[gentoo-commits] repo/gentoo:master commit in: sys-kernel/hardened-sources/

["Anthony G. Basile" <blueness@gentoo.org>]

commit:     c4ae95254d8ec439cafdc6bf9b2d5a7fbc39465b
Author:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
AuthorDate: Thu Jan  5 13:37:31 2017 +0000
Commit:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
CommitDate: Thu Jan  5 13:38:08 2017 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c4ae9525

sys-kernel/hardened-sources: version bump to 4.8.15-r2

vanilla-4.8 + genpatches-4.8-18 + grsecurity-3.1-4.8.15-201701031913

Package-Manager: portage-2.3.0

 sys-kernel/hardened-sources/Manifest               |  1 +
 .../hardened-sources-4.8.15-r2.ebuild              | 45 ++++++++++++++++++++++
 2 files changed, 46 insertions(+)

diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index ed3cdf63..8f34370 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -14,6 +14,7 @@ DIST hardened-patches-4.4.8-2.extras.tar.bz2 1743408 SHA256 5cde9a96f6a47ebe3c8a
 DIST hardened-patches-4.7.10-1.extras.tar.bz2 1941100 SHA256 8a7787da2d440308b28d16738ba843138c01d14e3f09cef33f8c32d46886411b SHA512 851d8875452fceaa696a7bb6847bda82c42ca40c61f2d1da16545190eeba65eb26c15f9fd428d1de83e9ea7c019133808ab3622e770147e06ab598629b8dfb6b WHIRLPOOL fa4a7bdb8bf8bf232d32d466b0ce8492a82cda7908edc96d6f7937686e3a766dabbc75c7fd33de82be080e3a277aaf4e63e9c754c97b9164301630aa13810755
 DIST hardened-patches-4.7.6-1.extras.tar.bz2 1913657 SHA256 f32b7891fa0a821a60270f42dc817135d887ea55bda676e1141f0681ff360374 SHA512 943b25c12071abab62a169a2daf6e2255c76e595678a2553eaac4b87f2f227f0bfc47daad246db9b002119c6be3ec56e8746a7cb598a29c8772b3de4f7601519 WHIRLPOOL b1f5ddadf8d0387ade037a4b3f0e7e001971b01584f03ec40e61dda2db1e5762ac66266f00f5d95226337347dd9ed43c1d019a65eb66780403c81348bfc4682d
 DIST hardened-patches-4.8.15-2.extras.tar.bz2 1907395 SHA256 cee405ecf691f489df870eb63e6946e33c8b2e8e352b1769282d0db2406e2787 SHA512 0e0cfa6b42ae216ab3897fc2ab4d13b57871265be4f26c9716c29c280b0e647096de2d4bb161cf75340d67f31001a258bb42373f80a0d697b5462ed63c3842e7 WHIRLPOOL 06a0865cc0c245a25fb4bb9f3b06f6e12a98b64cd896009fa99b234634da78125af206fb5756adf9bc8deca68d617624b8eb14cab7d6b5450514475ac6f7eb6a
+DIST hardened-patches-4.8.15-3.extras.tar.bz2 1908708 SHA256 71532165a859327f280d861ef57cdf234837b8a243abedeaa146ba94f9e1200b SHA512 8fea93927ddb61c1d718464eeb211b47082d74c1811b4977ef310a47c87616ca66fb136b030aec733a80ceffffdf79020dc64918529d76f2315effc11e060edf WHIRLPOOL 606c25ff3ab2646e0f837cdb9ba0a8646f97ae8594d85b9b5a33db96ece160a77bd8eb4f0ff6b231881c9c14af26d26750e608d598fdc288128aa191166bfc7b
 DIST linux-4.4.tar.xz 87295988 SHA256 401d7c8fef594999a460d10c72c5a94e9c2e1022f16795ec51746b0d165418b2 SHA512 13c8459933a8b80608e226a1398e3d1848352ace84bcfb7e6a4a33cb230bbe1ab719d4b58e067283df91ce5311be6d2d595fc8c19e2ae6ecc652499415614b3e WHIRLPOOL 02abc203d867404b9934aaa4c1e5b5dcbb0b0021e91a03f3a7e7fd224eed106821d8b4949f32a590536db150e5a88c16fcde88538777a26d0c17900f0257b1bc
 DIST linux-4.7.tar.xz 90412100 SHA256 5190c3d1209aeda04168145bf50569dc0984f80467159b1dc50ad731e3285f10 SHA512 e8c02583e17e4fc4214fef694825fcb78c898266f1624deb1cdf56ab5c5fdfa669c5221122a7cf0d502ed6f921ff3797634acd9d294d29e98e3faa8a21920185 WHIRLPOOL e968c89ce714c8d918db6074dabac4b0200c57ff111260313cf5798eeefb8b5b10c1509b64e2ee611a78e81075c588a473b67f9802609b2fef9ebb87ae514d98
 DIST linux-4.8.tar.xz 91966856 SHA256 3e9150065f193d3d94bcf46a1fe9f033c7ef7122ab71d75a7fb5a2f0c9a7e11a SHA512 a48a065f21e1c7c4de4cf8ca47b8b8d9a70f86b64e7cfa6e01be490f78895745b9c8790734b1d22182cf1f930fb87eaaa84e62ec8cc1f64ac4be9b949e7c0358 WHIRLPOOL 3888c8c07db0c069f827245d4d7306087f78f7d03e8240eb1fcd13622cd5dbe1c17cd8ed7dc11513f77f3efd5dbd84e2b48e82bdb9b9bfd2242fd62ae32812d5

diff --git a/sys-kernel/hardened-sources/hardened-sources-4.8.15-r2.ebuild b/sys-kernel/hardened-sources/hardened-sources-4.8.15-r2.ebuild
new file mode 100644
index 00000000..bd07a5a
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-4.8.15-r2.ebuild
@@ -0,0 +1,45 @@
+# Copyright 1999-2017 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Id$
+
+EAPI="5"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base"
+K_GENPATCHES_VER="17"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-3"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="
+	1500_XATTR_USER_PREFIX.patch
+	2900_dev-root-proc-mount-fix.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-3.1*"
+
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}