From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1Q3qhV-0006iy-6Z for garchives@archives.gentoo.org; Sun, 27 Mar 2011 14:12:17 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 32D4A1C00D; Sun, 27 Mar 2011 14:12:10 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id E8ECF1C00D for ; Sun, 27 Mar 2011 14:12:09 +0000 (UTC) Received: from pelican.gentoo.org (unknown [66.219.59.40]) (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 531A11B404A for ; Sun, 27 Mar 2011 14:12:09 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by pelican.gentoo.org (Postfix) with ESMTP id 8B4778006A for ; Sun, 27 Mar 2011 14:12:08 +0000 (UTC) From: "Anthony G. Basile" To: gentoo-commits@lists.gentoo.org Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Anthony G. Basile" Message-ID: Subject: [gentoo-commits] dev/blueness:master commit in: sys-kernel/hardened-sources/ X-VCS-Repository: dev/blueness X-VCS-Files: sys-kernel/hardened-sources/Manifest sys-kernel/hardened-sources/hardened-sources-2.6.32-r43.ebuild X-VCS-Directories: sys-kernel/hardened-sources/ X-VCS-Committer: blueness X-VCS-Committer-Name: Anthony G. Basile X-VCS-Revision: cf3b422e3cb51dc20e3d45db1b06ad4b91f1806c Date: Sun, 27 Mar 2011 14:12:08 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: quoted-printable X-Archives-Salt: X-Archives-Hash: 9fb2477064ead0b7c1f4e72fff5d5723 commit: cf3b422e3cb51dc20e3d45db1b06ad4b91f1806c Author: Anthony G. Basile gentoo org> AuthorDate: Sun Mar 27 14:09:36 2011 +0000 Commit: Anthony G. Basile gentoo org> CommitDate: Sun Mar 27 14:09:36 2011 +0000 URL: http://git.overlays.gentoo.org/gitweb/?p=3Ddev/blueness.git;a= =3Dcommit;h=3Dcf3b422e sys-kernel/hardened-sources: testing patchset 20110326 (Portage version: 2.1.9.42/git/Linux x86_64, signed Manifest commit with = key 0xD0455535) --- sys-kernel/hardened-sources/Manifest | 19 +++++++- .../hardened-sources-2.6.32-r43.ebuild | 48 ++++++++++++++= ++++++ 2 files changed, 66 insertions(+), 1 deletions(-) diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-s= ources/Manifest index 89cad60..5853a25 100644 --- a/sys-kernel/hardened-sources/Manifest +++ b/sys-kernel/hardened-sources/Manifest @@ -1,9 +1,26 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA256 + +DIST deblob-2.6.32 84094 RMD160 394f46ec5b869638a7bc2e87beb118167c9bd6cb= SHA1 1a2a1efb72126609d9e3b9be99ae5be2751efd06 SHA256 de625f0bd221c9c38d4= 453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d DIST deblob-2.6.38 99773 RMD160 f52e78df8e819319d0aabf24fe471e2ef9e02140= SHA1 0d176aa88f0525123d293e26617f2d287fabdddc SHA256 ddabcd846baa19b7e82= adec3ca8ff17f2f7425c292516889098559f639e763eb +DIST deblob-check-2.6.32 247608 RMD160 840bf8a229ea79810519eee6241edb85b= 78a6562 SHA1 d45a24eb16e5ac956c0fcddbc1ac4d67e326c7b8 SHA256 da1aecdf3ab7= f1207b90642d303e52262ccc2ed9e49739b729512b88950d17f3 DIST deblob-check-2.6.38 345831 RMD160 1caea73e54a21cb1100a4ee8226201ddd= 8a89985 SHA1 44de3ac14d9a3e94b97553051aff0ebfada45274 SHA256 6f681dbd1c1c= 44cba2c9902dd77a5a51b2d1cc81567cffc60ba92bd0bdd4ff2f +DIST genpatches-2.6.32-35.base.tar.bz2 843461 RMD160 bdc93339928b224acd3= 8cfbaf62d6b164b1ca50c SHA1 f68cba0edad8674159ebd663120dfd7154f6241e SHA25= 6 88e84d6251b782e5b131a2f7466a02e6483409f3586a5db9811af4280f302405 +DIST genpatches-2.6.32-35.extras.tar.bz2 24966 RMD160 36249adefc5e363766= 9bbdd3d72a568be051cba5 SHA1 b341f4f3a5179957a63fdce0586b6123805d770a SHA2= 56 8118fbbf4a2d3f2f1f931970ee2fd6b1c78130850362e9750878b4ea8d25b835 DIST genpatches-2.6.38-1.base.tar.bz2 775 RMD160 f254a1c4bb87a13a7a77737= 87107ba1fbb674ea5 SHA1 73597a69df481a79b222b452a6d34f223376fc8e SHA256 88= f916556bf6dccb131c1046426c4c8ab1ae44474895a0c7d6281c012c4dae98 DIST genpatches-2.6.38-1.extras.tar.bz2 15675 RMD160 3d40e9fcad874591de0= cc7497a52795ea04a9b9b SHA1 ca1b5f319e87960fa97ea6302dd0146901cacd9e SHA25= 6 6d4c134be67714382efc8aec208c5a73d6c0f84d96acc76640b9ed3be93877a4 -DIST hardened-patches-2.6.38-1.extras.tar.bz2 359993 RMD160 8e20ee69b4ca= 36563f5bc789584f2d8d5fcc822b