Based on 2.6.32.46 + genpatches-2.6.32-43 + grsecurity-2.2.2-2.6.32.46-201110080819

Package-Manager: portage-2.1.10.11/cvs/Linux x86_64

3 files changed, 62 insertions, 5 deletions

diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
index 86da1a848117..1fa8a25269f1 100644
--- a/sys-kernel/hardened-sources/ChangeLog
+++ b/sys-kernel/hardened-sources/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for sys-kernel/hardened-sources
 # Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.478 2011/10/08 21:33:21 blueness Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.479 2011/10/08 21:41:31 blueness Exp $
+
+*hardened-sources-2.6.32-r70 (08 Oct 2011)
+
+  08 Oct 2011; Anthony G. Basile <blueness@gentoo.org>
+  +hardened-sources-2.6.32-r70.ebuild:
+  Based on 2.6.32.46 + genpatches-2.6.32-43 +
+  grsecurity-2.2.2-2.6.32.46-201110080819
 
   08 Oct 2011; Anthony G. Basile <blueness@gentoo.org>
   hardened-sources-3.0.4-r1.ebuild:
diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index 05fa6eadc0ba..ae331c96f284 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -62,6 +62,7 @@ DIST hardened-patches-2.6.32-69.extras.tar.bz2 486407 RMD160 cc6ab347f0d2fc825ab
 DIST hardened-patches-2.6.32-70.extras.tar.bz2 487719 RMD160 815d1cfba008c53577f27d8ed27c75f3462db653 SHA1 897f295a172f441a7b8d68791006eba9aa36b581 SHA256 560b60bbdb9c8d645cf448e30e479d1d4aa17a4c6e178a99da180c5e25b14801
 DIST hardened-patches-2.6.32-71.extras.tar.bz2 487527 RMD160 95e2cc3b6081516ec5d01cd749ef5989aa83ae7e SHA1 7748e44cf653733c4ecff2928f6fdcc6aa32b0cf SHA256 3c9a6b6c63e8c5f341fc9d9f9071dac4c424613e38aa8cde013962e5e887a41f
 DIST hardened-patches-2.6.32-72.extras.tar.bz2 486856 RMD160 679e95eedecd07d259ef4a02c0ca9331fa976e71 SHA1 ccb6261a172f024d3bdcc5ea24ee1b09954219e6 SHA256 18e1587172f133b2885cd41bcf7b452149a7f2cb83d2df5adefbc0c86c05ab7f
+DIST hardened-patches-2.6.32-73.extras.tar.bz2 503149 RMD160 76581f63b968f27244f975f7e9479b7c7ec6313f SHA1 6bca2ec11a0e919bf65f1c87203d6c4308164e44 SHA256 a5ae2e2a5cf70d28b3b23ff097200d9d742d84882609bf8874c7e488fc0b65b4
 DIST hardened-patches-2.6.34-7.extras.tar.bz2 337669 RMD160 7177ec91676644a863b94765a2b83d026d43a9dd SHA1 c96e2156f33aac21d4e1fa5950fe3098402714e0 SHA256 3fb2cda6fb2724296e0e1a946ca7b69293e04da9f21ecb563f2ba282f7a8099a
 DIST hardened-patches-2.6.35-8.extras.tar.bz2 349768 RMD160 6addf3007a5f4de95854fd4e93c65885b2494c7d SHA1 0cbabbcf7ab9b19214e583788b625330806d9898 SHA256 17f43e0b2203ac2020892164cbfd8b913c90cc3f8d1bae3ff88a8843f0bc56d7
 DIST hardened-patches-2.6.36-10.extras.tar.bz2 363448 RMD160 a656acbca00a3f238f83a14566dbeade33c69092 SHA1 c53dd6aae4c779cb135a612c416f2f623f9a9ce5 SHA256 e818e8bd2066f32aa209309aa17a482e7a006ae748d850860b900226720ce8dc
@@ -96,6 +97,7 @@ EBUILD hardened-sources-2.6.32-r66.ebuild 1806 RMD160 87ee2e4072903c31f32803902d
 EBUILD hardened-sources-2.6.32-r67.ebuild 1804 RMD160 16d80ba5e780d9715b6143f0ecd2f241f708af92 SHA1 943396b6ebffb516882d3fcbcdbf2be4189bc0bc SHA256 2727f6ae5c1e190a2da72e3890f5f02895063054ef07e47f3c8abca64337416c
 EBUILD hardened-sources-2.6.32-r68.ebuild 1806 RMD160 ca4a3963aaa73835902303fa0be09e23e5d87ce7 SHA1 6f8984b35b52e9d4fe46b81976f9b9638441345f SHA256 e314e83454bc68295df427eda705b2680b8da61287b292948e68c9362e3a7b8c
 EBUILD hardened-sources-2.6.32-r69.ebuild 1806 RMD160 e242493de7579fad48f55db9461bc85ee1799526 SHA1 92bd80c3018dd9c010ba6f4a36e20965138f83e9 SHA256 042e93e1e9fab09e5e1d22285f423edc7fd10cfdaab533d66c565e17df051987
