Based on 2.6.32.46 + genpatches-2.6.32-43 + grsecurity-2.2.2-2.6.32.46-201110200052
authorAnthony G. Basile <blueness@gentoo.org>
Sun, 23 Oct 2011 11:16:16 +0000 (11:16 +0000)
committerAnthony G. Basile <blueness@gentoo.org>
Sun, 23 Oct 2011 11:16:16 +0000 (11:16 +0000)
Package-Manager: portage-2.1.10.11/cvs/Linux x86_64

sys-kernel/hardened-sources/ChangeLog
sys-kernel/hardened-sources/Manifest
sys-kernel/hardened-sources/hardened-sources-2.6.32-r71.ebuild [new file with mode: 0644]

index 3f6882f3b04d852643c892f49c6ec0a0009c709f..c402776c4851a4d8a32c3ee20b85af13ed9e156b 100644 (file)
@@ -1,6 +1,13 @@
 # ChangeLog for sys-kernel/hardened-sources
 # Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.486 2011/10/23 11:13:15 blueness Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.487 2011/10/23 11:16:16 blueness Exp $
+
+*hardened-sources-2.6.32-r71 (23 Oct 2011)
+
+  23 Oct 2011; Anthony G. Basile <blueness@gentoo.org>
+  +hardened-sources-2.6.32-r71.ebuild:
+  Based on 2.6.32.46 + genpatches-2.6.32-43 +
+  grsecurity-2.2.2-2.6.32.46-201110200052
 
   23 Oct 2011; Anthony G. Basile <blueness@gentoo.org>
   -hardened-sources-3.0.4-r2.ebuild, -hardened-sources-3.0.4-r3.ebuild:
index 1f7adc825ca6bb7c942547506de68b7c0c3c69e1..85b50478a9e97700ed3c7b9a0720dd7e75a846f6 100644 (file)
@@ -60,6 +60,7 @@ DIST hardened-patches-2.6.32-61.extras.tar.bz2 452203 RMD160 0483c9f37a02bb48a73
 DIST hardened-patches-2.6.32-71.extras.tar.bz2 487527 RMD160 95e2cc3b6081516ec5d01cd749ef5989aa83ae7e SHA1 7748e44cf653733c4ecff2928f6fdcc6aa32b0cf SHA256 3c9a6b6c63e8c5f341fc9d9f9071dac4c424613e38aa8cde013962e5e887a41f
 DIST hardened-patches-2.6.32-72.extras.tar.bz2 486856 RMD160 679e95eedecd07d259ef4a02c0ca9331fa976e71 SHA1 ccb6261a172f024d3bdcc5ea24ee1b09954219e6 SHA256 18e1587172f133b2885cd41bcf7b452149a7f2cb83d2df5adefbc0c86c05ab7f
 DIST hardened-patches-2.6.32-73.extras.tar.bz2 503149 RMD160 76581f63b968f27244f975f7e9479b7c7ec6313f SHA1 6bca2ec11a0e919bf65f1c87203d6c4308164e44 SHA256 a5ae2e2a5cf70d28b3b23ff097200d9d742d84882609bf8874c7e488fc0b65b4
+DIST hardened-patches-2.6.32-74.extras.tar.bz2 504164 RMD160 6f57f6c8deb552de025441947c567abc52fab37b SHA1 9831f62b9a05a39e7555c8ca236a77c2a1ce0bc8 SHA256 ac0c0637fb2ea7f83b59542c582a100bf540c7886576cd74a63eefae7af072e1
 DIST hardened-patches-2.6.34-7.extras.tar.bz2 337669 RMD160 7177ec91676644a863b94765a2b83d026d43a9dd SHA1 c96e2156f33aac21d4e1fa5950fe3098402714e0 SHA256 3fb2cda6fb2724296e0e1a946ca7b69293e04da9f21ecb563f2ba282f7a8099a
 DIST hardened-patches-2.6.35-8.extras.tar.bz2 349768 RMD160 6addf3007a5f4de95854fd4e93c65885b2494c7d SHA1 0cbabbcf7ab9b19214e583788b625330806d9898 SHA256 17f43e0b2203ac2020892164cbfd8b913c90cc3f8d1bae3ff88a8843f0bc56d7
 DIST hardened-patches-2.6.36-10.extras.tar.bz2 363448 RMD160 a656acbca00a3f238f83a14566dbeade33c69092 SHA1 c53dd6aae4c779cb135a612c416f2f623f9a9ce5 SHA256 e818e8bd2066f32aa209309aa17a482e7a006ae748d850860b900226720ce8dc
@@ -88,6 +89,7 @@ EBUILD hardened-sources-2.6.32-r58.ebuild 1756 RMD160 6b7b4158b8de0183dd1fec3c7d
 EBUILD hardened-sources-2.6.32-r68.ebuild 1804 RMD160 8a2c6cfe8e8902ea52de2b1f86f76bc62e0d4455 SHA1 7a5c11c6fb54c44b019f6fe4687402b359b775e6 SHA256 633b9a960fa9778a44157a10d0f81b93ebcdecc511e2a69c86017fef2c512b54
 EBUILD hardened-sources-2.6.32-r69.ebuild 1806 RMD160 e242493de7579fad48f55db9461bc85ee1799526 SHA1 92bd80c3018dd9c010ba6f4a36e20965138f83e9 SHA256 042e93e1e9fab09e5e1d22285f423edc7fd10cfdaab533d66c565e17df051987
 EBUILD hardened-sources-2.6.32-r70.ebuild 1806 RMD160 288905b95aa39061a3affcd42de52f48856ff6d0 SHA1 0efefe3da04a50b4f3a0aba1ed23c824e92ae4c1 SHA256 89f7c2716d2f7dab12a15c6145e05c448c74591f703d1f9bb53ce41e79f98013
+EBUILD hardened-sources-2.6.32-r71.ebuild 1806 RMD160 e956a5ebe370727140d6241ca73160fa801b3fb1 SHA1 23bea867580c2c05ebc98f41e617c4c801254449 SHA256 a3f44b215cca810a7ad5aba82a8017fa8c46038165a5c406705cae2e57c422aa
 EBUILD hardened-sources-2.6.32-r9.ebuild 1860 RMD160 18b591c7337e1aa801e8676ff80292b988ed332e SHA1 46a40ea2830743e0d6acc84f465c40ad3ec11f4f SHA256 9a3a5de2c2a5ee692202bfa7bdad128bd916b4aebc83ae816954e1795116b159
 EBUILD hardened-sources-2.6.34-r6.ebuild 1706 RMD160 0d08d4b375f7e06d6e57e5e486aff5a40f80ab1e SHA1 462a9fa6afeaa67a6536092afeee63a94f659880 SHA256 aec2073ce33134d2045f51f39569edf20b6580a20d6d07cefe0d909da79f2fb3
 EBUILD hardened-sources-2.6.35-r7.ebuild 1711 RMD160 7b69000bcad1938047477b4ff0db97e8588854e7 SHA1 4d71ffa586bc6ec1358b26a66cbe0cb26b586a15 SHA256 d81bfb0eacafb5d59b33de40254cc127fc9ae95b1c0925caffc818e50074b0a6
@@ -99,12 +101,12 @@ EBUILD hardened-sources-2.6.39-r6.ebuild 1755 RMD160 b4c90571b6b8b2414af5b029c05
 EBUILD hardened-sources-2.6.39-r8.ebuild 1753 RMD160 b1edeaa488dd2045f76434505fe61c9bf1477f80 SHA1 d41d58f8e80feb420bc03cd440e907154b1a11d1 SHA256 5213ab9ed449d941cbf53ff81d9e4d0bdc7a384db9390fa348db72062ccb7b86
 EBUILD hardened-sources-3.0.4-r4.ebuild 1752 RMD160 2b87a6fc1b1d49795efc65d2e705df9fbf1f5fb1 SHA1 edce06fc82b3927e78baf4dc0cfa14d9984d9878 SHA256 6bc4f7c0d728ddbf9cec541a443a6c2baa5b8d74802bd1ab82eca5eb49131c26
 EBUILD hardened-sources-3.0.4-r5.ebuild 1754 RMD160 47153609feef3dace87ff0f36e7802ade544e0e5 SHA1 4878b6e82506fbad8ef69fd636d9dd2657375cc1 SHA256 d57210700d5a250bd3adb73a98d10b72b868eb0b84dd7d61d2eed405c7d4c662
-MISC ChangeLog 105458 RMD160 8af197d689e480c7021c7a75eabe5ba23d827ee0 SHA1 a314584d79a8718895cbac792b1021c829aa4c61 SHA256 172a3d10da462715fc2a12daa2d20327fec8cae5e2b12ad10ac9b0a99e495f04
+MISC ChangeLog 105685 RMD160 4a6c4bc2b42cd2d852228543035be2b5d01fcf1c SHA1 e0b93de6c1fd4656d3948d97c26a10cec9a2a8ff SHA256 475c85ec1872083bd362ab13cfdff9ff20fd7f76801aa7319f30b255b997a325
 MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SHA1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8fcfd351f2f39ed63da68af3a5751fc2058d0d03813
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.17 (GNU/Linux)
 
