[gentoo-commits] dev/blueness:master commit in: sys-kernel/hardened-sources/

["Anthony G. Basile" <blueness@gentoo.org>]

commit:     eb8100a2f18afcd4fcf57e337960ce4f51f10d07
Author:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
AuthorDate: Sun Aug  7 15:14:06 2011 +0000
Commit:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
CommitDate: Sun Aug  7 15:14:06 2011 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=dev/blueness.git;a=commit;h=eb8100a2

sys-kernel/hardened-sources: testing patchset 20110806

(Portage version: 2.1.10.3/git/Linux x86_64, signed Manifest commit with key 0xD0455535)

---
 sys-kernel/hardened-sources/Manifest               |   18 ++++++-
 .../hardened-sources-2.6.32-r60.ebuild             |   48 ++++++++++++++++++++
 .../hardened-sources-2.6.39-r10.ebuild             |   48 ++++++++++++++++++++
 3 files changed, 111 insertions(+), 3 deletions(-)

diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index d379719..65af594 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -1,12 +1,24 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA256
 
+DIST deblob-2.6.32 84094 RMD160 394f46ec5b869638a7bc2e87beb118167c9bd6cb SHA1 1a2a1efb72126609d9e3b9be99ae5be2751efd06 SHA256 de625f0bd221c9c38d4453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d
+DIST deblob-check-2.6.32 247608 RMD160 840bf8a229ea79810519eee6241edb85b78a6562 SHA1 d45a24eb16e5ac956c0fcddbc1ac4d67e326c7b8 SHA256 da1aecdf3ab7f1207b90642d303e52262ccc2ed9e49739b729512b88950d17f3
+DIST genpatches-2.6.32-40.base.tar.bz2 954168 RMD160 09a4ab92cd4a0bb6200a386182d60bf94fcea5dc SHA1 4b937d27ec83398efb5af8a71a8d2b893cfd56fc SHA256 63caf952fa4351813db7c280751e71e635aa0df259ccfd153ecda5ad06960cbe
+DIST genpatches-2.6.32-40.extras.tar.bz2 24897 RMD160 fac4ce9c15953ad811b2c500b0145f2eebea5e2d SHA1 8f9cdf4bc06dc5e806698d93c002798faa53fda1 SHA256 309841a94e96d7076bca7fb547caae9786e24258e032da242f64768a413ddbf0
+DIST genpatches-2.6.39-6.base.tar.bz2 129313 RMD160 020469bd8d91d7159b2a44782e64eb4e23a307c6 SHA1 46a3e1569d6f58f5f34e5e54d0947896f842d222 SHA256 fe605a0bc8a1206db73803692179413a605c98415bc35bdb16496afffe241b22
+DIST genpatches-2.6.39-6.extras.tar.bz2 17176 RMD160 daae29a8c922c4cce338ee7ad2e7ea6b3fb7bed5 SHA1 382e3800895b1b56bc7d073808576a0060165bc2 SHA256 6d2bbf1bd936088e10aecaa2f7d1050de72a21a8e4a05a8269caeaec8e8b3f09
+DIST hardened-patches-2.6.32-63.extras.tar.bz2 479640 RMD160 3a0d946c2cf8e8c9846d5fc183677fcb76a37c94 SHA1 889dd8c36f1b241882b3c586431d96cbf19a6b55 SHA256 ff48e09197aa7e2bfbc40aab64f105b8f68fcb91b878f4c9bc685f49e5ee2106
+DIST hardened-patches-2.6.39-11.extras.tar.bz2 444223 RMD160 e33852e4b0e5344b903776170ad0b08f3ebdcacc SHA1 daf476bdbe68df038506d7eae2def0a3c955fa36 SHA256 c30764d016b5a99983903b219dddd72b7f939a69ad21eede634c1b2fb2cc7ae1
+DIST linux-2.6.32.tar.bz2 64424138 RMD160 b93742cbaf8174f2200d2dbef0d47a26c618039c SHA1 410b4fc818023bfef60064e973ff0ab46d3bfb19 SHA256 5099786d80b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e
+DIST linux-2.6.39.tar.bz2 76096559 RMD160 feddc516bc15e78f12f611ff184d38baa4eac4ee SHA1 68518112821e55f4ac1df64f2e0e809cedfcc5ef SHA256 584d17f2a3ee18a9501d7ff36907639e538cfdba4529978b8550c461d45c61f6
+EBUILD hardened-sources-2.6.32-r60.ebuild 1758 RMD160 2e403a2c9d43ba3095c248baeffbc912a4ecf74e SHA1 d3e5ad7d1374a0fbd8707681c5d6fe08ded06c02 SHA256 379ddb184b002623050195beae3b6887dd364599d99076fe3dda12d1905686f4
+EBUILD hardened-sources-2.6.39-r10.ebuild 1756 RMD160 0ec7128f41fe65e4c94f63551967ff551d7ffcd5 SHA1 42c0a6d03a8c9aa0e43acfe1e8939dffcc636163 SHA256 913faa152ebbc27b7efced9d30ac1516a61f85d3b5b7001df046b1e25fb254bd
 MISC ChangeLog 1508 RMD160 60f5fac174eb4ae7f95ad7f6e93e804b2a0a153c SHA1 42a9af7f472d8adceb6ef45631d2e111efc3053b SHA256 ddc82ff33a4af0f0ecf2fc032e5a1de38a7520c40a403b1add01fd5f3d139f11
 MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SHA1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8fcfd351f2f39ed63da68af3a5751fc2058d0d03813
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.17 (GNU/Linux)
 
-iEYEAREIAAYFAk49++gACgkQl5yvQNBFVTWO9QCZAQXTHXrBYqM2LhIq7cFMnODd
-ErUAoJxAmuyCD/KtnjBCyiZshevKmwPK
-=BEto
+iEYEAREIAAYFAk4+q74ACgkQl5yvQNBFVTXbqACePAgeitZrVcFENEZUj9iYZqvU
+JEAAoJGhhCVvDY4y3brFEfFandJqgHSi
+=lIEI
 -----END PGP SIGNATURE-----

diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r60.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r60.ebuild
new file mode 100644
index 0000000..e695da3
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r60.ebuild
@@ -0,0 +1,48 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r59.ebuild,v 1.1 2011/08/07 02:38:26 blueness Exp $
+
+EAPI="4"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="40"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-63"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE=""
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.2.2*"
+
+	ewarn
+	ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
+	ewarn "[server], [workstation], and [virtualization]."
+	ewarn
+	ewarn "Those who intend to use one of these predefined grsecurity levels"
+	ewarn "should read the help associated with the level.  Users importing a"
+	ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
+	ewarn "should review their selected grsecurity/PaX options carefully."
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}

diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.39-r10.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.39-r10.ebuild
new file mode 100644
index 0000000..8d1241e
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.39-r10.ebuild
@@ -0,0 +1,48 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.39-r9.ebuild,v 1.1 2011/08/07 02:41:37 blueness Exp $
+
+EAPI="4"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="6"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-11"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE=""
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.2.2*"
+
+	ewarn
+	ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
+	ewarn "[server], [workstation], and [virtualization]."
+	ewarn
+	ewarn "Those who intend to use one of these predefined grsecurity levels"
+	ewarn "should read the help associated with the level.  Users importing a"
+	ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
+	ewarn "should review their selected grsecurity/PaX options carefully."
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}