Based on 2.6.32.57 + genpatches-2.6.32-48 + grsecurity-2.9-2.6.32.57-201203022148

Package-Manager: portage-2.1.10.44/cvs/Linux x86_64

3 files changed, 66 insertions, 5 deletions

diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
index 9440810fb09a..284611ea4da2 100644
--- a/sys-kernel/hardened-sources/ChangeLog
+++ b/sys-kernel/hardened-sources/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for sys-kernel/hardened-sources
 # Copyright 1999-2012 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.545 2012/03/04 16:08:06 blueness Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.546 2012/03/05 01:53:22 blueness Exp $
+
+*hardened-sources-2.6.32-r93 (05 Mar 2012)
+
+  05 Mar 2012; Anthony G. Basile <blueness@gentoo.org>
+  +hardened-sources-2.6.32-r93.ebuild:
+  Based on 2.6.32.57 + genpatches-2.6.32-48 +
+  grsecurity-2.9-2.6.32.57-201203022148
 
   04 Mar 2012; Anthony G. Basile <blueness@gentoo.org>
   hardened-sources-2.6.32-r92.ebuild, hardened-sources-3.2.7.ebuild:
diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index f46def162355..4ccf7852fa69 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -60,6 +60,7 @@ DIST hardened-patches-2.6.32-83.extras.tar.bz2 538575 RMD160 541c5122ab122ca7466
 DIST hardened-patches-2.6.32-92.extras.tar.bz2 570498 RMD160 c7067841ce61058bc454f64305cc64f10b332090 SHA1 46a1d2c6427aaa0e0cadeae640d65938e09a45e0 SHA256 0685901f8a6b07923066eb05abbcccea83f329d9a8058037bbc4d692418da6bb
 DIST hardened-patches-2.6.32-93.extras.tar.bz2 576426 RMD160 acb06dfcb2959b5525d04d4c25c110c89d4ad5ca SHA1 5d46631a36519a2f5d3e5df9d91f36e455692254 SHA256 486e0ca547f28110716d6e272fedcfb72180f652ba5526528bd60fe57b97e15b
 DIST hardened-patches-2.6.32-94.extras.tar.bz2 578382 RMD160 dae3c13eb90cabf00f7915776097714869689fb3 SHA1 bbd61d39373acceacf2541e3446c4c45b99880b2 SHA256 de8d1114613c5ab37d1408d7b65c32d38ab4765f4bab1ae15bf4cd2fb4ccaa2b
+DIST hardened-patches-2.6.32-95.extras.tar.bz2 582421 RMD160 86d7ec4c0aedfd0cf4d474bab8b38eede6f408a8 SHA1 e79c3abe1bfbc3fdd1db803b41fed4f204b772ec SHA256 86bccb8047eac3c7cf50d3242fc8f516a2801a7526444c873388b38229f9e41f
 DIST hardened-patches-2.6.36-10.extras.tar.bz2 363448 RMD160 a656acbca00a3f238f83a14566dbeade33c69092 SHA1 c53dd6aae4c779cb135a612c416f2f623f9a9ce5 SHA256 e818e8bd2066f32aa209309aa17a482e7a006ae748d850860b900226720ce8dc
 DIST hardened-patches-2.6.37-8.extras.tar.bz2 367417 RMD160 d2a3fa214047d8fd232557f5bc6383ab01132d1f SHA1 f8a39d414d63dfcaa408eed1d9f2d5ff4fd0f72e SHA256 2593fcfa4c8363bbf9ee95bd7fa1befb15ee830262664a163da58a975548682d
 DIST hardened-patches-2.6.38-7.extras.tar.bz2 442689 RMD160 bd661205cd9f5976a702d55ff0aa0399c1cd8fcc SHA1 f1844f17fcb61a4fd569b45cddaf8a9869f932ee SHA256 a42f0c5d38621f92302a5250e59881b86858173f775a1d0a2db35bcd07066d4b
@@ -90,6 +91,7 @@ EBUILD hardened-sources-2.6.32-r9.ebuild 1860 RMD160 18b591c7337e1aa801e8676ff80
 EBUILD hardened-sources-2.6.32-r90.ebuild 1889 RMD160 0d5655b15c320d3f69445f9ac4b6cba9b12e03e0 SHA1 f61da8e0349c29d72ad792dac2d68584725e5f1f SHA256 3410026dbcb21ee04f6d6a3ec53779dc0639bb2517f4525fdad35393dfc91bad
 EBUILD hardened-sources-2.6.32-r91.ebuild 1891 RMD160 b7b05ae1881b177aac40753229888b7608678dbe SHA1 9d3d09958b230a30c3af9dfe59365e1ab8a38074 SHA256 3db1a67f5ca817e158b74a917eed73c1b114ce75e65020d7050054badc129ec4
 EBUILD hardened-sources-2.6.32-r92.ebuild 1889 RMD160 e6de5b1f2fd135bf10dfd9feed871a8a3188bad3 SHA1 99c9f20d8688160be11a51135c39db1076619c2b SHA256 2400f988b6dec3ee9df986c72fa253431cac6a72159dd0808b979babc43b8dc4
+EBUILD hardened-sources-2.6.32-r93.ebuild 1889 RMD160 afadcd1848dc60e4a5da29c983e1162849233b6c SHA1 b82f6c78f213d6633e05fdb03480250944172ee4 SHA256 30eff162146461347b21b9b0192b093bd7bb1f710e97c891ee6d47221ca99c17
 EBUILD hardened-sources-2.6.36-r9.ebuild 1709 RMD160 861d48e196f30883df2cb425c57c27005c41f95c SHA1 d16523b53f11420d2b4a1789268d5fdf5662384e SHA256 2d5f1988c32187af6a2b34f59f17429b2a124ca11bbeb696efa2acbbc10d32ad
 EBUILD hardened-sources-2.6.37-r7.ebuild 1743 RMD160 f7b90bc6c4dc00022faa518d8eddd10fa34d1168 SHA1 a9b3471ea12038717a8475a32d2bb674b24bc854 SHA256 dd87762b3dddf59831d7ab221e8a948980f164bcb8317b42718dc246cf9ab386
 EBUILD hardened-sources-2.6.38-r6.ebuild 1753 RMD160 64f428d25d416328ff929711337f365279eaaaca SHA1 f4b6c39b54628dd86f046b21043d748bac0caf0e SHA256 aede06fc72c70e1f0aedeef92ca83b11e69dae10e282f5fd5f8ad36fd0bc5ecb
@@ -103,13 +105,13 @@ EBUILD hardened-sources-3.2.2-r1.ebuild 1845 RMD160 1c3369d5e8099eaeb91368148a0f
 EBUILD hardened-sources-3.2.5.ebuild 1884 RMD160 cafb298058d52a68d5fd279f991eca991d000e54 SHA1 09136bcb00beac13582587896e8526a73b405f30 SHA256 4b609da41b6ec8e11d8f2db0a79ebbaa84a46005f4191c774a5e90099d3a57eb
 EBUILD hardened-sources-3.2.6.ebuild 1884 RMD160 5906cff8cebc6efe6cde27821d72c0f6ede11169 SHA1 5d5e0a516ca6886d181bfc514b05949b49ba94a7 SHA256 4b77a01f100e38b1f70ae19bb76a38db0a7e8707a2a0dc322286d7c0826c54c9
 EBUILD hardened-sources-3.2.7.ebuild 1882 RMD160 0ee445e5267f8c09192e1f1a727dc721963fd707 SHA1 10e7294322f74215a54bdda407b612dae6b495aa SHA256 60b21e2da8c64e33e0f01f107e90c9eac719bfc0f708443906e333475d45eb1c
-MISC ChangeLog 6315 RMD160 ec8552791261306079313936201ac67c11a9ca2a SHA1 d9de45b9b9e6de3c4f4fb3e6a01ead8ed6fba940 SHA256 21f136307dbcd967d8fa41447934a8d2fbfcdb8a7a89a5baffe20c06fac58c64
+MISC ChangeLog 6540 RMD160 af6060d75e3534fd299fd97f40e39df2a8ff74b1 SHA1 ce551ec4907f1ca055f19aba42ab115345c8b441 SHA256 677d6f741463a6067ba28d75c77124cf89b40fa2f03953ab680a86d5f325e980
 MISC ChangeLog-2011 112069 RMD160 2a385edf0499f6dc30581100b66f641fb64f77ef SHA1 af33094b92426b6abd963227d817db249ccbe877 SHA256 39bac69a08709be5b79c6e711fd94aac7e53191b76fef64f9b3d09f7b5ac0f82
 MISC metadata.xml 651 RMD160 bd2f856b7c5aea29652610491cd60135e1e9b9f1 SHA1 1741d5fc80ad8f934fa7ad177b4662d1993d8584 SHA256 614ce0d6e8cfcf0b4dbf344b2758f25375afdaadccbfa4f68c3f8f058218f0a6
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.17 (GNU/Linux)
 
