[gentoo-commits] dev/blueness:master commit in: sys-kernel/hardened-sources/

["Anthony G. Basile" <blueness@gentoo.org>]

commit:     ffe3bacc56e158c9b76f4c1a38f78c3902f8b99e
Author:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
AuthorDate: Sat May  4 20:13:35 2013 +0000
Commit:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
CommitDate: Sat May  4 20:13:35 2013 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=dev/blueness.git;a=commit;h=ffe3bacc

sys-kernel/hardened-sources: testing patchset 20130501

Package-Manager: portage-2.1.11.62
Manifest-Sign-Key: 0xF52D4BBA

---
 sys-kernel/hardened-sources/Manifest               |   46 ++++++++++++++------
 .../hardened-sources-2.6.32-r164.ebuild            |   43 ++++++++++++++++++
 .../hardened-sources-3.2.44-r1.ebuild              |   43 ++++++++++++++++++
 .../hardened-sources-3.8.11.ebuild                 |   43 ++++++++++++++++++
 4 files changed, 162 insertions(+), 13 deletions(-)

diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index b0df4a1..c2cd83d 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -1,21 +1,41 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA256
 
+DIST deblob-2.6.32 84094 SHA256 de625f0bd221c9c38d4453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d SHA512 81263cf9f0e8232f9d56966082514f58c147d12cce0bce384f6830a450006006274f3009dd11c38638cd083d0efc14dc2edd1b79ca22a18835eeee4e9ea15eab WHIRLPOOL c53c3f114e7536426c7f303c8d67ee5d26929ca59b25b5fdcf18b2748acc4699cda42f63908db6f78ab338301da8cad3b3ecbab45ee5c1f15679d4e44042dec4
+DIST deblob-3.2 107602 SHA256 5db88405af6d51a77d84354afc3b2bdf673b1a5dcff37bb8db4ccbd12d91db20 SHA512 f34b7128adf716c908cbbbfefe72149fcd88b727d27edab43be65d4e6a55112b6d937d5c2bed86454d58781f3766ba4cc6db668cb6174a6039d276499da37cb4 WHIRLPOOL 0922457f7ca413c9d8115182964a7c051560799c4724452f81cb4c0383cf62c45b0364d6e639bd9d2b9000411d8773cabd2e8af99e8b0dc7f7bdc886db432d6d
+DIST deblob-3.8 113867 SHA256 883e8f003cabd9168659b4a6c2549bf22f64b8dc7ca9ff106335cfdff23b890c SHA512 acdaecb5a371489f8d0c2cea4776584eb4a76db0ea5dafc363881f2c5bbccd212d98429c2a559e697f0485329d51f1c01ba2f6c82ec703ad6bca9b8d9097a452 WHIRLPOOL 40c723ad41434aef0d30ee5e0ebcd5476778c70bf82043241522ea389a3d5a66a5cd0480722f019daf3eba97a0f30eade1741af0979be956644cfb3e24ee90bc
+DIST deblob-check-2.6.32 247608 SHA256 da1aecdf3ab7f1207b90642d303e52262ccc2ed9e49739b729512b88950d17f3 SHA512 2ba5c7615164a96847afc40af9c9883dc39d8be633e8f07d0d4a6c16b1a22117faf68d5aa40c5aee843dc687a635e2195a4be3bfa40f87dc2b89554d869616b6 WHIRLPOOL ea5dcfd0ee58f1e9ff8dc16229401d37c0271fcae9d065ec648828088cd8d0b8eb8a80efc772d1ed0f075017485609ebf19c01156586728dd335af2dee2bbeff
+DIST deblob-check-3.2 423268 SHA256 9e67dd0885aa8ef356dbc15d487c8dea5a54f74c5b03a5d7946b65ee43f12638 SHA512 3abb9968ef4750fda90e4e2283981fd4691b7f9854244413b31d17bb60382a6d809fec929d8d3f9b52397dd9f9fa26783f4c3a25f3f4115b76ed585ea68e9916 WHIRLPOOL 891c3f809af470d680ae896c843c09612fb5124f2805e03d67b28ec4353bff0bc346ae9f680d900f0f63e681be86a0195f9baab7dcf3b5accfda739b106766fa
+DIST deblob-check-3.8 539625 SHA256 df1f7ebc09f93ec51c0d3755b5454adcdd271e428573014d13f58638760863a2 SHA512 1c27b2df8aedd93da153d8dade37384e59862dac2eab948802744fb1c5cdc7d141cb2d971bbc448e723f15c14f1646a1cc695f20e64150b26dc26746601d1d17 WHIRLPOOL a1354cfcad7d40e8e811882f2715a71f36bb18c99c6c5277b18aef7f738c41bbf5c7099735b6de4a37b22868dbf96a5405d0b21c16a5709d70a1d0b082a57594
+DIST genpatches-2.6.32-48.base.tar.xz 907780 SHA256 aafa99cbd0ff38c9fccd3ce6780b2f3c261e3e66415dc8b14870959b94498c73 SHA512 eebadf08d5a01165d7e57e0d5adc70de33854b5b57c69edba5c0e6672288479da33f57c89a0fe838067aa5ca3663c47b22c98c34929ef66c5740e945af5c0317 WHIRLPOOL 3906c3e0c9a7a66c4cc710d506ec56d97fc6ac878c2aa22b1a2ad3ce10d3aae8cfbd54d9f78fa78b3ce41fdf291b8ee955692e4759758f2edac5e24e9f342c41
+DIST genpatches-2.6.32-48.extras.tar.xz 24436 SHA256 87b9ba845a35f737088362921720403bc348554031f8956ae20b30ade53b7c64 SHA512 de7c110f5f86f865410cfc408eccd3052a5b7777065f06cbeb3c22c3642db9424235df19ea418e2354ff3aabcc915b0b85cf6e06537f6600d7b30e2f79220508 WHIRLPOOL 755f5e34fec49976f634c43ab459cb13703e6595ca84808d18919a01d7735bf97f16625102b384d67d4360bd3d9a07d21ab50e16b945edb9df8231a26cfa7169
+DIST genpatches-3.2-16.base.tar.xz 410332 SHA256 d3ad97b119c5b8cfd8e34f1cf118dc7d5bbe61fe908a5627f8ab6365517d7190 SHA512 6c917efbdd26dada3e68241c4d55833968e8ee7044ea7fa2edeffdd4d7eb0edac157057abb75da09ac6d2b5368d228ecd1c2ac6006a9d45b91dbb264eae33625 WHIRLPOOL 155a5b3297ec53a6bdb76e20c8c89d4f4c35ed2bb47e20281ce305bf9edd413e4d89168e250a699ace0561c151ef2f484c05e59013dbd971d43184c5f072a71a
