New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.

Package-Manager: portage-2.1.8.3/cvs/Linux x86_64

diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
index a278708fe531201053f66db3193d625ebd482db0..0ad45ccec70c3fe8393699c81f6f8a85d80ee407 100644 (file)
--- a/sys-kernel/hardened-sources/ChangeLog
+++ b/sys-kernel/hardened-sources/ChangeLog
@@ -1,6 +1,11 @@
 # ChangeLog for sys-kernel/hardened-sources
 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.314 2010/05/27 13:00:16 chainsaw Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.315 2010/06/01 15:28:09 chainsaw Exp $
+
+*hardened-sources-2.6.32-r8 (01 Jun 2010)
+
+  01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
+  New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
 
   27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
   Update SRC_URI to point to mirror network now that the distfile has

diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index 6246edd531ae75a9a25d9f080de06b9c073aed82..84f719a4b9480a8f97fcef706d278495492d9a1e 100644 (file)
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -16,12 +16,15 @@ DIST genpatches-2.6.29-6.base.tar.bz2 75258 RMD160 f41c3e4e8467b6ce3117e2e5efada
 DIST genpatches-2.6.29-6.extras.tar.bz2 24680 RMD160 51b986cb7efa8790ac9a5fdf88f60796f9d36863 SHA1 31f748af82f1e85114699cc34db59c61bf7bf29e SHA256 02ad0d5d63fc63bebecf8f2175002336e10997e1a0c34dace597e3eb1776f97a
 DIST genpatches-2.6.32-11.base.tar.bz2 442656 RMD160 908f0f8fefc5c866c7f5cd52a584fee1a3f966dc SHA1 a654d665139375881cbbccfccfd73584061c6ecc SHA256 355133d73ec568b8ca2853efdafd0481987d550e865ce436cc3d0d7f57d8fe95
 DIST genpatches-2.6.32-11.extras.tar.bz2 24934 RMD160 e3e1d60fb45a3e3c818ddda36b9180d4fc46679e SHA1 d16a34dfa35d163ea4042058b3865c389f3802e9 SHA256 50b70c76461aa52f7f2ad88175e7f08eb555f7f1dfd274759ec0c2a9748bde5e
+DIST genpatches-2.6.32-12.base.tar.bz2 453330 RMD160 38062e6cac63e4e6bb4366ac562463288202251f SHA1 8cf6745987b234ddc7c55d34fc738364120bc29d SHA256 695b05dae7bedf27d0ed228b008f587c3a38ceb050c6ea366587f9fdc2e5eeb2
+DIST genpatches-2.6.32-12.extras.tar.bz2 24934 RMD160 e3e1d60fb45a3e3c818ddda36b9180d4fc46679e SHA1 d16a34dfa35d163ea4042058b3865c389f3802e9 SHA256 50b70c76461aa52f7f2ad88175e7f08eb555f7f1dfd274759ec0c2a9748bde5e
 DIST hardened-patches-2.6.25-14.extras.tar.bz2 261666 RMD160 d7c11888960362d5a84742c0845ac44a401e1317 SHA1 0985db3c69e182009e225d1e0382f7232f1d41d4 SHA256 77b9809f7f4cd1bfab0a297b5d69ca061cb03ba505a711d8cd7fd65f6bbe4f2a
 DIST hardened-patches-2.6.26-10.extras.tar.bz2 243023 RMD160 f4bd5b32596883abecba3ea60b6f6ac0cb261f93 SHA1 7405b28351a5a123554f7bbb90632589f5e9129b SHA256 386ed236cd500f6865253766b57bed79387382767d18f01ac62dc769af5a324d
 DIST hardened-patches-2.6.28-10.extras.tar.bz2 233317 RMD160 7ff56366f73e8a223ca4da85e580f66888f4f0da SHA1 31b6d4e358517a28424f94c7983cdd72a42072bf SHA256 93f3385acaf2149081a04cf6c98d176dbe3300d044b9001bc4cd89d303f26d8b
 DIST hardened-patches-2.6.28-8.extras.tar.bz2 233365 RMD160 59c52064260c87807a967b303b853936e81105c8 SHA1 0b0c5d403d56e5e6c10cf22b8adb235b581509fe SHA256 6d76a12eaef987f6b3eee9979cdc61904e34e99c7352603c330acc3c36d90561
 DIST hardened-patches-2.6.29-1.extras.tar.bz2 235849 RMD160 a97d2c41b4b229b650ba9e3609c4f8d67078e104 SHA1 d60da480b62232a1735cd7a4c95a84434f3809f3 SHA256 6709c2f0c4d614d69ee72b4e7ac7b75bfd08a0771b444702e881095ddb9aa918
 DIST hardened-patches-2.6.32-10.extras.tar.bz2 337509 RMD160 47ac442a37e97e6a69b4509d61695b63fe59bfbf SHA1 ee11dd47cadffefea65eb7e76ea0009ae34e2cd0 SHA256 1a2cd14f7aa21fc00cdadc39505bcd37d6665742e8f52530bb32dbdf26944034
+DIST hardened-patches-2.6.32-11.extras.tar.bz2 336999 RMD160 b867fc0d926b36a521d12717e14f542252ff0fc6 SHA1 ff8eeeeb607f446f87f9da0c8ae4385590f54467 SHA256 43d1fe9e98269258eb8ced55ec1296f25acaed2a8a802b36e59d6d13c20fd0ce
 DIST linux-2.6.25.tar.bz2 48601689 RMD160 cf3ed52f888fe9df7a93abe4fdc2f598e1ba0ce4 SHA1 aa6187a1c212dd2d8bd906b023fcefdcf711f35e SHA256 108b2a3f2b05c0e57d1d0977619525e46f8d4b425aef4b38b47dcf94292f2dd2
 DIST linux-2.6.26.tar.bz2 49441874 RMD160 57c37e81afa48e7c05e1a933d390a12ac2921255 SHA1 3f44384bf84f27add3b6c43ec68f974d7f7e9c67 SHA256 666488e2511393fdb901eaf1e67275bcc38ab37c930e8a9adb290a95c1721a2a
 DIST linux-2.6.28.tar.bz2 52665364 RMD160 47e8925220e29e239f9478228fc53543c1f7b300 SHA1 4f40f8bf3fd110b0cc6e1fea5f539c98f9959e94 SHA256 ae0d97c55efe7fce01273c97f8152af0deff5541e3bbf5b9ad98689112b54380
@@ -33,12 +36,13 @@ EBUILD hardened-sources-2.6.28-r7.ebuild 1984 RMD160 550a84233586f812582bab5e873
 EBUILD hardened-sources-2.6.28-r9.ebuild 1899 RMD160 ec8912b43989f91c8818d72f0ae8dbc0474867ce SHA1 4765ee899ed3c906e0e1ef9a62322e75d9100912 SHA256 c9420fad06cf6fc2c1a235631b98f51f8ca6d606f38ac2d9db387bbae2c0a596
 EBUILD hardened-sources-2.6.29.ebuild 1898 RMD160 af5d66ad376dd660d09089f2a011348390275e04 SHA1 f43efdaea2ff719f24e5db463231e90922e01f9e SHA256 716173129c54c8bc04a5353466656bb73a7ebd9d8fba5ebe86f0a1c17080ee1f
 EBUILD hardened-sources-2.6.32-r7.ebuild 1863 RMD160 ff5b26cc62d6f8327a144814fb1e524904e7ef4b SHA1 a67755e90621d79cec8c73ffa25eb6bb925f5d55 SHA256 76468b1451c606257e7584be5a98186cf293614ae76cc068505a186d7972af8d
-MISC ChangeLog 67107 RMD160 5fcc9cc8afd2f34e1377aa6c24109c0ca926ba4e SHA1 0060028f8fc735ee718d6efb860359975f1a6cb0 SHA256 a6e9e61cb8f4a5bbf31c9c64c5e048e4603f6c0bb73be2c645badc5f812d1a38
+EBUILD hardened-sources-2.6.32-r8.ebuild 1863 RMD160 3735654e27342b39d48b026078e9c2bc7fe9704f SHA1 b96af4e3e303728334ef437e8fe9e478c77dfb94 SHA256 43ea16593cdc2e42fcb0cc5ceca1990c975fc0abe14ff12d724862212ea2d297
+MISC ChangeLog 67297 RMD160 2f8afa32b4d7b77aa80f5cbdd3a06ce402bdb07c SHA1 6cfb9ce7df4c9d5c51b48be0110dc22ed91fba26 SHA256 036376ff6185235e6663b092ae554195725507b5bcbf24aaae1ce494dab69bfa
 MISC metadata.xml 770 RMD160 ce43c497d4a4a6e4633bec0bce6593ce78605865 SHA1 75da150c2e9ee9847d12a9d79ee2b88b5a63993e SHA256 1e2850c18164d38a9893f9afaf4d31cb89bd8077801378447c31c35ecce92840
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.15 (GNU/Linux)
 