SHA1 0c98e2d20e30fcf4f4581b93220ebb36fe4593f= 8 SHA256 4b4cf1ff08df31f20724e3693b4f130354d0594d6b14254699359541f2dc14a0 +DIST hardened-patches-2.6.32-46.extras.tar.bz2 380302 RMD160 336ea1d489c= e0a44809ad1fb0a5070f0fcc92b44 SHA1 fe7c6c131a0f08f05140367a7bbdcbd93da629= 5e SHA256 eb9b069edf1a31a7c1ea2e2d76622039db65ab22c652472866bc4925de1f344= 2 +DIST hardened-patches-2.6.38-1.extras.tar.bz2 388898 RMD160 7b9035fae256= 734708f503c4d045221a8f38d39d SHA1 19b0b450335e1d134bcba23e081aa255f73977e= a SHA256 25aecdd834105846d536967d70b483dc5406645711a048d707ab973204f2626d +DIST linux-2.6.32.tar.bz2 64424138 RMD160 b93742cbaf8174f2200d2dbef0d47a= 26c618039c SHA1 410b4fc818023bfef60064e973ff0ab46d3bfb19 SHA256 5099786d8= 0b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e DIST linux-2.6.38.tar.bz2 74739098 RMD160 d1179be93f1309303b9aa6008a25b6= 247726e764 SHA1 02aade5ad3dedd70739c9b4a05de40edbe432d25 SHA256 72f0cfaef= b8dc86b219d5a742dd0375332627641ecbdf5badd3158e2127b9304 +EBUILD hardened-sources-2.6.32-r43.ebuild 1758 RMD160 8f3b2121aa9d36bd81= 801458334e89f5a2945533 SHA1 b007af9f12179cb253dbd61663d0f21d63fd4b5c SHA2= 56 83ca14a06969105c087d48bfa93246391c291075c60d7d85e7b260d4c4f489bb EBUILD hardened-sources-2.6.38.ebuild 1755 RMD160 dd4c586af56cf87e7aa98c= 2866839198c7f7e18b SHA1 284060f02d37b52615704999eb30e55a823406ab SHA256 3= 85bfdb81f1bc29c9cc15ec79820accef8f3c034de48c27f1fe20e7c5d78671c MISC ChangeLog 12229 RMD160 88dc03b7c68560f7dfb7b675c2e4310f634ffb91 SHA= 1 e6126151529264f16edb9be92f7420923942c240 SHA256 db5786adc0ab7e31ffbc063= cd3898d8c68156a02f4935a74e93ea09ab7144481 MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SH= A1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8= fcfd351f2f39ed63da68af3a5751fc2058d0d03813 +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.0.17 (GNU/Linux) + +iEYEAREIAAYFAk2PRSAACgkQl5yvQNBFVTVsZgCePcZ7GdMfL241oIVhu5Sl4Ftq +hQIAoI/18QfOg2+8AxNdCa9SECzaUxZ8 +=3D4Jp4 +-----END PGP SIGNATURE----- diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r43.ebui= ld b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r43.ebuild new file mode 100644 index 0000000..296b7fe --- /dev/null +++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r43.ebuild @@ -0,0 +1,48 @@ +# Copyright 1999-2011 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-= sources-2.6.32-r42.ebuild,v 1.1 2011/03/22 12:43:24 blueness Exp $ + +EAPI=3D"2" + +ETYPE=3D"sources" +K_WANT_GENPATCHES=3D"base extras" +K_GENPATCHES_VER=3D"35" + +inherit kernel-2 +detect_version + +HGPV=3D"${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-46" +HGPV_URI=3D"http://dev.gentoo.org/~blueness/hardened-sources/hardened-pa= tches/hardened-patches-${HGPV}.extras.tar.bz2" +SRC_URI=3D"${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}" + +UNIPATCH_LIST=3D"${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2" +UNIPATCH_EXCLUDE=3D"4200_fbcondecor-0.9.6.patch" + +DESCRIPTION=3D"Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_M= INOR})" +HOMEPAGE=3D"http://www.gentoo.org/proj/en/hardened/" +IUSE=3D"" + +KEYWORDS=3D"~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86" + +pkg_postinst() { + kernel-2_pkg_postinst + + local GRADM_COMPAT=3D"sys-apps/gradm-2.2.1*" + + ewarn + ewarn "Hardened Gentoo provides three different predefined grsecurity l= evel:" + ewarn "[server], [workstation], and [virtualization]." + ewarn + ewarn "Those who intend to use one of these predefined grsecurity level= s" + ewarn "should read the help associated with the level. Users importing= a" + ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32," + ewarn "should review their selected grsecurity/PaX options carefully." + ewarn + ewarn "Users of grsecurity's RBAC system must ensure they are using" + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}." + ewarn "It is strongly recommended that the following command is issued" + ewarn "prior to booting a ${PF} kernel for the first time:" + ewarn + ewarn "emerge -na =3D${GRADM_COMPAT}" + ewarn +}