Based on vanilla 2.6.32.19 + genpatches + grsec-2.2.0-2.6.32.19-201008131840

Package-Manager: portage-2.1.8.3/cvs/Linux x86_64

3 files changed, 62 insertions, 2 deletions

diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
index 5d708f3edf93..ca27988005e0 100644
--- a/sys-kernel/hardened-sources/ChangeLog
+++ b/sys-kernel/hardened-sources/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for sys-kernel/hardened-sources
 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.331 2010/08/14 19:18:30 blueness Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.332 2010/08/21 11:50:29 blueness Exp $
+
+*hardened-sources-2.6.32-r14 (21 Aug 2010)
+
+  21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
+  +hardened-sources-2.6.32-r14.ebuild:
+  Based on vanilla 2.6.32.19 + genpatches +
+  grsec-2.2.0-2.6.32.19-201008131840
 
 *hardened-sources-2.6.32-r13 (14 Aug 2010)
 
diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index e58c752cbac7..171f41827d43 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -12,6 +12,8 @@ DIST genpatches-2.6.32-14.base.tar.bz2 493802 RMD160 e156aaca6039e9635642c5836f5
 DIST genpatches-2.6.32-14.extras.tar.bz2 24934 RMD160 e3e1d60fb45a3e3c818ddda36b9180d4fc46679e SHA1 d16a34dfa35d163ea4042058b3865c389f3802e9 SHA256 50b70c76461aa52f7f2ad88175e7f08eb555f7f1dfd274759ec0c2a9748bde5e
 DIST genpatches-2.6.32-16.base.tar.bz2 608583 RMD160 c832de82cb268298f33d00f79b3c383a60e0fc37 SHA1 7432649539f0b3bdccdfa8ead18a63d208093bb3 SHA256 3e5ef09789cba707852a2157afb0b136bb596844c21193522bd43f929f28753c
 DIST genpatches-2.6.32-16.extras.tar.bz2 24934 RMD160 e3e1d60fb45a3e3c818ddda36b9180d4fc46679e SHA1 d16a34dfa35d163ea4042058b3865c389f3802e9 SHA256 50b70c76461aa52f7f2ad88175e7f08eb555f7f1dfd274759ec0c2a9748bde5e
+DIST genpatches-2.6.32-17.base.tar.bz2 609278 RMD160 85c32431f72ae5fbd56cfb15812354bd3ab5412f SHA1 458a96eb652e5ad9135369eefcad696eca3bc634 SHA256 b0b73e499793af546e3beb0d454225cedb28f3c864f94bd4fde67fc15ff6511d
+DIST genpatches-2.6.32-17.extras.tar.bz2 24934 RMD160 e3e1d60fb45a3e3c818ddda36b9180d4fc46679e SHA1 d16a34dfa35d163ea4042058b3865c389f3802e9 SHA256 50b70c76461aa52f7f2ad88175e7f08eb555f7f1dfd274759ec0c2a9748bde5e
 DIST genpatches-2.6.34-4.base.tar.bz2 77907 RMD160 4dbefd7a6b62a823a08c5d148961c2547e9163bf SHA1 93ec88b22389215ee19bfc6152257e8a7f7ecbd1 SHA256 0da1692eda71c44415eb303459ac702db5a7ff21d056f7acc6e6cea3e3aeb125
 DIST genpatches-2.6.34-4.extras.tar.bz2 15527 RMD160 988e3878a7c2a4676988e54010e8e8c76ed9d999 SHA1 1e218561e5d5c2d86e471245819dcc8ce022905e SHA256 7e99fb2c4320446b312110fc6f9f5e2bcc60127f80f80d8cb09c34483c68dca9
 DIST hardened-patches-2.6.28-10.extras.tar.bz2 233317 RMD160 7ff56366f73e8a223ca4da85e580f66888f4f0da SHA1 31b6d4e358517a28424f94c7983cdd72a42072bf SHA256 93f3385acaf2149081a04cf6c98d176dbe3300d044b9001bc4cd89d303f26d8b
@@ -20,6 +22,7 @@ DIST hardened-patches-2.6.32-13.extras.tar.bz2 340034 RMD160 0b265f033058b864333
 DIST hardened-patches-2.6.32-14.extras.tar.bz2 335884 RMD160 440a17e9a33c31443e5d431e14b4deb30ec91d43 SHA1 3c5ea3bae09dfd73b37d3474c0a14083f6258d14 SHA256 a8db3eb5e4946449740bd8431bff03f89fe7815243c4de7516c97970d6c309ef
 DIST hardened-patches-2.6.32-15.extras.tar.bz2 338382 RMD160 8443569411e7bcb97b4dc7eb41f9f85222f4bf34 SHA1 785308e42a6bc9c127a280b1429a75e85db4ec90 SHA256 7342474ca2aff118e592e67ea16f386fc3d169d131815dc84080ea29b13ca7e4
 DIST hardened-patches-2.6.32-16.extras.tar.bz2 338574 RMD160 fa820c76cadcf3ec23a3e401d2da2df3331fb268 SHA1 c2f4f9cfd6c2d2f11e4e3758051d4faffb1e132a SHA256 d904494807282141d34ae178fd3df6de47fd6e6f8b6d58208f02b63f88319fd4
+DIST hardened-patches-2.6.32-17.extras.tar.bz2 338718 RMD160 3c3151a5d77fc83c587629b6866347645d7dbf2f SHA1 e2c03f7bde702f89ceed5105b3b90d32afdaa9e9 SHA256 d4745627fcfe86efe6ff8d5e8ab30e01d08dd4f9c3afa4ce02727d487dc77d70
 DIST hardened-patches-2.6.34-2.extras.tar.bz2 328865 RMD160 dee1323923a2602eaa2a72dd71f9e20b8748760f SHA1 59c14973c76b28427ea9ba0b09908354637e07b2 SHA256 0e21c251f8ac097b5e27d154834f895d83ebcf71af62cba47d7781a3a5cdfe67
