Drop 2.6.23-r13, 2.6.25-r3. Bump to 2.6.25-r5, 2.6.26-r1, fixing security bug #235221. Stable 2.6.25-r4 on amd64, x86. On behalf of gengor.

Package-Manager: portage-2.2_rc8/cvs/Linux 2.6.27-rc4 x86_64

6 files changed, 90 insertions, 59 deletions

diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
index a195f70e2379..700fe7f8532b 100644
--- a/sys-kernel/hardened-sources/ChangeLog
+++ b/sys-kernel/hardened-sources/ChangeLog
@@ -1,6 +1,19 @@
 # ChangeLog for sys-kernel/hardened-sources
 # Copyright 2000-2008 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.233 2008/08/18 01:39:02 solar Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.234 2008/08/23 02:12:48 battousai Exp $
+
+*hardened-sources-2.6.26-r1 (23 Aug 2008)
+*hardened-sources-2.6.25-r5 (23 Aug 2008)
+
+  23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
+  -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
+  hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
+  +hardened-sources-2.6.26-r1.ebuild:
+  Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
+  security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
+  fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
+  Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
+  (gengor).
 
 *hardened-sources-2.6.26 (18 Aug 2008)
 *hardened-sources-2.6.25-r4 (18 Aug 2008)
diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index 438145f6d7bf..d9e823bb5b99 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -1,24 +1,23 @@
-DIST genpatches-2.6.23-10.base.tar.bz2 142831 RMD160 ecc87068363b338ac61d60269d7975379f73c287 SHA1 b36266ab55d4ea61aee47aad10ab2c948bb79d03 SHA256 b4280708eeeb4b2f98265969d9c4e182238a0c6388427699d433a15793eebaef
-DIST genpatches-2.6.23-10.extras.tar.bz2 148654 RMD160 e19611cb0829d08b5d69cc9008746182b0a1c91e SHA1 f8e47781b2f057e1fc4143db7d1313b6c3605ad8 SHA256 efa4ccd942fdc3601c4947511e753b48d705a45f9ec62d0c7aa16ce95ca153ef
 DIST genpatches-2.6.24-8.base.tar.bz2 89332 RMD160 7151ecc36c230b6b5bbc02ace868194943199ffe SHA1 3d32f7a09ce5cf19d4a44b7bb4fe029e607d19c4 SHA256 56148f2bef4702cd4ddecc36afa2100a0cf422c4910f63a0bb676803450ea3bd
 DIST genpatches-2.6.24-8.extras.tar.bz2 49853 RMD160 ead0b84c96f09a0d48c6a53cc9e183dbd7cae4e9 SHA1 d54b25cd9aa41a60a13e4dd360b9cb4675e63c25 SHA256 c610e6ed1ca313a83bc4455fe36b74d789a86d40947dd18ebbd8e116e2bbde06
+DIST genpatches-2.6.25-10.base.tar.bz2 117709 RMD160 01a20f51da3e0cd6e41a04010315691c8cf7338a SHA1 f5deff54a3c19ad1ce44a8756ce8e04d81da1077 SHA256 182c8a8b06a10dfabc348521af4302ae40b1bc41813eeab704ed709f3fd1be04
