Based on 2.6.32.46 + genpatches-2.6.32-43 + grsecurity-2.2.2-2.6.32.46-201109261052

Package-Manager: portage-2.1.10.11/cvs/Linux x86_64

3 files changed, 62 insertions, 5 deletions

diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
index cf2f5b0b49d5..71386954013f 100644
--- a/sys-kernel/hardened-sources/ChangeLog
+++ b/sys-kernel/hardened-sources/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for sys-kernel/hardened-sources
 # Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.474 2011/09/22 13:07:01 blueness Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.475 2011/09/27 02:24:01 blueness Exp $
+
+*hardened-sources-2.6.32-r69 (27 Sep 2011)
+
+  27 Sep 2011; Anthony G. Basile <blueness@gentoo.org>
+  +hardened-sources-2.6.32-r69.ebuild:
+  Based on 2.6.32.46 + genpatches-2.6.32-43 +
+  grsecurity-2.2.2-2.6.32.46-201109261052
 
 *hardened-sources-3.0.4-r3 (22 Sep 2011)
 
diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index 2d97f1d7b5cd..10834f561d7b 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -61,6 +61,7 @@ DIST hardened-patches-2.6.32-68.extras.tar.bz2 497417 RMD160 404872425b2cef8bf0c
 DIST hardened-patches-2.6.32-69.extras.tar.bz2 486407 RMD160 cc6ab347f0d2fc825ab96667daef8baef4dc936e SHA1 98bd38b11b0f57b4303fc8331a4b480e8ed041af SHA256 4560f0ef378122797458d2208d560b031698355348583aa3a65bbfab8d6cfd70
 DIST hardened-patches-2.6.32-70.extras.tar.bz2 487719 RMD160 815d1cfba008c53577f27d8ed27c75f3462db653 SHA1 897f295a172f441a7b8d68791006eba9aa36b581 SHA256 560b60bbdb9c8d645cf448e30e479d1d4aa17a4c6e178a99da180c5e25b14801
 DIST hardened-patches-2.6.32-71.extras.tar.bz2 487527 RMD160 95e2cc3b6081516ec5d01cd749ef5989aa83ae7e SHA1 7748e44cf653733c4ecff2928f6fdcc6aa32b0cf SHA256 3c9a6b6c63e8c5f341fc9d9f9071dac4c424613e38aa8cde013962e5e887a41f
+DIST hardened-patches-2.6.32-72.extras.tar.bz2 486856 RMD160 679e95eedecd07d259ef4a02c0ca9331fa976e71 SHA1 ccb6261a172f024d3bdcc5ea24ee1b09954219e6 SHA256 18e1587172f133b2885cd41bcf7b452149a7f2cb83d2df5adefbc0c86c05ab7f
 DIST hardened-patches-2.6.34-7.extras.tar.bz2 337669 RMD160 7177ec91676644a863b94765a2b83d026d43a9dd SHA1 c96e2156f33aac21d4e1fa5950fe3098402714e0 SHA256 3fb2cda6fb2724296e0e1a946ca7b69293e04da9f21ecb563f2ba282f7a8099a
 DIST hardened-patches-2.6.35-8.extras.tar.bz2 349768 RMD160 6addf3007a5f4de95854fd4e93c65885b2494c7d SHA1 0cbabbcf7ab9b19214e583788b625330806d9898 SHA256 17f43e0b2203ac2020892164cbfd8b913c90cc3f8d1bae3ff88a8843f0bc56d7
 DIST hardened-patches-2.6.36-10.extras.tar.bz2 363448 RMD160 a656acbca00a3f238f83a14566dbeade33c69092 SHA1 c53dd6aae4c779cb135a612c416f2f623f9a9ce5 SHA256 e818e8bd2066f32aa209309aa17a482e7a006ae748d850860b900226720ce8dc
@@ -93,6 +94,7 @@ EBUILD hardened-sources-2.6.32-r65.ebuild 1758 RMD160 2bd45309a051d3942789f27361
 EBUILD hardened-sources-2.6.32-r66.ebuild 1806 RMD160 87ee2e4072903c31f32803902dc2cc9e8248e810 SHA1 aa6f66d3d5349de1475fd372c01c75f1e46a79df SHA256 f156d0b1f8d184aee54b3b3518bf2c577066e341d77300592664ed881a2e241d
 EBUILD hardened-sources-2.6.32-r67.ebuild 1806 RMD160 8e8530e26651da0ac2761b6a5b595c0c6feee01e SHA1 e6ab8e66dac6dfd7986c95121f8ca86ec3d5e4ab SHA256 c9e28f3837e03ec97b2096ac02143ded5ba8e8df9aafe0a4a55edeea9a70f125
 EBUILD hardened-sources-2.6.32-r68.ebuild 1806 RMD160 ca4a3963aaa73835902303fa0be09e23e5d87ce7 SHA1 6f8984b35b52e9d4fe46b81976f9b9638441345f SHA256 e314e83454bc68295df427eda705b2680b8da61287b292948e68c9362e3a7b8c
