[gentoo-commits] repo/gentoo:master commit in: sys-kernel/hardened-sources/

["Anthony G. Basile" <blueness@gentoo.org>]

commit:     c66398f69df04dc763588f5ac5202ffea515542c
Author:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
AuthorDate: Wed Dec 23 08:17:09 2015 +0000
Commit:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
CommitDate: Wed Dec 23 08:17:09 2015 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c66398f6

sys-kernel/hardened-sources: version bump to 4.3.3-r2

vanilla-4.3.3 + genpatches-4.3-3 + grsecurity-3.1-4.3.3-201512222129

Package-Manager: portage-2.2.24

 sys-kernel/hardened-sources/Manifest               |  2 +
 .../hardened-sources-4.3.3-r2.ebuild               | 45 ++++++++++++++++++++++
 2 files changed, 47 insertions(+)

diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index a16b1ce..c793b52 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -7,6 +7,7 @@ DIST deblob-check-4.3 688368 SHA256 9dff222415c2ead1edba2f6755926d6786225814d87d
 DIST genpatches-4.1-11.base.tar.xz 233284 SHA256 4189cfd2c7d1a1d7f28c8a596ad36741ce087c7c4cfbe0d5d20a0ee889328d18 SHA512 e5944edf832070d6072ab8efc242165afcfb689874687196c96389c6176ca9772e72e82836aba40ad05840536acae6efd6e72890efd692d903018d47489a90f8 WHIRLPOOL 13cb400b330443025f77dee6c710ca9886991a7032fa3ff925d53ed4fc03d07ece5647dca65de1a149073362db1d7a0b374a21d980eafcae09a4b01584c64cb6
 DIST genpatches-4.2-9.base.tar.xz 216388 SHA256 16e1a0fdc0c8b36b87477ba11913cd9b83d5cf96651814fb017c7ebe57b65d8f SHA512 3d8d1a25571a969e1e47d37dc87657b409a03200c2d3ee8ffe2cba19344795626225374128cdb7f09df9bd4cb0035a3c8645c2cca9fbab2024f6ea1875a3591c WHIRLPOOL 13254f0c939584052aa7ac736410796bfc37b5b0ca050a0c6c63c4de7c3e84a2ebf649ea87c141702f4a53af4b946aadd1b6eb9a551a620b7d89596f2fd5958a
 DIST genpatches-4.3-3.base.tar.xz 42780 SHA256 61d6121205303e840e3eb29a2fc23be269f9aae7e8116012f476bff3d5d1a878 SHA512 be125ba6edd8731a8188478f5e463c2bb282654647b97c6e2190ae6183ebc380c53dd8f7324a5d2d6de207194bd1d9066ae611a40c93d6d74a5067aee37c98ca WHIRLPOOL 7f94a5bea46e661e12d1b0238233e94df6c6889397c7f5823283376f7a0587c41225c6c5d41caf1c04243f12d260cdf2b0aa8a3e8f0d95aae62328f524f3d1d2
+DIST genpatches-4.3-4.base.tar.xz 75572 SHA256 c0c073f12a4f1c0adf9d3865fe5d16dc43ea0e5c95c0867868e16e57f2fd6235 SHA512 a16b75f8fcd868d6f9bc2b91318eb8b8ec4db2b622d244e750d4176c4e8225808751c543c54d768fbd88785da656e9f60d8ef8bc22672b5cb1038573c0c366e1 WHIRLPOOL 04c723b71f440035f57684088a47e83430f1c5b057951e037f128f3681f16669eca16f2f1b8d4b7be4a617420131277d1fe415503a679b83a081e06635df46e3
 DIST hardened-patches-4.1.7-2.extras.tar.bz2 1419438 SHA256 c8c0fc29c39eafbcea107b8237087fd0e185297e2df9ffeaafc6b3a4736b7a45 SHA512 dac324e265174777d8b9c2369f57e52833b4228b3291e41952a9791ce41b9abf378e1d9a0521566c3a0e42de15a16afa5fe379985b7fee78b1b2b3b815d7cdd4 WHIRLPOOL 7638001f1b95e4af1d051b13648f486aa0eca524157e1a46dd2023fbd86313e0a5e8043653d7388b7286d42cc6e7c0f07cde2de3d5aee6cc058d12538a0980c1
 DIST hardened-patches-4.2.6-5.extras.tar.bz2 1614962 SHA256 8fc05a17bd7cc1ec7520189f0fb03870eb4ba1149642e277ffc111803ea5c7ad SHA512 bfc1f2846b2d7b520f28cddb170bfb4e6827f384380a00e00b725298005cf5a4fbe9083866e4db6c9c0face28eb107f6508df1c2a89a5b898fadeb3bd7797fb1 WHIRLPOOL 7ba4e5e65c5ea97e6c6326f420e01bf6d058160ad416528497002e93abb5e6a06d1cb5dfa9a00ac40d18851af0a3a9e9739584a38bf4395790b8def628aff53b
 DIST hardened-patches-4.2.6-6.extras.tar.bz2 1616679 SHA256 e959a5c2662c3e5207bc17719a0e5278df2cd7abaeb70f811f8211edf526e8ab SHA512 c0698d9451c0fb9c8fc4ce55154ee0b22ae6a0e39173a01dbb2f79ce42a26b06a777fab339b390603e4c9e1df71144a67500858e9e0d9443749cc12a6df7a8cf WHIRLPOOL b90e94db72fd467200b89cb73ec1dd63cabbb23463dc7c535f751d1dd1ac34759349480c127110b01b8baa413201b1ea4a91869024bcf0a16ff6bbfedfb62086