+DIST genpatches-2.6.25-10.extras.tar.bz2 41696 RMD160 d5dd5f902dc5555e52c177d6c992d4d7a9d7d34e SHA1 3d7660caccc60a33f287cf0123e8cf4ec96ef5b3 SHA256 5fbb7d88d9624faf6fba3d4115eed7e726802cea60291971ae36f4d62cbc7b32
 DIST genpatches-2.6.25-8.base.tar.bz2 84329 RMD160 4bba442ecca82982438bd130ca185764463d4d57 SHA1 ea64892b1b8427514f23731ef6772a3373441074 SHA256 7645f8e033e4ae3d3ce7ee8e24c7f524e9d386fb40e8d99d919778e49bea0596
 DIST genpatches-2.6.25-8.extras.tar.bz2 41717 RMD160 bc2f220a944f701d944061f11d633f2301139ccc SHA1 79d093c93ff1c76e98bff174d5b3c603cd1f0d7e SHA256 0cc8eaab5e746a7b514ee6c86e6ae986618ae4929c0a0c4a8e6098c9d3a43eae
 DIST genpatches-2.6.26-2.base.tar.bz2 47157 RMD160 953e262b25bab8bb32d530fee0a2eb97ba58fcce SHA1 d12da61c4a079a423d22526e7630ac35772e19a0 SHA256 ff9404e89067beeb6bae8a8eb1c1d362abb5d11c5b0a92abde67e30b856ea5ba
 DIST genpatches-2.6.26-2.extras.tar.bz2 41342 RMD160 1273b577012f1047f2dfff60afc2dfda16756c1e SHA1 cdf5503702804c09251b368ddf4118388020fda1 SHA256 e69683f14fc7155ba2b9049ad08dc59b91d3920caefab82f24d8f843fae350f0
-DIST hardened-patches-2.6.23-11.extras.tar.bz2 238486 RMD160 0a0af6570abc83d157ad8e1fd3613473927c1890 SHA1 f4429e059533ee5479240a363fc12cb250b0e349 SHA256 ced08055e5d01a8da4e30709057911acb80760c98709e9171b99534f1f4e968e
 DIST hardened-patches-2.6.24-4.extras.tar.bz2 234990 RMD160 4d2aabe107bb6a09565c6b6c30c951fa03e453b4 SHA1 c440455fb1f1646f86dcc0e9429f77200678b900 SHA256 c252cc01c695ddafca12a58a458008429063fe2d538d9cc7fe9850aa0d3f2140
-DIST hardened-patches-2.6.25-4.extras.tar.bz2 227456 RMD160 0bf2aeb959c7031bec6df152618d9586af7526f9 SHA1 d48d9ff4701089f8c88666cc003ef846d9132a65 SHA256 e99caa6fcea68bc195912956e4a0dc99a958507c0d42ddb583e859eb28549ffb
 DIST hardened-patches-2.6.25-5.extras.tar.bz2 250586 RMD160 b92fa916aabb3deb922e614f13ed92c5fb61a407 SHA1 ee7cefa8b4c247b2ca2465defc19ff12833096dd SHA256 dbf0668ee10bcda436793da60b95ea8210b68bbc727f0460f68ad1248a8dcf36
+DIST hardened-patches-2.6.25-6.extras.tar.bz2 229691 RMD160 76efc5c693c96f86799be3dfd22c704698688409 SHA1 e6e51558c9db08011127b1822664e34439e6c48a SHA256 594a7ab43b3fcce3df70a8a93cec543badd81a0d6f5f3fa581bd53bdd44d7e11
 DIST hardened-patches-2.6.26-1.extras.tar.bz2 210376 RMD160 0c95998b5745daf2f1225248fd340d6d1ae3fef1 SHA1 99fb370cab57d1dc16bcd2f0ed2cd3a03494bea0 SHA256 a92f15d85ef4fbb572ba31b8b49bf8e3efbfd32da38086bddc1b427b64ab46bf
-DIST linux-2.6.23.tar.bz2 45488158 RMD160 755690e80751d5de86d260fe05c6eeadde116c4e SHA1 3a186adf13e44415796ab6381aa8979b16a5d5ca SHA256 d4e67c0935ffb2a4158234bff92cc791b83177866009fc9b2214104e0038dbdb
+DIST hardened-patches-2.6.26-2.extras.tar.bz2 235534 RMD160 8f45202140ba545345d9ec0ded0461d2626e4c5d SHA1 56f15543c0d7592980101cf303703f3e313f4d41 SHA256 4746fee20ff0ebb4cde64987e0d31a06d84d5cab16016c8d955978436748e636
