New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.

Package-Manager: portage-2.2_rc67/cvs/Linux x86_64

diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
index 0ad45ccec70c3fe8393699c81f6f8a85d80ee407..feea6e9e617892c0cb58dcbe07206c36fd3962cc 100644 (file)
--- a/sys-kernel/hardened-sources/ChangeLog
+++ b/sys-kernel/hardened-sources/ChangeLog
@@ -1,6 +1,11 @@
 # ChangeLog for sys-kernel/hardened-sources
 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.315 2010/06/01 15:28:09 chainsaw Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.316 2010/06/11 23:27:40 chainsaw Exp $
+
+*hardened-sources-2.6.32-r9 (11 Jun 2010)
+
+  11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
+  New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
 
 *hardened-sources-2.6.32-r8 (01 Jun 2010)
 

diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index 84f719a4b9480a8f97fcef706d278495492d9a1e..51d3353079e9a412a190eb8b0a561a55606d23c0 100644 (file)
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -18,6 +18,8 @@ DIST genpatches-2.6.32-11.base.tar.bz2 442656 RMD160 908f0f8fefc5c866c7f5cd52a58
 DIST genpatches-2.6.32-11.extras.tar.bz2 24934 RMD160 e3e1d60fb45a3e3c818ddda36b9180d4fc46679e SHA1 d16a34dfa35d163ea4042058b3865c389f3802e9 SHA256 50b70c76461aa52f7f2ad88175e7f08eb555f7f1dfd274759ec0c2a9748bde5e
 DIST genpatches-2.6.32-12.base.tar.bz2 453330 RMD160 38062e6cac63e4e6bb4366ac562463288202251f SHA1 8cf6745987b234ddc7c55d34fc738364120bc29d SHA256 695b05dae7bedf27d0ed228b008f587c3a38ceb050c6ea366587f9fdc2e5eeb2
 DIST genpatches-2.6.32-12.extras.tar.bz2 24934 RMD160 e3e1d60fb45a3e3c818ddda36b9180d4fc46679e SHA1 d16a34dfa35d163ea4042058b3865c389f3802e9 SHA256 50b70c76461aa52f7f2ad88175e7f08eb555f7f1dfd274759ec0c2a9748bde5e
+DIST genpatches-2.6.32-13.base.tar.bz2 453968 RMD160 59af874b8e8ad37123dd4d1e6e27e80ed30fcf11 SHA1 fb09aee1d2ca954137a07a9d1d4398d521d13e97 SHA256 834aec1ea744a034235bed688ab45b115e065fc570e8e59271eb1ae02ea2c293
+DIST genpatches-2.6.32-13.extras.tar.bz2 24934 RMD160 e3e1d60fb45a3e3c818ddda36b9180d4fc46679e SHA1 d16a34dfa35d163ea4042058b3865c389f3802e9 SHA256 50b70c76461aa52f7f2ad88175e7f08eb555f7f1dfd274759ec0c2a9748bde5e
 DIST hardened-patches-2.6.25-14.extras.tar.bz2 261666 RMD160 d7c11888960362d5a84742c0845ac44a401e1317 SHA1 0985db3c69e182009e225d1e0382f7232f1d41d4 SHA256 77b9809f7f4cd1bfab0a297b5d69ca061cb03ba505a711d8cd7fd65f6bbe4f2a
 DIST hardened-patches-2.6.26-10.extras.tar.bz2 243023 RMD160 f4bd5b32596883abecba3ea60b6f6ac0cb261f93 SHA1 7405b28351a5a123554f7bbb90632589f5e9129b SHA256 386ed236cd500f6865253766b57bed79387382767d18f01ac62dc769af5a324d
 DIST hardened-patches-2.6.28-10.extras.tar.bz2 233317 RMD160 7ff56366f73e8a223ca4da85e580f66888f4f0da SHA1 31b6d4e358517a28424f94c7983cdd72a42072bf SHA256 93f3385acaf2149081a04cf6c98d176dbe3300d044b9001bc4cd89d303f26d8b
@@ -25,6 +27,7 @@ DIST hardened-patches-2.6.28-8.extras.tar.bz2 233365 RMD160 59c52064260c87807a96
 DIST hardened-patches-2.6.29-1.extras.tar.bz2 235849 RMD160 a97d2c41b4b229b650ba9e3609c4f8d67078e104 SHA1 d60da480b62232a1735cd7a4c95a84434f3809f3 SHA256 6709c2f0c4d614d69ee72b4e7ac7b75bfd08a0771b444702e881095ddb9aa918
 DIST hardened-patches-2.6.32-10.extras.tar.bz2 337509 RMD160 47ac442a37e97e6a69b4509d61695b63fe59bfbf SHA1 ee11dd47cadffefea65eb7e76ea0009ae34e2cd0 SHA256 1a2cd14f7aa21fc00cdadc39505bcd37d6665742e8f52530bb32dbdf26944034
 DIST hardened-patches-2.6.32-11.extras.tar.bz2 336999 RMD160 b867fc0d926b36a521d12717e14f542252ff0fc6 SHA1 ff8eeeeb607f446f87f9da0c8ae4385590f54467 SHA256 43d1fe9e98269258eb8ced55ec1296f25acaed2a8a802b36e59d6d13c20fd0ce
+DIST hardened-patches-2.6.32-12.extras.tar.bz2 338946 RMD160 ce283b495ee2f009d36b94aca840f6519fbe9bb6 SHA1 56da715d64c6e2c50e292b19d27006d82118a337 SHA256 bfa5e7d9653b793b2bd88c40b8b52464fe39e1e098f1c5bc95d8476247fd288f
 DIST linux-2.6.25.tar.bz2 48601689 RMD160 cf3ed52f888fe9df7a93abe4fdc2f598e1ba0ce4 SHA1 aa6187a1c212dd2d8bd906b023fcefdcf711f35e SHA256 108b2a3f2b05c0e57d1d0977619525e46f8d4b425aef4b38b47dcf94292f2dd2
 DIST linux-2.6.26.tar.bz2 49441874 RMD160 57c37e81afa48e7c05e1a933d390a12ac2921255 SHA1 3f44384bf84f27add3b6c43ec68f974d7f7e9c67 SHA256 666488e2511393fdb901eaf1e67275bcc38ab37c930e8a9adb290a95c1721a2a
 DIST linux-2.6.28.tar.bz2 52665364 RMD160 47e8925220e29e239f9478228fc53543c1f7b300 SHA1 4f40f8bf3fd110b0cc6e1fea5f539c98f9959e94 SHA256 ae0d97c55efe7fce01273c97f8152af0deff5541e3bbf5b9ad98689112b54380
@@ -37,12 +40,13 @@ EBUILD hardened-sources-2.6.28-r9.ebuild 1899 RMD160 ec8912b43989f91c8818d72f0ae
 EBUILD hardened-sources-2.6.29.ebuild 1898 RMD160 af5d66ad376dd660d09089f2a011348390275e04 SHA1 f43efdaea2ff719f24e5db463231e90922e01f9e SHA256 716173129c54c8bc04a5353466656bb73a7ebd9d8fba5ebe86f0a1c17080ee1f
 EBUILD hardened-sources-2.6.32-r7.ebuild 1863 RMD160 ff5b26cc62d6f8327a144814fb1e524904e7ef4b SHA1 a67755e90621d79cec8c73ffa25eb6bb925f5d55 SHA256 76468b1451c606257e7584be5a98186cf293614ae76cc068505a186d7972af8d
 EBUILD hardened-sources-2.6.32-r8.ebuild 1863 RMD160 3735654e27342b39d48b026078e9c2bc7fe9704f SHA1 b96af4e3e303728334ef437e8fe9e478c77dfb94 SHA256 43ea16593cdc2e42fcb0cc5ceca1990c975fc0abe14ff12d724862212ea2d297
-MISC ChangeLog 67297 RMD160 2f8afa32b4d7b77aa80f5cbdd3a06ce402bdb07c SHA1 6cfb9ce7df4c9d5c51b48be0110dc22ed91fba26 SHA256 036376ff6185235e6663b092ae554195725507b5bcbf24aaae1ce494dab69bfa
+EBUILD hardened-sources-2.6.32-r9.ebuild 1863 RMD160 334ffdd37a91adb1c61a52bb7c8ae64be6268ee8 SHA1 55d62c20b789c042043dc7b72450f096a10c3ab4 SHA256 6aa0d2c089d7c1ec18c2e6d802d3cb74eb09ed348a2134b54b9e3bc6deb3542e
+MISC ChangeLog 67487 RMD160 ef451c923d623e2e2266fff53e2b33a349657cf2 SHA1 f206685be6cd5dc11604a1cfaf8f743da34a00a1 SHA256 fbd8d19bfc3f36fcce7fb45ba4ef954851cfa1f00c3266fec6976a91fbbcf57b
 MISC metadata.xml 770 RMD160 ce43c497d4a4a6e4633bec0bce6593ce78605865 SHA1 75da150c2e9ee9847d12a9d79ee2b88b5a63993e SHA256 1e2850c18164d38a9893f9afaf4d31cb89bd8077801378447c31c35ecce92840
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.15 (GNU/Linux)
 