-iEYEAREIAAYFAk6j9tUACgkQl5yvQNBFVTWc0gCdHCywv32hi1F4WywOLmVr2qM2
-vaAAoKKo2a/HNITI4b11hUiySWyAMh1s
-=Nz7z
+iEYEAREIAAYFAk6j94kACgkQl5yvQNBFVTX3VgCeMteUTxy7SlZKbutLObKwD91K
+9zMAn2Pyr334uDbT51m9qDHpPYvxrClw
+=YUly
 -----END PGP SIGNATURE-----
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r71.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r71.ebuild
new file mode 100644 (file)
index 0000000..7423f33
--- /dev/null
@@ -0,0 +1,48 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r71.ebuild,v 1.1 2011/10/23 11:16:16 blueness Exp $
+
+EAPI="4"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="43"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-74"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="2000_fix-broken-backport-for-ipv6-tunnels.patch 4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE=""
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+pkg_postinst() {
+       kernel-2_pkg_postinst
+
+       local GRADM_COMPAT="sys-apps/gradm-2.2.2*"
+
+       ewarn
+       ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
+       ewarn "[server], [workstation], and [virtualization]."
+       ewarn
+       ewarn "Those who intend to use one of these predefined grsecurity levels"
+       ewarn "should read the help associated with the level.  Users importing a"
+       ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
+       ewarn "should review their selected grsecurity/PaX options carefully."
+       ewarn
+       ewarn "Users of grsecurity's RBAC system must ensure they are using"
+       ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+       ewarn "It is strongly recommended that the following command is issued"
+       ewarn "prior to booting a ${PF} kernel for the first time:"
+       ewarn
+       ewarn "emerge -na =${GRADM_COMPAT}"
+       ewarn
+}