[gentoo-commits] dev/blueness:master commit in: sys-kernel/hardened-sources/

["Anthony G. Basile" <blueness@gentoo.org>]

commit:     34b67c85a50d7572d4e7ad3ece6ed7bd4bd2757e
Author:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
AuthorDate: Thu Sep 13 20:07:16 2012 +0000
Commit:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
CommitDate: Thu Sep 13 20:07:16 2012 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=dev/blueness.git;a=commit;h=34b67c85

sys-kernel/hardened-sources: testing patchset 20120912

(Portage version: 2.1.11.9/git/Linux x86_64, signed Manifest commit with key 0xD0455535)

---
 sys-kernel/hardened-sources/ChangeLog              |    6 ++
 sys-kernel/hardened-sources/Manifest               |   15 ++++--
 .../hardened-sources-3.2.28-r5.ebuild              |   50 ++++++++++++++++++++
 3 files changed, 67 insertions(+), 4 deletions(-)

diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
index b50530d..8682f5b 100644
--- a/sys-kernel/hardened-sources/ChangeLog
+++ b/sys-kernel/hardened-sources/ChangeLog
@@ -1,5 +1,11 @@
 
 
+*hardened-sources-3.2.28-r5 (13 Sep 2012)
+
+  13 Sep 2012; Anthony G. Basile <blueness@gentoo.org>
+  +hardened-sources-3.2.28-r5.ebuild:
+  testing patchset 20120912
+
   12 Sep 2012; Anthony G. Basile <blueness@gentoo.org>
   -hardened-sources-2.6.32-r127.ebuild, -hardened-sources-3.2.28-r4.ebuild,
   -hardened-sources-3.5.3-r2.ebuild:

diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index ae814d4..7a70c96 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -1,12 +1,19 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA256
 
