[gentoo-commits] repo/gentoo:master commit in: sys-kernel/hardened-sources/

["Anthony G. Basile" <blueness@gentoo.org>]

commit:     e741a899a84c0691bd38fb5d908c5f4d8a3bdd22
Author:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
AuthorDate: Sat Apr 22 16:18:21 2017 +0000
Commit:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
CommitDate: Sat Apr 22 16:18:49 2017 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e741a899

sys-kernel/hardened-sources: version bump to 4.9.24

vanilla-4.9 + genpatches-4.9-24 + grsecurity-3.1-4.9.24-201704220732

Package-Manager: Portage-2.3.3, Repoman-2.3.1

 sys-kernel/hardened-sources/Manifest               |  2 +
 .../hardened-sources-4.9.24.ebuild                 | 45 ++++++++++++++++++++++
 2 files changed, 47 insertions(+)

diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index ab3c766183b..7cc5fa80307 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -12,6 +12,7 @@ DIST genpatches-4.7-8.base.tar.xz 233032 SHA256 481e35ef24b98241adfd8277b2a9d682
 DIST genpatches-4.8-18.base.tar.xz 304664 SHA256 89b161b2e98ac81afd9c865c4fa87cf203164b3c977c48cfc7fc5337b00b2061 SHA512 5cfc10e59a5adc7a14dce3ae6dc2ab8006d8d2bba7201a8c531c05c5f77e9fa3debbb796f7cdf2047028db43316e2e25f4817e9358524b925488b563514f127e WHIRLPOOL b0786badbade32dd777d929fc64791c672eb56a4ae5a81fb862c3308c294cb806d25f92f1e0228be6a5e29e5e049b25b6b1c470b3b1617de1d57567a9f5b14de
 DIST genpatches-4.9-21.base.tar.xz 451684 SHA256 5ed957a995b91d0b6c434c821b8505b86f13a7cdbe204b89302c0cbeaa35ba39 SHA512 c6260fdf7d6e144556499bc8a9be1e0507ae88cdedc1918f8e35de91f653a4b05deaab46d3a96413fc346aa03589116e1ebe62dce18fe8af55e6dce4fc7634b9 WHIRLPOOL 8b5d754119ba1c4b0ec73de4d6c07e0cdcb66e780d502a59c23b42860e75e146d4d573c5b2c50e1c8e48d1ea6fc4351e59a934d216140ab22e7cf4fffc8c0c11
 DIST genpatches-4.9-23.base.tar.xz 527264 SHA256 8a7fa696395333d94bf577b3ebb8b3cbfaa9179ff529dd91028175e6f6fc0848 SHA512 7270df0aa2e5cb56ebca8c86c40be1340023e4c1d2af59b1f55eb2f34b4e491a96b88da642f58e12532cb034037c223eacfcbcfe12df8c65fab7786499ec07f2 WHIRLPOOL 73f9b2c0e69a13de4aa685c7682ed178fc10ca111a7e8f9d55a7f8f904bcf66ca59c6444dfb739b45693385215b3f7ecd100310dfcf2b50e7ab6763f1d929abe
+DIST genpatches-4.9-24.base.tar.xz 535872 SHA256 b5982f25edcab736a3448d396bce03f5f52c19fcd6f253f9125dee890ccdf4cf SHA512 ea033acf6c63b3da5e15c7889166b1995e494a588fc406c72b70e46172fd9c2cecd1404a00d1f33c776dca2fc70226e4d9dd017fe1c35bce9f44d71433887f1f WHIRLPOOL 98ff1a195d106504fe1319e52dde7a5b3d715afdd2b74a19b509624f3461895b5e09092a644b96b4fc653e0b2b12ec1f2b38c93901bad1c871c026b8ab3dbf5c
 DIST hardened-patches-4.4.8-2.extras.tar.bz2 1743408 SHA256 5cde9a96f6a47ebe3c8abeb5d5add60480490fd365d4c31da2d7ac1973a4c258 SHA512 cfb52ee6aee76b125a5a833cd9facc92ea1dff17129a488b66e976e94699cea8109e6f5df90835e818af1ea6e59e12cecc95159601d544f5b008560a1190b530 WHIRLPOOL 56facf79d5556aaac3bf08fa3b4be21b7fef561c8d3fd41943ce51c4d15b71e114be2e33914f5bf7e3d981abcebeffb95fb99aedde8d72231edcef72123ea9fa
 DIST hardened-patches-4.7.10-1.extras.tar.bz2 1941100 SHA256 8a7787da2d440308b28d16738ba843138c01d14e3f09cef33f8c32d46886411b SHA512 851d8875452fceaa696a7bb6847bda82c42ca40c61f2d1da16545190eeba65eb26c15f9fd428d1de83e9ea7c019133808ab3622e770147e06ab598629b8dfb6b WHIRLPOOL fa4a7bdb8bf8bf232d32d466b0ce8492a82cda7908edc96d6f7937686e3a766dabbc75c7fd33de82be080e3a277aaf4e63e9c754c97b9164301630aa13810755
 DIST hardened-patches-4.7.6-1.extras.tar.bz2 1913657 SHA256 f32b7891fa0a821a60270f42dc817135d887ea55bda676e1141f0681ff360374 SHA512 943b25c12071abab62a169a2daf6e2255c76e595678a2553eaac4b87f2f227f0bfc47daad246db9b002119c6be3ec56e8746a7cb598a29c8772b3de4f7601519 WHIRLPOOL b1f5ddadf8d0387ade037a4b3f0e7e001971b01584f03ec40e61dda2db1e5762ac66266f00f5d95226337347dd9ed43c1d019a65eb66780403c81348bfc4682d
