1 |
commit: d42fc0f78159ee0896a37e73f5e5c86e67836f78 |
2 |
Author: Jason Zaman <perfinion <AT> gentoo <DOT> org> |
3 |
AuthorDate: Mon Aug 22 03:38:34 2016 +0000 |
4 |
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> |
5 |
CommitDate: Mon Aug 29 01:23:50 2016 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d42fc0f7 |
7 |
|
8 |
sys-boot/tboot: drop old |
9 |
|
10 |
Package-Manager: portage-2.2.28 |
11 |
|
12 |
sys-boot/tboot/Manifest | 1 - |
13 |
.../tboot/files/tboot-1.8.2-disable-pcid.patch | 26 -------- |
14 |
.../tboot/files/tboot-1.8.2-genkernel_arch.patch | 57 ----------------- |
15 |
.../tboot/files/tboot-1.8.2-stack-check-no.patch | 11 ---- |
16 |
sys-boot/tboot/tboot-1.8.3.ebuild | 73 ---------------------- |
17 |
5 files changed, 168 deletions(-) |
18 |
|
19 |
diff --git a/sys-boot/tboot/Manifest b/sys-boot/tboot/Manifest |
20 |
index 5f5644cd..2d382a5 100644 |
21 |
--- a/sys-boot/tboot/Manifest |
22 |
+++ b/sys-boot/tboot/Manifest |
23 |
@@ -1,2 +1 @@ |
24 |
-DIST tboot-1.8.3.tar.gz 554084 SHA256 2f2e0c3865b45691f76b31730c5aaea2f076e7949ee6309e78ed7f80d8c53d39 SHA512 cde961af07c64a7d8b77f64d48e6d9230048135420e78efc6277f32e4df78012b5bbd73e4f2ce1cd6194091ec306cc84c65356865815a7311e140fd2b94f6443 WHIRLPOOL 030ab29ee710c6201e894abfd693944490c157b2607425dd6d476f836a635ee7f82c29180ad13fc80508596dc62148aa1c108bd7aba1c9ca7329f99197d97db6 |
25 |
DIST tboot-1.9.4.tar.gz 2107175 SHA256 7167e5615def4ac0f25b2f9139b3d361a0a20d91386d80b1d865107b3f552f39 SHA512 93db95be54a1286dffe87cf6f5d1e31ac0c4a452b11a11789fec66255c847a9e14251579de0f6ba4c5c122423b45e83751a8287d37e27ea3acba608774d7ac0b WHIRLPOOL 2bf9220317dc5bbc927fb10d07a1d7f5cef2d5351fbf81e45f276b5f317785c1cfc1f1e4b78ac426bceb66641339d7179bff8fbbb867b67aa215544193a5baa1 |
26 |
|
27 |
diff --git a/sys-boot/tboot/files/tboot-1.8.2-disable-pcid.patch b/sys-boot/tboot/files/tboot-1.8.2-disable-pcid.patch |
28 |
deleted file mode 100644 |
29 |
index 383338e..00000000 |
30 |
--- a/sys-boot/tboot/files/tboot-1.8.2-disable-pcid.patch |
31 |
+++ /dev/null |
32 |
@@ -1,26 +0,0 @@ |
33 |
-diff -ur tboot-1.8.2.orig/tboot/common/shutdown.S tboot-1.8.2/tboot/common/shutdown.S |
34 |
---- tboot-1.8.2.orig/tboot/common/shutdown.S 2014-07-28 12:24:22.000000000 +0400 |
35 |
-+++ tboot-1.8.2/tboot/common/shutdown.S 2015-05-07 03:05:47.300985413 +0400 |
36 |
-@@ -34,6 +34,11 @@ |
37 |
- */ |
38 |
- |
39 |
- compat_mode_entry: |
40 |
-+ /* Disable PCID */ |
41 |
-+ movl %cr4, %eax |
42 |
-+ andl $~CR4_PCIDE, %eax |
