Held kernel at 2.6.32.15 and updated Grsec/PaX to 2.2.0-2.6.32.15-201006192153

3 files changed, 61 insertions, 1 deletions

diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
index 932cc38..a6dc4b6 100644
--- a/sys-kernel/hardened-sources/ChangeLog
+++ b/sys-kernel/hardened-sources/ChangeLog
@@ -2,6 +2,13 @@
 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
 # $Header: $
 
+*hardened-sources-2.6.32-r10 (25 Jun 2010)
+
+  25 Jun 2010; Anthony G. Basile <basile@opensource.dyc.edu>
+  +hardened-sources-2.6.32-r10.ebuild:
+  Kept kernel at 2.6.32.15 and updated Grsec/PaX to
+  2.2.0-2.6.32.15-201006192153
+
 *hardened-sources-2.6.32-r9 (10 Jun 2010)
 
   10 Jun 2010; Anthony G. Basile <basile@opensource.dyc.edu>
diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index 7b30f01..63f7821 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -5,10 +5,12 @@ DIST genpatches-2.6.32-13.extras.tar.bz2 24934 RMD160 e3e1d60fb45a3e3c818ddda36b
 DIST genpatches-2.6.33-3.base.tar.bz2 135726 RMD160 3e32b98bdc22141ec4262edd1735dedfd1b6e719 SHA1 4d5e95972b3afc41c1d102bf75d1b22edacc11ba SHA256 c1d29084f715c1c30fcbb64a29c8cee076cf29286cf0ad10c9df51eb136b4bb6
 DIST genpatches-2.6.33-3.extras.tar.bz2 23522 RMD160 579e83343a0f6bae8d543abf1d3a52cabd2c8aa8 SHA1 c9023272ea6805878b906affa4dedb50565343f1 SHA256 a301f823a11cbaae5b81092b60d92a9d9b53e8522167713428e74db2b4c629c1
 DIST hardened-patches-2.6.32-12.extras.tar.bz2 338946 RMD160 ce283b495ee2f009d36b94aca840f6519fbe9bb6 SHA1 56da715d64c6e2c50e292b19d27006d82118a337 SHA256 bfa5e7d9653b793b2bd88c40b8b52464fe39e1e098f1c5bc95d8476247fd288f
+DIST hardened-patches-2.6.32-13.extras.tar.bz2 340034 RMD160 0b265f033058b864333798b73d9b1cf5d939d323 SHA1 a1fdf7b83045a3d9562a00c5f56e7aad8d74d46a SHA256 28b08cbc5feffa693dbf0ff3ced8a6e0ab9b68d439ab9bcf8da19e1eaefd19c7
 DIST hardened-patches-2.6.33-3.extras.tar.bz2 334588 RMD160 41678ce0733aeceb857f63fba2432faef392eb8f SHA1 2810c9b17845eef18e1f91c4a4ff0b549ea548d2 SHA256 2c73d058e83c7bf7a5f28f01797d235232846abb8b638e15ca75a0401410870a
 DIST linux-2.6.32.tar.bz2 64424138 RMD160 b93742cbaf8174f2200d2dbef0d47a26c618039c SHA1 410b4fc818023bfef60064e973ff0ab46d3bfb19 SHA256 5099786d80b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e
 DIST linux-2.6.33.tar.bz2 66266488 RMD160 7f0897db8113bc17249d82d61ca41e3b91eb4664 SHA1 acc8db00f30c7dfb4f04183a88ba35a32b6f8e8d SHA256 63e237de3b3c4c46a21833b9ce7e20574548d52dabbd1a8bf376041e4455d5c6
+EBUILD hardened-sources-2.6.32-r10.ebuild 1829 RMD160 b292569642e612e9e0646ffde2c705dbeb92bbff SHA1 b630310c0aecc62310b5f1e5d77ed0db94439b7f SHA256 567ad762b23317a2df8b4926abd1a7e3de79866699735cc165bec759106a6ba9
 EBUILD hardened-sources-2.6.32-r9.ebuild 1955 RMD160 ca9ecb353f9f8d3d7b7dce9b4e18aa9182695dad SHA1 8da80754bb06d799508a101dab546bd82039be11 SHA256 30dc279ddda8ef6257741c0bd3b817a70872dba330c9a135f827d3116ba1d603
 EBUILD hardened-sources-2.6.33-r3.ebuild 1880 RMD160 68433a6096400600b45ab525717ff7746b2c45ae SHA1 268380227f633e505adcc48d847e3e641b887fbc SHA256 11e9d685d4319c0f3c381f46e5399ad43cf12419af04e8d3bf315b24379cadc4
-MISC ChangeLog 1632 RMD160 70cab0c7a385d6a2f0842a7039856d77ff61237a SHA1 68c52a2f6db4cb2df733c9ed2f6c7a20d2703d34 SHA256 ff956e9e6e7814ce87a8f503a3d38a1bcfdd48f87d55560ad1fd8b2c656b66cb
+MISC ChangeLog 1860 RMD160 7aac06cfef9320b8c2996a6b189cd1b29a57657e SHA1 f7731072bdfda84a64c1b09ed575f93e4f8f30df SHA256 1073e2251e76ece0b6c870364368f72ce2b66e498a8cbd40400bac1780724d03
 MISC metadata.xml 770 RMD160 ce43c497d4a4a6e4633bec0bce6593ce78605865 SHA1 75da150c2e9ee9847d12a9d79ee2b88b5a63993e SHA256 1e2850c18164d38a9893f9afaf4d31cb89bd8077801378447c31c35ecce92840
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r10.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r10.ebuild
new file mode 100644
index 0000000..cf22662
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r10.ebuild
@@ -0,0 +1,51 @@
+# Copyright 1999-2010 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: $
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="13"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-13"
+#HGPV_URI="mirror://gentoo/hardened-patches-${HGPV}.extras.tar.bz2"
+HGPV_URI="http://opensource.dyc.edu/pub/distfiles/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE=""
+
+KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.2.0*"
+
+	ewarn
+	ewarn "As of ${CATEGORY}/${PN}-2.6.24 the predefined"
+	ewarn "\"Hardened [Gentoo]\" grsecurity level has been removed."
+	ewarn "Two improved predefined security levels replace it:"
+	ewarn "\"Hardened Gentoo [server]\" and \"Hardened Gentoo [workstation]\""
+	ewarn
+	ewarn "Those who intend to use one of these predefined grsecurity levels"
+	ewarn "should read the help associated with the level. Users importing a"
+	ewarn "kernel configuration from a kernel prior to ${PN}-2.6.24,"
+	ewarn "should review their selected grsecurity/PaX options carefully."
+	ewarn
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with kernel series ${OKV}."
+	ewarn "Therefore, it is strongly recommended that the following command is"
+	ewarn "issued prior to booting a ${P} series kernel for"
+	ewarn "the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}