[gentoo-commits] repo/gentoo:master commit in: sys-kernel/hardened-sources/

["Anthony G. Basile" <blueness@gentoo.org>]

commit:     05e87bb77dc1e73e263c64fc8f5befafbfe4cf02
Author:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
AuthorDate: Tue Jul 19 07:35:05 2016 +0000
Commit:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
CommitDate: Tue Jul 19 07:37:49 2016 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=05e87bb7

sys-kernel/hardened-sources: version bump to 4.6.4-r1

vanilla-4.6.4 + genpatches-4.6-5 + grsecurity-3.1-4.6.4-201607182211

Package-Manager: portage-2.2.28

 sys-kernel/hardened-sources/Manifest               |  1 +
 .../hardened-sources-4.6.4-r1.ebuild               | 45 ++++++++++++++++++++++
 2 files changed, 46 insertions(+)

diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index a7ad9ce..13d9472 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -16,6 +16,7 @@ DIST hardened-patches-4.4.2-1.extras.tar.bz2 1721230 SHA256 81f1417d210e0a6d9f5e
 DIST hardened-patches-4.4.8-2.extras.tar.bz2 1743408 SHA256 5cde9a96f6a47ebe3c8abeb5d5add60480490fd365d4c31da2d7ac1973a4c258 SHA512 cfb52ee6aee76b125a5a833cd9facc92ea1dff17129a488b66e976e94699cea8109e6f5df90835e818af1ea6e59e12cecc95159601d544f5b008560a1190b530 WHIRLPOOL 56facf79d5556aaac3bf08fa3b4be21b7fef561c8d3fd41943ce51c4d15b71e114be2e33914f5bf7e3d981abcebeffb95fb99aedde8d72231edcef72123ea9fa
 DIST hardened-patches-4.5.7-6.extras.tar.bz2 1870054 SHA256 8a8c20dc44a0f452f0d2873e4efcf6dd53010e65976ce9986083f906fd2eb223 SHA512 b1e853689395305d6d902259a952be21d768a60b46cd9dcbb8bd4ee0193a08806414cdcbd642df286bef92a82e08939c0ec3e5d53fcae999b0628a0d35ec3a2d WHIRLPOOL 73d425f3d2faa6aeeeb3007e468ab3c3792f4d3c95122b0a9572579ef8e27fd253b94efcfd2d85483cc3c0250c73679b68ad10a93cc0e38ba36601a7fe8125ac
 DIST hardened-patches-4.6.4-1.extras.tar.bz2 1883551 SHA256 d37d6cdeb3ab672cf0e07274e5433134d9903fb7e18749bce1564c25aa6a201d SHA512 a6effdcefb083e6488573629ea541b82f07bb89dc7b2d5cbe5bd240191e19a4038ed6a3f21b4e90d8f98f4d4fb1c2dd52e1221ef8962e3c947e01ad17fde0186 WHIRLPOOL eeb26689fdffc9d23243a44a8713465b6b2a362c761f37aa3a3bf62ffd9c45b351c0ecc70f2fd61fddaafb1d393786c5db0633d91d0169b766b5f99557d3e64e
+DIST hardened-patches-4.6.4-2.extras.tar.bz2 1877339 SHA256 89bec0f3ccfc99078a9d9ceb93aa8cb36bb5f455dbfd511f84e443e5f5729e67 SHA512 f23b45481db0a26065a0ea0f419700cecd1270f9598aa29d182e3fa7f8e45d0994f0febdd0c1f8620a4919a96377d1e0c5c45f0d23cc329043c91f9bfde1c59f WHIRLPOOL 382c1c42476bee34b9f52eb8dc9b05f22b18a74456ce1f3f71eff88f0ca6007e3094a35067d60850386547590949c818d60f18c7bd8634cc7c3b22be575b5779
 DIST linux-4.3.tar.xz 86920812 SHA256 4a622cc84b8a3c38d39bc17195b0c064d2b46945dfde0dae18f77b120bc9f3ae SHA512 d25812043850530fdcfdb48523523ee980747f3c2c1266149330844dae2cba0d056d4ddd9c0f129f570f5d1f6df5c20385aec5f6a2e0755edc1e2f5f93e2c6bc WHIRLPOOL e3f131443acc14d4f67bbd3f4e1c57af3d822c41c85a112564d54667a591c8619dce42327fd8166d30a2d7adfaf433c2e2134d4995c91c08f65ac0cc2190f935
 DIST linux-4.4.tar.xz 87295988 SHA256 401d7c8fef594999a460d10c72c5a94e9c2e1022f16795ec51746b0d165418b2 SHA512 13c8459933a8b80608e226a1398e3d1848352ace84bcfb7e6a4a33cb230bbe1ab719d4b58e067283df91ce5311be6d2d595fc8c19e2ae6ecc652499415614b3e WHIRLPOOL 02abc203d867404b9934aaa4c1e5b5dcbb0b0021e91a03f3a7e7fd224eed106821d8b4949f32a590536db150e5a88c16fcde88538777a26d0c17900f0257b1bc
 DIST linux-4.5.tar.xz 88375040 SHA256 a40defb401e01b37d6b8c8ad5c1bbab665be6ac6310cdeed59950c96b31a519c SHA512 cb0d5f30baff37dfea40fbc1119a1482182f95858c883e019ee3f81055c8efbdb9dba7dfc02ebcc4216db38f03ece58688e69efc0fce1dade359af30bd5426de WHIRLPOOL 8faa0b02c5733fc45dbe61f82a7022e9246b9b1665f27541d4afa5d14c310b9dce7a8532dfac8273898edf8c6923654ee2fbcf2cec1ec2a220f4c9f926f2b333

diff --git a/sys-kernel/hardened-sources/hardened-sources-4.6.4-r1.ebuild b/sys-kernel/hardened-sources/hardened-sources-4.6.4-r1.ebuild
new file mode 100644
index 0000000..ad6a732
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-4.6.4-r1.ebuild
@@ -0,0 +1,45 @@
+# Copyright 1999-2016 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Id$
+
+EAPI="5"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base"
+K_GENPATCHES_VER="5"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-2"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="
+	1500_XATTR_USER_PREFIX.patch
+	2900_dev-root-proc-mount-fix.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-3.1*"
+
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}