+EBUILD hardened-sources-2.6.32-r69.ebuild 1806 RMD160 e242493de7579fad48f55db9461bc85ee1799526 SHA1 92bd80c3018dd9c010ba6f4a36e20965138f83e9 SHA256 042e93e1e9fab09e5e1d22285f423edc7fd10cfdaab533d66c565e17df051987
 EBUILD hardened-sources-2.6.32-r9.ebuild 1860 RMD160 18b591c7337e1aa801e8676ff80292b988ed332e SHA1 46a40ea2830743e0d6acc84f465c40ad3ec11f4f SHA256 9a3a5de2c2a5ee692202bfa7bdad128bd916b4aebc83ae816954e1795116b159
 EBUILD hardened-sources-2.6.34-r6.ebuild 1706 RMD160 0d08d4b375f7e06d6e57e5e486aff5a40f80ab1e SHA1 462a9fa6afeaa67a6536092afeee63a94f659880 SHA256 aec2073ce33134d2045f51f39569edf20b6580a20d6d07cefe0d909da79f2fb3
 EBUILD hardened-sources-2.6.35-r7.ebuild 1711 RMD160 7b69000bcad1938047477b4ff0db97e8588854e7 SHA1 4d71ffa586bc6ec1358b26a66cbe0cb26b586a15 SHA256 d81bfb0eacafb5d59b33de40254cc127fc9ae95b1c0925caffc818e50074b0a6
@@ -107,12 +109,12 @@ EBUILD hardened-sources-3.0.4-r1.ebuild 1754 RMD160 52b9eb0916cb6758c60fae9d1cdd
 EBUILD hardened-sources-3.0.4-r2.ebuild 1754 RMD160 33dd6fe25fe71c5ae0a9016068dbae1cea349927 SHA1 e7c887a0c624a0b4f5ce8eeb4ac1cea53596345f SHA256 2a04b38d89fa13daa2882223cf84136084535612c86f42d39d9229eb60bbd034
 EBUILD hardened-sources-3.0.4-r3.ebuild 1754 RMD160 a50e9532781690eb294b1888bd534472452131da SHA1 9a14545a70a7a5e7aba8457641b00485e58afda5 SHA256 fa3c8c69629906fb3e38d8daeaf3e738fc00add056e3529d02fc9f7d382a79f5
 EBUILD hardened-sources-3.0.4.ebuild 1751 RMD160 fb01c592c42847d6c047fd6f5362892842abc4fd SHA1 7b5e1aebc1b5c42c5f8dc27ab59341764918749a SHA256 d0e432954cbc8cd2c5020a97ea75fe7fd1fabf6617236e831814ccc97c1f5254
-MISC ChangeLog 103436 RMD160 5598b506bd908462889d3269b208774aa34d66ce SHA1 78094098dc02aa664c9ebc7c28fd05df968a9dab SHA256 bee4c3e21eeebf2c12833da8b7511c02eaec6643a991067effb35627d28a1494
+MISC ChangeLog 103663 RMD160 c267363718ee3674650741afca4d4d5b6ffe1cc8 SHA1 9eea0e81fa0b89cbc60d05d8b064fbc28a06cc5a SHA256 5e1c3e34a728f6ee074230954265e9db93e48c154c0527a04e1b87c737c6a43b
 MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SHA1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8fcfd351f2f39ed63da68af3a5751fc2058d0d03813
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.17 (GNU/Linux)
 
-iEYEAREIAAYFAk57Mv8ACgkQl5yvQNBFVTXfmwCfamabghQMNGSHzV94CKhJTOA8
-XG0An0iPYgRMme1gREv/utnvBXC3ndzv
-=S6zi
+iEYEAREIAAYFAk6BM80ACgkQl5yvQNBFVTVvKQCcCOvFYNx/PqZKcl6vGw4hwQ9t
+gjMAn1NcpD7EY1Zt0yyuv//SEgIaa7jd
+=u378
 -----END PGP SIGNATURE-----
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r69.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r69.ebuild
new file mode 100644
index 000000000000..872dd9357ebc
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r69.ebuild
@@ -0,0 +1,48 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r69.ebuild,v 1.1 2011/09/27 02:24:01 blueness Exp $
+
+EAPI="4"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="43"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-72"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="2000_fix-broken-backport-for-ipv6-tunnels.patch 4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE=""
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.2.2*"
+
+	ewarn
+	ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
+	ewarn "[server], [workstation], and [virtualization]."
+	ewarn
+	ewarn "Those who intend to use one of these predefined grsecurity levels"
+	ewarn "should read the help associated with the level.  Users importing a"
+	ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
+	ewarn "should review their selected grsecurity/PaX options carefully."
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}