@@ -14,6 +15,7 @@ DIST hardened-patches-4.2.6-7.extras.tar.bz2 1618329 SHA256 f201bd94940bac8729e1
 DIST hardened-patches-4.2.6-8.extras.tar.bz2 1622619 SHA256 c0ff3bef7fba1bf2221cd5525dd19973d1cb8d916ccd672fba3b36a8e866a8a9 SHA512 07d4b63fa2c42fd95d7c3a5e0ee4c340545540bc9a7af623bd12a351c84d9b76e79aaab83ac2a87c36678b145b599918324eca75a51df11698fb4f76550caf46 WHIRLPOOL c7163ea8b3d87b9a3fbacc220c977987c7db4b2f7b270430dd928e29669ff06dfb351d36619e7615d764464469ad638a7c017da62b121846ecc56675ce52c257
 DIST hardened-patches-4.2.7-1.extras.tar.bz2 1678777 SHA256 80a4ae498b15e7aeaefbc68f7f7983120a6b0065516510f8f631f94de3ea7eee SHA512 42c4911f0001ae4acc02cf8beb52d95f5e2860950d6f202728d4f099d06ff4fac27850168032d88bd2978471e4942a777c625667371484a0a261479a8d669386 WHIRLPOOL 891febe584c06b8fd2d8e7e9f2bdb3d0a8b10f2576e7d79359ddc50804fffe4b094ca1692ff533bf0279da1580c73ed89070436eb1a30b9cdf6e90cb0facfcb1
 DIST hardened-patches-4.3.3-2.extras.tar.bz2 1682583 SHA256 157abebc2f63263a547ea708ee9f157fe4ad881123858e356c852e49b9a9cd79 SHA512 8fba759204066d50e7e013dc13c8133b3ebdcb2be8885be8f0d3d0762ac8d7d737f1b5bd5d24094b1e6a806a3871506f415afee94b7b06be72b1538f5890c2e8 WHIRLPOOL 9b87f1d0a2b4eccf13b5658208d0ca79551ae1c573bc1cc6a81c7cfb7e97af30600ac5b9ef4d74b1d50dc2424232d9d2ee775f3e7047a6a50d6901ca3f6977a1
+DIST hardened-patches-4.3.3-3.extras.tar.bz2 1646111 SHA256 1ffc5f89a9a9c79a5075f4ed6e4e5ce93ec7178b2e1d62984c8e505b380eac6b SHA512 51a317e11bc932366a53397a7899c8defe5fe803c7a8eb3b2af7cc18ce77e80f5bcc8542dbd4b1fa0e6c20d8d9259584c39caad3db202b87bdbd94ecb2a3e8e9 WHIRLPOOL 0d732ba9c5c37b9236616d33e57232165c25fd7309e452db5953738eb67439cb743cb53a34ef1acff6c6fa7529e5d212b5d056f0d80ea71f17b1e14e5750dc54
 DIST linux-4.1.tar.xz 83017828 SHA256 caf51f085aac1e1cea4d00dbbf3093ead07b551fc07b31b2a989c05f8ea72d9f SHA512 168ef84a4e67619f9f53f3574e438542a5747f9b43443363cb83597fcdac9f40d201625c66e375a23226745eaada9176eb006ca023613cec089349e91751f3c0 WHIRLPOOL 85fcfdb67ea7f865272a85d3b4c3ec1f5a1267f4664bf073c562bb3875e9d96ad68486259d8866a9aced98c95de16840ec531d89745aec75b7315a64ebe650b8
 DIST linux-4.2.tar.xz 85507784 SHA256 cf20e044f17588d2a42c8f2a450b0fd84dfdbd579b489d93e9ab7d0e8b45dbeb SHA512 a87bbce3c0c6d810a41bbba1c0dcaae80dc38dded9f8571e97fa4ee5a468d655daf52d260911412f7c7da3171a5114e89d63da14b1753b9a3eb2cc38fd89b9ee WHIRLPOOL 2058e664ee287cc03119ff3dd0155b7018b9c789a13a1012f190e516172f845dcb2d977c8e6a6951e9bd720e5e8cdfa3b888cce392c9b02780520e77475870d0
 DIST linux-4.3.tar.xz 86920812 SHA256 4a622cc84b8a3c38d39bc17195b0c064d2b46945dfde0dae18f77b120bc9f3ae SHA512 d25812043850530fdcfdb48523523ee980747f3c2c1266149330844dae2cba0d056d4ddd9c0f129f570f5d1f6df5c20385aec5f6a2e0755edc1e2f5f93e2c6bc WHIRLPOOL e3f131443acc14d4f67bbd3f4e1c57af3d822c41c85a112564d54667a591c8619dce42327fd8166d30a2d7adfaf433c2e2134d4995c91c08f65ac0cc2190f935

diff --git a/sys-kernel/hardened-sources/hardened-sources-4.3.3-r2.ebuild b/sys-kernel/hardened-sources/hardened-sources-4.3.3-r2.ebuild
new file mode 100644
index 0000000..3ef0e63
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-4.3.3-r2.ebuild
@@ -0,0 +1,45 @@
+# Copyright 1999-2015 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Id$
+
+EAPI="5"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base"
+K_GENPATCHES_VER="4"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-3"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="
+	1500_XATTR_USER_PREFIX.patch
+	2900_dev-root-proc-mount-fix.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-3.1*"
+
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}