+EBUILD hardened-sources-2.6.32-r70.ebuild 1806 RMD160 288905b95aa39061a3affcd42de52f48856ff6d0 SHA1 0efefe3da04a50b4f3a0aba1ed23c824e92ae4c1 SHA256 89f7c2716d2f7dab12a15c6145e05c448c74591f703d1f9bb53ce41e79f98013
 EBUILD hardened-sources-2.6.32-r9.ebuild 1860 RMD160 18b591c7337e1aa801e8676ff80292b988ed332e SHA1 46a40ea2830743e0d6acc84f465c40ad3ec11f4f SHA256 9a3a5de2c2a5ee692202bfa7bdad128bd916b4aebc83ae816954e1795116b159
 EBUILD hardened-sources-2.6.34-r6.ebuild 1706 RMD160 0d08d4b375f7e06d6e57e5e486aff5a40f80ab1e SHA1 462a9fa6afeaa67a6536092afeee63a94f659880 SHA256 aec2073ce33134d2045f51f39569edf20b6580a20d6d07cefe0d909da79f2fb3
 EBUILD hardened-sources-2.6.35-r7.ebuild 1711 RMD160 7b69000bcad1938047477b4ff0db97e8588854e7 SHA1 4d71ffa586bc6ec1358b26a66cbe0cb26b586a15 SHA256 d81bfb0eacafb5d59b33de40254cc127fc9ae95b1c0925caffc818e50074b0a6
@@ -111,12 +113,12 @@ EBUILD hardened-sources-3.0.4-r2.ebuild 1754 RMD160 33dd6fe25fe71c5ae0a9016068db
 EBUILD hardened-sources-3.0.4-r3.ebuild 1754 RMD160 a50e9532781690eb294b1888bd534472452131da SHA1 9a14545a70a7a5e7aba8457641b00485e58afda5 SHA256 fa3c8c69629906fb3e38d8daeaf3e738fc00add056e3529d02fc9f7d382a79f5
 EBUILD hardened-sources-3.0.4-r4.ebuild 1754 RMD160 b11845116bc9fe2f9aacced8de6e1c402a1afcea SHA1 41d7e8fcb12717aabb9650be38f724e9fb40dcaa SHA256 34e2fd110bbe1155332c4e6408da38a6ea1a907eb1b78701108600fceea8a4e2
 EBUILD hardened-sources-3.0.4.ebuild 1751 RMD160 fb01c592c42847d6c047fd6f5362892842abc4fd SHA1 7b5e1aebc1b5c42c5f8dc27ab59341764918749a SHA256 d0e432954cbc8cd2c5020a97ea75fe7fd1fabf6617236e831814ccc97c1f5254
-MISC ChangeLog 104110 RMD160 bf6eda914b31acb1909e01d5f79ebc4d8f5a2cbf SHA1 2c2c929e51f91d0f485551274eac4c0d8824cf4e SHA256 4f43f770151f9b0767c875407a67a265339b18e661ff44e2c0e11cd16405c750
+MISC ChangeLog 104337 RMD160 4b55fbb8a6bf01014a6f34276bc1f894f587d645 SHA1 f4ad47c4c7eae31c1a68e37e7f3ef98f182f42c1 SHA256 612a6a3bf47f9c11e9e133d83dc4c9665d1952d2f51d46d628d878cefa5cc137
 MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SHA1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8fcfd351f2f39ed63da68af3a5751fc2058d0d03813
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.17 (GNU/Linux)
 
-iEYEAREIAAYFAk6QwasACgkQl5yvQNBFVTVxlACeKDJkwsGPWL3dCWXu2fWlEpQo
-CVwAniV3huPHPW5DcCooT1Br0QLFXKfH
-=n51Z
+iEYEAREIAAYFAk6Qw5UACgkQl5yvQNBFVTWXVACfZTZddJeQk3wggFnOfmoB9CdH
+NUMAnAyyfrb7GePDI12ASa2vsuiEVB8t
+=f+MA
 -----END PGP SIGNATURE-----
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r70.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r70.ebuild
new file mode 100644
index 000000000000..eaedabf4cab8
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r70.ebuild
@@ -0,0 +1,48 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r70.ebuild,v 1.1 2011/10/08 21:41:31 blueness Exp $
+
+EAPI="4"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="43"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-73"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="2000_fix-broken-backport-for-ipv6-tunnels.patch 4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE=""
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.2.2*"
+
+	ewarn
+	ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
+	ewarn "[server], [workstation], and [virtualization]."
+	ewarn
+	ewarn "Those who intend to use one of these predefined grsecurity levels"
+	ewarn "should read the help associated with the level.  Users importing a"
+	ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
+	ewarn "should review their selected grsecurity/PaX options carefully."
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}