[gentoo-commits] dev/blueness:master commit in: sys-kernel/hardened-sources/

["Anthony G. Basile" <blueness@gentoo.org>]

commit:     445a2e49479998de474042571a161a2135094d86
Author:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
AuthorDate: Tue Oct  9 03:08:46 2012 +0000
Commit:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
CommitDate: Tue Oct  9 03:09:11 2012 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=dev/blueness.git;a=commit;h=445a2e49

sys-kernel/hardened-sources: testing patchset 20121007

(Portage version: 2.1.11.9/git/Linux x86_64, signed Manifest commit with key 0xD0455535)

---
 sys-kernel/hardened-sources/Manifest               |   27 +++++++++-
 .../hardened-sources-2.6.32-r133.ebuild            |   51 ++++++++++++++++++++
 .../hardened-sources-3.2.30-r3.ebuild              |   50 +++++++++++++++++++
 .../hardened-sources-3.5.5-r1.ebuild               |   50 +++++++++++++++++++
 4 files changed, 175 insertions(+), 3 deletions(-)

diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index 31419b9..5a1a2f1 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -1,12 +1,33 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA256
 
+DIST deblob-2.6.32 84094 SHA256 de625f0bd221c9c38d4453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d SHA512 81263cf9f0e8232f9d56966082514f58c147d12cce0bce384f6830a450006006274f3009dd11c38638cd083d0efc14dc2edd1b79ca22a18835eeee4e9ea15eab WHIRLPOOL c53c3f114e7536426c7f303c8d67ee5d26929ca59b25b5fdcf18b2748acc4699cda42f63908db6f78ab338301da8cad3b3ecbab45ee5c1f15679d4e44042dec4
+DIST deblob-3.2 107602 SHA256 5db88405af6d51a77d84354afc3b2bdf673b1a5dcff37bb8db4ccbd12d91db20 SHA512 f34b7128adf716c908cbbbfefe72149fcd88b727d27edab43be65d4e6a55112b6d937d5c2bed86454d58781f3766ba4cc6db668cb6174a6039d276499da37cb4 WHIRLPOOL 0922457f7ca413c9d8115182964a7c051560799c4724452f81cb4c0383cf62c45b0364d6e639bd9d2b9000411d8773cabd2e8af99e8b0dc7f7bdc886db432d6d
+DIST deblob-3.5 109252 SHA256 c3273c85e04b7f69acc271da7d2ffba41cf74b364b60f174a4459eec4fae8da9 SHA512 839126a3d2655195c9ff223b98c2c89c403d89e40c37ddaaf0dcef72b28e396906842997cad136e8ed2eebfbe94d3479a77ab3071bad46008d9faeffca48372c WHIRLPOOL 93a993475c7c4342e31d59141dd8c68197243b5a96a34c2df529edadf3733be01d145f8679d01dc4ccaaa4bd8e1c887f75611256210820d27367de651e1d9b4b
+DIST deblob-check-2.6.32 247608 SHA256 da1aecdf3ab7f1207b90642d303e52262ccc2ed9e49739b729512b88950d17f3 SHA512 2ba5c7615164a96847afc40af9c9883dc39d8be633e8f07d0d4a6c16b1a22117faf68d5aa40c5aee843dc687a635e2195a4be3bfa40f87dc2b89554d869616b6 WHIRLPOOL ea5dcfd0ee58f1e9ff8dc16229401d37c0271fcae9d065ec648828088cd8d0b8eb8a80efc772d1ed0f075017485609ebf19c01156586728dd335af2dee2bbeff
+DIST deblob-check-3.2 423268 SHA256 9e67dd0885aa8ef356dbc15d487c8dea5a54f74c5b03a5d7946b65ee43f12638 SHA512 3abb9968ef4750fda90e4e2283981fd4691b7f9854244413b31d17bb60382a6d809fec929d8d3f9b52397dd9f9fa26783f4c3a25f3f4115b76ed585ea68e9916 WHIRLPOOL 891c3f809af470d680ae896c843c09612fb5124f2805e03d67b28ec4353bff0bc346ae9f680d900f0f63e681be86a0195f9baab7dcf3b5accfda739b106766fa
+DIST deblob-check-3.5 464105 SHA256 e7f57e2e47651ea1eb757ca3c8c989edac0f38080d923adccdcdca215eb2bdd9 SHA512 aeebd62fb3ad9550587d4a39c6b4a11a4bdea9ff096ca13df6f3d9b0137f3d05e704d105b19417282b4b70645ba96597b79e9e70d8540f6b15a7e2e9824251b4 WHIRLPOOL 0865a17865e8eabd350924b9e3cbce6994e70a54719d212227e2c22338ef43c7c52931437106cc68fa3e62d600f3ef2bee895441cca8af30b359e988a368e072
