From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 0C3F958973 for ; Thu, 4 Feb 2016 11:33:06 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 660A621C003; Thu, 4 Feb 2016 11:33:05 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id E357F21C003 for ; Thu, 4 Feb 2016 11:33:04 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 921543408EA for ; Thu, 4 Feb 2016 11:33:03 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 908198E1 for ; Thu, 4 Feb 2016 11:33:01 +0000 (UTC) From: "Anthony G. Basile" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Anthony G. Basile" Message-ID: <1454586110.bd480c3dfd0fb4425d0f35d069b4dda40ab919aa.blueness@gentoo> Subject: [gentoo-commits] repo/gentoo:master commit in: sys-kernel/hardened-sources/ X-VCS-Repository: repo/gentoo X-VCS-Files: sys-kernel/hardened-sources/Manifest sys-kernel/hardened-sources/hardened-sources-4.3.5-r1.ebuild X-VCS-Directories: sys-kernel/hardened-sources/ X-VCS-Committer: blueness X-VCS-Committer-Name: Anthony G. Basile X-VCS-Revision: bd480c3dfd0fb4425d0f35d069b4dda40ab919aa X-VCS-Branch: master Date: Thu, 4 Feb 2016 11:33:01 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 8d0bea2b-f8fe-4aa5-8eb3-4d75cd1ac700 X-Archives-Hash: 86975b7d64ccfcd849f39202a6f15f94 commit: bd480c3dfd0fb4425d0f35d069b4dda40ab919aa Author: Anthony G. Basile gentoo org> AuthorDate: Thu Feb 4 11:40:01 2016 +0000 Commit: Anthony G. Basile gentoo org> CommitDate: Thu Feb 4 11:41:50 2016 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=bd480c3d sys-kernel/hardened-sources: version bump to 4.3.5-r1 vanilla-4.3.5 + genpatches-4.3-7 + grsecurity-3.1-4.3.5-201602032209 Package-Manager: portage-2.2.26 sys-kernel/hardened-sources/Manifest | 1 + .../hardened-sources-4.3.5-r1.ebuild | 46 ++++++++++++++++++++++ 2 files changed, 47 insertions(+) diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest index f535f3c..4ef5ede 100644 --- a/sys-kernel/hardened-sources/Manifest +++ b/sys-kernel/hardened-sources/Manifest @@ -11,5 +11,6 @@ DIST hardened-patches-4.3.3-5.extras.tar.bz2 1649484 SHA256 2a62a5eb4b98f4fbeb43 DIST hardened-patches-4.3.3-8.extras.tar.bz2 1669500 SHA256 55abfccb978e838266de327e020d47bb8f7bcf7ff6d6a89c993f18518ab6ffaa SHA512 bccae396966a3a00eac4763312e7c4a05f3cbc68f42675819ad90e3f43337713a7ee132ba5fe6874fffa55da9b8640e2d349793904736b9f62b178bdc5474ad9 WHIRLPOOL 76eceb3d204e3ed588fd40d773aa38f4450c0a3727aad75b231ed2795548ef3ef316fc3aeb174eabd79641fa43c4c2c56d184f6dd23f47980256e468c3cc6d2b DIST hardened-patches-4.3.4-3.extras.tar.bz2 1688931 SHA256 7ccce5bc5b9130ae63b865e04582b4fb6ccfecc8ef737317168f40aaad84a0d9 SHA512 702f936d945254def757cc116bfeb42dc3d84493d18749c4e3865a3d10caaffa486b4d9256a56f946eba7894f662989572df9b80fb78c56785997a9a19d68122 WHIRLPOOL cfbe5a2bf97b45937599e6261c3a7f45e3178216b3dcc802ef003f14fb1c3eeb05d057810968916e0e979395043096eaaa0ab1d85191ebad10c19da5eca10bc2 DIST hardened-patches-4.3.5-1.extras.tar.bz2 1668674 SHA256 52a102901e32e7caac4cc8e3368878a81a7542364d5408185c1820f5faff752f