From 8d2d48cd6a4fdae9dc24c3a9fdbc96767d666983 Mon Sep 17 00:00:00 2001 From: Tony Vroon Date: Wed, 26 May 2010 16:24:53 +0000 Subject: [PATCH] New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew Summers. Package-Manager: portage-2.1.8.3/cvs/Linux x86_64 --- sys-kernel/hardened-sources/ChangeLog | 9 +++- sys-kernel/hardened-sources/Manifest | 20 +++++++- .../hardened-sources-2.6.32-r7.ebuild | 50 +++++++++++++++++++ sys-kernel/hardened-sources/metadata.xml | 12 +++-- 4 files changed, 84 insertions(+), 7 deletions(-) create mode 100644 sys-kernel/hardened-sources/hardened-sources-2.6.32-r7.ebuild diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog index d6bd0c21a4d9..40c3ddc243bf 100644 --- a/sys-kernel/hardened-sources/ChangeLog +++ b/sys-kernel/hardened-sources/ChangeLog @@ -1,6 +1,13 @@ # ChangeLog for sys-kernel/hardened-sources # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.312 2010/04/26 07:38:26 robbat2 Exp $ +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.313 2010/05/26 16:24:53 chainsaw Exp $ + +*hardened-sources-2.6.32-r7 (26 May 2010) + + 26 May 2010; +hardened-sources-2.6.32-r7.ebuild, + metadata.xml: + New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew + Summers. 26 Apr 2010; Robin H. Johnson metadata.xml: Update Manifest for deblob support in kernel-2 eclass. diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest index 7bd582cb3c78..96f0c7e5e609 100644 --- a/sys-kernel/hardened-sources/Manifest +++ b/sys-kernel/hardened-sources/Manifest @@ -1,5 +1,9 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA1 + DIST deblob-2.6.28 72502 RMD160 a3f0a12e0c6312dfc7cacd0e81a50e57519b8df3 SHA1 5a7fb26f3c0c9855bb85431fa29fc285a19f7346 SHA256 432213f8caf6dc534a68dfb321dd33177f93c2fbdd57928a61e49947dd49f25c DIST deblob-2.6.29 76155 RMD160 b56288e338c16ec6aafd5d9146bd4dc8ae82d2ba SHA1 ab846a78ee43e2efd90417494cafe9dfa5b2d089 SHA256 ce0805a2767a1139fd952232eae04814c8910d0629963c2dc1e83449bc6a4987 +DIST deblob-2.6.32 84094 RMD160 394f46ec5b869638a7bc2e87beb118167c9bd6cb SHA1 1a2a1efb72126609d9e3b9be99ae5be2751efd06 SHA256 de625f0bd221c9c38d4453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d DIST genpatches-2.6.25-11.base.tar.bz2 137951 RMD160 c8df40098760d8796e653140cbb1df1ec7f42ab7 SHA1 bd94c26d6246279ed53042523de99ebaf13dd6e8 SHA256 a651296c2aa446665211c4e4de304e47f765dc2f21a4b20251ebeeb1cb1b2c83 DIST genpatches-2.6.25-11.extras.tar.bz2 41737 RMD160 c6cf651ccb5ef6ab7a82f1a07c88461309ffc0be SHA1 bcb0846d4450204afb0f2185d1396ccf4f497032 SHA256 2033b6b4cb75a9293349ef81d7f4702935c974541bdfa013a4258894b4152fad DIST genpatches-2.6.26-5.base.tar.bz2 136439 RMD160 3e175f38bde2440eae69a0e0c96fff49ede69a19 SHA1 8e957e13c43ba54e68c338a9326f686d6267a53c SHA256 a55a8601f18ad9ff4c42ef44ee331ded58160f5bd3b67a84bf99ab0c4afdc791 @@ -10,19 +14,31 @@ DIST genpatches-2.6.28-9.base.tar.bz2 227921 RMD160 0ccf3b9f6a4ceded79054da834a2 DIST genpatches-2.6.28-9.extras.tar.bz2 42227 RMD160 0c22176d28ae5d1d9a2278ab53b3ac6af74fb8ec SHA1 a39873ccbe87933c11108b454b24afde09ad20b2 SHA256 8d6f44fab5977f89721df72d1320560fb2345eac306fd38f31fe2194a6a67634 DIST genpatches-2.6.29-6.base.tar.bz2 75258 RMD160 f41c3e4e8467b6ce3117e2e5efada8fcaa46f019 SHA1 852091b7f7c10bd1dace3817739980039a96c8c1 SHA256 750a80f060b189330c94fdaa4c9fe0901c6f23c45e118c3264227d5f3b8fa398 DIST genpatches-2.6.29-6.extras.tar.bz2 24680 RMD160 51b986cb7efa8790ac9a5fdf88f60796f9d36863 SHA1 31f748af82f1e85114699cc34db59c61bf7bf29e SHA256 02ad0d5d63fc63bebecf8f2175002336e10997e1a0c34dace597e3eb1776f97a +DIST genpatches-2.6.32-11.base.tar.bz2 442656 RMD160 908f0f8fefc5c866c7f5cd52a584fee1a3f966dc SHA1 a654d665139375881cbbccfccfd73584061c6ecc SHA256 355133d73ec568b8ca2853efdafd0481987d550e865ce436cc3d0d7f57d8fe95 +DIST genpatches-2.6.32-11.extras.tar.bz2 24934 RMD160 e3e1d60fb45a3e3c818ddda36b9180d4fc46679e SHA1 d16a34dfa35d163ea4042058b3865c389f3802e9 SHA256 50b70c76461aa52f7f2ad88175e7f08eb555f7f1dfd274759ec0c2a9748bde5e DIST hardened-patches-2.6.25-14.extras.tar.bz2 261666 RMD160 d7c11888960362d5a84742c0845ac44a401e1317 SHA1 0985db3c69e182009e225d1e0382f7232f1d41d4 SHA256 77b9809f7f4cd1bfab0a297b5d69ca061cb03ba505a711d8cd7fd65f6bbe4f2a DIST hardened-patches-2.6.26-10.extras.tar.bz2 243023 RMD160 f4bd5b32596883abecba3ea60b6f6ac0cb261f93 SHA1 7405b28351a5a123554f7bbb90632589f5e9129b SHA256 386ed236cd500f6865253766b57bed79387382767d18f01ac62dc769af5a324d DIST hardened-patches-2.6.28-10.extras.tar.bz2 233317 RMD160 7ff56366f73e8a223ca4da85e580f66888f4f0da SHA1 31b6d4e358517a28424f94c7983cdd72a42072bf SHA256 93f3385acaf2149081a04cf6c98d176dbe3300d044b9001bc4cd89d303f26d8b DIST hardened-patches-2.6.28-8.extras.tar.bz2 233365 RMD160 59c52064260c87807a967b303b853936e81105c8 SHA1 0b0c5d403d56e5e6c10cf22b8adb235b581509fe SHA256 6d76a12eaef987f6b3eee9979cdc61904e34e99c7352603c330acc3c36d90561 DIST hardened-patches-2.6.29-1.extras.tar.bz2 235849 RMD160 a97d2c41b4b229b650ba9e3609c4f8d67078e104 SHA1 d60da480b62232a1735cd7a4c95a84434f3809f3 SHA256 6709c2f0c4d614d69ee72b4e7ac7b75bfd08a0771b444702e881095ddb9aa918 +DIST hardened-patches-2.6.32-10.extras.tar.bz2 337509 RMD160 47ac442a37e97e6a69b4509d61695b63fe59bfbf SHA1 ee11dd47cadffefea65eb7e76ea0009ae34e2cd0 SHA256 1a2cd14f7aa21fc00cdadc39505bcd37d6665742e8f52530bb32dbdf26944034 DIST linux-2.6.25.tar.bz2 48601689 RMD160 cf3ed52f888fe9df7a93abe4fdc2f598e1ba0ce4 SHA1 aa6187a1c212dd2d8bd906b023fcefdcf711f35e SHA256 108b2a3f2b05c0e57d1d0977619525e46f8d4b425aef4b38b47dcf94292f2dd2 DIST linux-2.6.26.tar.bz2 49441874 RMD160 57c37e81afa48e7c05e1a933d390a12ac2921255 