+DIST genpatches-2.6.32-48.base.tar.bz2 1033142 SHA256 7438e7b7c0ef32e0c639cf89c4f53a3bc7917ca466b1fcf3931adb65ad05b583 SHA512 1e06aef3bdb82e199165730b3b1542dee98a5970c611cc51eb3c0781bec49c3ab555908ad0109d0d1748f1d5d1bfeb6a5e79c1d45ceee9ec9f952290c426f0ab WHIRLPOOL edc94a7404b422dc9eaa5a2d5085938e2992a5ed09c80265c1c85daa933e892819b480b3086fdbe944943b6206748f0965159415b7764cd419f78719742c253b
+DIST genpatches-2.6.32-48.extras.tar.bz2 24939 SHA256 ee714d14310fd5242ce2e28a8f8e5fda63ba18957960814876506f8754b9d2a0 SHA512 0c0ddac8d9c3c91f3cdb4b6eb572cf4e7f0417c5f522ba4dea0b18957a3b89f3b6addd449d2b6fc0ffbbe36b225fb1d21b1537ab6a4bc2ae2375735e83a960a2 WHIRLPOOL 4b8f5c3aa5edf2718c013e0d5791a964ab983bb2cead319ce9a9d18cdd891eadb9d7ec5c1bfce50ce74d906c5b28f75cd30bf09e72bd500be082488c40870e98
+DIST genpatches-3.2-16.base.tar.bz2 445530 SHA256 3a3d16b7ffa401598bd131a7e8b2996f729b51dd6e88cae79157fd6bca972842 SHA512 6ab56b5dbf8ecf02a1ff8dd0dbf503f8c615050dd7f02b156bd1a0fdbf3655aee48176e88d30b40697d11126d06fc159c1332ddbc22c6e3f31314e1455f2467a WHIRLPOOL 69d9e11dfeb622fe615f48cd146819d264cd60577c0f77567e4b8c372901f63791567a4a210da752ae9a718d79a929519fb7997044a170327099d8a086a7eb83
+DIST genpatches-3.2-16.extras.tar.bz2 17208 SHA256 7f60ab18e2965d024b7a36327577bcc771061f2cfac221ed475a6fd6b2ab89c7 SHA512 bea678f7eb56eb992c99d9c49b8d1602228dec00e7fd255432ca30847aae9d4d223bb9ab27f5e72ad422e0d0f2ac319fa590d5fe0e53824b415d6d8bba686add WHIRLPOOL 875f72ab9b81e1cc7a7a06d42783c04204987cfd49042f3cf19b1ed80b0d91f8fdaaf13152b7a22a0d0c1eb9a22719d83eaa9c4fcf9d2024e62420332f081019
+DIST genpatches-3.5-5.base.tar.bz2 122034 SHA256 50828709004b240ce3d3dcfedc4d88a4a53e20b9e3b172dc2973316a39c1c55f SHA512 28d9f1c603440db249ef3231f95f142886e0fdae3fc2ce9366aa7c6633ad13b6818659727f378fc167fbeaaaff1faa88fcf5edc625c799ad9f118002ac8381f8 WHIRLPOOL 31accc31067f7d61921c59b951eced42fa31f3c73cdfbbd98dbd6921a4fa2624d709fabe4dcaaa3c480e3e7d99803569840050a0685aef87488840ca8b4e747f
+DIST genpatches-3.5-5.extras.tar.bz2 17507 SHA256 1b2294687e842e6450184ce2800ba3df8006ca47d75f95437a1e1d2976162727 SHA512 2eefd45f853e9bab3f89701e470309471b5b2c9ed651dba03776a47d11e26c00170d32aaac547889ae7cee435278bb5ffa4ddc1dc769e6440d454008f62ce23d WHIRLPOOL 43dfd1c6a046e3dc07db72e8d7f062689366112ccf080a17b84bc7adda3e5257d7be551e0a34b6c79c9016b5b04bad5bdf8c52589dcc362dc675f72ca7681135
+DIST hardened-patches-2.6.32-136.extras.tar.bz2 788868 SHA256 d6595c9b1e047ef5ab12b91648023b9d29f2ebbfbcca88334c082f8961323058 SHA512 b10f01ad62047b18c926d126e4fb171dd7ae27029a8232be8b46d43b7780b4f9c4d493937bbfdc878f8e58245d5da7da17e5b065fd06b60f39fd4b7141302634 WHIRLPOOL 84cb1a1df70acbc0adf8b4426a67e7b6927ec52167f6cf133f05df771acefd0a6044e00af9455a00b978d24b764c721e7f094fce94c3c2858951f01ab501bd00
+DIST hardened-patches-3.2.30-4.extras.tar.bz2 822119 SHA256 7c2549456cebd2c4214ceb19d53f3c25ff63823aa6a4548d2a87c28285b7135b SHA512 fd694a8719e6e7aa98776c9a4f0707a782fb44a01a8ab25cc83cb582e97e24cafa7f9bd4db9c7d5c6faff769d6216c0c05464913a4297900a0b4b8a8d06b29ef WHIRLPOOL aae01ded47401d576324d3db2a756bff83191331d78b4153d26b5d3c1c551c4d818f9676aee71d8f54440a832b0624a1f976ce851a8baf43b1812f0c501e2f7c
