[gentoo-commits] dev/blueness:master commit in: sys-kernel/hardened-sources/

["Anthony G. Basile" <blueness@gentoo.org>]

commit:     24679e21501c3e23e7b52811a98d077333b5ba12
Author:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
AuthorDate: Tue Dec  4 14:49:52 2012 +0000
Commit:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
CommitDate: Tue Dec  4 14:49:52 2012 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=dev/blueness.git;a=commit;h=24679e21

sys-kernel/hardened-sources: testing patchset 20121203

Package-Manager: portage-2.1.11.31
Manifest-Sign-Key: 0xF52D4BBA

---
 sys-kernel/hardened-sources/Manifest               |   47 +++++++++++++-----
 .../hardened-sources-2.6.32-r143.ebuild            |   51 ++++++++++++++++++++
 .../hardened-sources-3.2.34-r3.ebuild              |   50 +++++++++++++++++++
 .../hardened-sources/hardened-sources-3.6.9.ebuild |   50 +++++++++++++++++++
 4 files changed, 185 insertions(+), 13 deletions(-)

diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index 2049dba..42c62a4 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -1,21 +1,42 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA256
 
+DIST deblob-2.6.32 84094 SHA256 de625f0bd221c9c38d4453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d SHA512 81263cf9f0e8232f9d56966082514f58c147d12cce0bce384f6830a450006006274f3009dd11c38638cd083d0efc14dc2edd1b79ca22a18835eeee4e9ea15eab WHIRLPOOL c53c3f114e7536426c7f303c8d67ee5d26929ca59b25b5fdcf18b2748acc4699cda42f63908db6f78ab338301da8cad3b3ecbab45ee5c1f15679d4e44042dec4
+DIST deblob-3.2 107602 SHA256 5db88405af6d51a77d84354afc3b2bdf673b1a5dcff37bb8db4ccbd12d91db20 SHA512 f34b7128adf716c908cbbbfefe72149fcd88b727d27edab43be65d4e6a55112b6d937d5c2bed86454d58781f3766ba4cc6db668cb6174a6039d276499da37cb4 WHIRLPOOL 0922457f7ca413c9d8115182964a7c051560799c4724452f81cb4c0383cf62c45b0364d6e639bd9d2b9000411d8773cabd2e8af99e8b0dc7f7bdc886db432d6d
+DIST deblob-3.6 108747 SHA256 93df902f141fe72e9fb15b9acde2b2cb35f4632844d9073a94f0e4f15a074cbc SHA512 399a878b7f30f98434d21b50e2f3055788be5305498758ea00d0bc7fe53a891848435933aad0a9c335a68da0d4ba8fdd9aa87c67252e3ebc43c6e2143c183c84 WHIRLPOOL cb15045b152cd9d44d2b92e2a0bff392d53f2d75d2fe0705962c84113ad4703ef7d14401c4534f7c2752a669140b498eea3a0a4c1afdbadc3b2bc498c631437f
+DIST deblob-check-2.6.32 247608 SHA256 da1aecdf3ab7f1207b90642d303e52262ccc2ed9e49739b729512b88950d17f3 SHA512 2ba5c7615164a96847afc40af9c9883dc39d8be633e8f07d0d4a6c16b1a22117faf68d5aa40c5aee843dc687a635e2195a4be3bfa40f87dc2b89554d869616b6 WHIRLPOOL ea5dcfd0ee58f1e9ff8dc16229401d37c0271fcae9d065ec648828088cd8d0b8eb8a80efc772d1ed0f075017485609ebf19c01156586728dd335af2dee2bbeff
+DIST deblob-check-3.2 423268 SHA256 9e67dd0885aa8ef356dbc15d487c8dea5a54f74c5b03a5d7946b65ee43f12638 SHA512 3abb9968ef4750fda90e4e2283981fd4691b7f9854244413b31d17bb60382a6d809fec929d8d3f9b52397dd9f9fa26783f4c3a25f3f4115b76ed585ea68e9916 WHIRLPOOL 891c3f809af470d680ae896c843c09612fb5124f2805e03d67b28ec4353bff0bc346ae9f680d900f0f63e681be86a0195f9baab7dcf3b5accfda739b106766fa
+DIST deblob-check-3.6 477608 SHA256 d0e0e90d766bc474fadfd91b83ccff74bf614cb4d31fab7d60d62b28ba4a90b9 SHA512 b4c152a1b5f20c9e46b0a7c7c76fde531798b7c135757cd6908b793825868cd8f2c4e3d5d5e1f8818e2e989fa344543d5799e0151e3001fafd00faaf97c65512 WHIRLPOOL 7fc07416bd7d5f278854272c25ea30455aed21ec75a6613fbac13751b66a21d131b1820e55f15776f61d6bcba377ef7ef5d49d2bfc964458d5af6c144deba284
