New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.

Package-Manager: portage-2.1.8.3/cvs/Linux x86_64

diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
index a51c480801d5027083bf8f2f95e84d6504a1983f..e6f366819ae7ffdd17c6b369fce98cbb19140cff 100644 (file)
--- a/sys-kernel/hardened-sources/ChangeLog
+++ b/sys-kernel/hardened-sources/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for sys-kernel/hardened-sources
 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.317 2010/06/29 19:22:09 blueness Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.318 2010/06/30 16:37:15 blueness Exp $
+
+*hardened-sources-2.6.32-r10 (30 Jun 2010)
+
+  30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
+  +hardened-sources-2.6.32-r10.ebuild:
+  New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
 
   29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
   Added myself to the metadata.xml

diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index 686f45cbb6f4bcf28edd0e3e53208f45b2ce76f1..d0f0fe3109c7d7066d871f29ca766c4be11b5d6f 100644 (file)
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -25,6 +25,7 @@ DIST hardened-patches-2.6.29-1.extras.tar.bz2 235849 RMD160 a97d2c41b4b229b650ba
 DIST hardened-patches-2.6.32-10.extras.tar.bz2 337509 RMD160 47ac442a37e97e6a69b4509d61695b63fe59bfbf SHA1 ee11dd47cadffefea65eb7e76ea0009ae34e2cd0 SHA256 1a2cd14f7aa21fc00cdadc39505bcd37d6665742e8f52530bb32dbdf26944034
 DIST hardened-patches-2.6.32-11.extras.tar.bz2 336999 RMD160 b867fc0d926b36a521d12717e14f542252ff0fc6 SHA1 ff8eeeeb607f446f87f9da0c8ae4385590f54467 SHA256 43d1fe9e98269258eb8ced55ec1296f25acaed2a8a802b36e59d6d13c20fd0ce
 DIST hardened-patches-2.6.32-12.extras.tar.bz2 338946 RMD160 ce283b495ee2f009d36b94aca840f6519fbe9bb6 SHA1 56da715d64c6e2c50e292b19d27006d82118a337 SHA256 bfa5e7d9653b793b2bd88c40b8b52464fe39e1e098f1c5bc95d8476247fd288f
+DIST hardened-patches-2.6.32-13.extras.tar.bz2 340034 RMD160 0b265f033058b864333798b73d9b1cf5d939d323 SHA1 a1fdf7b83045a3d9562a00c5f56e7aad8d74d46a SHA256 28b08cbc5feffa693dbf0ff3ced8a6e0ab9b68d439ab9bcf8da19e1eaefd19c7
 DIST linux-2.6.25.tar.bz2 48601689 RMD160 cf3ed52f888fe9df7a93abe4fdc2f598e1ba0ce4 SHA1 aa6187a1c212dd2d8bd906b023fcefdcf711f35e SHA256 108b2a3f2b05c0e57d1d0977619525e46f8d4b425aef4b38b47dcf94292f2dd2
 DIST linux-2.6.26.tar.bz2 49441874 RMD160 57c37e81afa48e7c05e1a933d390a12ac2921255 SHA1 3f44384bf84f27add3b6c43ec68f974d7f7e9c67 SHA256 666488e2511393fdb901eaf1e67275bcc38ab37c930e8a9adb290a95c1721a2a
 DIST linux-2.6.28.tar.bz2 52665364 RMD160 47e8925220e29e239f9478228fc53543c1f7b300 SHA1 4f40f8bf3fd110b0cc6e1fea5f539c98f9959e94 SHA256 ae0d97c55efe7fce01273c97f8152af0deff5541e3bbf5b9ad98689112b54380
@@ -35,8 +36,9 @@ EBUILD hardened-sources-2.6.26-r9.ebuild 1899 RMD160 095870d39696d1c7f287f779d84
 EBUILD hardened-sources-2.6.28-r7.ebuild 1984 RMD160 550a84233586f812582bab5e8732d6ba26ee190f SHA1 867f1065121b936fdc358cfe71fdeed99c729c39 SHA256 9a0d0efd68e19926d9b33461df5a21a77e51e0b6185008accf581217b7967d22
 EBUILD hardened-sources-2.6.28-r9.ebuild 1899 RMD160 ec8912b43989f91c8818d72f0ae8dbc0474867ce SHA1 4765ee899ed3c906e0e1ef9a62322e75d9100912 SHA256 c9420fad06cf6fc2c1a235631b98f51f8ca6d606f38ac2d9db387bbae2c0a596
 EBUILD hardened-sources-2.6.29.ebuild 1898 RMD160 af5d66ad376dd660d09089f2a011348390275e04 SHA1 f43efdaea2ff719f24e5db463231e90922e01f9e SHA256 716173129c54c8bc04a5353466656bb73a7ebd9d8fba5ebe86f0a1c17080ee1f
+EBUILD hardened-sources-2.6.32-r10.ebuild 1863 RMD160 85f01e3cd9d063c7aad03cf01cef70f84db05af9 SHA1 ad778aa07626bf2a5c351e18b49fcf40f910351d SHA256 9007f42667c37371c8d42670b7ebd7002949456a058abee2ff1791252a101f87
 EBUILD hardened-sources-2.6.32-r7.ebuild 1863 RMD160 ff5b26cc62d6f8327a144814fb1e524904e7ef4b SHA1 a67755e90621d79cec8c73ffa25eb6bb925f5d55 SHA256 76468b1451c606257e7584be5a98186cf293614ae76cc068505a186d7972af8d
 EBUILD hardened-sources-2.6.32-r8.ebuild 1863 RMD160 3735654e27342b39d48b026078e9c2bc7fe9704f SHA1 b96af4e3e303728334ef437e8fe9e478c77dfb94 SHA256 43ea16593cdc2e42fcb0cc5ceca1990c975fc0abe14ff12d724862212ea2d297
 EBUILD hardened-sources-2.6.32-r9.ebuild 1863 RMD160 334ffdd37a91adb1c61a52bb7c8ae64be6268ee8 SHA1 55d62c20b789c042043dc7b72450f096a10c3ab4 SHA256 6aa0d2c089d7c1ec18c2e6d802d3cb74eb09ed348a2134b54b9e3bc6deb3542e
-MISC ChangeLog 67592 RMD160 288e66e42ac5a95b2bc14f452ec64336b5b85c2b SHA1 d67a6886e73580d0113541c156ba5cdd16fb3af2 SHA256 2be9a02a377b81462358a75d8e4238fbf8effbd8681998df292fe8bc99364c08
+MISC ChangeLog 67804 RMD160 86fd958eb05e2a4a3d33568de6e177b2177e2496 SHA1 0efe90bd1cf715dedac853ac517461f817006c1b SHA256 6c6d99de53d15248ad659a6bf3dfa1c7c0151873ecb5e9fa0aeeefe49ebbcc19
 MISC metadata.xml 869 RMD160 c403d0e6a81dae40740172992c68480591ef2ce6 SHA1 2816f9dbd4c9099de3b18bc5640e7d01e90c5550 SHA256 7fcfe68897eb20528b5307e18bb0f72840193cafff1191f82862b4ff241a2f65

diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r10.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r10.ebuild
new file mode 100644 (file)
index 0000000..36a4f2d
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r10.ebuild
@@ -0,0 +1,50 @@
+# Copyright 1999-2010 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r10.ebuild,v 1.1 2010/06/30 16:37:15 blueness Exp $
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="13"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-13"
+HGPV_URI="mirror://gentoo/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE=""
+
+KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+pkg_postinst() {
+       kernel-2_pkg_postinst
+
+       local GRADM_COMPAT="sys-apps/gradm-2.2.0*"
+
+       ewarn
+       ewarn "As of ${CATEGORY}/${PN}-2.6.24 the predefined"
+       ewarn "\"Hardened [Gentoo]\" grsecurity level has been removed."
+       ewarn "Two improved predefined security levels replace it:"
+       ewarn "\"Hardened Gentoo [server]\" and \"Hardened Gentoo [workstation]\""
+       ewarn
+       ewarn "Those who intend to use one of these predefined grsecurity levels"
+       ewarn "should read the help associated with the level. Users importing a"
+       ewarn "kernel configuration from a kernel prior to ${PN}-2.6.24,"
+       ewarn "should review their selected grsecurity/PaX options carefully."
+       ewarn
+       ewarn
+       ewarn "Users of grsecurity's RBAC system must ensure they are using"
+       ewarn "${GRADM_COMPAT}, which is compatible with kernel series ${OKV}."
+       ewarn "Therefore, it is strongly recommended that the following command is"
+       ewarn "issued prior to booting a ${P} series kernel for"
+       ewarn "the first time:"
+       ewarn
+       ewarn "emerge -na =${GRADM_COMPAT}"
+       ewarn
+}