d692bdc60b69fa189da9f1464e8928412db41bfe4132e5ffd5eac2e976ff1460d7ff5a6e3511e792e00821aa92bcdbf93ab9 WHIRLPOOL e7c29ef06b4ce8dffa1f3504d809683481ba62bbdd07b50d7cb8fe4ca07cbb5101990bdb4ce4c4d4338d2815303320849dadc39087232474420d61a769d71ef5
59 +DIST genpatches-3.5-3.extras.tar.bz2 17517 SHA256 6d814f20f8c70be3cae42227731b61d24803beff89b71fa0c10e0359dfdf3aee SHA512 e3682f0960d84d5e46a0b7b7c2edd8f8d721e57c0cb56a05f91222028a125f131cb802865d432b459df8a354609b671edd04ea73a8e0b2c5ac72a0ebc96263f8 WHIRLPOOL 21b41ce4bac4476925f3613d5ac7e5e89d64bcfcc972213972462903a398c07e581d9c3dbf95f47f653b594db5dfc5587d3b08bef67d399bd6ef652a01773ee8
60 +DIST hardened-patches-2.6.32-126.extras.tar.bz2 771210 SHA256 3c91b3fbaa8ae5caef6fca9f9e92282eeef5b9e2c396a0a4aa290261e9e2e231 SHA512 a94df6b2807dab27f4da826f1790a209925c477870f54762c934861907ef4373a8d36e25caeb571cc59e02e884b07c1754693b0815edd901014e2f63c7dadc4c WHIRLPOOL 7ea0a979d11e64bb909879cc8a9b61163be9ff6fda2d6665f62dbddb5b606c7cec5b75bf2ae8d8b1bc96f1f4ca465bcf3fafec9ecbfcc179529526620b385984
61 +DIST hardened-patches-3.2.28-1.extras.tar.bz2 713384 SHA256 c6b44b83b550934a631b544e737eca4c50c269043e21c5e38eada2f5356f8f22 SHA512 cbcc9e284cb3730506e4b3e017a00f2762762203fd494f51c11890be53843e7273ed19d974c60d22ea920ed1c194356e019b0666bd4393d5f4015603702dfbc9 WHIRLPOOL a28c0923494780919d685bff25281030f02c9582b9923d2eb2152611834db4ae391ebdac4b0910352bfcb3c4f8a88a18c258450387f5c690f81ad50ee51a4093
62 +DIST hardened-patches-3.5.2-2.extras.tar.bz2 571307 SHA256 1ccc8aa34ace36e40ea06c892c590ff942a656ace28d150839e41f28fafa43f6 SHA512 23b3a7fb7b5ef40895a0c44f1e18efb1b65a5445e989c7c95284df3d8301f9d27b2d9a440c09ed23a8481ab5ee1266ffbe79a130b6bb8d7818842e6e78bf6720 WHIRLPOOL b4b525d5934bc378ee5b8cfef513bf201ed78ab214ca67ef20c3b7579ee222f797bf518225a6a52f12ff5480545c5a92a1bb3e9bab073b4172ca087796223931
63 +DIST linux-2.6.32.tar.bz2 64424138 SHA256 5099786d80b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e SHA512 739c67875dcb1a80412a034e7d3dddfb6aea4d7a77f12b572fb5afbb827e6ab5a682df7501c0982966e85948ddf7251b8dc5eeb064b2d264025160d8a903bc82 WHIRLPOOL 762dfd7f4c062fdcda00b7fc45ead0f8cb4e321027769a12d92640012f5768c2033da95f24491adfcd6eb453c2658978d4f170e73e4f8a5ccd263efcbe00429d
64 +DIST linux-3.2.tar.bz2 78147838 SHA256 c881fc2b53cf0da7ca4538aa44623a7de043a41f76fd5d0f51a31f6ed699d463 SHA512 1f57b98e8da34b10f37ce94e0f13a994c111d483b104c27a8f58a4a55013a73a9f1ffcebb597be63ce0dfadb92201e93b0e072ba49bac0033026aceb0840c812 WHIRLPOOL 3dc893bde09f064e4614183964a4b9feaab938ca7a739f46f825818a577884eae815f195b52a4c55c571345de59d7ba09631fb68dac481a0837b24868ce60e3d
65 +DIST linux-3.5.tar.bz2 80978443 SHA256 6ab82beb8cbb895b7523daed7ec3ec5850cf460b96788056f1ef5135c852fd23 SHA512 f6de5aaff351097dbe4b7186baea63004ef9efb73a85ccfd718c5856b282c22fb1431dce8588cb823eb75d1f09cd89f20e4936501e2c536f53ea4aa705e09ecc WHIRLPOOL 227c73e187370f2f5be34041c99ff2ff1bc99de4685d29801558a96d7d128c6f09c4a2ce81ce33cd87148c301e43319b42a8a77443e5db37f604fd97d101b7e7
66 +EBUILD hardened-sources-2.6.32-r123.ebuild 1820 SHA256 ec7c351b27390298b50cb2dca625c7ae3de47f6dfa4ba469bca16d4c3410340e SHA512 57f2c4d4173dd01fc4b48ce42c7324d07c37a0013d8ce959dcbbc8219730fc5d6eadfff71729cd74b378ac34c3258ea23a71af36be6e5e1762bbbdb7252abc8e WHIRLPOOL 8f37b790a7a4c47cc73ea04a417c7e748ad17be7a3aee2f57f11e87f78629c3b3fe34d091eb5ed7ef6d55c9715d93ad8334ef098cc93133b92bd27fbf33c7931