+DIST genpatches-2.6.32-48.base.tar.bz2 1033142 SHA256 7438e7b7c0ef32e0c639cf89c4f53a3bc7917ca466b1fcf3931adb65ad05b583 SHA512 1e06aef3bdb82e199165730b3b1542dee98a5970c611cc51eb3c0781bec49c3ab555908ad0109d0d1748f1d5d1bfeb6a5e79c1d45ceee9ec9f952290c426f0ab WHIRLPOOL edc94a7404b422dc9eaa5a2d5085938e2992a5ed09c80265c1c85daa933e892819b480b3086fdbe944943b6206748f0965159415b7764cd419f78719742c253b
+DIST genpatches-2.6.32-48.extras.tar.bz2 24939 SHA256 ee714d14310fd5242ce2e28a8f8e5fda63ba18957960814876506f8754b9d2a0 SHA512 0c0ddac8d9c3c91f3cdb4b6eb572cf4e7f0417c5f522ba4dea0b18957a3b89f3b6addd449d2b6fc0ffbbe36b225fb1d21b1537ab6a4bc2ae2375735e83a960a2 WHIRLPOOL 4b8f5c3aa5edf2718c013e0d5791a964ab983bb2cead319ce9a9d18cdd891eadb9d7ec5c1bfce50ce74d906c5b28f75cd30bf09e72bd500be082488c40870e98
+DIST genpatches-3.2-16.base.tar.bz2 445530 SHA256 3a3d16b7ffa401598bd131a7e8b2996f729b51dd6e88cae79157fd6bca972842 SHA512 6ab56b5dbf8ecf02a1ff8dd0dbf503f8c615050dd7f02b156bd1a0fdbf3655aee48176e88d30b40697d11126d06fc159c1332ddbc22c6e3f31314e1455f2467a WHIRLPOOL 69d9e11dfeb622fe615f48cd146819d264cd60577c0f77567e4b8c372901f63791567a4a210da752ae9a718d79a929519fb7997044a170327099d8a086a7eb83
+DIST genpatches-3.2-16.extras.tar.bz2 17208 SHA256 7f60ab18e2965d024b7a36327577bcc771061f2cfac221ed475a6fd6b2ab89c7 SHA512 bea678f7eb56eb992c99d9c49b8d1602228dec00e7fd255432ca30847aae9d4d223bb9ab27f5e72ad422e0d0f2ac319fa590d5fe0e53824b415d6d8bba686add WHIRLPOOL 875f72ab9b81e1cc7a7a06d42783c04204987cfd49042f3cf19b1ed80b0d91f8fdaaf13152b7a22a0d0c1eb9a22719d83eaa9c4fcf9d2024e62420332f081019
+DIST genpatches-3.6-9.base.tar.bz2 202356 SHA256 a84f9595721860cb57309fb540560e7292320ee2557165e8ef9cc649b18feec8 SHA512 366fad0e53a2e9b6833a8f05e127d97ed640e797dd114f3e541f3a69b4340bfd641d697f07e2f4c36eaf1080192d0b6af371eee94efe407739ae6f7114433c87 WHIRLPOOL a418e47dfa8a44ff08eed274f22e7468cd4ff9a85cedfe6428877ca35776467bf824c3a6876387d3228db3ce76944e36b3ea5223d751b3f65a8e16aa20022b86
+DIST genpatches-3.6-9.extras.tar.bz2 17029 SHA256 7e22574a6618fbb2eade0610fd130a06a322891f109d5ad79b1b8674da5321c8 SHA512 243ac5d7b78e0e308cfb5536439eb6da01f46bebc1a549c61eb9cb0b1199ccabfad2a7d6186a3b1387417dc40082fc931d37d07ed31bb0e78a0e9afc0e4bf655 WHIRLPOOL 71f32176b12b1b08450854afc52e603ba687628a21d18b1ffb83063cd5db159e53b729901085b57dd969fcf731f3ebdb191a1015c6c98bb1a6015f965d23e543
+DIST hardened-patches-2.6.32-147.extras.tar.bz2 883668 SHA256 abe99eebceb4c2afcd4231eab30f93967ffe34c6b9435b0479689d1bbe25e69a SHA512 e887cdc11bd1c497c0afafa07abdf6f3ab614eb74b9119e6f7e659965f280be43308f0126ddc92a199be577c5372f7a0ccfccc07ab485bbd00d57d98cb273e00 WHIRLPOOL 1e50cefd1ce62e74c418ab5e3e96a15f7c044f10bb3c1be04223bc34bfe47b4911196ffe4b54c5e7770a83ab8ec23e4504dcc70f4b6f95bb6cf0e19bc818d9ca
+DIST hardened-patches-3.2.34-4.extras.tar.bz2 961989 SHA256 852e839e80c004439201bde0e578df4c612b845d981e0562f4440239ea2fedb0 SHA512 5d88732ed7937019f120fd4f7993c2bb5b6d7b3db70eb47ad6b845798593e00678df5b3b06267fcb3a4e58744d192ca82376978abc142e1278ac3ae19be4e32a WHIRLPOOL 20322904dd6a676bb49db146f302dd87e36f421652adbc9522b5193667f4056ae90bdf6c50bb38486e51a888036f2e534f1f2ca419f7e0c9b5b01eb9a177e832