-iEYEARECAAYFAkwFJxIACgkQp5vW4rUFj5oSBgCeO61ZUd1tEBdQPaf4PAexGalM
-6V0AoJp5XgvbaLRiPXF/EbWgrpemyHU0
-=Xxjy
+iEYEARECAAYFAkwSxr0ACgkQp5vW4rUFj5qgfwCeOjOBiqTdXb770ncltxKI7L6L
+/fkAoKaU1pznHybiTK3Zu2qIkkQDCB8o
+=lanv
 -----END PGP SIGNATURE-----

diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r9.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r9.ebuild
new file mode 100644 (file)
index 0000000..b5fd062
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r9.ebuild
@@ -0,0 +1,50 @@
+# Copyright 1999-2010 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r9.ebuild,v 1.1 2010/06/11 23:27:40 chainsaw Exp $
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="13"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-12"
+HGPV_URI="mirror://gentoo/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE=""
+
+KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+pkg_postinst() {
+       kernel-2_pkg_postinst
+
+       local GRADM_COMPAT="sys-apps/gradm-2.1.14*"
+
+       ewarn
+       ewarn "As of ${CATEGORY}/${PN}-2.6.24 the predefined"
+       ewarn "\"Hardened [Gentoo]\" grsecurity level has been removed."
+       ewarn "Two improved predefined security levels replace it:"
+       ewarn "\"Hardened Gentoo [server]\" and \"Hardened Gentoo [workstation]\""
+       ewarn
+       ewarn "Those who intend to use one of these predefined grsecurity levels"
+       ewarn "should read the help associated with the level. Users importing a"
+       ewarn "kernel configuration from a kernel prior to ${PN}-2.6.24,"
+       ewarn "should review their selected grsecurity/PaX options carefully."
+       ewarn
+       ewarn
+       ewarn "Users of grsecurity's RBAC system must ensure they are using"
+       ewarn "${GRADM_COMPAT}, which is compatible with kernel series ${OKV}."
+       ewarn "Therefore, it is strongly recommended that the following command is"
+       ewarn "issued prior to booting a ${P} series kernel for"
+       ewarn "the first time:"
+       ewarn
+       ewarn "emerge -na =${GRADM_COMPAT}"
+       ewarn
+}