[gentoo-commits] dev/blueness:master commit in: sys-kernel/hardened-sources/

["Anthony G. Basile" <blueness@gentoo.org>]

commit:     36ee0d9ca6d41a23937ed9dfe0d0b649a4d80526
Author:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
AuthorDate: Fri May 20 13:05:58 2011 +0000
Commit:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
CommitDate: Fri May 20 13:05:58 2011 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=dev/blueness.git;a=commit;h=36ee0d9c

sys-kernel/hardened-sources: testing patchset 20110518

(Portage version: 2.1.9.42/git/Linux x86_64, signed Manifest commit with key 0xD0455535)

---
 sys-kernel/hardened-sources/ChangeLog              |    7 +++
 sys-kernel/hardened-sources/Manifest               |   22 +++++++--
 .../hardened-sources-2.6.32-r48.ebuild             |   48 ++++++++++++++++++++
 .../hardened-sources-2.6.38-r5.ebuild              |   48 ++++++++++++++++++++
 4 files changed, 121 insertions(+), 4 deletions(-)

diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
index 941796e..b795f3e 100644
--- a/sys-kernel/hardened-sources/ChangeLog
+++ b/sys-kernel/hardened-sources/ChangeLog
@@ -1,5 +1,12 @@
 
 
+*hardened-sources-2.6.38-r5 (20 May 2011)
+*hardened-sources-2.6.32-r48 (20 May 2011)
+
+  20 May 2011; Anthony G. Basile <blueness@gentoo.org>
+  +hardened-sources-2.6.32-r48.ebuild, +hardened-sources-2.6.38-r5.ebuild:
+  testing patchset 20110518
+
   12 May 2011; Anthony G. Basile <blueness@gentoo.org>
   -hardened-sources-2.6.32-r47.ebuild, -hardened-sources-2.6.38-r4.ebuild:
   moved to tree

diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index 1b75918..ef5f7aa 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -1,12 +1,26 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA256
 