67 +EBUILD hardened-sources-3.2.28.ebuild 1816 SHA256 f22316df6b68206f33046dc72f60b09a3ff0ab911a32a85681632967b5ccb516 SHA512 18ea7b8d2f5051cacfd5c2c68d84dc41c5dac59a8b475a5ac01623bd2f534e6d7aae5c7d8fd65663d0b27e955fd141d98b489bf3ad0cd22891fb69c45ee9b16b WHIRLPOOL 5f7107540768300163ea9e24aabb13ad0a3a11b83f470f5771521734ef540493d028f8669052204151b8e4c768c7187e8c06027544b401c6a5783363d7f49ca8
68 +EBUILD hardened-sources-3.5.2-r3.ebuild 1811 SHA256 2b24074ee0860d719fee250c245ea59aab4eaf3e01f4ef1d0338b859fe83e43b SHA512 e9fa124401547ecbfd903f1f4c8c6d6306d9d5b280ad72623eb1fb29b2b0d7e504a2537fbd253f0048d7e736de2c8e25b764515a65cdd5396ef31eeedcef5723 WHIRLPOOL fcca6404cb0c0ab54013a8ca1070f85fb43e3af10136835e6f5e8342ff3e053c0a551fac3a5bea3afb163ac6b1f1656b76f04e63f303719a1544723050e6926a
69 +MISC ChangeLog 34315 SHA256 14d7abbf6644b5320b406a8746d57bedf23853ea3e4a1a5b9755dc469d917b72 SHA512 960db07f7209d2b77e35375a31fe0e1ee6176467a91f26b368b645e699e4fc348e01c991183e4713fac91b81ba2e0f7ea99a6da2a385161c279bfba58d855047 WHIRLPOOL 58c748c0ea629539c1d792ab26f85ad1749cf1db8514b75c87525ff9a39e658db80e78a3d83ca5388b9971d01567248d23f5717ce1c5b3b7d795fa53148f83f8
70 MISC metadata.xml 576 SHA256 53e0d3bfb958bcbf62457a89abe76a7a6f5a2b1df5decb04bf8b840184cc5828 SHA512 aabb8324fc608a74fecda5e4fff0f29d47d34ff20bdea2af8a69726772268d7b3b9d2639cd9c2308b3c79b89d9e923d2a96b212e7cfe59a0bf0008e3fb1c7e6a WHIRLPOOL 11fc891bd478667fe4ca5d203b366fdcf1680dac31bf997ea7c707c6f00a1c03b6ca7a00045b75dc1604e9eb57c2cab03a12f46318320ed6abdb5d6feb06b71f
71 -----BEGIN PGP SIGNATURE-----
72 Version: GnuPG v2.0.19 (GNU/Linux)
73
74 -iEYEAREIAAYFAlAw47QACgkQl5yvQNBFVTXubgCfUwCDHZHMYHqv5D7x9lf0VmnK
75 -IvkAn3NEkVg/A6dy8eL0BtV9FfrJDYSc
76 -=c6Or
77 +iEYEAREIAAYFAlA1/+QACgkQl5yvQNBFVTXlPACgiOA+SeiI/Rdfii/ArAeChkjF
78 +akkAoKBWQZE9aSqduAGFKyhylbTfSafG
79 +=u0S8
80 -----END PGP SIGNATURE-----
81
82 diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r123.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r123.ebuild
83 new file mode 100644
84 index 0000000..c5b6b50
85 --- /dev/null
86 +++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r123.ebuild
87 @@ -0,0 +1,51 @@
88 +# Copyright 1999-2012 Gentoo Foundation
89 +# Distributed under the terms of the GNU General Public License v2
90 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r123.ebuild,v 1.1 2012/08/19 12:56:19 blueness Exp $
91 +
92 +EAPI="4"
93 +
94 +ETYPE="sources"
95 +K_WANT_GENPATCHES="base extras"
96 +K_GENPATCHES_VER="48"
97 +K_DEBLOB_AVAILABLE="1"
98 +
99 +inherit kernel-2
100 +detect_version
101 +
102 +HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-126"
103 +HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
104 +SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
105 +
106 +UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
107 +UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
108 +
109 +DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
110 +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
111 +IUSE="deblob"
112 +
113 +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
114 +
115 +RDEPEND=">=sys-devel/gcc-4.5"
116 +
117 +pkg_postinst() {
118 + kernel-2_pkg_postinst
119 +
120 + local GRADM_COMPAT="sys-apps/gradm-2.9.1*"
121 +
122 + ewarn
123 + ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
124 + ewarn "[server], [workstation], and [virtualization]."