+DIST hardened-patches-3.5.5-2.extras.tar.bz2 676963 SHA256 cce8f155fdf6a26f59bf0caa00289afdcefaffe2eef54cfb9cda02f4f4455ccf SHA512 8216d49cd27afd88c057a626f0949da71b3a68e5cec657f39a9488fb0e507f71dc241ccbdfaf7e3634d8a4b011c77a2c4c436b480bdb631ff3ac3b796e76e7c6 WHIRLPOOL c25fbd7a912f2027cb97119d2d6192790bd7d9895c5ad5b4d7042693dc8b2282b074d82a340bc0d4d3f7a72b998066adceaa76ca5975a70e844db48a596164ed
+DIST linux-2.6.32.tar.bz2 64424138 SHA256 5099786d80b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e SHA512 739c67875dcb1a80412a034e7d3dddfb6aea4d7a77f12b572fb5afbb827e6ab5a682df7501c0982966e85948ddf7251b8dc5eeb064b2d264025160d8a903bc82 WHIRLPOOL 762dfd7f4c062fdcda00b7fc45ead0f8cb4e321027769a12d92640012f5768c2033da95f24491adfcd6eb453c2658978d4f170e73e4f8a5ccd263efcbe00429d
+DIST linux-3.2.tar.bz2 78147838 SHA256 c881fc2b53cf0da7ca4538aa44623a7de043a41f76fd5d0f51a31f6ed699d463 SHA512 1f57b98e8da34b10f37ce94e0f13a994c111d483b104c27a8f58a4a55013a73a9f1ffcebb597be63ce0dfadb92201e93b0e072ba49bac0033026aceb0840c812 WHIRLPOOL 3dc893bde09f064e4614183964a4b9feaab938ca7a739f46f825818a577884eae815f195b52a4c55c571345de59d7ba09631fb68dac481a0837b24868ce60e3d
+DIST linux-3.5.tar.bz2 80978443 SHA256 6ab82beb8cbb895b7523daed7ec3ec5850cf460b96788056f1ef5135c852fd23 SHA512 f6de5aaff351097dbe4b7186baea63004ef9efb73a85ccfd718c5856b282c22fb1431dce8588cb823eb75d1f09cd89f20e4936501e2c536f53ea4aa705e09ecc WHIRLPOOL 227c73e187370f2f5be34041c99ff2ff1bc99de4685d29801558a96d7d128c6f09c4a2ce81ce33cd87148c301e43319b42a8a77443e5db37f604fd97d101b7e7
+EBUILD hardened-sources-2.6.32-r133.ebuild 1820 SHA256 f8d56757c87129a0e41e83b544d1664a620946004c1e1890e528670348b5cc3f SHA512 e836ba67c09528d2810d7c074b516589659776b3f7fc1c6e02178bf3ddad7d2d6355bc24d5ff3c2727f5a029e6a23885d14f68a770dfdcf61b3d7863f3d75923 WHIRLPOOL 4f8bf0507a469fda3274857a7a789711d2e1aee93606771e64cfeaa44f6d0b8433da58ac05a6a9e82ed3a7ceb3bc58f707658dc1af0ccc45752fd07c3900e1e3
+EBUILD hardened-sources-3.2.30-r3.ebuild 1816 SHA256 391def7bcb689027aef3323b446dc84d40e5b4598f5a8a75005aa5f83d8f02ad SHA512 3fa8e3ddbe0cec3c235cd4c43cf64dee812d54719936c9404a00a0566628321189b2e5e2488bde70cd703fe985074e2511c2ac5e266bc95f5661e0cd0a94762b WHIRLPOOL 829d8a2716bdf7a4ccb14607f7d8767b787c47d97a7ca4a65e4bd4f5b55879be0f239f012adf810339d45497a8675cbb8efe09c1a03c2d40e1d9bc02135942d1
+EBUILD hardened-sources-3.5.5-r1.ebuild 1811 SHA256 95536fd9bee3795e2cb8e3a837e94f1593bb460b81ead31912caa05184970e3a SHA512 7f8e7472ca75526672bbf64652745cac909a9c293be9cedc815f4e1dd112db87c2f37c180828078fca2abbf136c6ac5bf6abee9a99869387a592915c69d58a5b WHIRLPOOL 8419c56c0d714a65887ff7dbb44e320a0ab69deabed3ac29685f855fee6a9aa1913623973b65efef44a489291f92b97d0a46b5c99b4b06d1b0033255f7daa9dc
 MISC ChangeLog 39346 SHA256 4b42f40b345f9a2952479ebd76607f6cd7456bdd77372f6189ae9e851b8b63b5 SHA512 e402cf64abd1612050b531950421e4947f58e66bd23b528ea9681076bd5d7bfbd9e90b2cb9721fafae1186810e63c927659648270214c4cff93c333c68a20b56 WHIRLPOOL 32bc49bbbdd99e929e0717fa74c9f275dd5497365ca5e463ee9836688b7156840ea8ce08421df20d2618c1e1a9477f6fb69d9ff264932c1ca61c5b9febd0f094
 MISC metadata.xml 576 SHA256 53e0d3bfb958bcbf62457a89abe76a7a6f5a2b1df5decb04bf8b840184cc5828 SHA512 aabb8324fc608a74fecda5e4fff0f29d47d34ff20bdea2af8a69726772268d7b3b9d2639cd9c2308b3c79b89d9e923d2a96b212e7cfe59a0bf0008e3fb1c7e6a WHIRLPOOL 11fc891bd478667fe4ca5d203b366fdcf1680dac31bf997ea7c707c6f00a1c03b6ca7a00045b75dc1604e9eb57c2cab03a12f46318320ed6abdb5d6feb06b71f
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.19 (GNU/Linux)
 
