[gentoo-commits] dev/blueness:master commit in: sys-kernel/hardened-sources/

["Anthony G. Basile" <blueness@gentoo.org>]

commit:     5601aadf91a20b4ed911bdf7851d7a5a50f441d9
Author:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
AuthorDate: Sat Jan 19 22:35:55 2013 +0000
Commit:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
CommitDate: Sat Jan 19 22:35:55 2013 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=dev/blueness.git;a=commit;h=5601aadf

sys-kernel/hardened-sources: testing patchset 20130118

---
 sys-kernel/hardened-sources/Manifest               |   40 ++++++++--------
 .../hardened-sources-2.6.32-r146.ebuild            |   51 ++++++++++++++++++++
 .../hardened-sources-3.2.37.ebuild                 |   50 +++++++++++++++++++
 .../hardened-sources/hardened-sources-3.7.3.ebuild |   50 +++++++++++++++++++
 4 files changed, 171 insertions(+), 20 deletions(-)

diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index 1e374e6..1cea944 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -1,21 +1,21 @@
------BEGIN PGP SIGNED MESSAGE-----
-Hash: SHA256
-
+DIST deblob-2.6.32 84094 SHA256 de625f0bd221c9c38d4453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d SHA512 81263cf9f0e8232f9d56966082514f58c147d12cce0bce384f6830a450006006274f3009dd11c38638cd083d0efc14dc2edd1b79ca22a18835eeee4e9ea15eab WHIRLPOOL c53c3f114e7536426c7f303c8d67ee5d26929ca59b25b5fdcf18b2748acc4699cda42f63908db6f78ab338301da8cad3b3ecbab45ee5c1f15679d4e44042dec4
+DIST deblob-3.2 107602 SHA256 5db88405af6d51a77d84354afc3b2bdf673b1a5dcff37bb8db4ccbd12d91db20 SHA512 f34b7128adf716c908cbbbfefe72149fcd88b727d27edab43be65d4e6a55112b6d937d5c2bed86454d58781f3766ba4cc6db668cb6174a6039d276499da37cb4 WHIRLPOOL 0922457f7ca413c9d8115182964a7c051560799c4724452f81cb4c0383cf62c45b0364d6e639bd9d2b9000411d8773cabd2e8af99e8b0dc7f7bdc886db432d6d
+DIST deblob-3.7 112072 SHA256 8b341a3d8d07ce3a21889d6bde312d534fa97490eac549b04948fa52fabbe7ea SHA512 42ab77708b4f07037b7a161b83b1790fde26408e3459794d793ea91fec21227dc6dbc462d694a13f90630f567f4df6f08d60a6ff8294078426b877b4d8e7a3be WHIRLPOOL c9071fcef9f6143ee2a4d4648bdb92ab3c514f5731e096bde9db392abc8e3450711875d7018c99255869dc280ad1116f7e07f87e1fbde7656aaa39a0ad595b9c
+DIST deblob-check-2.6.32 247608 SHA256 da1aecdf3ab7f1207b90642d303e52262ccc2ed9e49739b729512b88950d17f3 SHA512 2ba5c7615164a96847afc40af9c9883dc39d8be633e8f07d0d4a6c16b1a22117faf68d5aa40c5aee843dc687a635e2195a4be3bfa40f87dc2b89554d869616b6 WHIRLPOOL ea5dcfd0ee58f1e9ff8dc16229401d37c0271fcae9d065ec648828088cd8d0b8eb8a80efc772d1ed0f075017485609ebf19c01156586728dd335af2dee2bbeff
+DIST deblob-check-3.2 423268 SHA256 9e67dd0885aa8ef356dbc15d487c8dea5a54f74c5b03a5d7946b65ee43f12638 SHA512 3abb9968ef4750fda90e4e2283981fd4691b7f9854244413b31d17bb60382a6d809fec929d8d3f9b52397dd9f9fa26783f4c3a25f3f4115b76ed585ea68e9916 WHIRLPOOL 891c3f809af470d680ae896c843c09612fb5124f2805e03d67b28ec4353bff0bc346ae9f680d900f0f63e681be86a0195f9baab7dcf3b5accfda739b106766fa
+DIST deblob-check-3.7 526875 SHA256 07a4e835a4375851990180117bed0e0bb012ea1e0dde3431925b699634eb435a SHA512 203dbca51f2fbfb0e43d282a6ccc85f549c5dca4669eeb00851afe8d4564d8939f07b20f37d85b0f1076cb4a43ce2e1fe37f187118033e1ebf617eea368fd6fa WHIRLPOOL 032d42aa57b41e81cdbc6b254fb7423bf73324d1c8266e673018dd63d123150807acd2aaa55e7a1d342a876a326d82ec0053d86c0f799b65dddb525301a10ebd
