[gentoo-commits] repo/gentoo:master commit in: sys-kernel/hardened-sources/

["Anthony G. Basile" <blueness@gentoo.org>]

commit:     1bcaa3845ea51d011daaf4a144a3174cafbb7de8
Author:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
AuthorDate: Wed Jan  6 13:29:06 2016 +0000
Commit:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
CommitDate: Wed Jan  6 13:29:42 2016 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1bcaa384

sys-kernel/hardened-sources: version bump to 4.3.3-r4

vanilla-4.3.3 + genpatches-4.3-4 + grsecurity-3.1-4.3.3-201601051958

Package-Manager: portage-2.2.24

 sys-kernel/hardened-sources/Manifest               |  1 +
 .../hardened-sources-4.3.3-r4.ebuild               | 45 ++++++++++++++++++++++
 2 files changed, 46 insertions(+)

diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index 85ff82c..c60cb04 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -12,6 +12,7 @@ DIST hardened-patches-4.2.6-8.extras.tar.bz2 1622619 SHA256 c0ff3bef7fba1bf2221c
 DIST hardened-patches-4.2.7-1.extras.tar.bz2 1678777 SHA256 80a4ae498b15e7aeaefbc68f7f7983120a6b0065516510f8f631f94de3ea7eee SHA512 42c4911f0001ae4acc02cf8beb52d95f5e2860950d6f202728d4f099d06ff4fac27850168032d88bd2978471e4942a777c625667371484a0a261479a8d669386 WHIRLPOOL 891febe584c06b8fd2d8e7e9f2bdb3d0a8b10f2576e7d79359ddc50804fffe4b094ca1692ff533bf0279da1580c73ed89070436eb1a30b9cdf6e90cb0facfcb1
 DIST hardened-patches-4.3.3-3.extras.tar.bz2 1646111 SHA256 1ffc5f89a9a9c79a5075f4ed6e4e5ce93ec7178b2e1d62984c8e505b380eac6b SHA512 51a317e11bc932366a53397a7899c8defe5fe803c7a8eb3b2af7cc18ce77e80f5bcc8542dbd4b1fa0e6c20d8d9259584c39caad3db202b87bdbd94ecb2a3e8e9 WHIRLPOOL 0d732ba9c5c37b9236616d33e57232165c25fd7309e452db5953738eb67439cb743cb53a34ef1acff6c6fa7529e5d212b5d056f0d80ea71f17b1e14e5750dc54
 DIST hardened-patches-4.3.3-4.extras.tar.bz2 1647439 SHA256 9247cd1a980eba5772ee55e61b5ed68a39b16eebe73010fe8cbe3c239f63c059 SHA512 db932835ebeb3f801baa5098979f2b0099acf91463b53724b9af676764ef65273506d5d7400786072367d69781f0268ede583bfa7370484d8ae728790a02b92f WHIRLPOOL ee9d1b035f8bd8e766535b8defefc08056c22d29fa5ce52c17a476deda122237767786d5f1ffcc3f4f6724a76cc5df5794024315d27231ffe559c3fe65eebd9f
+DIST hardened-patches-4.3.3-5.extras.tar.bz2 1649484 SHA256 2a62a5eb4b98f4fbeb43511a0573d58226277d3112401abec37355d85e01ae23 SHA512 09b7272af44fb1e29cba857f7c3305d97f8997881f228a2f2eb56dda909ae5402a69336c6fccdf3920f8788a7922f10b0977517f5918d44702e1a9b668c708c7 WHIRLPOOL efc152c7680b84b682f9f6857b8c6b2b66b6d505f76b311a8e3289a606f46d4944d90478ff93e3656f41c367fdbcd65dcf3043842354b26b669b462ce49f3471
 DIST linux-4.1.tar.xz 83017828 SHA256 caf51f085aac1e1cea4d00dbbf3093ead07b551fc07b31b2a989c05f8ea72d9f SHA512 168ef84a4e67619f9f53f3574e438542a5747f9b43443363cb83597fcdac9f40d201625c66e375a23226745eaada9176eb006ca023613cec089349e91751f3c0 WHIRLPOOL 85fcfdb67ea7f865272a85d3b4c3ec1f5a1267f4664bf073c562bb3875e9d96ad68486259d8866a9aced98c95de16840ec531d89745aec75b7315a64ebe650b8
 DIST linux-4.2.tar.xz 85507784 SHA256 cf20e044f17588d2a42c8f2a450b0fd84dfdbd579b489d93e9ab7d0e8b45dbeb SHA512 a87bbce3c0c6d810a41bbba1c0dcaae80dc38dded9f8571e97fa4ee5a468d655daf52d260911412f7c7da3171a5114e89d63da14b1753b9a3eb2cc38fd89b9ee WHIRLPOOL 2058e664ee287cc03119ff3dd0155b7018b9c789a13a1012f190e516172f845dcb2d977c8e6a6951e9bd720e5e8cdfa3b888cce392c9b02780520e77475870d0
 DIST linux-4.3.tar.xz 86920812 SHA256 4a622cc84b8a3c38d39bc17195b0c064d2b46945dfde0dae18f77b120bc9f3ae SHA512 d25812043850530fdcfdb48523523ee980747f3c2c1266149330844dae2cba0d056d4ddd9c0f129f570f5d1f6df5c20385aec5f6a2e0755edc1e2f5f93e2c6bc WHIRLPOOL e3f131443acc14d4f67bbd3f4e1c57af3d822c41c85a112564d54667a591c8619dce42327fd8166d30a2d7adfaf433c2e2134d4995c91c08f65ac0cc2190f935

diff --git a/sys-kernel/hardened-sources/hardened-sources-4.3.3-r4.ebuild b/sys-kernel/hardened-sources/hardened-sources-4.3.3-r4.ebuild
new file mode 100644
index 0000000..0fa6807
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-4.3.3-r4.ebuild
@@ -0,0 +1,45 @@
+# Copyright 1999-2016 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Id$
+
+EAPI="5"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base"
+K_GENPATCHES_VER="4"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-5"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="
+	1500_XATTR_USER_PREFIX.patch
+	2900_dev-root-proc-mount-fix.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-3.1*"
+
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}