From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <gentoo-commits+bounces-943604-garchives=archives.gentoo.org@lists.gentoo.org> Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 6D8F0139694 for <garchives@archives.gentoo.org>; Tue, 11 Apr 2017 00:19:38 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 9CABF21C0A0; Tue, 11 Apr 2017 00:19:37 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 6241721C0A0 for <gentoo-commits@lists.gentoo.org>; Tue, 11 Apr 2017 00:19:37 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 34340341586 for <gentoo-commits@lists.gentoo.org>; Tue, 11 Apr 2017 00:19:36 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id E7A037410 for <gentoo-commits@lists.gentoo.org>; Tue, 11 Apr 2017 00:19:34 +0000 (UTC) From: "Anthony G. Basile" <blueness@gentoo.org> To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Anthony G. Basile" <blueness@gentoo.org> Message-ID: <1491869969.b144e7fc953aa9f80aa38bf58df55ae8c0ececec.blueness@gentoo> Subject: [gentoo-commits] repo/gentoo:master commit in: sys-kernel/hardened-sources/ X-VCS-Repository: repo/gentoo X-VCS-Files: sys-kernel/hardened-sources/Manifest sys-kernel/hardened-sources/hardened-sources-4.9.21.ebuild X-VCS-Directories: sys-kernel/hardened-sources/ X-VCS-Committer: blueness X-VCS-Committer-Name: Anthony G. Basile X-VCS-Revision: b144e7fc953aa9f80aa38bf58df55ae8c0ececec X-VCS-Branch: master Date: Tue, 11 Apr 2017 00:19:34 +0000 (UTC) Precedence: bulk List-Post: <mailto:gentoo-commits@lists.gentoo.org> List-Help: <mailto:gentoo-commits+help@lists.gentoo.org> List-Unsubscribe: <mailto:gentoo-commits+unsubscribe@lists.gentoo.org> List-Subscribe: <mailto:gentoo-commits+subscribe@lists.gentoo.org> List-Id: Gentoo Linux mail <gentoo-commits.gentoo.org> X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 698d3269-007f-444e-bc19-a1cb9d409008 X-Archives-Hash: aa8752812df249fe407a87379e507ec2 commit: b144e7fc953aa9f80aa38bf58df55ae8c0ececec Author: Anthony G. Basile <blueness <AT> gentoo <DOT> org> AuthorDate: Tue Apr 11 00:19:13 2017 +0000 Commit: Anthony G. Basile <blueness <AT> gentoo <DOT> org> CommitDate: Tue Apr 11 00:19:29 2017 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b144e7fc sys-kernel/hardened-sources: version bump to 4.9.21 vanilla-4.9 + genpatches-4.9-21 + grsecurity-3.1-4.9.21-201704091948 Package-Manager: Portage-2.3.3, Repoman-2.3.1 sys-kernel/hardened-sources/Manifest | 1 + .../hardened-sources-4.9.21.ebuild | 45 ++++++++++++++++++++++ 2 files changed, 46 insertions(+) diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest index 93157bfe831..e3802a74221 100644 --- a/sys-kernel/hardened-sources/Manifest +++ b/sys-kernel/hardened-sources/Manifest @@ -25,6 +25,7 @@ DIST hardened-patches-4.9.15-1.extras.tar.bz2 1996486 SHA256 06aaeb0a06a39475b3b DIST hardened-patches-4.9.16-1.extras.tar.bz2 1932414 SHA256 fbefbd34b007d4705d06a8e5f0223fd1777dab2a0ec754ae0f2e046fc9757a0d SHA512 734c9f2790b0ef6a202e2d35538874905a3eebdf41e144831207153991f844b255adc48dd611dfb2d3ecceececb9016057464d6c7ea53bf7e5b22aa7e216ff74 WHIRLPOOL 6e2ad6fbe64cef7c6eeb47f2ffdd89a1818ba58d407ca140f21503e3b41dbe150d6d596e2ce14501622af03da73205b429f0a0b70000a813c37961fd04fe558b DIST hardened-patches-4.9.18-1.extras.tar.bz2 1985554 SHA256 6289173e53369bdb07df0cf831c8a079c6328e471c2d975eaf1dd9474e42d38f SHA512 96d15015d94f67d7a7ae29aa6af1829d37d76f85eaac39fdb7f07511f471151f668e217841454c94dae8473b61bc2b2d9c65de66caae7016c5454e6ee96bef69 WHIRLPOOL