+DIST genpatches-2.6.32-48.base.tar.bz2 1033142 SHA256 7438e7b7c0ef32e0c639cf89c4f53a3bc7917ca466b1fcf3931adb65ad05b583 SHA512 1e06aef3bdb82e199165730b3b1542dee98a5970c611cc51eb3c0781bec49c3ab555908ad0109d0d1748f1d5d1bfeb6a5e79c1d45ceee9ec9f952290c426f0ab WHIRLPOOL edc94a7404b422dc9eaa5a2d5085938e2992a5ed09c80265c1c85daa933e892819b480b3086fdbe944943b6206748f0965159415b7764cd419f78719742c253b
+DIST genpatches-2.6.32-48.extras.tar.bz2 24939 SHA256 ee714d14310fd5242ce2e28a8f8e5fda63ba18957960814876506f8754b9d2a0 SHA512 0c0ddac8d9c3c91f3cdb4b6eb572cf4e7f0417c5f522ba4dea0b18957a3b89f3b6addd449d2b6fc0ffbbe36b225fb1d21b1537ab6a4bc2ae2375735e83a960a2 WHIRLPOOL 4b8f5c3aa5edf2718c013e0d5791a964ab983bb2cead319ce9a9d18cdd891eadb9d7ec5c1bfce50ce74d906c5b28f75cd30bf09e72bd500be082488c40870e98
+DIST genpatches-3.2-16.base.tar.bz2 445530 SHA256 3a3d16b7ffa401598bd131a7e8b2996f729b51dd6e88cae79157fd6bca972842 SHA512 6ab56b5dbf8ecf02a1ff8dd0dbf503f8c615050dd7f02b156bd1a0fdbf3655aee48176e88d30b40697d11126d06fc159c1332ddbc22c6e3f31314e1455f2467a WHIRLPOOL 69d9e11dfeb622fe615f48cd146819d264cd60577c0f77567e4b8c372901f63791567a4a210da752ae9a718d79a929519fb7997044a170327099d8a086a7eb83
+DIST genpatches-3.2-16.extras.tar.bz2 17208 SHA256 7f60ab18e2965d024b7a36327577bcc771061f2cfac221ed475a6fd6b2ab89c7 SHA512 bea678f7eb56eb992c99d9c49b8d1602228dec00e7fd255432ca30847aae9d4d223bb9ab27f5e72ad422e0d0f2ac319fa590d5fe0e53824b415d6d8bba686add WHIRLPOOL 875f72ab9b81e1cc7a7a06d42783c04204987cfd49042f3cf19b1ed80b0d91f8fdaaf13152b7a22a0d0c1eb9a22719d83eaa9c4fcf9d2024e62420332f081019
+DIST genpatches-3.7-5.base.tar.bz2 129620 SHA256 6db9674a1380748017e12ecf097ce14d655e74d164210f0cc13057bd7c0d85e2 SHA512 0626fdf3d6c8b76e911b14d7e49beda00ba63ebd06ad7553ca9e60b775f8a26a794de21359498a747d3d6dd8244a53255033a19553409db9658071a273087ca9 WHIRLPOOL b5c9975ee15ff3626054168df94175b863c64102210688f14c3beffcefc040cdae53af06134e060c28a233ac1086661d585fe3e2d1a60184223b571815b1b1c2
+DIST hardened-patches-2.6.32-150.extras.tar.bz2 901050 SHA256 2b3871f26909f79b736938160f755c4fa8c5d225efdce5330b5a7a2c3d902904 SHA512 a3455a3d84caf609e610371336f46f42acb792b4d7d8d9b8247423ec897af6c9b18eb21b1dd2c0687a45672be261de02e22a37af440370740a09ad87adc4918f WHIRLPOOL 5a115ef31cab21d4fd39583a2c7f8f34dc5dea8cb2f3ae5ab51e631c89c1ef88c1daef5b469c9537fb0920c3c07f5627b98946343cac212ba70b81aa42701ec1
+DIST hardened-patches-3.2.37-1.extras.tar.bz2 1056068 SHA256 31585bf59edbe7de70b4625e8b0f7b4417e8da068c7fb7aa8aa26177f3d26b90 SHA512 cf4e18cf78086dabbcfea0b75412bfe75017e85daee98d577f129293b5ec914a666f01cfd2e64dca33077cc2b9663739d708f11a9d000ec0138749bfefce41da WHIRLPOOL d4e32787d1b7f95d63d2d89140eef978443e11dc50213e886c58d603b12a22a1085e50b7337ce6dc5fd6cf78ab3e55eaa7206733da33560dee9a442d6a99d775
+DIST hardened-patches-3.7.3-1.extras.tar.bz2 600263 SHA256 5a6454482b53babd417b8e5a5dbf2444b40c1c184af83db401c541b005a8abcc SHA512 24cb3a5521acdef40fdd900d8a3ebc008889f14a2391e1ece5a0b71bc02a24a8c4a1824af348fdcc3ee362cd46b5c88bd517d76acd13f9436af2ad672ababb9b WHIRLPOOL 8fe614b2c9da34cb61d03ce31c524167892538ae2c5161405fb3b4df067d156689785460ac8670cf9f678605da9f9b0d133b4da97b122758f09f0659d9e115af
+DIST linux-2.6.32.tar.bz2 64424138 SHA256 5099786d80b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e SHA512 739c67875dcb1a80412a034e7d3dddfb6aea4d7a77f12b572fb5afbb827e6ab5a682df7501c0982966e85948ddf7251b8dc5eeb064b2d264025160d8a903bc82 WHIRLPOOL 762dfd7f4c062fdcda00b7fc45ead0f8cb4e321027769a12d92640012f5768c2033da95f24491adfcd6eb453c2658978d4f170e73e4f8a5ccd263efcbe00429d