SHA512 d4690e6d5f41558270c4195e0b5b3f325cfa7391d5d8b28b3cebbe3f5eb2bba92aea54cfc4ea6325b29ee13c05fc11e43e0e400eb173db9a7f821dd794277fc7 WHIRLPOOL 0430a886dc53b7d99e5dd532e1d3c394025ad4bf434d631b06370eb6cc24edb1e2cb25ece77cb204aaab53ffcbc9d653715cb1057c93555555ad667f680c6866 +DIST hardened-patches-4.3.5-2.extras.tar.bz2 1688809 SHA256 4859f8f42d14f79920613ccb195f2b4d65e1ba84cffccb338fe4c5cecb6d56ca SHA512 63128c8279077226292212de45b581d3de0cc9e866ae4907ba70e8cc9928324a4aada0429b1b102dcb72dccd75c26b2a5aa3880a6210e97c9871e7d6c32754cd WHIRLPOOL ee7f762935fbf211fded180921a80b4d9b2efd02be084df5636103c5a0bf8cf2ced5f59a9be3488cc4519969ae6d18783d7a704d5ea6a7140e7c83ae9a942203 DIST linux-4.1.tar.xz 83017828 SHA256 caf51f085aac1e1cea4d00dbbf3093ead07b551fc07b31b2a989c05f8ea72d9f SHA512 168ef84a4e67619f9f53f3574e438542a5747f9b43443363cb83597fcdac9f40d201625c66e375a23226745eaada9176eb006ca023613cec089349e91751f3c0 WHIRLPOOL 85fcfdb67ea7f865272a85d3b4c3ec1f5a1267f4664bf073c562bb3875e9d96ad68486259d8866a9aced98c95de16840ec531d89745aec75b7315a64ebe650b8 DIST linux-4.3.tar.xz 86920812 SHA256 4a622cc84b8a3c38d39bc17195b0c064d2b46945dfde0dae18f77b120bc9f3ae SHA512 d25812043850530fdcfdb48523523ee980747f3c2c1266149330844dae2cba0d056d4ddd9c0f129f570f5d1f6df5c20385aec5f6a2e0755edc1e2f5f93e2c6bc WHIRLPOOL e3f131443acc14d4f67bbd3f4e1c57af3d822c41c85a112564d54667a591c8619dce42327fd8166d30a2d7adfaf433c2e2134d4995c91c08f65ac0cc2190f935 diff --git a/sys-kernel/hardened-sources/hardened-sources-4.3.5-r1.ebuild b/sys-kernel/hardened-sources/hardened-sources-4.3.5-r1.ebuild new file mode 100644 index 0000000..f59b31a --- /dev/null +++ b/sys-kernel/hardened-sources/hardened-sources-4.3.5-r1.ebuild @@ -0,0 +1,46 @@ +# Copyright 1999-2016 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Id$ + +EAPI="5" + +ETYPE="sources" +K_WANT_GENPATCHES="base" +K_GENPATCHES_VER="7" +K_DEBLOB_AVAILABLE="1" + +inherit kernel-2 +detect_version + +HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-2" +HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2" +SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}" + +UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2" +UNIPATCH_EXCLUDE=" + 1500_XATTR_USER_PREFIX.patch + 1520_keyring-refleak-in-join-session-CVE-2016-0728.patch + 2900_dev-root-proc-mount-fix.patch" + +DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})" +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/" +IUSE="deblob" + +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86" + +RDEPEND=">=sys-devel/gcc-4.5" + +pkg_postinst() { + kernel-2_pkg_postinst + + local GRADM_COMPAT="sys-apps/gradm-3.1*" + + ewarn + ewarn "Users of grsecurity's RBAC system must ensure they are using" + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}." + ewarn "It is strongly recommended that the following command is issued" + ewarn "prior to booting a ${PF} kernel for the first time:" + ewarn + ewarn "emerge -na =${GRADM_COMPAT}" + ewarn +}