From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1QJlFj-0003P5-IR for garchives@archives.gentoo.org; Tue, 10 May 2011 11:37:25 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id D308A1C00C; Tue, 10 May 2011 11:37:16 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id 950081C00C for ; Tue, 10 May 2011 11:37:16 +0000 (UTC) Received: from pelican.gentoo.org (unknown [66.219.59.40]) (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id C15EB1B40A5 for ; Tue, 10 May 2011 11:37:15 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by pelican.gentoo.org (Postfix) with ESMTP id 2720A80507 for ; Tue, 10 May 2011 11:37:15 +0000 (UTC) From: "Anthony G. Basile" To: gentoo-commits@lists.gentoo.org Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Anthony G. Basile" Message-ID: Subject: [gentoo-commits] dev/blueness:master commit in: sys-kernel/hardened-sources/ X-VCS-Repository: dev/blueness X-VCS-Files: sys-kernel/hardened-sources/ChangeLog sys-kernel/hardened-sources/Manifest sys-kernel/hardened-sources/hardened-sources-2.6.32-r46.ebuild sys-kernel/hardened-sources/hardened-sources-2.6.38-r3.ebuild X-VCS-Directories: sys-kernel/hardened-sources/ X-VCS-Committer: blueness X-VCS-Committer-Name: Anthony G. Basile X-VCS-Revision: b5b4717ed9e32a9e264bdf16c3b8d261c8ec9ae0 Date: Tue, 10 May 2011 11:37:15 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: quoted-printable X-Archives-Salt: X-Archives-Hash: cb46ea8d6c698ee9cb72808337c55a38 commit: b5b4717ed9e32a9e264bdf16c3b8d261c8ec9ae0 Author: Anthony G. Basile gentoo org> AuthorDate: Tue May 10 11:37:09 2011 +0000 Commit: Anthony G. Basile gentoo org> CommitDate: Tue May 10 11:37:09 2011 +0000 URL: http://git.overlays.gentoo.org/gitweb/?p=3Ddev/blueness.git;a= =3Dcommit;h=3Db5b4717e sys-kernel/hardened-sources: testing patchset 20110502 (Portage version: 2.1.9.42/git/Linux x86_64, signed Manifest commit with = key 0xD0455535) --- sys-kernel/hardened-sources/ChangeLog | 7 +++ sys-kernel/hardened-sources/Manifest | 26 ++++++++++- .../hardened-sources-2.6.32-r46.ebuild | 48 ++++++++++++++= ++++++ .../hardened-sources-2.6.38-r3.ebuild | 48 ++++++++++++++= ++++++ 4 files changed, 128 insertions(+), 1 deletions(-) diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-= sources/ChangeLog index 2d364f4..8c669c1 100644 --- a/sys-kernel/hardened-sources/ChangeLog +++ b/sys-kernel/hardened-sources/ChangeLog @@ -1,5 +1,12 @@ =20 =20 +*hardened-sources-2.6.38-r3 (10 May 2011) +*hardened-sources-2.6.32-r46 (10 May 2011) + + 10 May 2011; Anthony G. Basile + +hardened-sources-2.6.32-r46.ebuild, +hardened-sources-2.6.38-r3.ebuil= d: + bumps to test patchset 20110502 + 20 Apr 2011; Anthony G. Basile hardened-sources-2.6.38-r1.ebuild: updated to test patchset 20110419 diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-s= ources/Manifest index 919c0b9..2898a69 100644 --- a/sys-kernel/hardened-sources/Manifest +++ b/sys-kernel/hardened-sources/Manifest @@ -1,2 +1,26 @@ -MISC ChangeLog 13084 RMD160 72b6a3d1f5db3fec8a66461def02aedf675f69f0 SHA= 1 c4718230722c5ff374d23e82a5139a8495988aca SHA256 2c1177984e3c546d71e4ba2= 4df412d22c7ac3d88a88acc72dd5c565d749b9b5d +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA256 + +DIST deblob-2.6.32 84094 RMD160 394f46ec5b869638a7bc2e87beb118167c9bd6cb= SHA1 1a2a1efb72126609d9e3b9be99ae5be2751efd06 SHA256 de625f0bd221c9c38d4= 453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d +DIST deblob-2.6.38 99773 RMD160 f52e78df8e819319d0aabf24fe471e2ef9e02140= SHA1 0d176aa88f0525123d293e26617f2d287fabdddc SHA256 ddabcd846baa19b7e82= adec3ca8ff17f2f7425c292516889098559f639e763eb +DIST deblob-check-2.6.32 247608 RMD160 840bf8a229ea79810519eee6241edb85b= 78a6562 SHA1 d45a24eb16e5ac956c0fcddbc1ac4d67e326c7b8 SHA256 da1aecdf3ab7= f1207b90642d303e52262ccc2ed9e49739b729512b88950d17f3 +DIST deblob-check-2.6.38 345831 RMD160 1caea73e54a21cb1100a4ee8226201ddd= 8a89985 SHA1 44de3ac14d9a3e94b97553051aff0ebfada45274 SHA256 6f681dbd1c1c= 44cba2c9902dd77a5a51b2d1cc81567cffc60ba92bd0bdd4ff2f +DIST genpatches-2.6.32-36.base.tar.bz2 848775 RMD160 15102eded74ee4ae5c9= 8052628526b535849f2ce SHA1 b7c33390d3201c9cf87128bd81b3caa35989e373 SHA25= 6 7a0a1a16900c2e926e99cef8290174811fd6c94d2c148f73887cb5328752db17 +DIST genpatches-2.6.32-36.extras.tar.bz2 24934 RMD160 e3e1d60fb45a3e3c81= 8ddda36b9180d4fc46679e SHA1 d16a34dfa35d163ea4042058b3865c389f3802e9 SHA2= 56 50b70c76461aa52f7f2ad88175e7f08eb555f7f1dfd274759ec0c2a9748bde5e +DIST genpatches-2.6.38-4.base.tar.bz2 106077 RMD160 744a5c1fcb0d7ce6e41d= ee42912ffcecad60c775 SHA1 410744d502d18113626e530cb9860f96c3b007a6 SHA256= a8b2e76ff14e193de26a8992837c3f9f4e2990aed6bed037dfd284ca47ecee45 +DIST genpatches-2.6.38-4.extras.tar.bz2 15668 RMD160 79642f14a75c96f029d= fb6ec4f86fe82a34b5094 SHA1 adde8ec89e98f4ee0ada4bfc24d225157efec2be SHA25= 6 ffad6a0c3015fd0fe43f512fa353e0206a4eb0d45102459180391f96d2204caa +DIST hardened-patches-2.6.32-49.extras.tar.bz2 405351 RMD160 84f633f0fb0= cd0f8b0af8d4ffec19b41becbe80f SHA1 b752b1a8c3a204bfc2408ca5169e357165d3a9= 6d SHA256 f170586c2eefcd4c9399a7ac7100115619895a03d5c13f0e7ed6b89ff0068be= f +DIST hardened-patches-2.6.38-4.extras.tar.bz2 417075 RMD160 2d30a4bf41a7= 5d8252324f06d2ff9b555c800af6 SHA1 50c913db315e768c5634af49f99885be10a4306= b SHA256 d75f20527ca2ccb8622a0c61bf3aa99e231527c25f2a64480d4499e90dc40687 +DIST linux-2.6.32.tar.bz2 64424138 RMD160 b93742cbaf8174f2200d2dbef0d47a= 26c618039c SHA1 410b4fc818023bfef60064e973ff0ab46d3bfb19 SHA256 5099786d8= 0b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e +DIST linux-2.6.38.tar.bz2 74739098 RMD160 d1179be93f1309303b9aa6008a25b6= 247726e764 SHA1 02aade5ad3dedd70739c9b4a05de40edbe432d25 SHA256 72f0cfaef= b8dc86b219d5a742dd0375332627641ecbdf5badd3158e2127b9304 +EBUILD hardened-sources-2.6.32-r46.ebuild 1758 RMD160 df7ac43f29313470fe= c2d4656a399e4b84128e65 SHA1 3e60b39d91b5785159d24274f568d3d34b1a12c2 SHA2= 56 a5c148107414acf27165b7fdac29b748190ab100815bfca8a3b180b09866f983 +EBUILD hardened-sources-2.6.38-r3.ebuild 1755 RMD160 d8fd62f012f8d49bf5a= b0759a1bbbb34b7815785 SHA1 560536ff48430f90b0cc24958c975f2ce584034c SHA25= 6 1badcd200f070b813f5c8e6f3c6c6affa6d6a5a21ad708c40ceeceec2d76b062 +MISC ChangeLog 13335 RMD160 77d9041a5373711b644a3b65cdaa7f4b93cdcac4 SHA= 1 42b441755881c8ed0b7ad17677512175868f0f90 SHA256 c0b24d81d6e6375f54f37dc= 86a879b58cb2231acad6c0e15b8bad0ff791114fc MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SH= A1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8= fcfd351f2f39ed63da68af3a5751fc2058d0d03813 +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.0.17 (GNU/Linux) + +iEYEAREIAAYFAk3JI2UACgkQl5yvQNBFVTXQtQCfXc80jp84KVsyOLzn+a2k1KCO +x64An1jOQviz1HKb9mErTQHtOrXQ5GbE +=3DEiOO +-----END PGP SIGNATURE----- diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r46.ebui= ld b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r46.ebuild new file mode 100644 index 0000000..9bfa02a --- /dev/null +++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r46.ebuild @@ -0,0 +1,48 @@ +# Copyright 1999-2011 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-= sources-2.6.32-r45.ebuild,v 1.1 2011/04/28 21:32:51 blueness Exp $ + +EAPI=3D"2" + +ETYPE=3D"sources" +K_WANT_GENPATCHES=3D"base