+DIST linux-3.2.tar.bz2 78147838 SHA256 c881fc2b53cf0da7ca4538aa44623a7de043a41f76fd5d0f51a31f6ed699d463 SHA512 1f57b98e8da34b10f37ce94e0f13a994c111d483b104c27a8f58a4a55013a73a9f1ffcebb597be63ce0dfadb92201e93b0e072ba49bac0033026aceb0840c812 WHIRLPOOL 3dc893bde09f064e4614183964a4b9feaab938ca7a739f46f825818a577884eae815f195b52a4c55c571345de59d7ba09631fb68dac481a0837b24868ce60e3d
+DIST linux-3.7.tar.bz2 83671392 SHA256 dc08d87a579fe2918362e6666e503a95a76296419195cb499aa9dd4dbe171a9e SHA512 dad07e23b5d05a1a12092b59ea25c514ff9e89803ecf65b08f09b82aebc511fd06d2a492dea6364c3740a517f0a06a0ddb1c6847658d158205ad88995d69aaf3 WHIRLPOOL 572514032d7d64cc6a2b6ceeae7489e4b3fb48b5b63543d041ad675cd0569549ed88dc9c04ffdf91e78b8424d00b62384af78d7a41b7f399c31c056f0aa0344b
+EBUILD hardened-sources-2.6.32-r146.ebuild 1820 SHA256 ed1b8e8784c3b8a1187a7998771ab8bde19ee193443ea58248e1ccf240c54bd6 SHA512 d105e1fcad54c5983a8b3c418e24b89ef436a8a520204ec4fe10cdb026d1eba8004a79faa8ce70ac6eb653ca2a812b8e014af02f598d4c49a32eddd59fd1f811 WHIRLPOOL 7809d64f6acf5af8f8df5a97732d52fea10b0195508ce9a47749e707c5b1d86028a373d3b6e4dad522ce73a852cfa278b69b81defecb5df48b0b0c323a441fab
+EBUILD hardened-sources-3.2.37.ebuild 1813 SHA256 f9c7c07bf3fa6fae8c776f64befe04cc2225f038c1478a788aa4565f649c334b SHA512 a46110eab7d99a49eedfeabf45af62de153a944086cd09464c0add3d8a3112bbffab910f1bfb164012a60bf571061307f219e8f5874092ab27ca116ac2f7d42c WHIRLPOOL c77f510df242a1987a645fd507d1b63f58eab26b0226799f43bc4dd2822e7d635fef5a331dda5b687775c2f9916a3c2d51eb48e9f58f035d05140d310de5c4eb
+EBUILD hardened-sources-3.7.3.ebuild 1807 SHA256 3566aec04a2d232b4f58f7aab3fe127c5648b5322d23f76f77c7a66f55a55bfb SHA512 54bc400a03ef21be4eb8ab0c3da98752a622517b53b546fcb96af2544713a840c4f02a642d33e2c53006ff6751e5d972d2fa204dcb2a373337c0d92aa336ac26 WHIRLPOOL 481db53001cefd396e3b3ade720c667876b772ce5f954d8ecd631fd3726b9b61086fb4220efef8e6b0589b7464a299af0ba5f8eef2fcd23c01632dfa583747c4
 MISC metadata.xml 576 SHA256 53e0d3bfb958bcbf62457a89abe76a7a6f5a2b1df5decb04bf8b840184cc5828 SHA512 aabb8324fc608a74fecda5e4fff0f29d47d34ff20bdea2af8a69726772268d7b3b9d2639cd9c2308b3c79b89d9e923d2a96b212e7cfe59a0bf0008e3fb1c7e6a WHIRLPOOL 11fc891bd478667fe4ca5d203b366fdcf1680dac31bf997ea7c707c6f00a1c03b6ca7a00045b75dc1604e9eb57c2cab03a12f46318320ed6abdb5d6feb06b71f
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v2.0.19 (GNU/Linux)
-
-iQIcBAEBCAAGBQJQ+tu8AAoJEJOE+m71LUu6ZhgP/30KX931/7H0LPacRNKQj4c1
-PG8pN3TfSYD5r9VrJS2QEuaNG60N7Lm1Lo19VWme0D99nlPDk9hX7pZKIBkTyo2H
-ZA7vleFh5f4T/nj3dEwCWaZKwbIBN36YdHwU1FoFwOw2zAVr6U+1lNQ08KFRZNBI
-btY95EJDB5fi4I5rDSFdNNUUTtjx4ASkknpVduYWnhT4rtteC8a/j0pTMPwk1l1E
-zn57eQFblNQFh4SC8qEpy3f5hfOzfbmHHIIBAieKghuoNwwaKgjQ87AP9fNvEXDb
-p+5fEq9c7E+NXr8thbYFjyqHHhvvTDQPEZdkcufjmZ4DM0TBKN0/jM/joifdEYQT
-6cs78o9jFHxZL7+d9g9kNScj80d5rJV4g+TUVtIEB2fxHiBmjqdpaibQt6+ZppAk
-ZBPkNHB66FbLeB/f/ke6RSF1d3cbFpZpIKWwK62PAyYamnBGGS6u86ePmRwX3T25
-Q5sKASFX2aWCM3Mf93tTGvS2UayfXq3WZuLaIGOjCG4CG/UGK62kBQSOneutKSed
-9Q5sbgxeEJhytDbNZdeZl3IwwDVTwJptLqUewT1tpyAx9JnA/GyIIuMX4brK07I1
-gJH+XYWmjQhSgljy7+g/GI347539xnDncBvHNFrld4QSeTX2lmSYPeP4H9R42VeP
-HwTz4vHURBPkQMmRt1aw
-=7oVp
------END PGP SIGNATURE-----

diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r146.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r146.ebuild
new file mode 100644
index 0000000..b8af591
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r146.ebuild
@@ -0,0 +1,51 @@
+# Copyright 1999-2013 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r145.ebuild,v 1.1 2013/01/07 18:12:35 blueness Exp $
+
+EAPI="4"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="48"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-150"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.9.1*"
+
+	ewarn
+	ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
+	ewarn "[server], [workstation], and [virtualization]."
+	ewarn
+	ewarn "Those who intend to use one of these predefined grsecurity levels"
+	ewarn "should read the help associated with the level.  Users importing a"
+	ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
+	ewarn "should review their selected grsecurity/PaX options carefully."
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}

diff --git a/sys-kernel/hardened-sources/hardened-sources-3.2.37.ebuild b/sys-kernel/hardened-sources/hardened-sources-3.2.37.ebuild
new file mode 100644
index 0000000..c5947ff
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-3.2.37.ebuild
@@ -0,0 +1,50 @@
+# Copyright 1999-2013 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-3.2.36.ebuild,v 1.1 2013/01/07 18:14:51 blueness Exp $
+
+EAPI="4"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="16"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-1"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.9.1*"
+
+	ewarn
+	ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
+	ewarn "[server], [workstation], and [virtualization].  Those who intend to"
+	ewarn "use one of these predefined grsecurity levels should read the help"
+	ewarn "associated with the level.  Because some options require >=gcc-4.5,"
+	ewarn "users with more, than one version of gcc installed should use gcc-config"
+	ewarn "to select a compatible version."
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}

diff --git a/sys-kernel/hardened-sources/hardened-sources-3.7.3.ebuild b/sys-kernel/hardened-sources/hardened-sources-3.7.3.ebuild
new file mode 100644
index 0000000..3e283bb
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-3.7.3.ebuild
@@ -0,0 +1,50 @@
+# Copyright 1999-2013 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-3.7.1-r2.ebuild,v 1.1 2013/01/07 18:17:47 blueness Exp $
+
+EAPI="4"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base"
+K_GENPATCHES_VER="5"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-1"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.9.1*"
+
+	ewarn
+	ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
+	ewarn "[server], [workstation], and [virtualization].  Those who intend to"
+	ewarn "use one of these predefined grsecurity levels should read the help"
+	ewarn "associated with the level.  Because some options require >=gcc-4.5,"
+	ewarn "users with more, than one version of gcc installed should use gcc-config"
+	ewarn "to select a compatible version."
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}