 DIST linux-2.6.28.tar.bz2 52665364 RMD160 47e8925220e29e239f9478228fc53543c1f7b300 SHA1 4f40f8bf3fd110b0cc6e1fea5f539c98f9959e94 SHA256 ae0d97c55efe7fce01273c97f8152af0deff5541e3bbf5b9ad98689112b54380
 DIST linux-2.6.32.tar.bz2 64424138 RMD160 b93742cbaf8174f2200d2dbef0d47a26c618039c SHA1 410b4fc818023bfef60064e973ff0ab46d3bfb19 SHA256 5099786d80b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e
@@ -29,7 +32,8 @@ EBUILD hardened-sources-2.6.32-r10.ebuild 1863 RMD160 85f01e3cd9d063c7aad03cf01c
 EBUILD hardened-sources-2.6.32-r11.ebuild 1863 RMD160 a4c0ce08e1b76ae3508dd1c2d6c372a3577b9d87 SHA1 322ceeefc5cc655bb469ded5c27a1f9e07602315 SHA256 9c7ae57f1ae8cf8eda45e06e875e3cdc3e4623c86710eec58ad44733004e5721
 EBUILD hardened-sources-2.6.32-r12.ebuild 1708 RMD160 5c95dc6d5f593f555801ed0ca2624633bbc7646c SHA1 98d0fa1c0a74d57d77bafb7d8851341aa1fd07dc SHA256 d970bb626844d47afae46cbf2c183375c67c1b5c8c0531706938ed2c6967da36
 EBUILD hardened-sources-2.6.32-r13.ebuild 1735 RMD160 1514a558872311574dee9288b88efd3e49caa25f SHA1 5568bd7ce9a2ab150bfa4918dd838b46654473e0 SHA256 2adff6bd1ef78f2adbbda71e1bc84cd0ae2036351978433cefa9499122a2f6e1
+EBUILD hardened-sources-2.6.32-r14.ebuild 1966 RMD160 211232d4292713c7f4b4a231440c873cc90f82a6 SHA1 12afa1c0e079178b0220265445eee1c48c4db9f8 SHA256 70b6b9f36598f591c10f273e99752173e61458fc3a0e199bc5fa3c73a12fb462
 EBUILD hardened-sources-2.6.32-r9.ebuild 1860 RMD160 18b591c7337e1aa801e8676ff80292b988ed332e SHA1 46a40ea2830743e0d6acc84f465c40ad3ec11f4f SHA256 9a3a5de2c2a5ee692202bfa7bdad128bd916b4aebc83ae816954e1795116b159
 EBUILD hardened-sources-2.6.34-r1.ebuild 1705 RMD160 5eafc4d61df9109ffeb860b13636e8f4cc0b8ac1 SHA1 f7e3da0d4e2808003d4877381d4a845bebfd268e SHA256 a4e69ee93ed5193b1f828ed8cc405e35a2c4cd33430bf74849e3dd66443a6a89
-MISC ChangeLog 70100 RMD160 14432cb5e4161891029ab5e89d78e5224a025805 SHA1 240faaeb9f1a2224f0a9d95f5075434403acbe51 SHA256 b6009fbd7d6680133548edb8e96113e7d3405d5675dbd76a71acca5504610c57
+MISC ChangeLog 70320 RMD160 b8734c62e1628d7824802c6e987a020bf6caff90 SHA1 e7488b5c59ea3d101158a5c352dad761d0c4fd0e SHA256 ccabdcb7a5c7b837d76a32b82b429437938eca312d67d4dcb6437413288d442e
 MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SHA1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8fcfd351f2f39ed63da68af3a5751fc2058d0d03813
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r14.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r14.ebuild
new file mode 100644
index 000000000000..cd5390311e3c
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r14.ebuild
@@ -0,0 +1,49 @@
+# Copyright 1999-2010 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r14.ebuild,v 1.1 2010/08/21 11:50:29 blueness Exp $
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="17"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-17"
+HGPV_URI="mirror://gentoo/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+# Note: 4420_grsecurity-2.2.0-2.6.32.19-201008131840.patch includes
+# 1800_page-table-unmap-for-stack-guard-fix.patch so we don't want
+# to apply it twice: see https://bugzilla.kernel.org/show_bug.cgi?id=16588
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="1800_page-table-unmap-for-stack-guard-fix.patch 4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE=""
+
+KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.2.0*"
+
+	ewarn
+	ewarn "Hardened Gentoo provides four different predefined grsecurity level:"
+	ewarn "[server], [server no rbac] [workstation] [workstation no rbac]"
+	ewarn
+	ewarn "Those who intend to use one of these predefined grsecurity levels"
+	ewarn "should read the help associated with the level.  Users importing a"
+	ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
+	ewarn "should review their selected grsecurity/PaX options carefully."
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}