Updated kernel to 2.6.32.14 and Grsec/PaX to 2.1.14-2.6.32.14-201005282233

3 files changed, 64 insertions, 1 deletions

diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
index 033581b..c8212be 100644
--- a/sys-kernel/hardened-sources/ChangeLog
+++ b/sys-kernel/hardened-sources/ChangeLog
@@ -2,6 +2,12 @@
 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
 # $Header: $
 
+*hardened-sources-2.6.32-r8 (29 May 2010)
+
+  29 May 2010; Anthony G. Basile <basile@opensource.dyc.edu>
+  +hardened-sources-2.6.32-r8.ebuild:
+  Updated kernel to 2.6.32.14 and Grsec/PaX to 2.1.14-2.6.32.14-201005282233
+
   28 May 2010; Anthony G. Basile <basile@opensource.dyc.edu>
   -hardened-sources-2.6.32-r7.ebuild, metadata.xml:
   Removed 2.6.32-r7 because its on the tree now.
diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index 25a4ba1..df581c0 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -1,8 +1,14 @@
+DIST deblob-2.6.32 84094 RMD160 394f46ec5b869638a7bc2e87beb118167c9bd6cb SHA1 1a2a1efb72126609d9e3b9be99ae5be2751efd06 SHA256 de625f0bd221c9c38d4453f1b709622f222d86a0ae9350d2b7b0e17795e6de6d
 DIST deblob-2.6.33 86599 RMD160 534eb7b76ea29561a0b6e73659f67fc746fad111 SHA1 0c3c2d8c299f3cb5d807bc4a35b20bdca50ccbce SHA256 176aa9c73f27c9c69f198e3637cae61072f152c25c468ffbebf1a4c2494d52d0
+DIST genpatches-2.6.32-12.base.tar.bz2 453330 RMD160 38062e6cac63e4e6bb4366ac562463288202251f SHA1 8cf6745987b234ddc7c55d34fc738364120bc29d SHA256 695b05dae7bedf27d0ed228b008f587c3a38ceb050c6ea366587f9fdc2e5eeb2
+DIST genpatches-2.6.32-12.extras.tar.bz2 24934 RMD160 e3e1d60fb45a3e3c818ddda36b9180d4fc46679e SHA1 d16a34dfa35d163ea4042058b3865c389f3802e9 SHA256 50b70c76461aa52f7f2ad88175e7f08eb555f7f1dfd274759ec0c2a9748bde5e
 DIST genpatches-2.6.33-3.base.tar.bz2 135726 RMD160 3e32b98bdc22141ec4262edd1735dedfd1b6e719 SHA1 4d5e95972b3afc41c1d102bf75d1b22edacc11ba SHA256 c1d29084f715c1c30fcbb64a29c8cee076cf29286cf0ad10c9df51eb136b4bb6
 DIST genpatches-2.6.33-3.extras.tar.bz2 23522 RMD160 579e83343a0f6bae8d543abf1d3a52cabd2c8aa8 SHA1 c9023272ea6805878b906affa4dedb50565343f1 SHA256 a301f823a11cbaae5b81092b60d92a9d9b53e8522167713428e74db2b4c629c1
+DIST hardened-patches-2.6.32-11.extras.tar.bz2 336999 RMD160 b867fc0d926b36a521d12717e14f542252ff0fc6 SHA1 ff8eeeeb607f446f87f9da0c8ae4385590f54467 SHA256 43d1fe9e98269258eb8ced55ec1296f25acaed2a8a802b36e59d6d13c20fd0ce
 DIST hardened-patches-2.6.33-3.extras.tar.bz2 334588 RMD160 41678ce0733aeceb857f63fba2432faef392eb8f SHA1 2810c9b17845eef18e1f91c4a4ff0b549ea548d2 SHA256 2c73d058e83c7bf7a5f28f01797d235232846abb8b638e15ca75a0401410870a
+DIST linux-2.6.32.tar.bz2 64424138 RMD160 b93742cbaf8174f2200d2dbef0d47a26c618039c SHA1 410b4fc818023bfef60064e973ff0ab46d3bfb19 SHA256 5099786d80b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e
 DIST linux-2.6.33.tar.bz2 66266488 RMD160 7f0897db8113bc17249d82d61ca41e3b91eb4664 SHA1 acc8db00f30c7dfb4f04183a88ba35a32b6f8e8d SHA256 63e237de3b3c4c46a21833b9ce7e20574548d52dabbd1a8bf376041e4455d5c6
+EBUILD hardened-sources-2.6.32-r8.ebuild 1955 RMD160 f00cb8584e94091b2b22160bf0795e293b6bf3e1 SHA1 cbe77e69a5d014494666b82707dd14bbcbc45884 SHA256 42a322a1379ffafea5e6cae9361d3e0e697d52d25b9bdc228043f5e564082d12
 EBUILD hardened-sources-2.6.33-r3.ebuild 1880 RMD160 68433a6096400600b45ab525717ff7746b2c45ae SHA1 268380227f633e505adcc48d847e3e641b887fbc SHA256 11e9d685d4319c0f3c381f46e5399ad43cf12419af04e8d3bf315b24379cadc4
-MISC ChangeLog 1020 RMD160 a142f2c37eee8d47a8a733372e31648af177220e SHA1 2c6caccfeb49f0deec200cb47361695d7b2a45e0 SHA256 35cd24aa63d4d46197c175472b220fdecf99d364ed8769b2fd4f61938cfea452
+MISC ChangeLog 1240 RMD160 04d2fc43dd47e7e3e314902717aac3e3e2a96777 SHA1 0fdc3f011e9035d5011f6419a294a8b9d56a2b5d SHA256 1ea787c9ad7786c3b523a7a1d19b6a3bb5c2941f3b221d6c5f8223607ef34c2f
 MISC metadata.xml 770 RMD160 ce43c497d4a4a6e4633bec0bce6593ce78605865 SHA1 75da150c2e9ee9847d12a9d79ee2b88b5a63993e SHA256 1e2850c18164d38a9893f9afaf4d31cb89bd8077801378447c31c35ecce92840
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r8.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r8.ebuild
new file mode 100644
index 0000000..beea0d1
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r8.ebuild
@@ -0,0 +1,51 @@
+# Copyright 1999-2010 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r7.ebuild,v 1.2 2010/05/27 13:00:16 chainsaw Exp $
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="12"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-11"
+#HGPV_URI="mirror://gentoo/hardened-patches-${HGPV}.extras.tar.bz2"
+HGPV_URI="http://opensource.dyc.edu/pub/distfiles/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE=""
+
+KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.1.14*"
+
+	ewarn
+	ewarn "As of ${CATEGORY}/${PN}-2.6.24 the predefined"
+	ewarn "\"Hardened [Gentoo]\" grsecurity level has been removed."
+	ewarn "Two improved predefined security levels replace it:"
+	ewarn "\"Hardened Gentoo [server]\" and \"Hardened Gentoo [workstation]\""
+	ewarn
+	ewarn "Those who intend to use one of these predefined grsecurity levels"
+	ewarn "should read the help associated with the level. Users importing a"
+	ewarn "kernel configuration from a kernel prior to ${PN}-2.6.24,"
+	ewarn "should review their selected grsecurity/PaX options carefully."
+	ewarn
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with kernel series ${OKV}."
+	ewarn "Therefore, it is strongly recommended that the following command is"
+	ewarn "issued prior to booting a ${P} series kernel for"
+	ewarn "the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}