[gentoo-commits] gentoo-x86 commit in sys-kernel/hardened-sources: ChangeLog hardened-sources-2.6.32-r14.ebuild

[Anthony G. Basile (blueness)]

blueness    10/08/21 11:50:29

  Modified:             ChangeLog
  Added:                hardened-sources-2.6.32-r14.ebuild
  Log:
  Based on vanilla 2.6.32.19 + genpatches + grsec-2.2.0-2.6.32.19-201008131840
  (Portage version: 2.1.8.3/cvs/Linux x86_64)

Revision  Changes    Path
1.332                sys-kernel/hardened-sources/ChangeLog

file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-kernel/hardened-sources/ChangeLog?rev=1.332&view=markup
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-kernel/hardened-sources/ChangeLog?rev=1.332&content-type=text/plain
diff : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-kernel/hardened-sources/ChangeLog?r1=1.331&r2=1.332

Index: ChangeLog
===================================================================
RCS file: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v
retrieving revision 1.331
retrieving revision 1.332
diff -u -r1.331 -r1.332
--- ChangeLog	14 Aug 2010 19:18:30 -0000	1.331
+++ ChangeLog	21 Aug 2010 11:50:29 -0000	1.332
@@ -1,6 +1,13 @@
 # ChangeLog for sys-kernel/hardened-sources
 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.331 2010/08/14 19:18:30 blueness Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.332 2010/08/21 11:50:29 blueness Exp $
+
+*hardened-sources-2.6.32-r14 (21 Aug 2010)
+
+  21 Aug 2010; Anthony G. Basile <blueness@g.o>
+  +hardened-sources-2.6.32-r14.ebuild:
+  Based on vanilla 2.6.32.19 + genpatches +
+  grsec-2.2.0-2.6.32.19-201008131840
 
 *hardened-sources-2.6.32-r13 (14 Aug 2010)
 



1.1                  sys-kernel/hardened-sources/hardened-sources-2.6.32-r14.ebuild

file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r14.ebuild?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r14.ebuild?rev=1.1&content-type=text/plain

Index: hardened-sources-2.6.32-r14.ebuild
===================================================================
# Copyright 1999-2010 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r14.ebuild,v 1.1 2010/08/21 11:50:29 blueness Exp $

ETYPE="sources"
K_WANT_GENPATCHES="base extras"
K_GENPATCHES_VER="17"

inherit kernel-2
detect_version

HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-17"
HGPV_URI="mirror://gentoo/hardened-patches-${HGPV}.extras.tar.bz2"
SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"

# Note: 4420_grsecurity-2.2.0-2.6.32.19-201008131840.patch includes
# 1800_page-table-unmap-for-stack-guard-fix.patch so we don't want
# to apply it twice: see https://bugzilla.kernel.org/show_bug.cgi?id=16588
UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
UNIPATCH_EXCLUDE="1800_page-table-unmap-for-stack-guard-fix.patch 4200_fbcondecor-0.9.6.patch"

DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
IUSE=""

KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"

pkg_postinst() {
	kernel-2_pkg_postinst

	local GRADM_COMPAT="sys-apps/gradm-2.2.0*"

	ewarn
	ewarn "Hardened Gentoo provides four different predefined grsecurity level:"
	ewarn "[server], [server no rbac] [workstation] [workstation no rbac]"
	ewarn
	ewarn "Those who intend to use one of these predefined grsecurity levels"
	ewarn "should read the help associated with the level.  Users importing a"
	ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
	ewarn "should review their selected grsecurity/PaX options carefully."
	ewarn
	ewarn "Users of grsecurity's RBAC system must ensure they are using"
	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
	ewarn "It is strongly recommended that the following command is issued"
	ewarn "prior to booting a ${PF} kernel for the first time:"
	ewarn
	ewarn "emerge -na =${GRADM_COMPAT}"
	ewarn
}