[gentoo-commits] repo/gentoo:master commit in: sys-kernel/hardened-sources/

["Anthony G. Basile" <blueness@gentoo.org>]

commit:     6d75d0c85d8d81eeaa145bdbaaf8a6cd0b48739d
Author:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
AuthorDate: Mon Sep 21 00:49:59 2015 +0000
Commit:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
CommitDate: Mon Sep 21 00:49:59 2015 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6d75d0c8

sys-kernel/hardened-sources: version bump to 4.1.7-r1

Package-Manager: portage-2.2.20.1

 sys-kernel/hardened-sources/Manifest               |  1 +
 .../hardened-sources-4.1.7-r1.ebuild               | 45 ++++++++++++++++++++++
 2 files changed, 46 insertions(+)

diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index 11ffc78..1365791 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -23,6 +23,7 @@ DIST hardened-patches-4.1.6-1.extras.tar.bz2 1459744 SHA256 2dd45dabeff383ca2579
 DIST hardened-patches-4.1.6-2.extras.tar.bz2 1457264 SHA256 16d0ded5de82a1b35ae8b33ea6d6177a0242b05abd9d05058987af11f59af126 SHA512 6822224760cc51adba54eb763a877ba9739b0b4d9a534dd308570a8ab8770649f30c8a81d05460a7855fc984f0a65a256bb94689e7f4e648dff0a0870e52327c WHIRLPOOL a1743f91eb0603056aeffa46feb85e5b108782ede77b6162c5046fbdc419a93aace7d17ee33e5d43388f3c48745a4f32c10186cc8b098c03744180ff79ba8bb3
 DIST hardened-patches-4.1.6-3.extras.tar.bz2 1420666 SHA256 d19a4878f6003bbc74dc549e1441db92260257513d18a45f90b59415ee95f3b7 SHA512 4dcaafc74a1a611a574b765ac6b476f43fb334dbad910e5f6775440c3f183f6c3da688476833860684a305a173e4cfd4bfa7d83a3caae3430438664460c865a7 WHIRLPOOL 5d44f46db5860da387d6ecec2cd10ed25803d96087bf80c08f1440e03bcf848452d49faee1c35fcd5c073f7b9d0b22db16ba816ded220ab1321628f1be7267ad
 DIST hardened-patches-4.1.7-1.extras.tar.bz2 1418849 SHA256 2789e35771f93db1bdcff11fb4754c6854c45d1ef7b5d7a1bfd03f5161f11a53 SHA512 d1c82400462ce02e4cbbbb99224edb29bd96e199936a4a9f0a650713d619f518c248f41a1104a2e0bc1e9a89e5778a355d7b8745e583d35759e47198edfb47f8 WHIRLPOOL d828b7fdd7429ff44b1fd613ed18a0cec2af01971d460bd2e4b9ce021768836e4184a542c7e5576e1762e9aadd4d405ebdabe0d09078bb2b100a46dd6be0be52
+DIST hardened-patches-4.1.7-2.extras.tar.bz2 1419438 SHA256 c8c0fc29c39eafbcea107b8237087fd0e185297e2df9ffeaafc6b3a4736b7a45 SHA512 dac324e265174777d8b9c2369f57e52833b4228b3291e41952a9791ce41b9abf378e1d9a0521566c3a0e42de15a16afa5fe379985b7fee78b1b2b3b815d7cdd4 WHIRLPOOL 7638001f1b95e4af1d051b13648f486aa0eca524157e1a46dd2023fbd86313e0a5e8043653d7388b7286d42cc6e7c0f07cde2de3d5aee6cc058d12538a0980c1
 DIST linux-3.14.tar.xz 78399152 SHA256 61558aa490855f42b6340d1a1596be47454909629327c49a5e4e10268065dffa SHA512 5730d83a7a81134c1e77c0bf89e42dee4f8251ad56c1ac2be20c59e26fdfaa7bea55f277e7af156b637f22e1584914a46089af85039177cb43485089c74ac26e WHIRLPOOL 5ad07b78c362ba0b21c50b4abb99407cae06bd08576f3fd8f36047b01409eba096263208020da3dcad4977eefc61d66502276754097bc127635df1d7a5817d41
 DIST linux-3.2.tar.xz 65065516 SHA256 dd96ed02b53fb5d57762e4b1f573460909de472ca588f81ec6660e4a172e7ba7 SHA512 77e9a52d78d6c8e951df1e166023eebe5defc5ef3c45d3ac84b613137b3c2e55cee5693d828ebd06c5034bd89ea2a5f862f55824f2b7839c9ad7212c81e3ecb0 WHIRLPOOL 7cc68baac4441740e2171fbbc4195ee6c0351de099aadaee8cb3487f6d1f8b7e1d3144ee54ba38dbd24d6be431a1ea3b921ffce82ff84df21a98da7bc61c1d17
 DIST linux-4.0.tar.xz 82313052 SHA256 0f2f7d44979bc8f71c4fc5d3308c03499c26a824dd311fdf6eef4dee0d7d5991 SHA512 ce13d2c1c17908fd9a4aa42bb6348a0cb13dd22e560bd54c61b8bfdf62726d6095f130c59177a2fe4793b7dc399481bf10d3556d1d571616000f180304e5a995 WHIRLPOOL c481256e23dc82209942d4f2fc9a94aa7fc4c3c69b05eaa041a58ca4bdc5781274ec4c49d597ccf94b634d61418ec578d20a6569c6c7052b4d3cf33611c99001

diff --git a/sys-kernel/hardened-sources/hardened-sources-4.1.7-r1.ebuild b/sys-kernel/hardened-sources/hardened-sources-4.1.7-r1.ebuild
new file mode 100644
index 0000000..9175aa0
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-4.1.7-r1.ebuild
@@ -0,0 +1,45 @@
+# Copyright 1999-2015 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Id$
+
+EAPI="5"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base"
+K_GENPATCHES_VER="11"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-2"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="
+	1500_XATTR_USER_PREFIX.patch
+	2900_dev-root-proc-mount-fix.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-3.1*"
+
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}