 DIST linux-2.6.24.tar.bz2 46737783 RMD160 0e5194c69c3d82c41ece689c4f84e638f8776d34 SHA1 351aebc784a5395fe4c92d1e514a89680482f7e2 SHA256 413c64fbbcf81244cb5571be4963644a1e81166a2b0f008a016528363b65c5d3
 DIST linux-2.6.25.tar.bz2 48601689 RMD160 cf3ed52f888fe9df7a93abe4fdc2f598e1ba0ce4 SHA1 aa6187a1c212dd2d8bd906b023fcefdcf711f35e SHA256 108b2a3f2b05c0e57d1d0977619525e46f8d4b425aef4b38b47dcf94292f2dd2
 DIST linux-2.6.26.tar.bz2 49441874 RMD160 57c37e81afa48e7c05e1a933d390a12ac2921255 SHA1 3f44384bf84f27add3b6c43ec68f974d7f7e9c67 SHA256 666488e2511393fdb901eaf1e67275bcc38ab37c930e8a9adb290a95c1721a2a
-EBUILD hardened-sources-2.6.23-r13.ebuild 1616 RMD160 1a460ffc952a531fc24ddfd42fc8b61ccd2590f9 SHA1 85967f9af764b1961e6f3213c112f53ef059074a SHA256 eaa881513a9a7a24805630b9e784acbd37c7f5506f6ac680223435812a12fada
 EBUILD hardened-sources-2.6.24-r3.ebuild 1509 RMD160 de4b8dbd39a3cfe683bf4f9202fa5b57490c5ec4 SHA1 b8a2a8180e89c3654f666bfa6ed6f09f1aa10942 SHA256 2a6018263d2966734dc07cd9d257d4f140312f7a2380c6fa03fc4c954a6a0529
-EBUILD hardened-sources-2.6.25-r3.ebuild 1869 RMD160 d278497e9752bda54412b4b48cc6de6506b7b6dd SHA1 3c736c9aa2e7742dafd339679e7ea159b0ce6f41 SHA256 25c552470bb16a04a985f8a566c1e42ee2f1180abe38a11555e0c4e6005ecd24
-EBUILD hardened-sources-2.6.25-r4.ebuild 1913 RMD160 19607cc9808bf82e47448f2494d6a46a5dde067e SHA1 fd11ba856043090e12ee0a31424e1ac24dc5afa0 SHA256 9c51cd436eb5a249833b245de2fc1e2234058058e58539b6cd4a25d211f829da
+EBUILD hardened-sources-2.6.25-r4.ebuild 1915 RMD160 e87827025acc09de627e009dc5095eb0d2977319 SHA1 50c9af7fb0ec3fbccfc010a05cb4f5c8eaf4d74d SHA256 2f629d4131b5899dda28fd4d3229a99f4c57167b716cd61951fea4754115ffa2
+EBUILD hardened-sources-2.6.25-r5.ebuild 1926 RMD160 8865621d7dbdc950056e89ded0ba2aa09d1dab46 SHA1 db9125d7cdc48f5099009e98179badc739bfb5e4 SHA256 dd389a17d91dfabe63c2b86f0264f6ede7447bf555848dcc52c99a388d0eed00
+EBUILD hardened-sources-2.6.26-r1.ebuild 1925 RMD160 46b51810c302f7c3da9b7140a4a3e54f6a4aa14d SHA1 3dee653de8a6e7f2e34425134138088a1f8ff430 SHA256 ee0e296a984b9675ad232b935b9e982330cdf2a012c2f08da124effb226e69fe
 EBUILD hardened-sources-2.6.26.ebuild 1918 RMD160 73472f5c4e31f8bd6a9b677de556f981ae84da77 SHA1 9fbcea817a8dc083fc98d44577462b053e20a304 SHA256 f65e74f3b3fb068a28309ac4b250d5ffd1852e8a44027e275e0bcb6fe400ccf8
-MISC ChangeLog 52986 RMD160 c67858610d5d82d69c95ac27b49c0ccf79f5bf1b SHA1 5a98ebd9e8942c9028033e1caaea936cc87ebacb SHA256 04d88ca2a47985807a18144dd55774e9fda6b6ac5c38de439a081a7f40fcc5cb
+MISC ChangeLog 53611 RMD160 398c6dae124b7a57c067ea67a603ae3c0a6f0cfe SHA1 24f46b32815d36e607e75e2178b3d04819e5da1f SHA256 b2af6a78970867947c1a49ed2ba3fcbc511eacca246d8ca7343f0398de747daf