-MISC ChangeLog 36622 SHA256 a90961d343dd0e2c7b6bdfecfc6113944f5a2febd5a91df796865b9d363b83e4 SHA512 1efe288f8d5290383117755fd9a2f2f8f383d9bd1199b8723776189b8f90c249c4d8020e1142fe9e113cc35f5086c77dd758f7dd2c645d7400f00178a5214163 WHIRLPOOL 39faf00657aa5e6a0bf97deb66d6ecf84508ac0eb348bc082fc1a0f9eceea56c0f8bc691cfe5c0eee56eff5570a4bd61a330d447ee5e564fc72726e7ce7e13ab
+DIST deblob-3.2 107602 SHA256 5db88405af6d51a77d84354afc3b2bdf673b1a5dcff37bb8db4ccbd12d91db20 SHA512 f34b7128adf716c908cbbbfefe72149fcd88b727d27edab43be65d4e6a55112b6d937d5c2bed86454d58781f3766ba4cc6db668cb6174a6039d276499da37cb4 WHIRLPOOL 0922457f7ca413c9d8115182964a7c051560799c4724452f81cb4c0383cf62c45b0364d6e639bd9d2b9000411d8773cabd2e8af99e8b0dc7f7bdc886db432d6d
+DIST deblob-check-3.2 423268 SHA256 9e67dd0885aa8ef356dbc15d487c8dea5a54f74c5b03a5d7946b65ee43f12638 SHA512 3abb9968ef4750fda90e4e2283981fd4691b7f9854244413b31d17bb60382a6d809fec929d8d3f9b52397dd9f9fa26783f4c3a25f3f4115b76ed585ea68e9916 WHIRLPOOL 891c3f809af470d680ae896c843c09612fb5124f2805e03d67b28ec4353bff0bc346ae9f680d900f0f63e681be86a0195f9baab7dcf3b5accfda739b106766fa
+DIST genpatches-3.2-16.base.tar.bz2 445530 SHA256 3a3d16b7ffa401598bd131a7e8b2996f729b51dd6e88cae79157fd6bca972842 SHA512 6ab56b5dbf8ecf02a1ff8dd0dbf503f8c615050dd7f02b156bd1a0fdbf3655aee48176e88d30b40697d11126d06fc159c1332ddbc22c6e3f31314e1455f2467a WHIRLPOOL 69d9e11dfeb622fe615f48cd146819d264cd60577c0f77567e4b8c372901f63791567a4a210da752ae9a718d79a929519fb7997044a170327099d8a086a7eb83
+DIST genpatches-3.2-16.extras.tar.bz2 17208 SHA256 7f60ab18e2965d024b7a36327577bcc771061f2cfac221ed475a6fd6b2ab89c7 SHA512 bea678f7eb56eb992c99d9c49b8d1602228dec00e7fd255432ca30847aae9d4d223bb9ab27f5e72ad422e0d0f2ac319fa590d5fe0e53824b415d6d8bba686add WHIRLPOOL 875f72ab9b81e1cc7a7a06d42783c04204987cfd49042f3cf19b1ed80b0d91f8fdaaf13152b7a22a0d0c1eb9a22719d83eaa9c4fcf9d2024e62420332f081019
+DIST hardened-patches-3.2.28-5.extras.tar.bz2 715679 SHA256 ee606737c449b104c65112a3bce8668f2a04bbed7e1cf906df159c9f1b0346a1 SHA512 321180677fb804b2730f49c7d6e9df3f2ae75f0d14cd9df199473a9e1fe1c10b624a94afeff7e039fad80c6f118ff624f2b835b28080a664c1a813d561462fdb WHIRLPOOL 045d2c883ab02a6e5e5b621965fa69982698e96db06f1d226a4420cab5f9593e128f1d9be23d9dd102f8cfa1fb9a995a617f9c832268f8b6f35b17cec7af22cc
+DIST linux-3.2.tar.bz2 78147838 SHA256 c881fc2b53cf0da7ca4538aa44623a7de043a41f76fd5d0f51a31f6ed699d463 SHA512 1f57b98e8da34b10f37ce94e0f13a994c111d483b104c27a8f58a4a55013a73a9f1ffcebb597be63ce0dfadb92201e93b0e072ba49bac0033026aceb0840c812 WHIRLPOOL 3dc893bde09f064e4614183964a4b9feaab938ca7a739f46f825818a577884eae815f195b52a4c55c571345de59d7ba09631fb68dac481a0837b24868ce60e3d
+EBUILD hardened-sources-3.2.28-r5.ebuild 1816 SHA256 9dd3ff0232daf80b964afa524106a99e98d20eedc6ed7b6e23b6258a7dd64991 SHA512 2d1fe85d744973927b55880a511b66fbf7a799a578b027dfbfd3ac08b31174725d9c7a8d189647ee4131396f446b3d8fc4862a3c93e2f2af26a216f541d8fcd6 WHIRLPOOL 6437778376cfa0d5f1e98d7fb5a9fdc33b37aececd0b240f94cd5d33cff5f702608c46380cbf748e4cb43d2f4965990a8a4c53a4edfe6cbbf043a51c0b138f2d
+MISC ChangeLog 36787 SHA256 c74d050dec274997eed7434b54d9f895ae1ed499754c1762bed0e4e59dd7b8a7 SHA512 34e9727cc922e0e0f3a0eafb0ddc5f100e83a32a1079ab6db7c8af21d1a2bb4210f8900113899b9e8d22221dc7fb3001a1d117f5edd80ca7bdc2fd871eb3336b WHIRLPOOL 3f3d61e59567ca0e47e50d363305adee6a0303fde781a8679af667070c024dad4a9ab9b89c2b6f95852ffedb5b1a83e775689d230ffaf66e0d427b824d62795f
 MISC metadata.xml 576 SHA256 53e0d3bfb958bcbf62457a89abe76a7a6f5a2b1df5decb04bf8b840184cc5828 SHA512 aabb8324fc608a74fecda5e4fff0f29d47d34ff20bdea2af8a69726772268d7b3b9d2639cd9c2308b3c79b89d9e923d2a96b212e7cfe59a0bf0008e3fb1c7e6a WHIRLPOOL 11fc891bd478667fe4ca5d203b366fdcf1680dac31bf997ea7c707c6f00a1c03b6ca7a00045b75dc1604e9eb57c2cab03a12f46318320ed6abdb5d6feb06b71f
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.19 (GNU/Linux)
 
-iEYEAREIAAYFAlBP+S0ACgkQl5yvQNBFVTV0ZQCgiM1WtO5GrjQWA28djn300Pwm
-YwgAn2JeFRyWVn8onE47g3nyzdxy8hn0
-=AmE/
+iEYEAREIAAYFAlBSPPQACgkQl5yvQNBFVTU1fgCeP4853VuIEYrp0sUZIkVbNy8b
+mMYAoKTkeAwtS/TYn5c5ZOXZJUPYACm+
+=mxZV
 -----END PGP SIGNATURE-----

diff --git a/sys-kernel/hardened-sources/hardened-sources-3.2.28-r5.ebuild b/sys-kernel/hardened-sources/hardened-sources-3.2.28-r5.ebuild
new file mode 100644
index 0000000..1001c95
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-3.2.28-r5.ebuild
@@ -0,0 +1,50 @@
+# Copyright 1999-2012 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-3.2.28-r4.ebuild,v 1.1 2012/09/12 02:50:28 blueness Exp $
+
+EAPI="4"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="16"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-5"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.9.1*"
+
+	ewarn
+	ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
+	ewarn "[server], [workstation], and [virtualization].  Those who intend to"
+	ewarn "use one of these predefined grsecurity levels should read the help"
+	ewarn "associated with the level.  Because some options require >=gcc-4.5,"
+	ewarn "users with more, than one version of gcc installed should use gcc-config"
+	ewarn "to select a compatible version."
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}