Based on 2.6.32.46 + genpatches-2.6.32-43 + grsecurity-2.2.2-2.6.32.46-201109150655

Package-Manager: portage-2.1.10.11/cvs/Linux x86_64

3 files changed, 62 insertions, 5 deletions

diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
index a3f8fcd2f10a..7ca80d084054 100644
--- a/sys-kernel/hardened-sources/ChangeLog
+++ b/sys-kernel/hardened-sources/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for sys-kernel/hardened-sources
 # Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.470 2011/09/13 18:12:50 blueness Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.471 2011/09/15 22:07:26 blueness Exp $
+
+*hardened-sources-2.6.32-r68 (15 Sep 2011)
+
+  15 Sep 2011; Anthony G. Basile <blueness@gentoo.org>
+  +hardened-sources-2.6.32-r68.ebuild:
+  Based on 2.6.32.46 + genpatches-2.6.32-43 +
+  grsecurity-2.2.2-2.6.32.46-201109150655
 
   13 Sep 2011; Anthony G. Basile <blueness@gentoo.org>
   -hardened-sources-2.6.32-r64.ebuild, -hardened-sources-2.6.39-r12.ebuild,
diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index 64cd0d16b210..2e8dee8377b3 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -58,6 +58,7 @@ DIST hardened-patches-2.6.32-61.extras.tar.bz2 452203 RMD160 0483c9f37a02bb48a73
 DIST hardened-patches-2.6.32-68.extras.tar.bz2 497417 RMD160 404872425b2cef8bf0c7b9b56d705f466d934140 SHA1 7046e1d739a5059ecadadc514d0f947dbb327865 SHA256 4517588cea290e2a7662d579054ac24925692c98e09632a2eee279258da7ef7c
 DIST hardened-patches-2.6.32-69.extras.tar.bz2 486407 RMD160 cc6ab347f0d2fc825ab96667daef8baef4dc936e SHA1 98bd38b11b0f57b4303fc8331a4b480e8ed041af SHA256 4560f0ef378122797458d2208d560b031698355348583aa3a65bbfab8d6cfd70
 DIST hardened-patches-2.6.32-70.extras.tar.bz2 487719 RMD160 815d1cfba008c53577f27d8ed27c75f3462db653 SHA1 897f295a172f441a7b8d68791006eba9aa36b581 SHA256 560b60bbdb9c8d645cf448e30e479d1d4aa17a4c6e178a99da180c5e25b14801
+DIST hardened-patches-2.6.32-71.extras.tar.bz2 487527 RMD160 95e2cc3b6081516ec5d01cd749ef5989aa83ae7e SHA1 7748e44cf653733c4ecff2928f6fdcc6aa32b0cf SHA256 3c9a6b6c63e8c5f341fc9d9f9071dac4c424613e38aa8cde013962e5e887a41f
 DIST hardened-patches-2.6.34-7.extras.tar.bz2 337669 RMD160 7177ec91676644a863b94765a2b83d026d43a9dd SHA1 c96e2156f33aac21d4e1fa5950fe3098402714e0 SHA256 3fb2cda6fb2724296e0e1a946ca7b69293e04da9f21ecb563f2ba282f7a8099a
 DIST hardened-patches-2.6.35-8.extras.tar.bz2 349768 RMD160 6addf3007a5f4de95854fd4e93c65885b2494c7d SHA1 0cbabbcf7ab9b19214e583788b625330806d9898 SHA256 17f43e0b2203ac2020892164cbfd8b913c90cc3f8d1bae3ff88a8843f0bc56d7
 DIST hardened-patches-2.6.36-10.extras.tar.bz2 363448 RMD160 a656acbca00a3f238f83a14566dbeade33c69092 SHA1 c53dd6aae4c779cb135a612c416f2f623f9a9ce5 SHA256 e818e8bd2066f32aa209309aa17a482e7a006ae748d850860b900226720ce8dc
@@ -86,6 +87,7 @@ EBUILD hardened-sources-2.6.32-r58.ebuild 1756 RMD160 6b7b4158b8de0183dd1fec3c7d
 EBUILD hardened-sources-2.6.32-r65.ebuild 1758 RMD160 2bd45309a051d3942789f273612259c99a809bbe SHA1 82ddf118a228919b4608d778a7be92997a74b4e9 SHA256 e7bc3a07c3ec3ebfeda36ddd5520848ba6b53f2ac85b85a83b6199f88c7d20e0
 EBUILD hardened-sources-2.6.32-r66.ebuild 1806 RMD160 87ee2e4072903c31f32803902dc2cc9e8248e810 SHA1 aa6f66d3d5349de1475fd372c01c75f1e46a79df SHA256 f156d0b1f8d184aee54b3b3518bf2c577066e341d77300592664ed881a2e241d
 EBUILD hardened-sources-2.6.32-r67.ebuild 1806 RMD160 8e8530e26651da0ac2761b6a5b595c0c6feee01e SHA1 e6ab8e66dac6dfd7986c95121f8ca86ec3d5e4ab SHA256 c9e28f3837e03ec97b2096ac02143ded5ba8e8df9aafe0a4a55edeea9a70f125
+EBUILD hardened-sources-2.6.32-r68.ebuild 1806 RMD160 ca4a3963aaa73835902303fa0be09e23e5d87ce7 SHA1 6f8984b35b52e9d4fe46b81976f9b9638441345f SHA256 e314e83454bc68295df427eda705b2680b8da61287b292948e68c9362e3a7b8c
 EBUILD hardened-sources-2.6.32-r9.ebuild 1860 RMD160 18b591c7337e1aa801e8676ff80292b988ed332e SHA1 46a40ea2830743e0d6acc84f465c40ad3ec11f4f SHA256 9a3a5de2c2a5ee692202bfa7bdad128bd916b4aebc83ae816954e1795116b159
 EBUILD hardened-sources-2.6.34-r6.ebuild 1706 RMD160 0d08d4b375f7e06d6e57e5e486aff5a40f80ab1e SHA1 462a9fa6afeaa67a6536092afeee63a94f659880 SHA256 aec2073ce33134d2045f51f39569edf20b6580a20d6d07cefe0d909da79f2fb3
 EBUILD hardened-sources-2.6.35-r7.ebuild 1711 RMD160 7b69000bcad1938047477b4ff0db97e8588854e7 SHA1 4d71ffa586bc6ec1358b26a66cbe0cb26b586a15 SHA256 d81bfb0eacafb5d59b33de40254cc127fc9ae95b1c0925caffc818e50074b0a6
@@ -97,12 +99,12 @@ EBUILD hardened-sources-2.6.39-r8.ebuild 1753 RMD160 b1edeaa488dd2045f76434505fe
 EBUILD hardened-sources-3.0.3-r1.ebuild 1754 RMD160 c04411604308baecde607a0f5e378890628d63ed SHA1 c5e2f8bc22bf12a6b9d8e8cc662eb14850015d7b SHA256 a394f5e2b938e94e506f780c280b4a8c7acfa52ea55ec26c9fa8d55539facb07
 EBUILD hardened-sources-3.0.4-r1.ebuild 1754 RMD160 52b9eb0916cb6758c60fae9d1cddf89a76c9a9b2 SHA1 9909d59b8ffde559419cdbe4b1b4683156cb8f25 SHA256 1bdde7228b468eac3538d8c6ba489a7c097d1d49f29867fc3187a8613cca7ff3
 EBUILD hardened-sources-3.0.4.ebuild 1751 RMD160 fb01c592c42847d6c047fd6f5362892842abc4fd SHA1 7b5e1aebc1b5c42c5f8dc27ab59341764918749a SHA256 d0e432954cbc8cd2c5020a97ea75fe7fd1fabf6617236e831814ccc97c1f5254
-MISC ChangeLog 102634 RMD160 e184e78e0ce1a4148ae04e3f69d5629841e19e1a SHA1 ef0aa896d23270c2427931eb159cd238dbbf87c3 SHA256 eb0f8a90e80f93eff328a4b6801218b8a6c272fe77a004ab4b8bc949b18f0cd7
+MISC ChangeLog 102861 RMD160 d84a8814a141f234077e0e3dd1a2f148e4e9d6ee SHA1 631d0b2556382f15f5fe9762951d1e466c00250f SHA256 49a310c2c7741a54a2eabfb2819831fc7389db5894807071cf9b5e1aa2c2f65f
 MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SHA1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8fcfd351f2f39ed63da68af3a5751fc2058d0d03813
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.17 (GNU/Linux)
 