extras" +K_GENPATCHES_VER=3D"36" + +inherit kernel-2 +detect_version + +HGPV=3D"${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-49" +HGPV_URI=3D"http://dev.gentoo.org/~blueness/hardened-sources/hardened-pa= tches/hardened-patches-${HGPV}.extras.tar.bz2" +SRC_URI=3D"${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}" + +UNIPATCH_LIST=3D"${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2" +UNIPATCH_EXCLUDE=3D"4200_fbcondecor-0.9.6.patch" + +DESCRIPTION=3D"Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_M= INOR})" +HOMEPAGE=3D"http://www.gentoo.org/proj/en/hardened/" +IUSE=3D"" + +KEYWORDS=3D"~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86" + +pkg_postinst() { + kernel-2_pkg_postinst + + local GRADM_COMPAT=3D"sys-apps/gradm-2.2.2*" + + ewarn + ewarn "Hardened Gentoo provides three different predefined grsecurity l= evel:" + ewarn "[server], [workstation], and [virtualization]." + ewarn + ewarn "Those who intend to use one of these predefined grsecurity level= s" + ewarn "should read the help associated with the level. Users importing= a" + ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32," + ewarn "should review their selected grsecurity/PaX options carefully." + ewarn + ewarn "Users of grsecurity's RBAC system must ensure they are using" + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}." + ewarn "It is strongly recommended that the following command is issued" + ewarn "prior to booting a ${PF} kernel for the first time:" + ewarn + ewarn "emerge -na =3D${GRADM_COMPAT}" + ewarn +} diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.38-r3.ebuil= d b/sys-kernel/hardened-sources/hardened-sources-2.6.38-r3.ebuild new file mode 100644 index 0000000..1cf491c --- /dev/null +++ b/sys-kernel/hardened-sources/hardened-sources-2.6.38-r3.ebuild @@ -0,0 +1,48 @@ +# Copyright 1999-2011 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-= sources-2.6.38-r2.ebuild,v 1.1 2011/04/28 21:38:48 blueness Exp $ + +EAPI=3D"2" + +ETYPE=3D"sources" +K_WANT_GENPATCHES=3D"base extras" +K_GENPATCHES_VER=3D"4" + +inherit kernel-2 +detect_version + +HGPV=3D"${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-4" +HGPV_URI=3D"http://dev.gentoo.org/~blueness/hardened-sources/hardened-pa= tches/hardened-patches-${HGPV}.extras.tar.bz2" +SRC_URI=3D"${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}" + +UNIPATCH_LIST=3D"${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2" +UNIPATCH_EXCLUDE=3D"4200_fbcondecor-0.9.6.patch" + +DESCRIPTION=3D"Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_M= INOR})" +HOMEPAGE=3D"http://www.gentoo.org/proj/en/hardened/" +IUSE=3D"" + +KEYWORDS=3D"~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86" + +pkg_postinst() { + kernel-2_pkg_postinst + + local GRADM_COMPAT=3D"sys-apps/gradm-2.2.2*" + + ewarn + ewarn "Hardened Gentoo provides three different predefined grsecurity l= evel:" + ewarn "[server], [workstation], and [virtualization]." + ewarn + ewarn "Those who intend to use one of these predefined grsecurity level= s" + ewarn "should read the help associated with the level. Users importing= a" + ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32," + ewarn "should review their selected grsecurity/PaX options carefully." + ewarn + ewarn "Users of grsecurity's RBAC system must ensure they are using" + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}." + ewarn "It is strongly recommended that the following command is issued" + ewarn "prior to booting a ${PF} kernel for the first time:" + ewarn + ewarn "emerge -na =3D${GRADM_COMPAT}" + ewarn +}