+DIST hardened-patches-3.6.9-1.extras.tar.bz2 601398 SHA256 5f9115fbf581d7a2042394fb63f10a0088e3c33fe620a3efc0569cb263d3df8e SHA512 4864e145b390a88fffdd806ffa41ab9c567eecf80ee760ed1e83fd63325424903596b748555a86a1ef80637837d3fdb7fd26d3e62fc653aa72589ce5e4229604 WHIRLPOOL e22055914f1903cc120b3ab94503bd3f6daa7a5efaa6465bf2223a167f1668619b40181d8f9a2516bde11269644930bf6a04f7e6f6f942b4494555ed639d8d4f
+DIST linux-2.6.32.tar.bz2 64424138 SHA256 5099786d80b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e SHA512 739c67875dcb1a80412a034e7d3dddfb6aea4d7a77f12b572fb5afbb827e6ab5a682df7501c0982966e85948ddf7251b8dc5eeb064b2d264025160d8a903bc82 WHIRLPOOL 762dfd7f4c062fdcda00b7fc45ead0f8cb4e321027769a12d92640012f5768c2033da95f24491adfcd6eb453c2658978d4f170e73e4f8a5ccd263efcbe00429d
+DIST linux-3.2.tar.bz2 78147838 SHA256 c881fc2b53cf0da7ca4538aa44623a7de043a41f76fd5d0f51a31f6ed699d463 SHA512 1f57b98e8da34b10f37ce94e0f13a994c111d483b104c27a8f58a4a55013a73a9f1ffcebb597be63ce0dfadb92201e93b0e072ba49bac0033026aceb0840c812 WHIRLPOOL 3dc893bde09f064e4614183964a4b9feaab938ca7a739f46f825818a577884eae815f195b52a4c55c571345de59d7ba09631fb68dac481a0837b24868ce60e3d
+DIST linux-3.6.tar.bz2 82296001 SHA256 88ae0a20fd39ecae79db0ce8f9397922fae33c8b06a54ed2c883c861126c9771 SHA512 cbaefc2c4c8ab2251c3345b7b2c88d55a49e3468d8b177b05dd6d96a802efa9a052b1a1ecab8b71298bac97f45259516d88253838332b4fdb4307780ebcddce9 WHIRLPOOL e17e3800951f0c3af21015d1a1c99698d0ef70815bd4f131dd60b30baef70d4c255988857533a9a7c058388c2febfcf02d12cde2a7ed46b24fa85aeb260c0251
+EBUILD hardened-sources-2.6.32-r143.ebuild 1820 SHA256 98fbd9d891446a6a5dfe1e90401a02fff1fcfe8c7c2cda1aa3a1561723c98699 SHA512 570c45bd78cc6be514531aef76398a804c36377739ae5eb6471f606988386f08fa928152bde9a61dbbdc2aee01667ee34f18e72810ab889d518f481032177d19 WHIRLPOOL dadb5cba8bed84025e7b0d761847cbc3debec3e63381f5193da3a6198f44d4667e0d3f15751bc17c4392c1f554d9284f72bff6c87a1c8b47c8048b5dfb002a31
+EBUILD hardened-sources-3.2.34-r3.ebuild 1816 SHA256 f94192081da997dfc5df7b53b77059379731d57bea5749f90e84edea9ae32eac SHA512 13e273e60f7bc90bac80bf0e3805cbac3bf40c29ff1a4886aa175ec0806741d4849a2bbd0548f96fbecdf2cfe7f74c7cbcd34e3f7cd33963940a02093ae7b506 WHIRLPOOL 1357aebbdfa692272ed10f487738cc6967b589572b755fa5a1dbf3546421ef43b622e331dc55fcf992f5beabfcb7f96cc56b70c6f83193d828c002f91c235945
+EBUILD hardened-sources-3.6.9.ebuild 1811 SHA256 e308568c8885924fe244b06a57dd1c3a2d2e52032b092efb82f981108fcf707e SHA512 733ea83c627093aac80f6852a252349982c886002bbd3315bf39a2fd198506ee16f735682d945c2594004320002c4227b3a55ae017ba63030bdf3c87c28ffe32 WHIRLPOOL d296a111a01d0ef6b080d4384f4cb347f571cda6fc2d7437f4b7dd574e9c730788d74b83278c90778b790fc5b50c87325f9848b5ad21d4502359fc64aee1299d
 MISC metadata.xml 576 SHA256 53e0d3bfb958bcbf62457a89abe76a7a6f5a2b1df5decb04bf8b840184cc5828 SHA512 aabb8324fc608a74fecda5e4fff0f29d47d34ff20bdea2af8a69726772268d7b3b9d2639cd9c2308b3c79b89d9e923d2a96b212e7cfe59a0bf0008e3fb1c7e6a WHIRLPOOL 11fc891bd478667fe4ca5d203b366fdcf1680dac31bf997ea7c707c6f00a1c03b6ca7a00045b75dc1604e9eb57c2cab03a12f46318320ed6abdb5d6feb06b71f
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.19 (GNU/Linux)
 