SHA1 3f44384bf84f27add3b6c43ec68f974d7f7e9c67 SHA256 666488e2511393fdb901eaf1e67275bcc38ab37c930e8a9adb290a95c1721a2a DIST linux-2.6.28.tar.bz2 52665364 RMD160 47e8925220e29e239f9478228fc53543c1f7b300 SHA1 4f40f8bf3fd110b0cc6e1fea5f539c98f9959e94 SHA256 ae0d97c55efe7fce01273c97f8152af0deff5541e3bbf5b9ad98689112b54380 DIST linux-2.6.29.tar.bz2 56579370 RMD160 e0e8c0635665ed34618b04fe1140015a4b6ff806 SHA1 0640a2f4bea3fc272541f322b74ea365ad7f2349 SHA256 58a5ea16d499fe06f90fcbf1d687d1235d2cb9bc28bf979867bd3faadf38fc3f +DIST linux-2.6.32.tar.bz2 64424138 RMD160 b93742cbaf8174f2200d2dbef0d47a26c618039c SHA1 410b4fc818023bfef60064e973ff0ab46d3bfb19 SHA256 5099786d80b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e EBUILD hardened-sources-2.6.25-r13.ebuild 1901 RMD160 9550a19be307245b257d4cb63c70d7e8ec63336c SHA1 e1d7a176e717547e95e3380375008f2bed73e95a SHA256 f5cd06e4ca2c309f8bc6b21effc8a5d777c9f1aa6722c9174c0a96b35dce9fe6 EBUILD hardened-sources-2.6.26-r9.ebuild 1899 RMD160 095870d39696d1c7f287f779d84f77ed1bf302b1 SHA1 e59fef8a7966dc2a8ad6249ecb6894634e0e1197 SHA256 6089e2545732e93d014f35d36b37bd26f7b7b2dce187e10a80e821f07618c4e1 EBUILD hardened-sources-2.6.28-r7.ebuild 1984 RMD160 550a84233586f812582bab5e8732d6ba26ee190f SHA1 867f1065121b936fdc358cfe71fdeed99c729c39 SHA256 9a0d0efd68e19926d9b33461df5a21a77e51e0b6185008accf581217b7967d22 EBUILD hardened-sources-2.6.28-r9.ebuild 1899 RMD160 ec8912b43989f91c8818d72f0ae8dbc0474867ce SHA1 4765ee899ed3c906e0e1ef9a62322e75d9100912 SHA256 c9420fad06cf6fc2c1a235631b98f51f8ca6d606f38ac2d9db387bbae2c0a596 EBUILD hardened-sources-2.6.29.ebuild 1898 RMD160 af5d66ad376dd660d09089f2a011348390275e04 SHA1 f43efdaea2ff719f24e5db463231e90922e01f9e SHA256 716173129c54c8bc04a5353466656bb73a7ebd9d8fba5ebe86f0a1c17080ee1f -MISC ChangeLog 66730 RMD160 61972632b00b8fc35587f1cb9f192c8d28386a4f SHA1 41dae8f6895db3a429e9b3397bc2c097badf3556 SHA256 73e95cb800f043bf16db2c7e03f5cd93f8d0d8c0dfab9b23aff211d9b10074d4 -MISC metadata.xml 664 RMD160 31df52369b9ee213de37442de660d872bad8c921 SHA1 fb45f75f474598c75af414be321efb3603770d2a SHA256 217a82d77627ab33f92d53e24c3ad6cdfda194fc13c57f59198b8fea001d2c77 +EBUILD hardened-sources-2.6.32-r7.ebuild 1887 RMD160 4fe747b46439ee30d074c28223d1526f5cda6f49 SHA1 06d56ce3944cf1aaf00ed826d272e17e5316fa6e SHA256 3ba3bb9a949103abb1d39d096230bc0cad200987b0a19c718d5491657bdfe831 +MISC ChangeLog 66950 RMD160 26f9120235b2b4a5f498dbef7569939f611f06a3 SHA1 7bb6b2504264ca694777f5dc5d629d6635684198 SHA256 aac209444d852db4fc12858e5a0c89d4b6c200d58de0986ed691ee11b219b3d2 +MISC metadata.xml 770 RMD160 ce43c497d4a4a6e4633bec0bce6593ce78605865 SHA1 75da150c2e9ee9847d12a9d79ee2b88b5a63993e SHA256 1e2850c18164d38a9893f9afaf4d31cb89bd8077801378447c31c35ecce92840 +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.0.15 (GNU/Linux) + +iEYEARECAAYFAkv9S18ACgkQp5vW4rUFj5pkdACghc50A5YTT6JH1UySm3RtpWni +5JUAoJGq1ic8s2pUV+zFr/24WywR2MAH +=UjwA +-----END PGP SIGNATURE----- diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r7.