-iEYEARECAAYFAkv+bOoACgkQp5vW4rUFj5p+AACfWiy6PxT05paXwAvSTmaERvno
-3K4AoIbQCbGMf+DHkWEVThA9oEhxCMsF
-=Lpvb
+iEYEARECAAYFAkwFJxIACgkQp5vW4rUFj5oSBgCeO61ZUd1tEBdQPaf4PAexGalM
+6V0AoJp5XgvbaLRiPXF/EbWgrpemyHU0
+=Xxjy
 -----END PGP SIGNATURE-----

diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r8.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r8.ebuild
new file mode 100644 (file)
index 0000000..1ea96cd
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r8.ebuild
@@ -0,0 +1,50 @@
+# Copyright 1999-2010 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r8.ebuild,v 1.1 2010/06/01 15:28:09 chainsaw Exp $
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="12"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-11"
+HGPV_URI="mirror://gentoo/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE=""
+
+KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+pkg_postinst() {
+       kernel-2_pkg_postinst
+
+       local GRADM_COMPAT="sys-apps/gradm-2.1.14*"
+
+       ewarn
+       ewarn "As of ${CATEGORY}/${PN}-2.6.24 the predefined"
+       ewarn "\"Hardened [Gentoo]\" grsecurity level has been removed."
+       ewarn "Two improved predefined security levels replace it:"
+       ewarn "\"Hardened Gentoo [server]\" and \"Hardened Gentoo [workstation]\""
+       ewarn
+       ewarn "Those who intend to use one of these predefined grsecurity levels"
+       ewarn "should read the help associated with the level. Users importing a"
+       ewarn "kernel configuration from a kernel prior to ${PN}-2.6.24,"
+       ewarn "should review their selected grsecurity/PaX options carefully."
+       ewarn
+       ewarn
+       ewarn "Users of grsecurity's RBAC system must ensure they are using"
+       ewarn "${GRADM_COMPAT}, which is compatible with kernel series ${OKV}."
+       ewarn "Therefore, it is strongly recommended that the following command is"
+       ewarn "issued prior to booting a ${P} series kernel for"
+       ewarn "the first time:"
+       ewarn
+       ewarn "emerge -na =${GRADM_COMPAT}"
+       ewarn
+}