43 |
-+ movl %eax, %cr4 |
44 |
-+ |
45 |
- /* Disable paging and therefore leave 64 bit mode. */ |
46 |
- movl %cr0, %eax |
47 |
- andl $~CR0_PG, %eax |
48 |
-diff -ur tboot-1.8.2.orig/tboot/include/processor.h tboot-1.8.2/tboot/include/processor.h |
49 |
---- tboot-1.8.2.orig/tboot/include/processor.h 2014-07-28 12:24:22.000000000 +0400 |
50 |
-+++ tboot-1.8.2/tboot/include/processor.h 2015-05-07 03:04:58.721244858 +0400 |
51 |
-@@ -92,6 +92,7 @@ |
52 |
- #define CR4_XMM 0x00000400 /* enable SIMD/MMX2 to use except 16 */ |
53 |
- #define CR4_VMXE 0x00002000/* enable VMX */ |
54 |
- #define CR4_SMXE 0x00004000/* enable SMX */ |
55 |
-+#define CR4_PCIDE 0x00020000/* enable PCID */ |
56 |
- |
57 |
- #ifndef __ASSEMBLY__ |
58 |
- |
59 |
|
60 |
diff --git a/sys-boot/tboot/files/tboot-1.8.2-genkernel_arch.patch b/sys-boot/tboot/files/tboot-1.8.2-genkernel_arch.patch |
61 |
deleted file mode 100644 |
62 |
index 7fdcad6..00000000 |
63 |
--- a/sys-boot/tboot/files/tboot-1.8.2-genkernel_arch.patch |
64 |
+++ /dev/null |
65 |
@@ -1,57 +0,0 @@ |
66 |
-diff -ru tboot-1.8.2.orig/tboot/20_linux_tboot tboot-1.8.2/tboot/20_linux_tboot |
67 |
---- tboot-1.8.2.orig/tboot/20_linux_tboot 2014-08-02 00:18:58.397147454 +0400 |
68 |
-+++ tboot-1.8.2/tboot/20_linux_tboot 2014-08-02 00:20:09.766700748 +0400 |
69 |
-@@ -121,6 +121,15 @@ |
70 |
- EOF |
71 |
- } |
72 |
- |
73 |
-+machine=`uname -m` |
74 |
-+case "$machine" in |
75 |
-+ i?86) GENKERNEL_ARCH="x86" ;; |
76 |
-+ mips|mips64) GENKERNEL_ARCH="mips" ;; |
77 |
-+ mipsel|mips64el) GENKERNEL_ARCH="mipsel" ;; |
78 |
-+ arm*) GENKERNEL_ARCH="arm" ;; |
79 |
-+ *) GENKERNEL_ARCH="$machine" ;; |
80 |
-+esac |
81 |
-+ |
82 |
- linux_list=`for i in /boot/vmlinu[xz]-* /vmlinu[xz]-* ; do |
83 |
- basename=$(basename $i) |
84 |
- version=$(echo $basename | sed -e "s,^[^0-9]*-,,g") |
85 |
-@@ -159,6 +168,8 @@ |
86 |
- "initrd-${version}" "initramfs-${version}.img" \ |
87 |
- "initrd.img-${alt_version}" "initrd-${alt_version}.img" \ |
88 |
- "initrd-${alt_version}" "initramfs-${alt_version}.img" \ |
89 |
-+ "initramfs-genkernel-${GENKERNEL_ARCH}-${version}" \ |
90 |
-+ "initramfs-genkernel-${GENKERNEL_ARCH}-${alt_version}" \ |
91 |
- "initramfs-genkernel-${version}" \ |
92 |
- "initramfs-genkernel-${alt_version}"; do |
93 |
- if test -e "${dirname}/${i}" ; then |
94 |
-diff -ru tboot-1.8.2.orig/tboot/20_linux_xen_tboot tboot-1.8.2/tboot/20_linux_xen_tboot |
95 |
---- tboot-1.8.2.orig/tboot/20_linux_xen_tboot 2014-08-02 00:18:58.397147454 +0400 |
