[gentoo-commits] repo/gentoo:master commit in: sys-kernel/hardened-sources/

["Anthony G. Basile" <blueness@gentoo.org>]

commit:     d4172344eaa12f1e9603d25c30df8b3abebe686c
Author:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
AuthorDate: Wed Jun 15 19:20:16 2016 +0000
Commit:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
CommitDate: Wed Jun 15 19:20:42 2016 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d4172344

sys-kernel/hardened-sources: version bump to 4.5.7-r2

vanilla-4.5.7 + genpatches-4.5-9 + grsecurity-3.1-4.5.7-201606142010.patch

Package-Manager: portage-2.2.28

 sys-kernel/hardened-sources/Manifest               |  1 +
 .../hardened-sources-4.5.7-r2.ebuild               | 45 ++++++++++++++++++++++
 2 files changed, 46 insertions(+)

diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index ba22642..438eba8 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -18,6 +18,7 @@ DIST hardened-patches-4.5.5-3.extras.tar.bz2 1860142 SHA256 810085dcf1a1cd1ff1ba
 DIST hardened-patches-4.5.6-1.extras.tar.bz2 1862944 SHA256 2f3cab5b41d843ba069d7fcd5f22edb8a38e68cf4d388823fae91ed7af7ff78b SHA512 3fc18551fbc4647a7e050659c4222cca68805605ed3fee863214e9a0c71c54cb9fc44ecf8aafedbca5238c72d3349a30028889117aca313d3ec27d00e2b82909 WHIRLPOOL 91e0292c5905ed018461b4150b054ed29519c72d9838facaf4d437fdca1fcb9642147fa9243021fab51fea63b1ab4ec1eeacd564fa439d33b7aa1019c7d5691b
 DIST hardened-patches-4.5.7-1.extras.tar.bz2 1861918 SHA256 4f5602f245dddc4dcd0aee6ef587a463e1738c301e30a547ff6a8b24b4df10d2 SHA512 d95f109c7bcf54450f2b5ebb8705e448905bcbbc21abc27fcd597beae8b6bff9954a4782169965c0b66c2ebc60544187a4e81fc7204733e7aa39f38f4075ffa0 WHIRLPOOL 81c0b8c7add4fd81d10d38890190e2a97cf81514d3718db908dc1e76136577b276064ffb0de80c27ac7e0e4dddfbf99ea1689eb4200c209a99bb44057e326062
 DIST hardened-patches-4.5.7-2.extras.tar.bz2 1865376 SHA256 066621126965be10695a5f7625d1628ee24ef69d11a2198df5beaca6d0980e2f SHA512 1b0a6ce77f08e8b2820eae1b75ac12de7f0ed90c30b368332e2f5822a8fa15b2c2747babc973a92d1a34c31bedbffcb77c539e220ea05b2206a147e8e9ef0279 WHIRLPOOL 66167a50b5221727ac3ee6cb46bfbc2a64d4fa889ad303b47ec18902df6d2f42e291b1e05f387982dea6be8ca011d183cc6089eebf997bbe57b02af286a09f52
+DIST hardened-patches-4.5.7-3.extras.tar.bz2 1869378 SHA256 04a6ec042679470c20bd06c6cb1b6e884a2465417ce3af8cd1ed5b8d466b7b75 SHA512 fbf5a812a43621b9eee2cb63ca9c94ae0f1b07352d787ad7351191e370aaab5de983ad4be4dcd3f09065ec7067628f8da611eebf7b122521bc4d8f2cdd84e21c WHIRLPOOL 87a7d1db01a581fdfba87e2a956c4dd94b0a6bd3e3165a239ffa2a31a2bc9e6fe304893090a7fb12620ac8acb837da4a82f9b20d459b6b7335d12970d5a9ed6b
 DIST linux-4.3.tar.xz 86920812 SHA256 4a622cc84b8a3c38d39bc17195b0c064d2b46945dfde0dae18f77b120bc9f3ae SHA512 d25812043850530fdcfdb48523523ee980747f3c2c1266149330844dae2cba0d056d4ddd9c0f129f570f5d1f6df5c20385aec5f6a2e0755edc1e2f5f93e2c6bc WHIRLPOOL e3f131443acc14d4f67bbd3f4e1c57af3d822c41c85a112564d54667a591c8619dce42327fd8166d30a2d7adfaf433c2e2134d4995c91c08f65ac0cc2190f935
 DIST linux-4.4.tar.xz 87295988 SHA256 401d7c8fef594999a460d10c72c5a94e9c2e1022f16795ec51746b0d165418b2 SHA512 13c8459933a8b80608e226a1398e3d1848352ace84bcfb7e6a4a33cb230bbe1ab719d4b58e067283df91ce5311be6d2d595fc8c19e2ae6ecc652499415614b3e WHIRLPOOL 02abc203d867404b9934aaa4c1e5b5dcbb0b0021e91a03f3a7e7fd224eed106821d8b4949f32a590536db150e5a88c16fcde88538777a26d0c17900f0257b1bc
 DIST linux-4.5.tar.xz 88375040 SHA256 a40defb401e01b37d6b8c8ad5c1bbab665be6ac6310cdeed59950c96b31a519c SHA512 cb0d5f30baff37dfea40fbc1119a1482182f95858c883e019ee3f81055c8efbdb9dba7dfc02ebcc4216db38f03ece58688e69efc0fce1dade359af30bd5426de WHIRLPOOL 8faa0b02c5733fc45dbe61f82a7022e9246b9b1665f27541d4afa5d14c310b9dce7a8532dfac8273898edf8c6923654ee2fbcf2cec1ec2a220f4c9f926f2b333

diff --git a/sys-kernel/hardened-sources/hardened-sources-4.5.7-r2.ebuild b/sys-kernel/hardened-sources/hardened-sources-4.5.7-r2.ebuild
new file mode 100644
index 0000000..63bd126
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-4.5.7-r2.ebuild
@@ -0,0 +1,45 @@
+# Copyright 1999-2016 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Id$
+
+EAPI="5"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base"
+K_GENPATCHES_VER="9"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-3"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="
+	1500_XATTR_USER_PREFIX.patch
+	2900_dev-root-proc-mount-fix.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-3.1*"
+
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}