 MISC metadata.xml 553 RMD160 c6dc41d7531d4bd1dbe1815d263554b0babf1982 SHA1 6b639ad03b5247316dc74fd8c7a0a97732e7f5a9 SHA256 a3834c6697acfe6401aea484c2221320964468b4295b72328b031dac675861a4
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.23-r13.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.23-r13.ebuild
deleted file mode 100644
index 270479390ece..000000000000
--- a/sys-kernel/hardened-sources/hardened-sources-2.6.23-r13.ebuild
+++ /dev/null
@@ -1,35 +0,0 @@
-# Copyright 1999-2008 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.23-r13.ebuild,v 1.3 2008/07/04 19:21:58 nixnut Exp $
-
-ETYPE="sources"
-K_WANT_GENPATCHES="base extras"
-K_GENPATCHES_VER="10"
-
-inherit kernel-2
-detect_version
-
-HGPV=${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-11
-HGPV_URI="http://confucius.dh.bytemark.co.uk/~kerin.millar/distfiles/hardened-patches-${HGPV}.extras.tar.bz2
-	mirror://gentoo/hardened-patches-${HGPV}.extras.tar.bz2"
-UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
-UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.4-2.6.23-rc7.patch 4205_uvesafb-0.1-rc3-2.6.23-rc3.patch 4405_alpha-sysctl-uac.patch"
-DESCRIPTION="Hardened kernel sources ${OKV}"
-HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
-
-SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
-KEYWORDS="~alpha amd64 ~hppa ~ia64 ppc ~ppc64 ~sparc x86"
-
-pkg_postinst() {
-	kernel-2_pkg_postinst
-	ewarn
-	ewarn "The options selected by the \"Hardened [Gentoo]\" security level"
-	ewarn "(GRKERNSEC_HARDENED) have been revised for this release. If you intend"
-	ewarn "to import a previous kernel configuration which uses this level then"
-	ewarn "please remember to review these changes before you build the kernel. In"
-	ewarn "particular, x86 users should note that PAX_MEMORY_UDEREF is now enabled"
-	ewarn "which is known not to work well in some virtualised environments. If this"
-	ewarn "affects you then you should switch to the \"Custom\" security level and"
-	ewarn "disable the option."
-	ewarn
-}
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.25-r4.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.25-r4.ebuild
index 41da393c61d8..1dc92c6fc184 100644
--- a/sys-kernel/hardened-sources/hardened-sources-2.6.25-r4.ebuild
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.25-r4.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2008 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.25-r4.ebuild,v 1.1 2008/08/18 01:39:02 solar Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.25-r4.ebuild,v 1.2 2008/08/23 02:12:48 battousai Exp $
 
