[gentoo-commits] repo/gentoo:master commit in: sys-kernel/hardened-sources/

["Anthony G. Basile" <blueness@gentoo.org>]

commit:     4148cddb7116b4641fb4914367bd22fbd43e1183
Author:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
AuthorDate: Sun Feb 19 23:08:57 2017 +0000
Commit:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
CommitDate: Sun Feb 19 23:09:15 2017 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=4148cddb

sys-kernel/hardened-sources: version bump to 4.9.11

vanilla-4.9 + genpatches-4.9-11 + grsecurity-3.1-4.9.11-201702181444

Package-Manager: portage-2.3.3

 sys-kernel/hardened-sources/Manifest               |  1 +
 .../hardened-sources-4.9.11.ebuild                 | 45 ++++++++++++++++++++++
 2 files changed, 46 insertions(+)

diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index 39d3dcffda..70607b1c3f 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -17,6 +17,7 @@ DIST hardened-patches-4.7.10-1.extras.tar.bz2 1941100 SHA256 8a7787da2d440308b28
 DIST hardened-patches-4.7.6-1.extras.tar.bz2 1913657 SHA256 f32b7891fa0a821a60270f42dc817135d887ea55bda676e1141f0681ff360374 SHA512 943b25c12071abab62a169a2daf6e2255c76e595678a2553eaac4b87f2f227f0bfc47daad246db9b002119c6be3ec56e8746a7cb598a29c8772b3de4f7601519 WHIRLPOOL b1f5ddadf8d0387ade037a4b3f0e7e001971b01584f03ec40e61dda2db1e5762ac66266f00f5d95226337347dd9ed43c1d019a65eb66780403c81348bfc4682d
 DIST hardened-patches-4.8.17-3.extras.tar.bz2 1932803 SHA256 7ff535912635b5ae83d793dcadb30f2ebab85abffb05d73f73af3a0262f5b170 SHA512 f9521c5f0df2ab5989f5fd5929b3f69620d519d92583601f52bf4c2871330008c9e2f19cee3538a2c4945bc22d0ddb8478a9fb332de64dbd611904749d046e82 WHIRLPOOL 1f0ff531b479db743eb0d806d35b770c405868082a249c7d41579649dd924c25d41bd1781bc0fe827a6d06447e0fe88dc630992f2be977f50138f741e707b542
 DIST hardened-patches-4.9.10-1.extras.tar.bz2 1946178 SHA256 6323255450361fda3824f776ac14a874a875d3b12b91ed8f62750df775bfc402 SHA512 c8bd7b198b54c8b99ada8edae1c96c66f19b445a1a2e81c49d01949a895c4ece6d348f40b056b859b0d0409a3b81068dae6b99bb9eef3ed566b7e468c2de1fa9 WHIRLPOOL 9514a0478f9a849d76dbf75aebd99e1a96fbdb28ebb185bbbca681ade5f7db01aea4ad7a2b539503b24823381bc7d7128d108dafaf2fb54a9a5b0a0d23c63fee
+DIST hardened-patches-4.9.11-1.extras.tar.bz2 1960865 SHA256 dc35be1583d60987c0f5f03abb10bfdc3aee7fc74292dbc3a3bfdd5b3023e0d1 SHA512 c6356de0a3bbaf6d935c777161d0a7c9a556fa36eefce8ab40ca04a2f24287ca2813252329a3b99cd31ee9e04233960b9c9ce4357b47a3743aed198eb1838600 WHIRLPOOL 8436d2245e46c00790e74fdce924fb615a44d1600e97013a9c32378d64b719d7de7ce6b6d1b290172c0548966f5dd3fa6cf6f2d1979144532eeb0828c1e19fae
 DIST hardened-patches-4.9.9-1.extras.tar.bz2 1956430 SHA256 fc0effbe47fe19cc85a2b4ca08981c28f35cdb45445ba827f60afae15fefa8f3 SHA512 cc10d938b25b2b92e4e9537e4e62bbe7ec70e1c0836ed912098053547b90dfc7888f89d93ee4f200d9c7af9ecc6e7105093b46b6b6ce120f5826652f44f40b91 WHIRLPOOL 46790722e07c4282107eae5fad013f82d6f1d9c074337df74647c2dda61855c580cda0a7ace4e543dc848f58aaef379bc72731ceabe6dc37c0440b7181423692
 DIST linux-4.4.tar.xz 87295988 SHA256 401d7c8fef594999a460d10c72c5a94e9c2e1022f16795ec51746b0d165418b2 SHA512 13c8459933a8b80608e226a1398e3d1848352ace84bcfb7e6a4a33cb230bbe1ab719d4b58e067283df91ce5311be6d2d595fc8c19e2ae6ecc652499415614b3e WHIRLPOOL 02abc203d867404b9934aaa4c1e5b5dcbb0b0021e91a03f3a7e7fd224eed106821d8b4949f32a590536db150e5a88c16fcde88538777a26d0c17900f0257b1bc
 DIST linux-4.7.tar.xz 90412100 SHA256 5190c3d1209aeda04168145bf50569dc0984f80467159b1dc50ad731e3285f10 SHA512 e8c02583e17e4fc4214fef694825fcb78c898266f1624deb1cdf56ab5c5fdfa669c5221122a7cf0d502ed6f921ff3797634acd9d294d29e98e3faa8a21920185 WHIRLPOOL e968c89ce714c8d918db6074dabac4b0200c57ff111260313cf5798eeefb8b5b10c1509b64e2ee611a78e81075c588a473b67f9802609b2fef9ebb87ae514d98

diff --git a/sys-kernel/hardened-sources/hardened-sources-4.9.11.ebuild b/sys-kernel/hardened-sources/hardened-sources-4.9.11.ebuild
new file mode 100644
index 0000000000..2a0ce45fbd
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-4.9.11.ebuild
@@ -0,0 +1,45 @@
+# Copyright 1999-2017 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Id$
+
+EAPI="5"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base"
+K_GENPATCHES_VER="11"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-1"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="
+	1500_XATTR_USER_PREFIX.patch
+	2900_dev-root-proc-mount-fix.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-3.1*"
+
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}