Gentoo Archives: gentoo-commits

From: "Anthony G. Basile (blueness)" <blueness@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] gentoo-x86 commit in sys-kernel/hardened-sources: ChangeLog hardened-sources-2.6.32-r38.ebuild
Date: Mon, 21 Feb 2011 18:04:15
Message-Id: 20110221180405.10A7220054@flycatcher.gentoo.org
1 blueness 11/02/21 18:04:05
2
3 Modified: ChangeLog
4 Added: hardened-sources-2.6.32-r38.ebuild
5 Log:
6 Same codebase as hardened-sources-2.6.32-r37, updated predefined GRSEC/PaX
7
8 (Portage version: 2.1.9.25/cvs/Linux x86_64)
9
10 Revision Changes Path
11 1.390 sys-kernel/hardened-sources/ChangeLog
12
13 file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-kernel/hardened-sources/ChangeLog?rev=1.390&view=markup
14 plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-kernel/hardened-sources/ChangeLog?rev=1.390&content-type=text/plain
15 diff : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-kernel/hardened-sources/ChangeLog?r1=1.389&r2=1.390
16
17 Index: ChangeLog
18 ===================================================================
19 RCS file: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v
20 retrieving revision 1.389
21 retrieving revision 1.390
22 diff -u -r1.389 -r1.390
23 --- ChangeLog 18 Feb 2011 12:51:04 -0000 1.389
24 +++ ChangeLog 21 Feb 2011 18:04:04 -0000 1.390
25 @@ -1,6 +1,13 @@
26 # ChangeLog for sys-kernel/hardened-sources
27 # Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
28 -# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.389 2011/02/18 12:51:04 blueness Exp $
29 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.390 2011/02/21 18:04:04 blueness Exp $
30 +
31 +*hardened-sources-2.6.32-r38 (21 Feb 2011)
32 +
33 + 21 Feb 2011; Anthony G. Basile <blueness@g.o>
34 + +hardened-sources-2.6.32-r38.ebuild:
35 + Same codebase as hardened-sources-2.6.32-r37, updated predefined GRSEC/PaX
36 + settings
37
38 *hardened-sources-2.6.37-r2 (18 Feb 2011)
39
40
41
42
43 1.1 sys-kernel/hardened-sources/hardened-sources-2.6.32-r38.ebuild
44
45 file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r38.ebuild?rev=1.1&view=markup
46 plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r38.ebuild?rev=1.1&content-type=text/plain
47
48 Index: hardened-sources-2.6.32-r38.ebuild
49 ===================================================================
50 # Copyright 1999-2011 Gentoo Foundation
51 # Distributed under the terms of the GNU General Public License v2
52 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r38.ebuild,v 1.1 2011/02/21 18:04:04 blueness Exp $
53
54 ETYPE="sources"
55 K_WANT_GENPATCHES="base extras"
56 K_GENPATCHES_VER="30"
57
58 inherit kernel-2
59 detect_version
60
61 HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-41"
62 HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
63 SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
64
65 UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
66 UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
67
68 DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
69 HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
70 IUSE=""
71
72 KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
73
74 pkg_postinst() {
75 kernel-2_pkg_postinst
76
77 local GRADM_COMPAT="sys-apps/gradm-2.2.1*"
78
79 ewarn
80 ewarn "Hardened Gentoo provides four different predefined grsecurity level:"
81 ewarn "[server], [server no rbac] [workstation] [workstation no rbac]"
82 ewarn
83 ewarn "Those who intend to use one of these predefined grsecurity levels"
84 ewarn "should read the help associated with the level. Users importing a"
85 ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
86 ewarn "should review their selected grsecurity/PaX options carefully."
87 ewarn
88 ewarn "Users of grsecurity's RBAC system must ensure they are using"
89 ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
90 ewarn "It is strongly recommended that the following command is issued"
91 ewarn "prior to booting a ${PF} kernel for the first time:"
92 ewarn
93 ewarn "emerge -na =${GRADM_COMPAT}"
94 ewarn
95 }