Add hardened-sources-2.6.25-r13 release

Package-Manager: portage-2.1.6.4/cvs/Linux 2.6.27-hardened-r4-rc1-2009011401 i686

3 files changed, 61 insertions, 2 deletions

diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
index e47839f59729..edf488b3b1f4 100644
--- a/sys-kernel/hardened-sources/ChangeLog
+++ b/sys-kernel/hardened-sources/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for sys-kernel/hardened-sources
 # Copyright 2000-2009 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.271 2009/01/20 18:05:47 nixnut Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.272 2009/01/20 23:29:52 gengor Exp $
+
+*hardened-sources-2.6.25-r13 (20 Jan 2009)
+
+  20 Jan 2009; Gordon Malm <gengor@gentoo.org>
+  +hardened-sources-2.6.25-r13.ebuild:
+  Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253773, 254843
 
   20 Jan 2009; nixnut <nixnut@gentoo.org>
   hardened-sources-2.6.25-r12.ebuild:
diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index 5f06c0f34709..7c33d1b6bc0e 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -10,6 +10,7 @@ DIST genpatches-2.6.27-9.base.tar.bz2 165591 RMD160 d2be1a56b8bafd7de330379f3226
 DIST genpatches-2.6.27-9.extras.tar.bz2 41456 RMD160 bd6e5fc57d4895c23401f22892f630097174aead SHA1 35a86799ee1d4f55e347b2f01f64e4abbda8a7ae SHA256 384ecb94815261a960dd57b942206d73e2a7ad0e4d883400860a47f01573bd41
 DIST hardened-patches-2.6.25-12.extras.tar.bz2 258963 RMD160 d9850af282804c565481f1e1d64168d61a4a6e3c SHA1 b2e69c44dc5381bfb176d938f516109141a0c22b SHA256 cdefc7d2e74ab141dc9e99c54da4c50500f891e1aca0964605c31c2ed7f2d7b7
 DIST hardened-patches-2.6.25-13.extras.tar.bz2 262427 RMD160 f36c16737491de8db9dc94fc76ce23f214cbacf4 SHA1 20198a21ec66cab3e90fae1ee25e6308fa98c006 SHA256 41aa845edc08e75f124463d52972eaaac39f86beb70a9469bc44187cc9117c15
+DIST hardened-patches-2.6.25-14.extras.tar.bz2 261666 RMD160 d7c11888960362d5a84742c0845ac44a401e1317 SHA1 0985db3c69e182009e225d1e0382f7232f1d41d4 SHA256 77b9809f7f4cd1bfab0a297b5d69ca061cb03ba505a711d8cd7fd65f6bbe4f2a
 DIST hardened-patches-2.6.26-8.extras.tar.bz2 245967 RMD160 3cfd8dc1e40d62877ca6f3604afbcf8766433018 SHA1 6a2dcfb24fff7b74f230e9b21e5f8a2f06b02c09 SHA256 4deb8f23589a333d24ba3de55d58480b5adf7adb35925def4af7c203ef9e504d
 DIST hardened-patches-2.6.26-9.extras.tar.bz2 243525 RMD160 26c8bc9121ce088c505934134d20ff5699914887 SHA1 6947f837c52132035414878675e3fe3106827ffb SHA256 fb9f739bf7ba84513db4ebb954923cf9900b7f226d287bed00a5b184658a574e
 DIST hardened-patches-2.6.27-4.extras.tar.bz2 217705 RMD160 ca1d0362c9151a462faec7dda81f09400c04b335 SHA1 161034d8cb2de4b187c369e709c07053a92339b8 SHA256 d6ba06dc96707a74e0cc5151c63d4f366ad5f44f3bbef5322f89d7a9b9ce74ec
@@ -19,9 +20,10 @@ DIST linux-2.6.26.tar.bz2 49441874 RMD160 57c37e81afa48e7c05e1a933d390a12ac29212
 DIST linux-2.6.27.tar.bz2 50355835 RMD160 5be4595ad824a4af67c1ec0c692838ad0c31f0c0 SHA1 8425ec3be2652f9d511911ff4fcf99039d4574be SHA256 0e99bf9e83f4d1ae0c656741a84dfddfa9c4d2469cf35475f5939d02dc3e4393
 EBUILD hardened-sources-2.6.25-r11.ebuild 1958 RMD160 d63571bcfd84743dd05bd06413744537190fd91b SHA1 dc0e5ffe30ced056239e122091f0c4bd5f88a2fd SHA256 e17d25333527085769fb169e6190cf664edede76d9c25f0ea6d0c6cecb0f7565
 EBUILD hardened-sources-2.6.25-r12.ebuild 1958 RMD160 7cb813d62bd007f01761d315e4173fd55770d236 SHA1 5da5ad4b9b8c816917dfb33b102e88e3eaf4d1d4 SHA256 88863186b8998d2a74e81515a5b06d0a58049c7a38359fccdc523e51400f1458