-iEYEAREIAAYFAk9Tk3AACgkQl5yvQNBFVTWCdQCfRVHv5txkeN6+fjZHJMnkygdH
-e0oAnjvt+o9pScOb1a7mjT0lj4U8DfW+
-=7qQy
+iEYEAREIAAYFAk9UHJ0ACgkQl5yvQNBFVTUNIgCfaaskcWcy4ijNdibnwZMwrXRL
+3kAAoJKebIE6YjI95f6yCnoq8rF3y0Ya
+=Zrgs
 -----END PGP SIGNATURE-----
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r93.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r93.ebuild
new file mode 100644
index 000000000000..9b3ee29327da
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r93.ebuild
@@ -0,0 +1,52 @@
+# Copyright 1999-2012 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r93.ebuild,v 1.1 2012/03/05 01:53:22 blueness Exp $
+
+EAPI="4"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="48"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-95"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+! use xtpax && UNIPATCH_EXCLUDE+=" 4425_grsec_enable_xtpax.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob -xtpax"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.9*"
+
+	ewarn
+	ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
+	ewarn "[server], [workstation], and [virtualization]."
+	ewarn
+	ewarn "Those who intend to use one of these predefined grsecurity levels"
+	ewarn "should read the help associated with the level.  Users importing a"
+	ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
+	ewarn "should review their selected grsecurity/PaX options carefully."
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}