Based on 2.6.32.59 + genpatches-2.6.32-48 + grsecurity-2.9-2.6.32.59-201206042134

Package-Manager: portage-2.1.10.49/cvs/Linux x86_64

3 files changed, 65 insertions, 5 deletions

diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
index 3d4f20235378..56ca47315e63 100644
--- a/sys-kernel/hardened-sources/ChangeLog
+++ b/sys-kernel/hardened-sources/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for sys-kernel/hardened-sources
 # Copyright 1999-2012 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.596 2012/06/02 23:28:04 blueness Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.597 2012/06/07 12:01:20 blueness Exp $
+
+*hardened-sources-2.6.32-r108 (07 Jun 2012)
+
+  07 Jun 2012; Anthony G. Basile <blueness@gentoo.org>
+  +hardened-sources-2.6.32-r108.ebuild:
+  Based on 2.6.32.59 + genpatches-2.6.32-48 +
+  grsecurity-2.9-2.6.32.59-201206042134
 
   02 Jun 2012; Anthony G. Basile <blueness@gentoo.org>
   -hardened-sources-2.6.32-r106.ebuild, -hardened-sources-3.2.18.ebuild,
diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index f9135a7e850e..64feb5018326 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -40,6 +40,7 @@ DIST genpatches-3.3-8.extras.tar.bz2 17205 RMD160 eb3141c66ffb16282c2e2ef0fb5227
 DIST hardened-patches-2.6.32-106.extras.tar.bz2 735391 RMD160 00107a5ab1321c84a524bb7f372233123493b089 SHA1 447f7e60ef6c9ed241ad41f81bc8b69afa16d202 SHA256 0acdebfd11c765240c5b004aeb7a3866d095f0ce018fc7ed5ece99009eb328a5
 DIST hardened-patches-2.6.32-107.extras.tar.bz2 731133 RMD160 f4d8bcd7741e621cc36d2d311c2ab472e53be79c SHA1 6aad4117f669b0e99f265cda4b95c917d68867da SHA256 34f1edddad1e374093e841c68a453ac9bdfb08c24ef51eeb5ff56aa1da9c37c0
 DIST hardened-patches-2.6.32-109.extras.tar.bz2 740096 RMD160 ca2cc47b3e7b3b1631e34477933e0a85d3c924e7 SHA1 354f3b076a6544f69166eb929dec4823dba9fd2d SHA256 33edcdb802af8643a7b75cdca0ed53f92ae8d022bd4c515b756cd34cdc020db3
+DIST hardened-patches-2.6.32-110.extras.tar.bz2 737790 RMD160 85dfea7298b080f95e84fceac2b6fb3512fd5fbc SHA1 60be0cc489c0e78b840ae83363b470b9da8c32e3 SHA256 8673caddeb61d7c22990e8019e395d52ce7a3294df5ff3dace7f0fa0ddfd3bc9
 DIST hardened-patches-2.6.32-12.extras.tar.bz2 338946 RMD160 ce283b495ee2f009d36b94aca840f6519fbe9bb6 SHA1 56da715d64c6e2c50e292b19d27006d82118a337 SHA256 bfa5e7d9653b793b2bd88c40b8b52464fe39e1e098f1c5bc95d8476247fd288f
 DIST hardened-patches-2.6.32-45.extras.tar.bz2 378165 RMD160 f3a607fe2ee0afa3709524b29a2bf8cc89b82e31 SHA1 aff7340024bd53ae2237721dba1c489419da1f8f SHA256 04dd316b257644c104c7660a649abcd48a11fff59e7773988ace8e0da49b930c
 DIST hardened-patches-2.6.32-83.extras.tar.bz2 538575 RMD160 541c5122ab122ca7466deaf2431fcafb3135b2c2 SHA1 24173b7178a077a7b8c0c979d3742efb07d2bc9a SHA256 8640f3aaed869c3a88928f12ccadb6314e240f61f29e68de74b572735f2e313d
@@ -67,6 +68,7 @@ DIST linux-3.3.tar.bz2 78963640 RMD160 2bdb25e5af4549a43d8b202508b85837005146e5
 EBUILD hardened-sources-2.6.32-r104.ebuild 1818 RMD160 b6805b6f6e6d8ba21b7cf2e901d191732e55a99d SHA1 98f4bedb5fb04e8541c1920f056af0a7f0ba5eb6 SHA256 e4ee7cf4cf55f368928c94a3ffa3fadeb1766d119eedbb3290446c65b2319c7d
 EBUILD hardened-sources-2.6.32-r105.ebuild 1818 RMD160 54a914c00b89efeb69c54e66d844036f676297db SHA1 d522245233097d52eb873cfb1b5bea5d7c9f5651 SHA256 c85d8f6a4f3faef1cba2c238cd3906dd27f8bd069881203c950924d264a9cf49
 EBUILD hardened-sources-2.6.32-r107.ebuild 1818 RMD160 b9b4b36eb4fa7f5c898863a9b5c1b05f7ec961c3 SHA1 8df3e919af93235f815fa5a7d58a7666c8b6ff45 SHA256 0cf22365e10d7af6c83a4cf0756e06701c0c11294c8130f0c86e2df5ffa6c10e
