[gentoo-commits] repo/gentoo:master commit in: sys-kernel/hardened-sources/

["Anthony G. Basile" <blueness@gentoo.org>]

commit:     d653f332a34432dc53143a001622c060aafb11cf
Author:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
AuthorDate: Mon Feb  8 08:31:18 2016 +0000
Commit:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
CommitDate: Mon Feb  8 08:31:41 2016 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d653f332

sys-kernel/hardened-sources: version bump to 4.3.5-r2

vanilla-4.3.5 + genpatches-4.3-7 + grsecurity-3.1-4.3.5-201602070910

Package-Manager: portage-2.2.26

 sys-kernel/hardened-sources/Manifest               |  1 +
 .../hardened-sources-4.3.5-r2.ebuild               | 46 ++++++++++++++++++++++
 2 files changed, 47 insertions(+)

diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index dab2972..29f29b5 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -9,5 +9,6 @@ DIST hardened-patches-4.1.7-2.extras.tar.bz2 1419438 SHA256 c8c0fc29c39eafbcea10
 DIST hardened-patches-4.3.3-5.extras.tar.bz2 1649484 SHA256 2a62a5eb4b98f4fbeb43511a0573d58226277d3112401abec37355d85e01ae23 SHA512 09b7272af44fb1e29cba857f7c3305d97f8997881f228a2f2eb56dda909ae5402a69336c6fccdf3920f8788a7922f10b0977517f5918d44702e1a9b668c708c7 WHIRLPOOL efc152c7680b84b682f9f6857b8c6b2b66b6d505f76b311a8e3289a606f46d4944d90478ff93e3656f41c367fdbcd65dcf3043842354b26b669b462ce49f3471
 DIST hardened-patches-4.3.3-8.extras.tar.bz2 1669500 SHA256 55abfccb978e838266de327e020d47bb8f7bcf7ff6d6a89c993f18518ab6ffaa SHA512 bccae396966a3a00eac4763312e7c4a05f3cbc68f42675819ad90e3f43337713a7ee132ba5fe6874fffa55da9b8640e2d349793904736b9f62b178bdc5474ad9 WHIRLPOOL 76eceb3d204e3ed588fd40d773aa38f4450c0a3727aad75b231ed2795548ef3ef316fc3aeb174eabd79641fa43c4c2c56d184f6dd23f47980256e468c3cc6d2b
 DIST hardened-patches-4.3.5-2.extras.tar.bz2 1688809 SHA256 4859f8f42d14f79920613ccb195f2b4d65e1ba84cffccb338fe4c5cecb6d56ca SHA512 63128c8279077226292212de45b581d3de0cc9e866ae4907ba70e8cc9928324a4aada0429b1b102dcb72dccd75c26b2a5aa3880a6210e97c9871e7d6c32754cd WHIRLPOOL ee7f762935fbf211fded180921a80b4d9b2efd02be084df5636103c5a0bf8cf2ced5f59a9be3488cc4519969ae6d18783d7a704d5ea6a7140e7c83ae9a942203
+DIST hardened-patches-4.3.5-3.extras.tar.bz2 1689168 SHA256 97624ccc3a92cbb57fd2783a58436347fb5a6373e3f04a14c179ae6b291ac9f9 SHA512 1fb2acd51e39fe173783bfa693458242fbc7e16ec403741d4f86d8eadf401d1e238726c6834024f8c7ebe90d7ee22f531937bc5c2cf48073adafc70eedff664d WHIRLPOOL beec44858cc473f424fe9d9d647d8d9e8a61510c628c81256cdcd3f1372911c5dbb65b343e1e829bbf451f6bf3183d8714a309ca4d76268e3ed47ac2ae4c60cb
 DIST linux-4.1.tar.xz 83017828 SHA256 caf51f085aac1e1cea4d00dbbf3093ead07b551fc07b31b2a989c05f8ea72d9f SHA512 168ef84a4e67619f9f53f3574e438542a5747f9b43443363cb83597fcdac9f40d201625c66e375a23226745eaada9176eb006ca023613cec089349e91751f3c0 WHIRLPOOL 85fcfdb67ea7f865272a85d3b4c3ec1f5a1267f4664bf073c562bb3875e9d96ad68486259d8866a9aced98c95de16840ec531d89745aec75b7315a64ebe650b8
 DIST linux-4.3.tar.xz 86920812 SHA256 4a622cc84b8a3c38d39bc17195b0c064d2b46945dfde0dae18f77b120bc9f3ae SHA512 d25812043850530fdcfdb48523523ee980747f3c2c1266149330844dae2cba0d056d4ddd9c0f129f570f5d1f6df5c20385aec5f6a2e0755edc1e2f5f93e2c6bc WHIRLPOOL e3f131443acc14d4f67bbd3f4e1c57af3d822c41c85a112564d54667a591c8619dce42327fd8166d30a2d7adfaf433c2e2134d4995c91c08f65ac0cc2190f935

diff --git a/sys-kernel/hardened-sources/hardened-sources-4.3.5-r2.ebuild b/sys-kernel/hardened-sources/hardened-sources-4.3.5-r2.ebuild
new file mode 100644
index 0000000..03470d3
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-4.3.5-r2.ebuild
@@ -0,0 +1,46 @@
+# Copyright 1999-2016 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Id$
+
+EAPI="5"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base"
+K_GENPATCHES_VER="7"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-3"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="
+	1500_XATTR_USER_PREFIX.patch
+	1520_keyring-refleak-in-join-session-CVE-2016-0728.patch
+	2900_dev-root-proc-mount-fix.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-3.1*"
+
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}