From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1Qt0At-0005kN-Mp for garchives@archives.gentoo.org; Mon, 15 Aug 2011 16:38:03 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id AABF021C274; Mon, 15 Aug 2011 16:37:45 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id 65F4F21C274 for ; Mon, 15 Aug 2011 16:37:45 +0000 (UTC) Received: from pelican.gentoo.org (unknown [66.219.59.40]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id C5D961B4016 for ; Mon, 15 Aug 2011 16:37:44 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by pelican.gentoo.org (Postfix) with ESMTP id 2A2DB80040 for ; Mon, 15 Aug 2011 16:37:44 +0000 (UTC) From: "Anthony G. Basile" To: gentoo-commits@lists.gentoo.org Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Anthony G. Basile" Message-ID: Subject: [gentoo-commits] dev/blueness:master commit in: sys-kernel/hardened-sources/ X-VCS-Repository: dev/blueness X-VCS-Files: sys-kernel/hardened-sources/ChangeLog sys-kernel/hardened-sources/Manifest sys-kernel/hardened-sources/hardened-sources-2.6.32-r62.ebuild sys-kernel/hardened-sources/hardened-sources-2.6.39-r12.ebuild X-VCS-Directories: sys-kernel/hardened-sources/ X-VCS-Committer: blueness X-VCS-Committer-Name: Anthony G. Basile X-VCS-Revision: ff0ffe2422bcf0657fc713d0a464cbfeec46d3dc Date: Mon, 15 Aug 2011 16:37:44 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: quoted-printable X-Archives-Salt: X-Archives-Hash: 302c949bb298aa2f99b0114f4a313a10 commit: ff0ffe2422bcf0657fc713d0a464cbfeec46d3dc Author: Anthony G. Basile gentoo org> AuthorDate: Mon Aug 15 16:37:36 2011 +0000 Commit: Anthony G. Basile gentoo org> CommitDate: Mon Aug 15 16:37:36 2011 +0000 URL: http://git.overlays.gentoo.org/gitweb/?p=3Ddev/blueness.git;a= =3Dcommit;h=3Dff0ffe24 sys-kernel/hardened-sources: testing patchset 20110814 (Portage version: 2.1.10.3/git/Linux x86_64, signed Manifest commit with = key 0xD0455535) --- sys-kernel/hardened-sources/ChangeLog | 7 +++ sys-kernel/hardened-sources/Manifest | 20 +++++++-- .../hardened-sources-2.6.32-r62.ebuild | 48 ++++++++++++++= ++++++ .../hardened-sources-2.6.39-r12.ebuild | 48 ++++++++++++++= ++++++ 4 files changed, 119 insertions(+), 4 deletions(-) diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-= sources/ChangeLog index 7be03b1..630396e 100644 --- a/sys-kernel/hardened-sources/ChangeLog +++ b/sys-kernel/hardened-sources/ChangeLog @@ -1,5 +1,12 @@ =20 =20 +*hardened-sources-2.6.39-r12 (15 Aug 2011) +*hardened-sources-2.6.32-r62 (15 Aug 2011) + + 15 Aug 2011; Anthony G. Basile + +hardened-sources-2.6.32-r62.ebuild, +hardened-sources-2.6.39-r12.ebui= ld: + testing patchset 20110814 + 15 Aug 2011; Anthony G. Basile -hardened-sources-2.6.39-r11.ebuild: Moved to tree diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-s= ources/Manifest index aaaa390..9217d19 100644 --- a/sys-kernel/hardened-sources/Manifest +++ b/sys-kernel/hardened-sources/Manifest @@ -1,12 +1,24 @@ -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =20 -MISC ChangeLog 1953 RMD160 cf1d86da1a1b29495e479c606384e01f4d5a86d3 SHA1= 4e683193451b072914e829ccba5213c101c070cd SHA256 9478c1aae2064a1ebd4a7d00= dfd935cc5da3702ae3d8109dba73368e646511a3 +DIST deblob-2.6.32 84094 RMD160 394f46ec5b869638a7bc2e87beb118167c9bd6cb= SHA1 1a2a1efb72126609d9e3b9be99ae5be2751efd06 SHA256 de625f0bd221c9c38d4= 453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d +DIST deblob-check-2.6.32 247608 RMD160 840bf8a229ea79810519eee6241edb85b= 78a6562 SHA1 