96 |
-+++ tboot-1.8.2/tboot/20_linux_xen_tboot 2014-08-02 00:21:12.840438230 +0400 |
97 |
-@@ -147,6 +147,16 @@ |
98 |
- if [ "x${linux_list}" = "x" ] ; then |
99 |
- exit 0 |
100 |
- fi |
101 |
-+ |
102 |
-+machine=`uname -m` |
103 |
-+case "$machine" in |
104 |
-+ i?86) GENKERNEL_ARCH="x86" ;; |
105 |
-+ mips|mips64) GENKERNEL_ARCH="mips" ;; |
106 |
-+ mipsel|mips64el) GENKERNEL_ARCH="mipsel" ;; |
107 |
-+ arm*) GENKERNEL_ARCH="arm" ;; |
108 |
-+ *) GENKERNEL_ARCH="$machine" ;; |
109 |
-+esac |
110 |
-+ |
111 |
- xen_list=`for i in /boot/xen*; do |
112 |
- if grub_file_is_not_garbage "$i" ; then echo -n "$i " ; fi |
113 |
- done` |
114 |
-@@ -188,6 +198,8 @@ |
115 |
- for i in "initrd.img-${version}" "initrd-${version}.img" \ |
116 |
- "initrd-${version}" "initrd.img-${alt_version}" \ |
117 |
- "initrd-${alt_version}.img" "initrd-${alt_version}" \ |
118 |
-+ "initramfs-genkernel-${GENKERNEL_ARCH}-${version}" \ |
119 |
-+ "initramfs-genkernel-${GENKERNEL_ARCH}-${alt_version}" \ |
120 |
- "initramfs-genkernel-${version}" \ |
121 |
- "initramfs-genkernel-${alt_version}" ; do |
122 |
- if test -e "${dirname}/${i}" ; then |
123 |
|
124 |
diff --git a/sys-boot/tboot/files/tboot-1.8.2-stack-check-no.patch b/sys-boot/tboot/files/tboot-1.8.2-stack-check-no.patch |
125 |
deleted file mode 100644 |
126 |
index 5d2ea62..00000000 |
127 |
--- a/sys-boot/tboot/files/tboot-1.8.2-stack-check-no.patch |
128 |
+++ /dev/null |
129 |
@@ -1,11 +0,0 @@ |
130 |
-diff -ur tboot-1.8.2.orig/tboot/Config.mk tboot-1.8.2/tboot/Config.mk |
131 |
---- tboot-1.8.2.orig/tboot/Config.mk 2014-07-28 12:24:21.000000000 +0400 |
132 |
-+++ tboot-1.8.2/tboot/Config.mk 2015-05-05 02:14:26.333222301 +0400 |
133 |
-@@ -30,6 +30,7 @@ |
134 |
- CFLAGS += $(call cc-option,$(CC),-nopie,) |
135 |
- CFLAGS += $(call cc-option,$(CC),-fno-stack-protector,) |
136 |
- CFLAGS += $(call cc-option,$(CC),-fno-stack-protector-all,) |
137 |
-+CFLAGS += $(call cc-option,$(CC),-fstack-check=no,) |
138 |
- |
139 |
- # changeset variable for banner |
140 |
- CFLAGS += -DTBOOT_CHANGESET=\""$(shell ((hg parents --template "{isodate|isodate} {rev}:{node|short}" >/dev/null && hg parents --template "{isodate|isodate} {rev}:{node|short}") || echo "2014-07-28 12:00 +0800 1.8.2") 2>/dev/null)"\" |
141 |
|
142 |
diff --git a/sys-boot/tboot/tboot-1.8.3.ebuild b/sys-boot/tboot/tboot-1.8.3.ebuild |
143 |
deleted file mode 100644 |
144 |
index 7a23f65..00000000 |
145 |
--- a/sys-boot/tboot/tboot-1.8.3.ebuild |