 ETYPE="sources"
 K_WANT_GENPATCHES="base extras"
@@ -18,7 +18,7 @@ DESCRIPTION="Hardened kernel sources ${OKV}"
 HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
 
 SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
-KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+KEYWORDS="~alpha amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc x86"
 
 pkg_postinst() {
 	kernel-2_pkg_postinst
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.25-r5.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.25-r5.ebuild
new file mode 100644
index 000000000000..fa0c72450006
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.25-r5.ebuild
@@ -0,0 +1,49 @@
+# Copyright 1999-2008 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.25-r5.ebuild,v 1.1 2008/08/23 02:12:48 battousai Exp $
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="10"
+
+inherit kernel-2
+detect_version
+
+HGPV=${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-6
+HGPV_URI="http://confucius.dh.bytemark.co.uk/~kerin.millar/distfiles/hardened-patches-${HGPV}.extras.tar.bz2
+	mirror://gentoo/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.4.patch"
+DESCRIPTION="Hardened kernel sources ${OKV}"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE=""
+
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.1.12*"
+
+	ewarn
+	ewarn "As of ${CATEGORY}/${PN}-2.6.24 the predefined"
+	ewarn "\"Hardened [Gentoo]\" grsecurity level has been removed."
+	ewarn "Two improved predefined security levels replace it:"
+	ewarn "\"Hardened Gentoo [server]\" and \"Hardened Gentoo [workstation]\""
+	ewarn
+	ewarn "Those who intend to use one of these predefined grsecurity levels"
+	ewarn "should read the help associated with the level. Users importing a"
+	ewarn "kernel configuration from a kernel prior to ${PN}-2.6.24,"
+	ewarn "should review their selected grsecurity/PaX options carefully."
+	ewarn
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with kernel series ${OKV}."
+	ewarn "Therefore, it is strongly recommended that the following command is"
+	ewarn "issued prior to booting a ${P} series kernel for"
+	ewarn "the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.25-r3.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.26-r1.ebuild
index 22c3b46dec96..2c049ccfb75d 100644
--- a/sys-kernel/hardened-sources/hardened-sources-2.6.25-r3.ebuild
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.26-r1.ebuild
@@ -1,21 +1,22 @@
 # Copyright 1999-2008 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.25-r3.ebuild,v 1.1 2008/07/31 02:29:34 solar Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.26-r1.ebuild,v 1.1 2008/08/23 02:12:48 battousai Exp $
 
 ETYPE="sources"
 K_WANT_GENPATCHES="base extras"
-K_GENPATCHES_VER="8"
+K_GENPATCHES_VER="2"
 
 inherit kernel-2
 detect_version
 
-HGPV=${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-4
+HGPV=${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-2
 HGPV_URI="http://confucius.dh.bytemark.co.uk/~kerin.millar/distfiles/hardened-patches-${HGPV}.extras.tar.bz2
 	mirror://gentoo/hardened-patches-${HGPV}.extras.tar.bz2"
 UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
 UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.4.patch"
 DESCRIPTION="Hardened kernel sources ${OKV}"
 HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE=""
 
 SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
 KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
@@ -23,22 +24,26 @@ KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
 pkg_postinst() {
 	kernel-2_pkg_postinst
 
+	local GRADM_COMPAT="sys-apps/gradm-2.1.12*"
+
 	ewarn
 	ewarn "As of ${CATEGORY}/${PN}-2.6.24 the predefined"
 	ewarn "\"Hardened [Gentoo]\" grsecurity level has been removed."
 	ewarn "Two improved predefined security levels replace it:"
 	ewarn "\"Hardened Gentoo [server]\" and \"Hardened Gentoo [workstation]\""
 	ewarn
-	ewarn "If you intend to use one of these predefined grsecurity levels,"
-	ewarn "please read the help associated with the level. If you intend to"
-	ewarn "import a previous kernel configuration, please review your selected"
-	ewarn "grsecurity/PaX options carefully before building the kernel."
+	ewarn "Those who intend to use one of these predefined grsecurity levels"
+	ewarn "should read the help associated with the level. Users importing a"
+	ewarn "kernel configuration from a kernel prior to ${PN}-2.6.24,"
+	ewarn "should review their selected grsecurity/PaX options carefully."
+	ewarn
 	ewarn
-	ewarn "If you intend to use grsecurity's RBAC system then you must ensure that"
-	ewarn "you are using a recent version of gradm (2.1.12 or higher). As such, it"
-	ewarn "is strongly recommended that you run the following command before"
-	ewarn "booting a ${PN} kernel >=2.6.25 for the first time:"
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with kernel series ${OKV}."
+	ewarn "Therefore, it is strongly recommended that the following command is"
+	ewarn "issued prior to booting a ${P} series kernel for"
+	ewarn "the first time:"
 	ewarn
-	ewarn "emerge -na '>=sys-apps/gradm-2.1.12'"
+	ewarn "emerge -na =${GRADM_COMPAT}"
 	ewarn
 }