[gentoo-commits] repo/gentoo:master commit in: sys-kernel/hardened-sources/

["Anthony G. Basile" <blueness@gentoo.org>]

commit:     df8f4ca54b2ff3dcf69dc00cb56d3c99ad1db55c
Author:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
AuthorDate: Tue Apr 26 09:21:25 2016 +0000
Commit:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
CommitDate: Tue Apr 26 09:21:42 2016 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=df8f4ca5

sys-kernel/hardened-sources: version bump to 4.4.8-r1

vanilla-4.4.8 + genpatches-4.4-9 + grsecurity-3.1-4.4.8-201604252206

Package-Manager: portage-2.2.26

 sys-kernel/hardened-sources/Manifest               |  1 +
 .../hardened-sources-4.4.8-r1.ebuild               | 45 ++++++++++++++++++++++
 2 files changed, 46 insertions(+)

diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index d94d1e0..c7a2d0a 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -15,6 +15,7 @@ DIST hardened-patches-4.4.2-1.extras.tar.bz2 1721230 SHA256 81f1417d210e0a6d9f5e
 DIST hardened-patches-4.4.6-3.extras.tar.bz2 1697719 SHA256 578fb7d0d6caf2d1f596bda34d00a18c96aa7103cb58cc30724607e24fdb1d11 SHA512 802e22cd1e2837ad4ec88ed8086b7ee868e389e4717b9299b433fb259681e106153e4ec9058534695f7c6f94ae4f163f3228f69cbd7138d403d79c81d8f36924 WHIRLPOOL ca0831b5f2aa53cf8b3f13f6e38f0dbe6b4cc105e3b1fcbcb234bd4ab508a01bded689f54e857eb711ef0e94fd60524e7cb47b4d7c70316f4942eb329d5cb8f4
 DIST hardened-patches-4.4.7-1.extras.tar.bz2 1696214 SHA256 af8b6147887db4348c43c4e55f2a8593b32a0b00162e29f226a756e6bf18a647 SHA512 f7b14fce045a4e89fe9a44c753dc6c4714bc883e77838c47d6a73ce161e162f52e55da948ada97fcb2268170033a7e02eb242054b24e9e2571fb0482a203d2e5 WHIRLPOOL 76e142d767fd1495b103f24e6f8abf5936e17dfc7ffc0b5471102f65f78e445104c63ef867e5eac0ca309b52fea069dd08d95d91d18eb40428d50cef46595b06
 DIST hardened-patches-4.4.8-1.extras.tar.bz2 1742981 SHA256 d9dad00eaf7c32d7b8a77da3b40c4048e2e0912e4ff2608276698e5f147bbc42 SHA512 d61fc293207f149565bd4b727d549f5ed27538dec3dfa79ff860a28d8d31a3d5321ae1112575278bd53fa39b82762e6abc280b3fcd002c6f98d60e756bcf14d7 WHIRLPOOL a60f3223d373637c8d4ada22343e9cd23de11e729b936ce5b7c86305dd409eeb3eb7a82f97fe2bbfdff972bf64b0cd50caa0550bd7ca5835a9a07ada86acff9b
+DIST hardened-patches-4.4.8-2.extras.tar.bz2 1743408 SHA256 5cde9a96f6a47ebe3c8abeb5d5add60480490fd365d4c31da2d7ac1973a4c258 SHA512 cfb52ee6aee76b125a5a833cd9facc92ea1dff17129a488b66e976e94699cea8109e6f5df90835e818af1ea6e59e12cecc95159601d544f5b008560a1190b530 WHIRLPOOL 56facf79d5556aaac3bf08fa3b4be21b7fef561c8d3fd41943ce51c4d15b71e114be2e33914f5bf7e3d981abcebeffb95fb99aedde8d72231edcef72123ea9fa
 DIST linux-4.1.tar.xz 83017828 SHA256 caf51f085aac1e1cea4d00dbbf3093ead07b551fc07b31b2a989c05f8ea72d9f SHA512 168ef84a4e67619f9f53f3574e438542a5747f9b43443363cb83597fcdac9f40d201625c66e375a23226745eaada9176eb006ca023613cec089349e91751f3c0 WHIRLPOOL 85fcfdb67ea7f865272a85d3b4c3ec1f5a1267f4664bf073c562bb3875e9d96ad68486259d8866a9aced98c95de16840ec531d89745aec75b7315a64ebe650b8
 DIST linux-4.3.tar.xz 86920812 SHA256 4a622cc84b8a3c38d39bc17195b0c064d2b46945dfde0dae18f77b120bc9f3ae SHA512 d25812043850530fdcfdb48523523ee980747f3c2c1266149330844dae2cba0d056d4ddd9c0f129f570f5d1f6df5c20385aec5f6a2e0755edc1e2f5f93e2c6bc WHIRLPOOL e3f131443acc14d4f67bbd3f4e1c57af3d822c41c85a112564d54667a591c8619dce42327fd8166d30a2d7adfaf433c2e2134d4995c91c08f65ac0cc2190f935
 DIST linux-4.4.tar.xz 87295988 SHA256 401d7c8fef594999a460d10c72c5a94e9c2e1022f16795ec51746b0d165418b2 SHA512 13c8459933a8b80608e226a1398e3d1848352ace84bcfb7e6a4a33cb230bbe1ab719d4b58e067283df91ce5311be6d2d595fc8c19e2ae6ecc652499415614b3e WHIRLPOOL 02abc203d867404b9934aaa4c1e5b5dcbb0b0021e91a03f3a7e7fd224eed106821d8b4949f32a590536db150e5a88c16fcde88538777a26d0c17900f0257b1bc

diff --git a/sys-kernel/hardened-sources/hardened-sources-4.4.8-r1.ebuild b/sys-kernel/hardened-sources/hardened-sources-4.4.8-r1.ebuild
new file mode 100644
index 0000000..01a347d
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-4.4.8-r1.ebuild
@@ -0,0 +1,45 @@
+# Copyright 1999-2016 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Id$
+
+EAPI="5"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base"
+K_GENPATCHES_VER="9"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-2"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="
+	1500_XATTR_USER_PREFIX.patch
+	2900_dev-root-proc-mount-fix.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-3.1*"
+
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}