-MISC ChangeLog 13873 RMD160 ef5c25b6e044bdbc01f32fe0554e43ffdc9b0414 SHA1 6bdd2a2e6ca49a68cb0837bcac29abed8e14afa6 SHA256 f034796dfb44cc906235f2f94b0fe3786199530b4c8acf9572b2c3c473ea751d
+DIST deblob-2.6.32 84094 RMD160 394f46ec5b869638a7bc2e87beb118167c9bd6cb SHA1 1a2a1efb72126609d9e3b9be99ae5be2751efd06 SHA256 de625f0bd221c9c38d4453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d
+DIST deblob-2.6.38 99773 RMD160 f52e78df8e819319d0aabf24fe471e2ef9e02140 SHA1 0d176aa88f0525123d293e26617f2d287fabdddc SHA256 ddabcd846baa19b7e82adec3ca8ff17f2f7425c292516889098559f639e763eb
+DIST deblob-check-2.6.32 247608 RMD160 840bf8a229ea79810519eee6241edb85b78a6562 SHA1 d45a24eb16e5ac956c0fcddbc1ac4d67e326c7b8 SHA256 da1aecdf3ab7f1207b90642d303e52262ccc2ed9e49739b729512b88950d17f3
+DIST deblob-check-2.6.38 345831 RMD160 1caea73e54a21cb1100a4ee8226201ddd8a89985 SHA1 44de3ac14d9a3e94b97553051aff0ebfada45274 SHA256 6f681dbd1c1c44cba2c9902dd77a5a51b2d1cc81567cffc60ba92bd0bdd4ff2f
+DIST genpatches-2.6.32-37.base.tar.bz2 921165 RMD160 e764a6d7665d206689117493218224cbf5a3b0de SHA1 ffe8c89830798504f26a54b777ef1147824aa39f SHA256 04d1341acc1abf49300b23b10fc48962303509d8c5af8a5cb2c8397606444a06
+DIST genpatches-2.6.32-37.extras.tar.bz2 24934 RMD160 e3e1d60fb45a3e3c818ddda36b9180d4fc46679e SHA1 d16a34dfa35d163ea4042058b3865c389f3802e9 SHA256 50b70c76461aa52f7f2ad88175e7f08eb555f7f1dfd274759ec0c2a9748bde5e
+DIST genpatches-2.6.38-6.base.tar.bz2 133177 RMD160 fa953770cb7b8c4184fd6d41fae04bd62c5e062c SHA1 c9ea9ce93f5e3df2f2fd1ea4f4a3e1277c77e739 SHA256 2531415720ee617392027b7c325e593d915990fd27d0f140cd9930595cb91a93
+DIST genpatches-2.6.38-6.extras.tar.bz2 15675 RMD160 3d40e9fcad874591de0cc7497a52795ea04a9b9b SHA1 ca1b5f319e87960fa97ea6302dd0146901cacd9e SHA256 6d4c134be67714382efc8aec208c5a73d6c0f84d96acc76640b9ed3be93877a4
+DIST hardened-patches-2.6.32-51.extras.tar.bz2 436943 RMD160 c925b8a3a30a8b8ba2ec18402dc19a4a15e60214 SHA1 326dc34241961b9b487e80273ecfc897c7808afc SHA256 986c79ec304f92fb3474c7aa493735eadeffacb01bb5acf432966af975af3bef
+DIST hardened-patches-2.6.38-6.extras.tar.bz2 440347 RMD160 0f92026ce7ec1269cd437525ebf4de1b7ebcff23 SHA1 f6e28a9103f2de4a6c12d7b5063338c09d49515b SHA256 39d455a2baaaa867068392ee2f6609a8cf68d81eaa630c953f862ac6fd29dddd
+DIST linux-2.6.32.tar.bz2 64424138 RMD160 b93742cbaf8174f2200d2dbef0d47a26c618039c SHA1 410b4fc818023bfef60064e973ff0ab46d3bfb19 SHA256 5099786d80b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e
+DIST linux-2.6.38.tar.bz2 74739098 RMD160 d1179be93f1309303b9aa6008a25b6247726e764 SHA1 02aade5ad3dedd70739c9b4a05de40edbe432d25 SHA256 72f0cfaefb8dc86b219d5a742dd0375332627641ecbdf5badd3158e2127b9304
+EBUILD hardened-sources-2.6.32-r48.ebuild 1758 RMD160 ffdc3c1d9a8e5bfee12276d16bdda0257600d2df SHA1 4c1f5cce20e9d7a434b1875836cbacf2c69423e2 SHA256 32fdfe5abf85b0e601c82476e931cd148db67b02289fabca87dec8a1a1b8e26b
+EBUILD hardened-sources-2.6.38-r5.ebuild 1755 RMD160 95f1e09ff61b0a31cc6fcd100cc3e2c18e886258 SHA1 4f80d521b350e7d65df44fb4b9a26676a6320ad1 SHA256 c0bcf7d112dee228a4d7ba47a43796f46d05b1134972845816a23352d6a72791
+MISC ChangeLog 14118 RMD160 e3961686cda759c3873aa46de1d00fa2ab8428dd SHA1 1abb47a17d9c7cd95e4080acc0441e80cb70f45b SHA256 cca0c240b4414dbd009bace5e13bb3694a9e7913f61674741fa77e3d9588957c
 MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SHA1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8fcfd351f2f39ed63da68af3a5751fc2058d0d03813
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.17 (GNU/Linux)
 
-iEYEAREIAAYFAk3MOMAACgkQl5yvQNBFVTUZ+gCgmoRHXJhvNS7WC/f18oUqyV9g
-zUwAn3Si0JQkSKV0ku0N5GhEkWhy3LSO
-=DMPw
+iEYEAREIAAYFAk3WZzYACgkQl5yvQNBFVTXCawCfWrgFbtf2sCHtk51KY716z8gp
+hPEAn3ZuOwbiSRiEavt1JShtQIM8pEMX
+=lQZ3
 -----END PGP SIGNATURE-----

diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r48.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r48.ebuild
new file mode 100644
index 0000000..db3c860
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r48.ebuild
@@ -0,0 +1,48 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r47.ebuild,v 1.1 2011/05/12 19:37:58 blueness Exp $
+
+EAPI="2"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="37"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-51"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE=""
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.2.2*"
+
+	ewarn
+	ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
+	ewarn "[server], [workstation], and [virtualization]."
+	ewarn
+	ewarn "Those who intend to use one of these predefined grsecurity levels"
+	ewarn "should read the help associated with the level.  Users importing a"
+	ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
+	ewarn "should review their selected grsecurity/PaX options carefully."
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}

diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.38-r5.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.38-r5.ebuild
new file mode 100644
index 0000000..bbde1ce
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.38-r5.ebuild
@@ -0,0 +1,48 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.38-r4.ebuild,v 1.1 2011/05/12 19:43:07 blueness Exp $
+
+EAPI="2"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="6"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-6"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE=""
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.2.2*"
+
+	ewarn
+	ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
+	ewarn "[server], [workstation], and [virtualization]."
+	ewarn
+	ewarn "Those who intend to use one of these predefined grsecurity levels"
+	ewarn "should read the help associated with the level.  Users importing a"
+	ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
+	ewarn "should review their selected grsecurity/PaX options carefully."
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}