cf75bbd04005c5b805cccb4df01c0b09cecb0b78618e1e79b6e9bbebfcdb5dfb842f628e19e63cf40bd7891e32ba0c81d2fed52f3d8ec44255f8f8072ff7f97f DIST hardened-patches-4.9.20-1.extras.tar.bz2 1920028 SHA256 b2df242f95ea4b54cc90f3bc76d368e5b2c200d4d3cb727475bedac8fea85599 SHA512 cf333f2af09e4942910070313aff6bfd68244f1e2b870235ff179eee0145ecd9064a60dfd6858c8c46e7c3e1379d02f1416a468d703a753fc99447eb8848148e WHIRLPOOL f95710d3af5c9975faac7fb3aa8a43f1f8c37f14baeb74e4098a41e2a9d03607763e1e7e501f124fb8d0d26c3305580dceb9bcf0ac7829c181271d84c0092fa1 +DIST hardened-patches-4.9.21-1.extras.tar.bz2 1965869 SHA256 5ece74a315131b2e3935838428bfefb9b4aeca320e50b58c79bd2c2b1d218387 SHA512 0184dcd1d68c3b0ab8a3c3f385530bf726a9d2647399d72d2eaadfb0cd8c61284b0c3a007c2cfe704b1fd20fff080736bea4850729530c55eb0135624ae47cf4 WHIRLPOOL d5596a493edc166830e22434df82d0dedc822ba9af54737baa8b81259594c2db461ce0085eb5af563c0d6b98e2620bd59bc90bb48453bae644da7b2ab33fed81 DIST linux-4.4.tar.xz 87295988 SHA256 401d7c8fef594999a460d10c72c5a94e9c2e1022f16795ec51746b0d165418b2 SHA512 13c8459933a8b80608e226a1398e3d1848352ace84bcfb7e6a4a33cb230bbe1ab719d4b58e067283df91ce5311be6d2d595fc8c19e2ae6ecc652499415614b3e WHIRLPOOL 02abc203d867404b9934aaa4c1e5b5dcbb0b0021e91a03f3a7e7fd224eed106821d8b4949f32a590536db150e5a88c16fcde88538777a26d0c17900f0257b1bc DIST linux-4.7.tar.xz 90412100 SHA256 5190c3d1209aeda04168145bf50569dc0984f80467159b1dc50ad731e3285f10 SHA512 e8c02583e17e4fc4214fef694825fcb78c898266f1624deb1cdf56ab5c5fdfa669c5221122a7cf0d502ed6f921ff3797634acd9d294d29e98e3faa8a21920185 WHIRLPOOL e968c89ce714c8d918db6074dabac4b0200c57ff111260313cf5798eeefb8b5b10c1509b64e2ee611a78e81075c588a473b67f9802609b2fef9ebb87ae514d98 DIST linux-4.8.tar.xz 91966856 SHA256 3e9150065f193d3d94bcf46a1fe9f033c7ef7122ab71d75a7fb5a2f0c9a7e11a SHA512 a48a065f21e1c7c4de4cf8ca47b8b8d9a70f86b64e7cfa6e01be490f78895745b9c8790734b1d22182cf1f930fb87eaaa84e62ec8cc1f64ac4be9b949e7c0358 WHIRLPOOL 3888c8c07db0c069f827245d4d7306087f78f7d03e8240eb1fcd13622cd5dbe1c17cd8ed7dc11513f77f3efd5dbd84e2b48e82bdb9b9bfd2242fd62ae32812d5 diff --git a/sys-kernel/hardened-sources/hardened-sources-4.9.21.ebuild b/sys-kernel/hardened-sources/hardened-sources-4.9.21.ebuild new file mode 100644 index 00000000000..76ebd9467fd --- /dev/null +++ b/sys-kernel/hardened-sources/hardened-sources-4.9.21.ebuild @@ -0,0 +1,45 @@ +# Copyright 1999-2017 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 + +EAPI="5" + +ETYPE="sources" +K_WANT_GENPATCHES="base" +K_GENPATCHES_VER="21" +K_DEBLOB_AVAILABLE="1" + +inherit kernel-2 +detect_version + +HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-1" +HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2" +SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}" + +UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2" +UNIPATCH_EXCLUDE=" + 1500_XATTR_USER_PREFIX.patch + 1520_CVE-2017-6074-dccp-skb-freeing-fix.patch + 2900_dev-root-proc-mount-fix.patch" + +DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})" +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/" +IUSE="deblob" + +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86" + +RDEPEND=">=sys-devel/gcc-4.5" + +pkg_postinst() { + kernel-2_pkg_postinst + + local GRADM_COMPAT="sys-apps/gradm-3.1*" + + ewarn + ewarn "Users of grsecurity's RBAC system must ensure they are using" + ewarn "${GRADM_COMPAT}, which is compatible with ${PF}." + ewarn "It is strongly recommended that the following command is issued" + ewarn "prior to booting a ${PF} kernel for the first time:" + ewarn + ewarn "emerge -na =${GRADM_COMPAT}" + ewarn +}