@@ -19,6 +20,7 @@ DIST hardened-patches-4.8.17-3.extras.tar.bz2 1932803 SHA256 7ff535912635b5ae83d
 DIST hardened-patches-4.9.21-1.extras.tar.bz2 1965869 SHA256 5ece74a315131b2e3935838428bfefb9b4aeca320e50b58c79bd2c2b1d218387 SHA512 0184dcd1d68c3b0ab8a3c3f385530bf726a9d2647399d72d2eaadfb0cd8c61284b0c3a007c2cfe704b1fd20fff080736bea4850729530c55eb0135624ae47cf4 WHIRLPOOL d5596a493edc166830e22434df82d0dedc822ba9af54737baa8b81259594c2db461ce0085eb5af563c0d6b98e2620bd59bc90bb48453bae644da7b2ab33fed81
 DIST hardened-patches-4.9.22-1.extras.tar.bz2 1923399 SHA256 9f741347f0aa663f2a720ea2c288277bad997e081b196d6d98eda56db07132ea SHA512 7780742a1cc8af175ca9741dcf505400e1a387c1e5ede803f1741ecc88a487404328b6bc87f48c0fd45cc609c0dadc2e47a6770a32589ac6c295fca9c36fe9bd WHIRLPOOL 0dce47508b7b6e581e265459668659d85347ca0300decb4d8057d0c09437cda7e86bca69addd736d64c83b0fe4f6b0d5a3be1026558a716cfb3c8eb76657bdfd
 DIST hardened-patches-4.9.23-1.extras.tar.bz2 1937895 SHA256 b230f16be80827139c7b682f3657dcb9f46de490f3b6bd3935a389ac3e232382 SHA512 2fb86e5aea04ec23b54bd29ec0e11bd2ce1f82a216fab0d7989999c519fba63cb6d92d7fbdef9f4acdf5f3fb0ba6e91890eb2aaea83e9c0afa9f8226f4ce956d WHIRLPOOL 127b075883c4607b4c943ccf9abfd762bab04c4fbcc7f64251d68af71a3baad7a58d80b3a63177bc2d82f55b961e21e80690e6209e1a9fa4f505bc10b28e3c82
+DIST hardened-patches-4.9.24-1.extras.tar.bz2 1948767 SHA256 ac22daca4435d2f645bde99ffb66a8f72106c79cc9d1c839c9dc3c03dfa0e67e SHA512 d57e455ad103de46a20eb34771ff2c825c0d4f1e97b4191bc161a58df36e4267e922063b80a53211345117b2a884d40d1551554d3bd93b4713fa285c23dbbd4c WHIRLPOOL 61dedc5a8ecc11ba39949e6eaddd987392090ebd38c7379757c8b74afe0da02a0aa009fcf7ec4f4dc79006b77d84f23f4d9cfb115870c9dae11aed9ae40546a1
 DIST linux-4.4.tar.xz 87295988 SHA256 401d7c8fef594999a460d10c72c5a94e9c2e1022f16795ec51746b0d165418b2 SHA512 13c8459933a8b80608e226a1398e3d1848352ace84bcfb7e6a4a33cb230bbe1ab719d4b58e067283df91ce5311be6d2d595fc8c19e2ae6ecc652499415614b3e WHIRLPOOL 02abc203d867404b9934aaa4c1e5b5dcbb0b0021e91a03f3a7e7fd224eed106821d8b4949f32a590536db150e5a88c16fcde88538777a26d0c17900f0257b1bc
 DIST linux-4.7.tar.xz 90412100 SHA256 5190c3d1209aeda04168145bf50569dc0984f80467159b1dc50ad731e3285f10 SHA512 e8c02583e17e4fc4214fef694825fcb78c898266f1624deb1cdf56ab5c5fdfa669c5221122a7cf0d502ed6f921ff3797634acd9d294d29e98e3faa8a21920185 WHIRLPOOL e968c89ce714c8d918db6074dabac4b0200c57ff111260313cf5798eeefb8b5b10c1509b64e2ee611a78e81075c588a473b67f9802609b2fef9ebb87ae514d98
 DIST linux-4.8.tar.xz 91966856 SHA256 3e9150065f193d3d94bcf46a1fe9f033c7ef7122ab71d75a7fb5a2f0c9a7e11a SHA512 a48a065f21e1c7c4de4cf8ca47b8b8d9a70f86b64e7cfa6e01be490f78895745b9c8790734b1d22182cf1f930fb87eaaa84e62ec8cc1f64ac4be9b949e7c0358 WHIRLPOOL 3888c8c07db0c069f827245d4d7306087f78f7d03e8240eb1fcd13622cd5dbe1c17cd8ed7dc11513f77f3efd5dbd84e2b48e82bdb9b9bfd2242fd62ae32812d5

diff --git a/sys-kernel/hardened-sources/hardened-sources-4.9.24.ebuild b/sys-kernel/hardened-sources/hardened-sources-4.9.24.ebuild
new file mode 100644
index 00000000000..d079f2895b8
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-4.9.24.ebuild
@@ -0,0 +1,45 @@
+# Copyright 1999-2017 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI="5"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base"
+K_GENPATCHES_VER="24"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-1"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="
+	1500_XATTR_USER_PREFIX.patch
+	1520_CVE-2017-6074-dccp-skb-freeing-fix.patch
+	2900_dev-root-proc-mount-fix.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-3.1*"
+
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}