+DIST genpatches-3.2-16.extras.tar.xz 16764 SHA256 c3f5adba6f1700c716354b91bc624115c6f5cae6f8fbdc51d07a76d4546bacaa SHA512 e3245c05f3385bb27852c00a39a898c91b3c0006e19c5db561f3e41f9bef7e97012ed29ddf9b0e2bd1ba1fa16590e516fb00ce754a84dd5c653c046b9f4e63f9 WHIRLPOOL 3c1ee6db88607ed91366067217d4a556fb5516ce8bee2859e97be7e214a05609e2d36ec27ec413154baa432a984f53cf69cfb94ae65ec4b8d2e9a86641d77a0b
+DIST genpatches-3.8-13.base.tar.xz 245752 SHA256 f8c3caaf401397b4d61bdbd36c58600d9a0cc2d08287a550119dc133643d1add SHA512 4eb813a962a14c19b6e7b37a93a9ad9479519cd1e8b71c22d455c4431f84dee6525679ac74ec4362496f190dbdb9561fa80a52c870b62d96a363ae8db617b3d9 WHIRLPOOL d9a2c45446d24e330fddc585ecc2b472f3e9f463ad9a415efb0d3af67e8358002044339bc973dc8a07ed2b73f13a7b821eedd742114b753c4dcc26d58925d359
+DIST hardened-patches-2.6.32-169.extras.tar.bz2 919260 SHA256 4e8b247437b5891c76f71c3e1866cb446cfaf44f4e830cc23cef5c3f7f267061 SHA512 2ff198d6e2fe9fb4011ea82fb23298304568ac7097535185acdbd4d7d81435c822eed31fedcd6b91931089f637f60a41b327fe5d80a61dc0cc989bd7680f4752 WHIRLPOOL 5187c0be0b6e375cf44ac120b3accbb503de1c5d9788a865db3fc492c9daeeb9dd8cc67c26ea3199d324236b48e677226dcf84f61a14d4651390188bdf29eb10
+DIST hardened-patches-3.2.44-2.extras.tar.bz2 1347387 SHA256 085b506d59e1b4f08e9d3362526f125999a095b15b825c38e353e9fff93366c9 SHA512 4c82352b8c3e63e7ef307d0b91ad1f28f9a16d9be1148d175cd7edaeef758a79f5b4785cb2bac5a7f477ba94bcdf613df00f97ee4fb4e267a0086a18cccca3f2 WHIRLPOOL 4e2cb8573694d83d5aa4ad73e39003bca16070a723e12e71ba6bf6362d599eeffafeb3b946fcea275c0ae2513a42c3185bf049ac0bb4ec170c3503b9a1b3dce9
+DIST hardened-patches-3.8.11-1.extras.tar.bz2 720244 SHA256 c2c15e2d71bfbb4d9ecff148cb6715075bb0848d63e19351dc8d5c7000a85581 SHA512 96ca8a636ab3250597293cf00f027324eaaa22535529926f30852bde1cfe1dd459dd81bf91bb1b189ef5fde45c2cbc0d82a61f2b14ec63182477fba2d12e506b WHIRLPOOL 9d2755943c12cf69ef0a76895dec2aaeaad9412d37558184bab775be7524d54062665a00fbd32f18b699a6a51df1a3fa06848e5250dbb01a8d6dba0efebd9a3c
+DIST linux-2.6.32.tar.xz 52620720 SHA256 723106c298c5ba8733bb51ecc106b05e332a18490edc5f61cc6e57dbb36dcc46 SHA512 f8570daf2806eb191fce54cc7358577b0571bb295a75bd86db630d6136b328ae48e4732554b2d1886c64b0a0018bf0b9105dcface978a5005d1b77789aa40312 WHIRLPOOL bfcb4b186f7c4b60e69674a85d20a8e92b5efd05941b550401ef446cc6b20c9ed197f920d1cd9250c0e518c05308b9225f7ababe41cdfc83570412117b2ee555
+DIST linux-3.2.tar.xz 65065516 SHA256 dd96ed02b53fb5d57762e4b1f573460909de472ca588f81ec6660e4a172e7ba7 SHA512 77e9a52d78d6c8e951df1e166023eebe5defc5ef3c45d3ac84b613137b3c2e55cee5693d828ebd06c5034bd89ea2a5f862f55824f2b7839c9ad7212c81e3ecb0 WHIRLPOOL 7cc68baac4441740e2171fbbc4195ee6c0351de099aadaee8cb3487f6d1f8b7e1d3144ee54ba38dbd24d6be431a1ea3b921ffce82ff84df21a98da7bc61c1d17
+DIST linux-3.8.tar.xz 70989468 SHA256 e070d1bdfbded5676a4f374721c63565f1c969466c5a3e214004a136b583184b SHA512 10a7983391af907d8aec72bdb096d1cabd4911985715e9ea13d35ff09095c035db15d4ab08b92eda7c10026cc27348cb9728c212335f7fcdcda7c610856ec30f WHIRLPOOL 0c633854ad9c06df1b1d832aea9bbef76144ba88c8fccf6a3f8729101dc36838bcda6ccd444451cab19177608e7f7866f4f79cff1a8ef2bd0c893933d7f1f44c
+EBUILD hardened-sources-2.6.32-r164.ebuild 1381 SHA256 49245fcbd5fbfeed01d9b712a22ac48d9049c850df54cabbe54be8e17fcfbd40 SHA512 4ebb34a2316029e16f8471c5e2b1edefa1bb9a448371441cf85dd0cf538d7e168790d4a7e3d9e46effdb53e6fb1c86f126b2ed43c6fa48886c7df9988a004695 WHIRLPOOL cd2eb4fcf991708241cacd39262489c2ec5937ca665d21bbb3988762db0f64d7731c2f5c72ecaf9c1ddb2ccbd0f6f66647705fa2d10863f4aa097c69345f5744
+EBUILD hardened-sources-3.2.44-r1.ebuild 1374 SHA256 14f61c6fe0dad1837f00bc0bfe16652fbd1c7711834462f38b97d68d37fbc528 SHA512 8f08ba2b9b6986129f4faa4937144cc0c8c38f3ed0372c82dbc513c9eb51cb3804b785cfd47fd8b105c99cf33babd3c81c882996fcae8cdb046c5df0e938dd69 WHIRLPOOL 93e4fcb6eb8bfc2500311b35101890c568855e3dac5a7d9bbdf3340edfd850ea76939360b6873c93e45686b414bd808c654450191f241c659cd39e8ce91b18a0
+EBUILD hardened-sources-3.8.11.ebuild 1402 SHA256 53c43727942fbd0f7d060f9c6ae3196dc636e1b87c03ad264deb3b56cba9d16a SHA512 ea2edce329aad76f20fe5b34a150bb4679369bdc560482cb12f8009b8b4340e86720e92eaad57b1d3f33fc1dc9a002f3031f389d82b36018322d54df61897004 WHIRLPOOL 90d924654bc96fe6e53b8b5467d27deb5adb74e059298ad1500e0f19a7c46814d4f5cd0533566235f6cf7fa9777c8993b142e76958a46de7b9554146b954ec7f
 MISC metadata.xml 576 SHA256 53e0d3bfb958bcbf62457a89abe76a7a6f5a2b1df5decb04bf8b840184cc5828 SHA512 aabb8324fc608a74fecda5e4fff0f29d47d34ff20bdea2af8a69726772268d7b3b9d2639cd9c2308b3c79b89d9e923d2a96b212e7cfe59a0bf0008e3fb1c7e6a WHIRLPOOL 11fc891bd478667fe4ca5d203b366fdcf1680dac31bf997ea7c707c6f00a1c03b6ca7a00045b75dc1604e9eb57c2cab03a12f46318320ed6abdb5d6feb06b71f
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.19 (GNU/Linux)
 