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r7.ebuild new file mode 100644 index 000000000000..589e198239e7 --- /dev/null +++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r7.ebuild @@ -0,0 +1,50 @@ +# Copyright 1999-2010 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r7.ebuild,v 1.1 2010/05/26 16:24:53 chainsaw Exp $ + +ETYPE="sources" +K_WANT_GENPATCHES="base extras" +K_GENPATCHES_VER="11" + +inherit kernel-2 +detect_version + +HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-10" +HGPV_URI="http://opensource.dyc.edu/pub/distfiles/hardened-patches-${HGPV}.extras.tar.bz2" +SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}" + +UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2" +UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch" + +DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})" +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/" +IUSE="" + +KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86" + +pkg_postinst() { + kernel-2_pkg_postinst + + local GRADM_COMPAT="sys-apps/gradm-2.1.14*" + + ewarn + ewarn "As of ${CATEGORY}/${PN}-2.6.24 the predefined" + ewarn "\"Hardened [Gentoo]\" grsecurity level has been removed." + ewarn "Two improved predefined security levels replace it:" + ewarn "\"Hardened Gentoo [server]\" and \"Hardened Gentoo [workstation]\"" + ewarn + ewarn "Those who intend to use one of these predefined grsecurity levels" + ewarn "should read the help associated with the level. Users importing a" + ewarn "kernel configuration from a kernel prior to ${PN}-2.6.24," + ewarn "should review their selected grsecurity/PaX options carefully." + ewarn + ewarn + ewarn "Users of grsecurity's RBAC system must ensure they are using" + ewarn "${GRADM_COMPAT}, which is compatible with kernel series ${OKV}." + ewarn "Therefore, it is strongly recommended that the following command is" + ewarn "issued prior to booting a ${P} series kernel for" + ewarn "the first time:" + ewarn + ewarn "emerge -na =${GRADM_COMPAT}" + ewarn +} diff --git a/sys-kernel/hardened-sources/metadata.xml b/sys-kernel/hardened-sources/metadata.xml index 92b40a7f8a71..ee343fa1702f 100644 --- a/sys-kernel/hardened-sources/metadata.xml +++ b/sys-kernel/hardened-sources/metadata.xml @@ -4,12 +4,16 @@ kernel hardened - kerframil@gmail.com - Kerin Millar + quantumsummers@gentoo.org + Matthew Summers - gengor@gentoo.org - Gordon Malm + robbat@gentoo.org + Robin H. Johnson + + + chainsaw@gentoo.org + Tony Vroon hardened-sources is based upon genpatches, and adds the grsecurity -- 2.26.2