146 |
+++ /dev/null |
147 |
@@ -1,73 +0,0 @@ |
148 |
-# Copyright 1999-2016 Gentoo Foundation |
149 |
-# Distributed under the terms of the GNU General Public License v2 |
150 |
-# $Id$ |
151 |
- |
152 |
-EAPI=5 |
153 |
- |
154 |
-inherit flag-o-matic mount-boot |
155 |
- |
156 |
-DESCRIPTION="Performs a measured and verified boot using Intel Trusted Execution Technology" |
157 |
-HOMEPAGE="https://sourceforge.net/projects/tboot/" |
158 |
-SRC_URI="mirror://sourceforge/${PN}/${P}.tar.gz" |
159 |
- |
160 |
-LICENSE="BSD" |
161 |
-SLOT="0" |
162 |
-KEYWORDS="~amd64 ~x86 -*" |
163 |
-IUSE="custom-cflags selinux" |
164 |
- |
165 |
-RESTRICT="test" # test is restricted because it requires patching the kernel src |
166 |
- |
167 |
-DEPEND="app-crypt/trousers |
168 |
-app-crypt/tpm-tools" |
169 |
- |
170 |
-RDEPEND="${DEPEND} |
171 |
-sys-boot/grub:2 |
172 |
-selinux? ( sec-policy/selinux-tboot )" |
173 |
- |
174 |
-DOCS=(README COPYING CHANGELOG) |
175 |
- |
176 |
-src_prepare() { |
177 |
- epatch "${FILESDIR}/tboot-1.8.2-genkernel_arch.patch" |
178 |
- epatch "${FILESDIR}/tboot-1.8.2-stack-check-no.patch" # breaks with ssp |
179 |
- epatch "${FILESDIR}/tboot-1.8.2-disable-pcid.patch" # PaX enables pcid |
180 |
- |
181 |
- sed -i 's/ -Werror//g' Config.mk || die |
182 |
- sed -i 's/^INSTALL_STRIP = -s$//' Config.mk || die # QA Errors |
183 |
- |
184 |
- epatch_user |
185 |
-} |
186 |
- |
187 |
-src_compile() { |
188 |
- use custom-cflags && export TBOOT_CFLAGS=${CFLAGS} || unset CCASFLAGS CFLAGS CPPFLAGS LDFLAGS |
189 |
- |
190 |
- if use amd64; then |
191 |
- MAKEARGS="TARGET_ARCH=x86_64" |
192 |
- else |
193 |
- MAKEARGS="TARGET_ARCH=i686" |
194 |
- fi |
195 |
- |
196 |
- emake debug=y ${MAKEARGS} build |
197 |
-} |
198 |
- |
199 |
-src_install() { |
200 |
- emake DISTDIR="${D}" install |
201 |
- |
202 |
- dodoc "${DOCS[@]}" |
203 |
- dodoc docs/*.txt lcptools/*.{txt,pdf} || die "docs failed" |
204 |
- |
205 |
- cd "${D}" |
206 |
- mkdir -p usr/lib/tboot/ || die |
207 |
- mv boot usr/lib/tboot/ || die |
208 |
-} |
209 |
- |
210 |
-pkg_postinst() { |
211 |
- mount-boot_mount_boot_partition |
212 |
- |
213 |
- cp ${ROOT%/}/usr/lib/tboot/boot/* ${ROOT%/}/boot/ |
214 |
- |
215 |
- mount-boot_pkg_postinst |
216 |
- |
217 |
- ewarn "Please remember to download the SINIT AC Module relevant" |
218 |
- ewarn "for your platform from:" |
219 |
- ewarn "http://software.intel.com/en-us/articles/intel-trusted-execution-technology/" |
220 |
-} |