+EBUILD hardened-sources-2.6.25-r13.ebuild 1961 RMD160 86b585abb44f047edae8ef4c27f6406920d4d624 SHA1 aea20d183ba308671a2a46f8ec2e8f140f7bed05 SHA256 94f5477c15e3f7e14571ace835d63e5a9fb5d7aac54abaab1aceb811a22066d4
 EBUILD hardened-sources-2.6.26-r7.ebuild 1999 RMD160 73f2efbc5effde8ef80018d899433a7b569efab2 SHA1 8cd9fb2c5992e710b8096b8851fecd9a40d591bd SHA256 879722bbc44012dee2165d1c38188c965f643ff10be11cc472b688e64b4d3b15
 EBUILD hardened-sources-2.6.26-r8.ebuild 1958 RMD160 4773cc72bf85abcb0ba3b4803b9ebd9f10b03862 SHA1 9ee22ee06e20798bbb5614fe1ee0463bdd74e57f SHA256 068ae0c8252058e0a1de0de665879436cc07c71b38a9fb9f8b4584f123a4c597
 EBUILD hardened-sources-2.6.27-r3.ebuild 1958 RMD160 2f434f82b0ce139d957bea46c2a188b041024827 SHA1 27a2867275b5743c9173f0c65064807552e69edd SHA256 f059ae7f5dec9d63b5bd0c652e0aa068cdb35e872f82859e71b942d160b16403
 EBUILD hardened-sources-2.6.27-r4.ebuild 1958 RMD160 564fef6c927cd4135804b4a6db9ca96999ea75ec SHA1 b3b7462d83e72f14f9a138e96ab82c7f44f15370 SHA256 a62e64c8bdd33e19505b0c3aaf22c8441e0f21a93872924e0ca2f1f93a0e1eed
-MISC ChangeLog 60224 RMD160 bb032c19449725931214ede88443bec38ed6de12 SHA1 0ff2204332ca6aa656141f5364ae7616cff769b9 SHA256 84acbe464f5eed667631a5d694deebba70aac14f5be1420f8fdd650408decfe2
+MISC ChangeLog 60430 RMD160 954776d944b68933a34fa4efcfae25862a78f333 SHA1 688d662b49b4fd46dd784683b7b33de161180400 SHA256 90d16d368d2ad1de41319bcb36052c86fdb9c1595a29fa16451e5bbcbda6ca42
 MISC metadata.xml 541 RMD160 c1aeb8ba5490432cbb1ddd97bb83a38988e0906e SHA1 5c2615e7e4074cac951e491ead158bb4cbb637b9 SHA256 89a1257a0cfe45645ebe83f878abbf88e32bc25344967346833e4b651797acc2
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.25-r13.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.25-r13.ebuild
new file mode 100644
index 000000000000..2202f7a2d381
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.25-r13.ebuild
@@ -0,0 +1,51 @@
+# Copyright 1999-2009 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.25-r13.ebuild,v 1.1 2009/01/20 23:29:52 gengor Exp $
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="11"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-14"
+HGPV_URI="http://dev.gentoo.org/~gengor/distfiles/${CATEGORY}/${PN}/hardened-patches-${HGPV}.extras.tar.bz2
+	mirror://gentoo/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.4.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE=""
+
+KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.1.12*"
+
+	ewarn
+	ewarn "As of ${CATEGORY}/${PN}-2.6.24 the predefined"
+	ewarn "\"Hardened [Gentoo]\" grsecurity level has been removed."
+	ewarn "Two improved predefined security levels replace it:"
+	ewarn "\"Hardened Gentoo [server]\" and \"Hardened Gentoo [workstation]\""
+	ewarn
+	ewarn "Those who intend to use one of these predefined grsecurity levels"
+	ewarn "should read the help associated with the level. Users importing a"
+	ewarn "kernel configuration from a kernel prior to ${PN}-2.6.24,"
+	ewarn "should review their selected grsecurity/PaX options carefully."
+	ewarn
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with kernel series ${OKV}."
+	ewarn "Therefore, it is strongly recommended that the following command is"
+	ewarn "issued prior to booting a ${P} series kernel for"
+	ewarn "the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}