Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4 backport of neighbour hash updates.

4 files changed, 48 insertions, 2 deletions

diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
index 61bc04b00e89..3cc13a81a61f 100644
--- a/sys-kernel/hardened-sources/ChangeLog
+++ b/sys-kernel/hardened-sources/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for sys-kernel/hardened-sources
 # Copyright 2000-2005 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.47 2005/01/22 00:25:49 tocharian Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.48 2005/01/22 03:08:36 tocharian Exp $
+
+*hardened-sources-2.4.28-r4 (21 Jan 2005)
+
+  21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
+  +hardened-sources-2.4.28-r4.ebuild:
+  Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
+  backport of neighbour hash updates.
 
   21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
   hardened-sources-2.4.28-r3.ebuild:
diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index e62e4acb51ba..0d382c499cb0 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -1,9 +1,10 @@
+MD5 2b53fb67c011f98581816d432949b1b0 hardened-sources-2.4.28-r4.ebuild 1029
 MD5 da88826ea4a9623e05f9889e472a3ace hardened-sources-2.4.28-r1.ebuild 1021
 MD5 92e4e6228f118e8085cd3f8538b80fc7 hardened-sources-2.4.28-r3.ebuild 1028
 MD5 d7a5e7625d9ce5a4d72f118220d46aee hardened-sources-2.4.27-r3.ebuild 1033
 MD5 32e163f7b78f5ba9b16f6a8586326710 hardened-sources-2.4.28-r2.ebuild 1028
 MD5 55881cfbd40c45d2037994bf20bdc931 hardened-sources-2.4.28.ebuild 1791
-MD5 346c0daad6689c61a99db6e91a61f0fb ChangeLog 12057
+MD5 d128e79fb9903d9ad0cea6ab6844ac74 ChangeLog 12300
 MD5 9e83638b7810dd821b7ce067247163ca hardened-sources-2.6.10-r3.ebuild 898
 MD5 0a473e60c059cb41c96a6bbcbff84769 metadata.xml 459
 MD5 4a0215139f9aebfe2cc2747743763f08 files/2.4.28-grsec-binfmt_a.out.patch 1887
@@ -12,6 +13,7 @@ MD5 3cfa2f10ac7a4d62112f84dcb047b050 files/digest-hardened-sources-2.4.27-r3 145
 MD5 fcf28c7e79f13550bec1b88ead0be365 files/digest-hardened-sources-2.4.28-r1 145
 MD5 bf22baab393ca4ea4f1a2dcbe51b4442 files/digest-hardened-sources-2.4.28-r2 145
 MD5 5679d140de1f7b19b33d721f8f74ec0a files/digest-hardened-sources-2.4.28-r3 145
+MD5 13c5cbb90bda8da4e4922d1e1477a712 files/digest-hardened-sources-2.4.28-r4 145
 MD5 376d0153645489845937a4ffd83e761b files/2.4.28-grsec-cmdline-race.patch 352
 MD5 8652613a5ac92aa0ad7fdf0cc6c01716 files/digest-hardened-sources-2.4.28 339
 MD5 8850fb5244d9d10736d95a85f3c5b3f1 files/2.4.27-CAN-2004-0394.patch 448
diff --git a/sys-kernel/hardened-sources/files/digest-hardened-sources-2.4.28-r4 b/sys-kernel/hardened-sources/files/digest-hardened-sources-2.4.28-r4
new file mode 100644
index 000000000000..8917b2a05e24
--- /dev/null
+++ b/sys-kernel/hardened-sources/files/digest-hardened-sources-2.4.28-r4
@@ -0,0 +1,2 @@
+MD5 ac7735000d185bc7778c08288760a8a3 linux-2.4.28.tar.bz2 31064046
+MD5 12125272b37f4359a042630a2cf1f2ed hardened-patches-2.4-28.5.tar.bz2 578496
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.4.28-r4.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.4.28-r4.ebuild
new file mode 100644
index 000000000000..f8b93d5c1804
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.4.28-r4.ebuild
@@ -0,0 +1,35 @@
+# Copyright 1999-2005 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.4.28-r4.ebuild,v 1.1 2005/01/22 03:08:36 tocharian Exp $
+
+IUSE="selinux"
+ETYPE="sources"
+inherit kernel-2
+detect_version
+
+HGPV=28.5
+HGPV_SRC="http://dev.gentoo.org/~tocharian/kernels/${PN}/hardened-patches-${KV_MAJOR}.${KV_MINOR}-${HGPV}.tar.bz2"
+
+UNIPATCH_STRICTORDER="yes"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${KV_MAJOR}.${KV_MINOR}-${HGPV}.tar.bz2"
+
+UNIPATCH_DOCS="${WORKDIR}/patches/hardened-patches-${KV_MAJOR}.${KV_MINOR}-${HGPV}/0000_README"
+
+# According to the patchset numbering scheme, 31xx patches are grsec related
+# while 32xx are SELinux related.
+
+if use selinux; then
+	UNIPATCH_LIST="${UNIPATCH_LIST} 31"
+else
+	UNIPATCH_LIST="${UNIPATCH_LIST} 32"
+fi
+
+DESCRIPTION="Hardened sources for the ${KV_MAJOR}.${KV_MINOR} kernel tree"
+
+SRC_URI="${KERNEL_URI} ${HGPV_SRC}"
+KEYWORDS="~x86"
+
+pkg_postinst() {
+	postinst_sources
+}