+EBUILD hardened-sources-2.6.32-r108.ebuild 1818 RMD160 21f22b61e6fa0b5b8162c0db61aaf39c97c916ee SHA1 105ef77fc104171813731e2fb8ba942001a2fbba SHA256 7d280e9bba9684e33e8c5c5cc9f86d098e056cb2724fa2ff80e584d0da639a37
 EBUILD hardened-sources-2.6.32-r42.ebuild 1745 RMD160 2b6a5b84866cdf15f8ee145f3fe5e8e25639ebcf SHA1 cf663e0dcf00fd4be80611f43e17d3b800082122 SHA256 cbf6eef840fae05a335aa0dcb434c0056ca7676b120ffc8cbabdf443e97cd7a6
 EBUILD hardened-sources-2.6.32-r81.ebuild 1838 RMD160 179b4973aa86faaed83feda8bdff800ee3f1c2dd SHA1 2f4deafbd1bce9a7c6dbdca2c47bfded2dcebc95 SHA256 b2a2495ece64164c141e1096cd92d216ab4a14f0ced01ed0b2698330c63aecfc
 EBUILD hardened-sources-2.6.32-r9.ebuild 1860 RMD160 18b591c7337e1aa801e8676ff80292b988ed332e SHA1 46a40ea2830743e0d6acc84f465c40ad3ec11f4f SHA256 9a3a5de2c2a5ee692202bfa7bdad128bd916b4aebc83ae816954e1795116b159
@@ -85,13 +87,13 @@ EBUILD hardened-sources-3.2.2-r1.ebuild 1845 RMD160 1c3369d5e8099eaeb91368148a0f
 EBUILD hardened-sources-3.3.6-r1.ebuild 1842 RMD160 d7ce091e74c7588a13766698104c82117d085396 SHA1 5210bd276959d7fd7ef4ba4f3ffc29d18404f1be SHA256 190aa0544fbd8e7a5fbc52ca745b78379e22d6f223d47b4981e94e92a8e18f2a
 EBUILD hardened-sources-3.3.6.ebuild 1839 RMD160 478bcfa5765599334122d332eeecefba5bdab58c SHA1 d7da9dafeddd6632b2e1f32415c8ef1dfa035c79 SHA256 d9e852b3282463a09679d7d4be625a0fc5e623b8effa7386c870d9c2c615c076
 EBUILD hardened-sources-3.3.7-r1.ebuild 1842 RMD160 95f25d6e4e416b7ed2b68a60cefa4726cf8b547a SHA1 024d757b15551345398d54a7f5f6be6624a5f2ca SHA256 f7dee540e890ce824ade4e548cdf3346f15291ea4b01a994308c1dba1d4775ff
-MISC ChangeLog 17587 RMD160 6e047d361472e4686829dd49781af568b6d53f7a SHA1 d5f85cb2389d2ed4101f24216d60ba1ff530c6ae SHA256 bdd32f3ae47658179a2303ef56253a94f09f58e7db656b8a827599831f62f738
+MISC ChangeLog 17814 RMD160 24d85e5be4d11bb46d572d38502e6fb73e8f9055 SHA1 49a0e67a7609425a9e7eac4bbbe50bf4bc680f91 SHA256 eba186e60927f51c3aace6f105b9bd78c073262e336ed444064dcc30f7fd4d48
 MISC ChangeLog-2011 112069 RMD160 2a385edf0499f6dc30581100b66f641fb64f77ef SHA1 af33094b92426b6abd963227d817db249ccbe877 SHA256 39bac69a08709be5b79c6e711fd94aac7e53191b76fef64f9b3d09f7b5ac0f82
 MISC metadata.xml 651 RMD160 bd2f856b7c5aea29652610491cd60135e1e9b9f1 SHA1 1741d5fc80ad8f934fa7ad177b4662d1993d8584 SHA256 614ce0d6e8cfcf0b4dbf344b2758f25375afdaadccbfa4f68c3f8f058218f0a6
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.17 (GNU/Linux)
 
-iEYEAREIAAYFAk/KoZEACgkQl5yvQNBFVTUpFACgmgb05tw/gqC2RiAE6KAZ+bFv
-vQQAn0o5lNiS8u8u+6NBlpEF9CrO87k0
-=gmjd
+iEYEAREIAAYFAk/QmBoACgkQl5yvQNBFVTXthQCfS4r2C9/LwuFFdO79wd3F29Dc
+xgYAn0dGb+b1l8+xC2Kge+zc9N7u/PAM
+=Gm7+
 -----END PGP SIGNATURE-----
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r108.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r108.ebuild
new file mode 100644
index 000000000000..02e30fa87202
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r108.ebuild
@@ -0,0 +1,51 @@
+# Copyright 1999-2012 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r108.ebuild,v 1.1 2012/06/07 12:01:20 blueness Exp $
+
+EAPI="4"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="48"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-110"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.9*"
+
+	ewarn
+	ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
+	ewarn "[server], [workstation], and [virtualization]."
+	ewarn
+	ewarn "Those who intend to use one of these predefined grsecurity levels"
+	ewarn "should read the help associated with the level.  Users importing a"
+	ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
+	ewarn "should review their selected grsecurity/PaX options carefully."
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}