-iQIcBAEBCAAGBQJRfZvvAAoJEJOE+m71LUu6OXsP+wTWgAUU8g2BbSkTNTKgNwvP
-ZF7wPt167GT7pZOfXc37oOYzXZqA2/K08m6n6S/bMIPXC+uO7nw+xfQo0GQUJtrl
-t+yXCsNxUFFmq8eYgKl6h1EhGPruI9irBjgELTV9MxLe6Tb24QWl/N65vT7cTjH1
-ScpHl6iU5iSw1+LglyJWtpgGHDqsBCLrh/v57WGzoupYLuInj89fE14oMF6uaKVp
-dqIv5egSq9AwacqFyCL6qB876f9AN5kP9zJQmqr7M0F42PW5GBAUfJDmOEee+q7R
-wai1XD84VL2JuhTHGMfqLIkozxkvtOM+be92XhGgc/TrNqE6m9uyxlGWx7fKUoDk
-xm/d3pxzoNPhvEjyDZ/LlYBezwzN1hlnwvloqfglKOi5RemXPL5NnF5j+MbN/YI6
-d3rvBemWZkJiMNZTLma7avWR17aOcnJus/UA+I028DzEYmOEUJYxG+rvClsdVPhC
-XfH+Gv4kSXvvWg6xuH+0iD+8qOjMol5CfHB2O7pH+KcKxW8GBDGRpexsVtMFZecU
-wwwn4vk5VHcphEPB1AGB55iKLwaWfXbZDZ5sp/vq5nXrPKBmf6ppbATVN3QUrJ8+
-6qng1EUGrtQ4nEA0rcyHmMMs2p5ypvrRrVh6YCTN7UEqjTWPGdcIsck0EbFbCuSY
-6CiSonl3qdIQiIwaEDw7
-=8gGG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+=8D52
 -----END PGP SIGNATURE-----

diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r164.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r164.ebuild
new file mode 100644
index 0000000..75ab950
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r164.ebuild
@@ -0,0 +1,43 @@
+# Copyright 1999-2013 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r163.ebuild,v 1.1 2013/04/28 21:00:12 blueness Exp $
+
+EAPI="5"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="48"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-169"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.9.1*"
+
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}

diff --git a/sys-kernel/hardened-sources/hardened-sources-3.2.44-r1.ebuild b/sys-kernel/hardened-sources/hardened-sources-3.2.44-r1.ebuild
new file mode 100644
index 0000000..a159ec6
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-3.2.44-r1.ebuild
@@ -0,0 +1,43 @@
+# Copyright 1999-2013 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-3.2.44.ebuild,v 1.1 2013/04/28 21:02:31 blueness Exp $
+
+EAPI="5"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="16"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-2"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.9.1*"
+
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}

diff --git a/sys-kernel/hardened-sources/hardened-sources-3.8.11.ebuild b/sys-kernel/hardened-sources/hardened-sources-3.8.11.ebuild
new file mode 100644
index 0000000..091e9ba
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-3.8.11.ebuild
@@ -0,0 +1,43 @@
+# Copyright 1999-2013 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-3.8.10.ebuild,v 1.1 2013/04/28 21:05:10 blueness Exp $
+
+EAPI="5"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base"
+K_GENPATCHES_VER="13"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-1"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="2900_dev-root-proc-mount-fix.patch 4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.9.1*"
+
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}