From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1QKTEp-0006El-QL for garchives@archives.gentoo.org; Thu, 12 May 2011 10:35:24 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 18F3C1C008; Thu, 12 May 2011 10:35:16 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id C81281C008 for ; Thu, 12 May 2011 10:35:15 +0000 (UTC) Received: from pelican.gentoo.org (unknown [66.219.59.40]) (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 3C8F31B406E for ; Thu, 12 May 2011 10:35:15 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by pelican.gentoo.org (Postfix) with ESMTP id ABA1980062 for ; Thu, 12 May 2011 10:35:14 +0000 (UTC) From: "Anthony G. Basile" To: gentoo-commits@lists.gentoo.org Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Anthony G. Basile" Message-ID: Subject: [gentoo-commits] dev/blueness:master commit in: sys-kernel/hardened-sources/ X-VCS-Repository: dev/blueness X-VCS-Files: sys-kernel/hardened-sources/ChangeLog sys-kernel/hardened-sources/Manifest sys-kernel/hardened-sources/hardened-sources-2.6.32-r47.ebuild sys-kernel/hardened-sources/hardened-sources-2.6.38-r4.ebuild X-VCS-Directories: sys-kernel/hardened-sources/ X-VCS-Committer: blueness X-VCS-Committer-Name: Anthony G. Basile X-VCS-Revision: ab3929489e41228d803a036f2dc809ca3a134914 Date: Thu, 12 May 2011 10:35:14 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: quoted-printable X-Archives-Salt: X-Archives-Hash: 59edaef62e2fb7af94c25dce8963b7a1 commit: ab3929489e41228d803a036f2dc809ca3a134914 Author: Anthony G. Basile gentoo org> AuthorDate: Thu May 12 10:35:03 2011 +0000 Commit: Anthony G. Basile gentoo org> CommitDate: Thu May 12 10:35:03 2011 +0000 URL: http://git.overlays.gentoo.org/gitweb/?p=3Ddev/blueness.git;a= =3Dcommit;h=3Dab392948 sys-kernel/hardened-sources: staging next release (Portage version: 2.1.9.42/git/Linux x86_64, signed Manifest commit with = key 0xD0455535) --- sys-kernel/hardened-sources/ChangeLog | 7 +++ sys-kernel/hardened-sources/Manifest | 22 +++++++-- .../hardened-sources-2.6.32-r47.ebuild | 48 ++++++++++++++= ++++++ .../hardened-sources-2.6.38-r4.ebuild | 48 ++++++++++++++= ++++++ 4 files changed, 121 insertions(+), 4 deletions(-) diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-= sources/ChangeLog index 6b7cc10..2746655 100644 --- a/sys-kernel/hardened-sources/ChangeLog +++ b/sys-kernel/hardened-sources/ChangeLog @@ -1,5 +1,12 @@ =20 =20 +*hardened-sources-2.6.38-r4 (12 May 2011) +*hardened-sources-2.6.32-r47 (12 May 2011) + + 12 May 2011; Anthony G. Basile + +hardened-sources-2.6.32-r47.ebuild, +hardened-sources-2.6.38-r4.ebuil= d: + staging next release + 11 May 2011; Anthony G. Basile -hardened-sources-2.6.32-r46.ebuild, -hardened-sources-2.6.38-r3.ebuil= d: moved to the tree diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-s= ources/Manifest index b5ad104..e8fdbe6 100644 --- a/sys-kernel/hardened-sources/Manifest +++ b/sys-kernel/hardened-sources/Manifest @@ -1,12 +1,26 @@ -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =20 -MISC ChangeLog 13486 RMD160 600eaf60a815f65448cba8551b9c8ee28648eff9 SHA= 1 26033b6f8c0847e489581294f31509f7cffcc450 SHA256 36d92a64953b2cd1e2c73f8= 935929a8dae77d475fbedcf8aa99f7f9a4a20e997 +DIST deblob-2.6.32 84094 RMD160 394f46ec5b869638a7bc2e87beb118167c9bd6cb= SHA1 1a2a1efb72126609d9e3b9be99ae5be2751efd06 SHA256 de625f0bd221c9c38d4= 453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d +DIST deblob-2.6.38 99773 RMD160 f52e78df8e819319d0aabf24fe471e2ef9e02140= SHA1 0d176aa88f0525123d293e26617f2d287fabdddc SHA256 ddabcd846baa19b7e82= adec3ca8ff17f2f7425c292516889098559f639e763eb +DIST deblob-check-2.6.32 