125 + ewarn
126 + ewarn "Those who intend to use one of these predefined grsecurity levels"
127 + ewarn "should read the help associated with the level. Users importing a"
128 + ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
129 + ewarn "should review their selected grsecurity/PaX options carefully."
130 + ewarn
131 + ewarn "Users of grsecurity's RBAC system must ensure they are using"
132 + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
133 + ewarn "It is strongly recommended that the following command is issued"
134 + ewarn "prior to booting a ${PF} kernel for the first time:"
135 + ewarn
136 + ewarn "emerge -na =${GRADM_COMPAT}"
137 + ewarn
138 +}
139
140 diff --git a/sys-kernel/hardened-sources/hardened-sources-3.2.28.ebuild b/sys-kernel/hardened-sources/hardened-sources-3.2.28.ebuild
141 new file mode 100644
142 index 0000000..840bb22
143 --- /dev/null
144 +++ b/sys-kernel/hardened-sources/hardened-sources-3.2.28.ebuild
145 @@ -0,0 +1,50 @@
146 +# Copyright 1999-2012 Gentoo Foundation
147 +# Distributed under the terms of the GNU General Public License v2
148 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-3.2.27-r2.ebuild,v 1.1 2012/08/19 12:58:15 blueness Exp $
149 +
150 +EAPI="4"
151 +
152 +ETYPE="sources"
153 +K_WANT_GENPATCHES="base extras"
154 +K_GENPATCHES_VER="16"
155 +K_DEBLOB_AVAILABLE="1"
156 +
157 +inherit kernel-2
158 +detect_version
159 +
160 +HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-1"
161 +HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
162 +SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
163 +
164 +UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
165 +UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
166 +
167 +DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
168 +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
169 +IUSE="deblob"
170 +
171 +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
172 +
173 +RDEPEND=">=sys-devel/gcc-4.5"
174 +
175 +pkg_postinst() {
176 + kernel-2_pkg_postinst
177 +
178 + local GRADM_COMPAT="sys-apps/gradm-2.9.1*"
179 +
180 + ewarn
181 + ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
182 + ewarn "[server], [workstation], and [virtualization]. Those who intend to"
183 + ewarn "use one of these predefined grsecurity levels should read the help"
184 + ewarn "associated with the level. Because some options require >=gcc-4.5,"
185 + ewarn "users with more, than one version of gcc installed should use gcc-config"
186 + ewarn "to select a compatible version."
187 + ewarn
188 + ewarn "Users of grsecurity's RBAC system must ensure they are using"
189 + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
190 + ewarn "It is strongly recommended that the following command is issued"
191 + ewarn "prior to booting a ${PF} kernel for the first time:"
192 + ewarn
193 + ewarn "emerge -na =${GRADM_COMPAT}"
194 + ewarn
195 +}
196
197 diff --git a/sys-kernel/hardened-sources/hardened-sources-3.5.2-r3.ebuild b/sys-kernel/hardened-sources/hardened-sources-3.5.2-r3.ebuild
198 new file mode 100644
199 index 0000000..6541ffc
200 --- /dev/null
201 +++ b/sys-kernel/hardened-sources/hardened-sources-3.5.2-r3.ebuild
202 @@ -0,0 +1,50 @@
203 +# Copyright 1999-2012 Gentoo Foundation
204 +# Distributed under the terms of the GNU General Public License v2
205 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-3.5.2.ebuild,v 1.1 2012/08/19 13:00:44 blueness Exp $
206 +
207 +EAPI="4"
208 +
209 +ETYPE="sources"
210 +K_WANT_GENPATCHES="base extras"
211 +K_GENPATCHES_VER="3"
212 +K_DEBLOB_AVAILABLE="1"
213 +
214 +inherit kernel-2
215 +detect_version
216 +
217 +HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-2"
218 +HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
219 +SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
220 +
221 +UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
222 +UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
223 +
224 +DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
225 +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
226 +IUSE="deblob"
227 +
228 +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
229 +
230 +RDEPEND=">=sys-devel/gcc-4.5"
231 +
232 +pkg_postinst() {
233 + kernel-2_pkg_postinst
234 +
235 + local GRADM_COMPAT="sys-apps/gradm-2.9.1*"
236 +
237 + ewarn
238 + ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
239 + ewarn "[server], [workstation], and [virtualization]. Those who intend to"
240 + ewarn "use one of these predefined grsecurity levels should read the help"
241 + ewarn "associated with the level. Because some options require >=gcc-4.5,"
242 + ewarn "users with more, than one version of gcc installed should use gcc-config"
243 + ewarn "to select a compatible version."
244 + ewarn
245 + ewarn "Users of grsecurity's RBAC system must ensure they are using"
246 + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
247 + ewarn "It is strongly recommended that the following command is issued"
248 + ewarn "prior to booting a ${PF} kernel for the first time:"
249 + ewarn
250 + ewarn "emerge -na =${GRADM_COMPAT}"
251 + ewarn
252 +}