-iEYEAREIAAYFAlBv/CgACgkQl5yvQNBFVTWbvQCfW+5T5x+hq9Qf+TK1gaTLOi8C
-K38An2eLvUc0lykn9YBhYklUzf8y1Ogu
-=1bpj
+iEYEAREIAAYFAlBzlT4ACgkQl5yvQNBFVTUMWgCgkILeBxc0J07FVlbIRJhXrx1s
+GWUAn1AyPAF4tiKflavfZRlKboaDgyH8
+=Thrb
 -----END PGP SIGNATURE-----

diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r133.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r133.ebuild
new file mode 100644
index 0000000..f81398c
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r133.ebuild
@@ -0,0 +1,51 @@
+# Copyright 1999-2012 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r132.ebuild,v 1.1 2012/10/06 09:35:12 blueness Exp $
+
+EAPI="4"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="48"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-136"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.9.1*"
+
+	ewarn
+	ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
+	ewarn "[server], [workstation], and [virtualization]."
+	ewarn
+	ewarn "Those who intend to use one of these predefined grsecurity levels"
+	ewarn "should read the help associated with the level.  Users importing a"
+	ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
+	ewarn "should review their selected grsecurity/PaX options carefully."
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}

diff --git a/sys-kernel/hardened-sources/hardened-sources-3.2.30-r3.ebuild b/sys-kernel/hardened-sources/hardened-sources-3.2.30-r3.ebuild
new file mode 100644
index 0000000..004e94c
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-3.2.30-r3.ebuild
@@ -0,0 +1,50 @@
+# Copyright 1999-2012 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-3.2.30-r2.ebuild,v 1.1 2012/10/06 09:36:45 blueness Exp $
+
+EAPI="4"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="16"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-4"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.9.1*"
+
+	ewarn
+	ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
+	ewarn "[server], [workstation], and [virtualization].  Those who intend to"
+	ewarn "use one of these predefined grsecurity levels should read the help"
+	ewarn "associated with the level.  Because some options require >=gcc-4.5,"
+	ewarn "users with more, than one version of gcc installed should use gcc-config"
+	ewarn "to select a compatible version."
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}

diff --git a/sys-kernel/hardened-sources/hardened-sources-3.5.5-r1.ebuild b/sys-kernel/hardened-sources/hardened-sources-3.5.5-r1.ebuild
new file mode 100644
index 0000000..2082df5
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-3.5.5-r1.ebuild
@@ -0,0 +1,50 @@
+# Copyright 1999-2012 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-3.5.5.ebuild,v 1.1 2012/10/06 09:38:33 blueness Exp $
+
+EAPI="4"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="5"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-2"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.9.1*"
+
+	ewarn
+	ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
+	ewarn "[server], [workstation], and [virtualization].  Those who intend to"
+	ewarn "use one of these predefined grsecurity levels should read the help"
+	ewarn "associated with the level.  Because some options require >=gcc-4.5,"
+	ewarn "users with more, than one version of gcc installed should use gcc-config"
+	ewarn "to select a compatible version."
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}