247608 RMD160 840bf8a229ea79810519eee6241edb85b= 78a6562 SHA1 d45a24eb16e5ac956c0fcddbc1ac4d67e326c7b8 SHA256 da1aecdf3ab7= f1207b90642d303e52262ccc2ed9e49739b729512b88950d17f3 +DIST deblob-check-2.6.38 345831 RMD160 1caea73e54a21cb1100a4ee8226201ddd= 8a89985 SHA1 44de3ac14d9a3e94b97553051aff0ebfada45274 SHA256 6f681dbd1c1c= 44cba2c9902dd77a5a51b2d1cc81567cffc60ba92bd0bdd4ff2f +DIST genpatches-2.6.32-37.base.tar.bz2 921165 RMD160 e764a6d7665d2066891= 17493218224cbf5a3b0de SHA1 ffe8c89830798504f26a54b777ef1147824aa39f SHA25= 6 04d1341acc1abf49300b23b10fc48962303509d8c5af8a5cb2c8397606444a06 +DIST genpatches-2.6.32-37.extras.tar.bz2 24934 RMD160 e3e1d60fb45a3e3c81= 8ddda36b9180d4fc46679e SHA1 d16a34dfa35d163ea4042058b3865c389f3802e9 SHA2= 56 50b70c76461aa52f7f2ad88175e7f08eb555f7f1dfd274759ec0c2a9748bde5e +DIST genpatches-2.6.38-6.base.tar.bz2 133177 RMD160 fa953770cb7b8c4184fd= 6d41fae04bd62c5e062c SHA1 c9ea9ce93f5e3df2f2fd1ea4f4a3e1277c77e739 SHA256= 2531415720ee617392027b7c325e593d915990fd27d0f140cd9930595cb91a93 +DIST genpatches-2.6.38-6.extras.tar.bz2 15675 RMD160 3d40e9fcad874591de0= cc7497a52795ea04a9b9b SHA1 ca1b5f319e87960fa97ea6302dd0146901cacd9e SHA25= 6 6d4c134be67714382efc8aec208c5a73d6c0f84d96acc76640b9ed3be93877a4 +DIST hardened-patches-2.6.32-50.extras.tar.bz2 419728 RMD160 5ee488fa1f3= 6e94e8f454d5406db833305505293 SHA1 d36322aac094cfc0f3cc52512d98e55af43eaa= d5 SHA256 0674d7d093ca858b18ba50b47e2d936220dca721f1310db0b3888a289c96e8c= 6 +DIST hardened-patches-2.6.38-5.extras.tar.bz2 419353 RMD160 07215c626474= 9107d6dac4c5616a4e20a022b571 SHA1 e9ebd4cb5f583b358c89534036d266a51356d51= e SHA256 783a366061945bf1d9bd42942b3a45fd13b54f34c3899674ec458fa5e25a6ea2 +DIST linux-2.6.32.tar.bz2 64424138 RMD160 b93742cbaf8174f2200d2dbef0d47a= 26c618039c SHA1 410b4fc818023bfef60064e973ff0ab46d3bfb19 SHA256 5099786d8= 0b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e +DIST linux-2.6.38.tar.bz2 74739098 RMD160 d1179be93f1309303b9aa6008a25b6= 247726e764 SHA1 02aade5ad3dedd70739c9b4a05de40edbe432d25 SHA256 72f0cfaef= b8dc86b219d5a742dd0375332627641ecbdf5badd3158e2127b9304 +EBUILD hardened-sources-2.6.32-r47.ebuild 1758 RMD160 d097eb6f86635c95e3= 0e64e93f69af69c1099a32 SHA1 19ad418fb1f10e96ed274965104b0d1681c0a38e SHA2= 56 a31c3bfa165d3b3c79a65019d3af18f3d0551586bdc2d067656f8e5d7a707ceb +EBUILD hardened-sources-2.6.38-r4.ebuild 1755 RMD160 3d5005ef08e451ff780= ce1ed4ebb3c024d4f311a SHA1 b6e2d9f3fdf5aa2cb4124e03741fd79f127e1885 SHA25= 6 21c96773d0a679e76e3fbb0b4473a3a384808f92a7f3dd7cbe100f15f57010ba +MISC ChangeLog 13726 RMD160 b0f98b6887b3859b42713b4087a25e02a1ef7a52 SHA= 1 bc084dd9ab233d5b167b2c391cef68d417448eeb SHA256 ba2c96cd89583e3303f4159= 40505d2e10b8ee3651f7c35d649453837b4557d52 MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SH= A1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8= fcfd351f2f39ed63da68af3a5751fc2058d0d03813 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (GNU/Linux) =20 -iEYEAREIAAYFAk3J2y8ACgkQl5yvQNBFVTWZnQCgjlLv54e20GYVLJ4BrflsknY0 -u8QAn0u+lGU4d6/TUh7o8bb4wkRJjspl -=3DJyUO +iEYEAREIAAYFAk3Lt9cACgkQl5yvQNBFVTUeOgCeJsKvq5Dwr90pcRsSX1WNIcA/ +1iEAnjISSgMm02j3tboxS9NYYUz4Dnei +=3D8l5x -----END PGP SIGNATURE----- diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r47.ebui= ld b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r47.ebuild new file mode 100644 index 0000000..656d873 --- /dev/null +++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r47.ebuild @@ -0,0 +1,48 @@ +# Copyright 1999-2011 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-= sources-2.6.32-r46.ebuild,v 1.1 2011/05/11 00:36:54 blueness Exp $ + +EAPI=3D"2" + +ETYPE=3D"sources" +K_WANT_GENPATCHES=3D"base extras" +K_GENPATCHES_VER=3D"37" + +inherit kernel-2 +detect_version + +HGPV=3D"${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-50" +HGPV_URI=3D"http://dev.gentoo.org/~blueness/hardened-sources/hardened-pa= tches/hardened-patches-${HGPV}.extras.tar.bz2" +SRC_URI=3D"${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}" + +UNIPATCH_LIST=3D"${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2" +UNIPATCH_EXCLUDE=3D"4200_fbcondecor-0.9.6.patch" + +DESCRIPTION=3D"Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_M= INOR})" +HOMEPAGE=3D"http://www.gentoo.org/proj/en/hardened/" +IUSE=3D"" + +KEYWORDS=3D"~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86" + +pkg_postinst() { + kernel-2_pkg_postinst + + local GRADM_COMPAT=3D"sys-apps/gradm-2.2.2*" + + ewarn + ewarn "Hardened Gentoo provides three different predefined grsecurity l= evel:" + ewarn "[server], [workstation], and [virtualization]." + ewarn + ewarn "Those who intend to use one of these predefined grsecurity level= s" + ewarn "should read the help associated with the level. Users importing= a" + ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32," + ewarn "should review their selected grsecurity/PaX options carefully." + ewarn + ewarn "Users of grsecurity's RBAC system must ensure they are using" + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}." + ewarn "It is strongly recommended that the following command is issued" + ewarn "prior to booting a ${PF} kernel for the first time:" + ewarn + ewarn "emerge -na =3D${GRADM_COMPAT}" + ewarn +} diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.38-r4.ebuil= d b/sys-kernel/hardened-sources/hardened-sources-2.6.38-r4.ebuild new file mode 100644 index 0000000..92e38d5 --- /dev/null +++ b/sys-kernel/hardened-sources/hardened-sources-2.6.38-r4.ebuild @@ -0,0 +1,48 @@ +# Copyright 1999-2011 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-= sources-2.6.38-r3.ebuild,v 1.1 2011/05/11 00:39:40 blueness Exp $ + +EAPI=3D"2" + +ETYPE=3D"sources" +K_WANT_GENPATCHES=3D"base extras" +K_GENPATCHES_VER=3D"6" + +inherit kernel-2 +detect_version + +HGPV=3D"${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-5" +HGPV_URI=3D"http://dev.gentoo.org/~blueness/hardened-sources/hardened-pa= tches/hardened-patches-${HGPV}.extras.tar.bz2" +SRC_URI=3D"${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}" + +UNIPATCH_LIST=3D"${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2" +UNIPATCH_EXCLUDE=3D"4200_fbcondecor-0.9.6.patch" + +DESCRIPTION=3D"Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_M= INOR})" +HOMEPAGE=3D"http://www.gentoo.org/proj/en/hardened/" +IUSE=3D"" + +KEYWORDS=3D"~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86" + +pkg_postinst() { + kernel-2_pkg_postinst + + local GRADM_COMPAT=3D"sys-apps/gradm-2.2.2*" + + ewarn + ewarn "Hardened Gentoo provides three different predefined grsecurity l= evel:" + ewarn "[server], [workstation], and [virtualization]." + ewarn + ewarn "Those who intend to use one of these predefined grsecurity level= s" + ewarn "should read the help associated with the level. Users importing= a" + ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32," + ewarn "should review their selected grsecurity/PaX options carefully." + ewarn + ewarn "Users of grsecurity's RBAC system must ensure they are using" + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}." + ewarn "It is strongly recommended that the following command is issued" + ewarn "prior to booting a ${PF} kernel for the first time:" + ewarn + ewarn "emerge -na =3D${GRADM_COMPAT}" + ewarn +}