-iQIcBAEBCAAGBQJQt+qAAAoJEJOE+m71LUu6/pQP/1CMShXc5Z2UZPvunjRtqrkU
-S2HX3b6mZVz4S5sALGvjr0C4xrMP5AsqgjVuSaf4pO8CSGcUbQEuFxJJuPyLKOFl
-8IpnaL3kE228yNSdLXupCu9RzF81B7OULZeTVB2ItfxP4c3ywHNVr4u09mG26r+e
-484S1CDxygsFNWGL07sUqGejF2s7Bu+6VCYuVjVQWKAG65hxU8PONasdfDlA//Ad
-3vcb50P89eCfHrcPbLVkVYXVKnfqpAULthX3eBV2Fm9dGcvqTgwRJ0GUUmVJNeES
-RgEWGaIV6KcvKx6f2xpvaa3Y/CLV9m1H+yZf6lRiyX9raovvoa1fSczxuYpVAFXB
-G33XXJBxiWCJzU2BOCDqHuK3rH43jv+PikRc3AQgBQDImhIrzOzyoBL/M1aWFHbe
-zq9awBkqAYWr1jE1e7oX2+fYtsvt5zmc8O/vvxZfuGkBu5St2cbz6Rb8+4R7Ep8i
-8zG7Dkwv6DpMN47pV2rd99oOanxGseIW4Vnh/Eed38lnABwgy/U02v9kuXxcQI64
-+EzwS1CgrZM/FBshlXIIVqIT0gzaikx+ZJZ4HmVnfy2VaOcf8K8uYNCZf439p5Uo
-1COOXwv0YlkSV1IckUiGE+jj6wjPkgJov48Nrvk8oGcgWhOTGQ2Y5KC/g02E5aVj
-sW5+6Lv7+IWVypc7zBXY
-=BHv1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+=on9i
 -----END PGP SIGNATURE-----

diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r143.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r143.ebuild
new file mode 100644
index 0000000..3ac1468
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r143.ebuild
@@ -0,0 +1,51 @@
+# Copyright 1999-2012 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r142.ebuild,v 1.1 2012/11/29 23:02:41 blueness Exp $
+
+EAPI="4"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="48"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-147"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.9.1*"
+
+	ewarn
+	ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
+	ewarn "[server], [workstation], and [virtualization]."
+	ewarn
+	ewarn "Those who intend to use one of these predefined grsecurity levels"
+	ewarn "should read the help associated with the level.  Users importing a"
+	ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
+	ewarn "should review their selected grsecurity/PaX options carefully."
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}

diff --git a/sys-kernel/hardened-sources/hardened-sources-3.2.34-r3.ebuild b/sys-kernel/hardened-sources/hardened-sources-3.2.34-r3.ebuild
new file mode 100644
index 0000000..dbf18e2
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-3.2.34-r3.ebuild
@@ -0,0 +1,50 @@
+# Copyright 1999-2012 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-3.2.34-r2.ebuild,v 1.1 2012/11/29 23:03:57 blueness Exp $
+
+EAPI="4"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="16"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-4"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.9.1*"
+
+	ewarn
+	ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
+	ewarn "[server], [workstation], and [virtualization].  Those who intend to"
+	ewarn "use one of these predefined grsecurity levels should read the help"
+	ewarn "associated with the level.  Because some options require >=gcc-4.5,"
+	ewarn "users with more, than one version of gcc installed should use gcc-config"
+	ewarn "to select a compatible version."
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}

diff --git a/sys-kernel/hardened-sources/hardened-sources-3.6.9.ebuild b/sys-kernel/hardened-sources/hardened-sources-3.6.9.ebuild
new file mode 100644
index 0000000..ff9a428
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-3.6.9.ebuild
@@ -0,0 +1,50 @@
+# Copyright 1999-2012 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-3.6.8.ebuild,v 1.1 2012/11/29 23:05:47 blueness Exp $
+
+EAPI="4"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="9"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-1"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.9.1*"
+
+	ewarn
+	ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
+	ewarn "[server], [workstation], and [virtualization].  Those who intend to"
+	ewarn "use one of these predefined grsecurity levels should read the help"
+	ewarn "associated with the level.  Because some options require >=gcc-4.5,"
+	ewarn "users with more, than one version of gcc installed should use gcc-config"
+	ewarn "to select a compatible version."
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}