d45a24eb16e5ac956c0fcddbc1ac4d67e326c7b8 SHA256 da1aecdf3ab7= f1207b90642d303e52262ccc2ed9e49739b729512b88950d17f3 +DIST genpatches-2.6.32-40.base.tar.bz2 954168 RMD160 09a4ab92cd4a0bb6200= a386182d60bf94fcea5dc SHA1 4b937d27ec83398efb5af8a71a8d2b893cfd56fc SHA25= 6 63caf952fa4351813db7c280751e71e635aa0df259ccfd153ecda5ad06960cbe +DIST genpatches-2.6.32-40.extras.tar.bz2 24897 RMD160 fac4ce9c15953ad811= b2c500b0145f2eebea5e2d SHA1 8f9cdf4bc06dc5e806698d93c002798faa53fda1 SHA2= 56 309841a94e96d7076bca7fb547caae9786e24258e032da242f64768a413ddbf0 +DIST genpatches-2.6.39-6.base.tar.bz2 129313 RMD160 020469bd8d91d7159b2a= 44782e64eb4e23a307c6 SHA1 46a3e1569d6f58f5f34e5e54d0947896f842d222 SHA256= fe605a0bc8a1206db73803692179413a605c98415bc35bdb16496afffe241b22 +DIST genpatches-2.6.39-6.extras.tar.bz2 17176 RMD160 daae29a8c922c4cce33= 8ee7ad2e7ea6b3fb7bed5 SHA1 382e3800895b1b56bc7d073808576a0060165bc2 SHA25= 6 6d2bbf1bd936088e10aecaa2f7d1050de72a21a8e4a05a8269caeaec8e8b3f09 +DIST hardened-patches-2.6.32-65.extras.tar.bz2 503404 RMD160 589158ec216= fe77dfd111c33d293ba902be5085a SHA1 2f37f681c37ac8f65141fc0be6e20153c486d3= db SHA256 5e673857b5db8143951bb9a9a5b5a72eb4d9e58a5b78f534da6ddb39d8b118b= d +DIST hardened-patches-2.6.39-13.extras.tar.bz2 446107 RMD160 4c2efd52c7f= 800273d605696fdd82f5e3e5af986 SHA1 7eb4a41e63153b90dd2769cebb9a66251c9c6e= 35 SHA256 593b43eeb19902de4c5ec046a65316afb63d46e01ee68bef32cef4ba7abb315= f +DIST linux-2.6.32.tar.bz2 64424138 RMD160 b93742cbaf8174f2200d2dbef0d47a= 26c618039c SHA1 410b4fc818023bfef60064e973ff0ab46d3bfb19 SHA256 5099786d8= 0b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e +DIST linux-2.6.39.tar.bz2 76096559 RMD160 feddc516bc15e78f12f611ff184d38= baa4eac4ee SHA1 68518112821e55f4ac1df64f2e0e809cedfcc5ef SHA256 584d17f2a= 3ee18a9501d7ff36907639e538cfdba4529978b8550c461d45c61f6 +EBUILD hardened-sources-2.6.32-r62.ebuild 1758 RMD160 7da5a12ade9b2110ef= d6887602b16a5afb1ebd31 SHA1 4e7289548666cec7fd88f6035b8ae86e5916bed8 SHA2= 56 a246a05202c80249e53bbd9a9108217b9513058f27ea638f87a069532793bc97 +EBUILD hardened-sources-2.6.39-r12.ebuild 1757 RMD160 85a9cc29ef19d19533= b5e8aaf474b4c6e0cbab54 SHA1 5b61689ff9c24ac226f14d4b88d63770def55ac9 SHA2= 56 b360bc4bff860e4416b32a9194478034261fcd8fc53b5bb36e9798337a9d77a8 +MISC ChangeLog 2200 RMD160 a1b170a289e82b484a33f9d3a09ea1fd9ab40288 SHA1= 5daf1becc489d9526dc94862e9cedbece5787742 SHA256 db62fb8f99e7d22cacb394fc= e8d0593c76720c062e2612e5daf7a54eaad55d2a MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SH= A1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8= fcfd351f2f39ed63da68af3a5751fc2058d0d03813 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (GNU/Linux) =20 -iEYEAREIAAYFAk5IbSoACgkQl5yvQNBFVTUC+gCfZ/SCAcmJOqtoJBPXcBJUh6sk -EY0An1h1CmXcLaJhpLmht45QnQsnSuf0 -=3D86ar +iEYEAREIAAYFAk5JS1AACgkQl5yvQNBFVTVxFACdEZd39caau2sJ0uUf9U2S1JeI +65oAoKIeoLRpvfgxetcfjJANS2QeDqAI +=3DTvcC -----END PGP SIGNATURE----- diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r62.ebui= ld b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r62.ebuild new file mode 100644 index 0000000..e62a4a8 --- /dev/null +++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r62.ebuild @@ -0,0 +1,48 @@ +# Copyright 1999-2011 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-= sources-2.6.32-r61.ebuild,v 1.1 2011/08/12 23:55:21 blueness Exp $ + +EAPI=3D"4" + +ETYPE=3D"sources" +K_WANT_GENPATCHES=3D"base extras" +K_GENPATCHES_VER=3D"40" + +inherit kernel-2 +detect_version + +HGPV=3D"${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-65" +HGPV_URI=3D"http://dev.gentoo.org/~blueness/hardened-sources/hardened-pa= tches/hardened-patches-${HGPV}.extras.tar.bz2" +SRC_URI=3D"${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}" + +UNIPATCH_LIST=3D"${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2" +UNIPATCH_EXCLUDE=3D"4200_fbcondecor-0.9.6.patch" + +DESCRIPTION=3D"Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_M= INOR})" +HOMEPAGE=3D"http://www.gentoo.org/proj/en/hardened/" +IUSE=3D"" + +KEYWORDS=3D"~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86" + +pkg_postinst() { + kernel-2_pkg_postinst + + local GRADM_COMPAT=3D"sys-apps/gradm-2.2.2*" + + ewarn + ewarn "Hardened Gentoo provides three different predefined grsecurity l= evel:" + ewarn "[server], [workstation], and [virtualization]." + ewarn + ewarn "Those who intend to use one of these predefined grsecurity level= s" + ewarn "should read the help associated with the level. Users importing= a" + ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32," + ewarn "should review their selected grsecurity/PaX options carefully." + ewarn + ewarn "Users of grsecurity's RBAC system must ensure they are using" + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}." + ewarn "It is strongly recommended that the following command is issued" + ewarn "prior to booting a ${PF} kernel for the first time:" + ewarn + ewarn "emerge -na =3D${GRADM_COMPAT}" + ewarn +} diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.39-r12.ebui= ld b/sys-kernel/hardened-sources/hardened-sources-2.6.39-r12.ebuild new file mode 100644 index 0000000..bdae0c6 --- /dev/null +++ b/sys-kernel/hardened-sources/hardened-sources-2.6.39-r12.ebuild @@ -0,0 +1,48 @@ +# Copyright 1999-2011 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-= sources-2.6.39-r11.ebuild,v 1.1 2011/08/15 00:47:57 blueness Exp $ + +EAPI=3D"4" + +ETYPE=3D"sources" +K_WANT_GENPATCHES=3D"base extras" +K_GENPATCHES_VER=3D"6" + +inherit kernel-2 +detect_version + +HGPV=3D"${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-13" +HGPV_URI=3D"http://dev.gentoo.org/~blueness/hardened-sources/hardened-pa= tches/hardened-patches-${HGPV}.extras.tar.bz2" +SRC_URI=3D"${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}" + +UNIPATCH_LIST=3D"${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2" +UNIPATCH_EXCLUDE=3D"4200_fbcondecor-0.9.6.patch" + +DESCRIPTION=3D"Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_M= INOR})" +HOMEPAGE=3D"http://www.gentoo.org/proj/en/hardened/" +IUSE=3D"" + +KEYWORDS=3D"~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86" + +pkg_postinst() { + kernel-2_pkg_postinst + + local GRADM_COMPAT=3D"sys-apps/gradm-2.2.2*" + + ewarn + ewarn "Hardened Gentoo provides three different predefined grsecurity l= evel:" + ewarn "[server], [workstation], and [virtualization]." + ewarn + ewarn "Those who intend to use one of these predefined grsecurity level= s" + ewarn "should read the help associated with the level. Users importing= a" + ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32," + ewarn "should review their selected grsecurity/PaX options carefully." + ewarn + ewarn "Users of grsecurity's RBAC system must ensure they are using" + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}." + ewarn "It is strongly recommended that the following command is issued" + ewarn "prior to booting a ${PF} kernel for the first time:" + ewarn + ewarn "emerge -na =3D${GRADM_COMPAT}" + ewarn +}