-iEYEAREIAAYFAk5vnS0ACgkQl5yvQNBFVTVmiQCgg/qvGwdOO6UESZepESIDa4om
-OQcAniIMg5xr7eLnMzGdKn9wX5mjON6X
-=zd6h
+iEYEAREIAAYFAk5ydygACgkQl5yvQNBFVTVV9QCgkByvCAAZZs4LY7saG2UXZgAY
+8eUAoKR113HEqmf+757AZijHDOC7wWlF
+=FYhZ
 -----END PGP SIGNATURE-----
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r68.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r68.ebuild
new file mode 100644
index 000000000000..43eaf4087ac3
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r68.ebuild
@@ -0,0 +1,48 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r68.ebuild,v 1.1 2011/09/15 22:07:26 blueness Exp $
+
+EAPI="4"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="43"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-71"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="2000_fix-broken-backport-for-ipv6-tunnels.patch 4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE=""
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.2.2*"
+
+	ewarn
+	ewarn "Hardened Gentoo provides three different predefined grsecurity level:"
+	ewarn "[server], [workstation], and [virtualization]."
+	ewarn
+	ewarn "Those who intend to use one of these predefined grsecurity levels"
+	ewarn "should read the help associated with the level.  Users importing a"
+	ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
+	ewarn "should review their selected grsecurity/PaX options carefully."
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}