+hardened-sources-3.10.3.ebuild

vanilla-3.10.3 + genpatches-3.10-7 + grsecurity-2.9.1-3.10.3-201307261236

sys-kernel/hardened-sources/Manifest

@@ -1,6 +1,9 @@
 DIST deblob-3.10 117299 SHA256 d48cad04fab6a802b3a3e34955c8e35b539c2441f9a62522ec5a132c3a5ae684 SHA512 7b30f0f97ed97bf6b096d4a321b4b1e62f4b48f07972f2511870c3eaaf4f3877b0c6af2f30f6b985edf9c9c79267d40448b504c59016acfe06374630d1fdcba9 WHIRLPOOL 03a5963367cc6cb4f87e3d315ab61a8b3cb1fe577b20d7e2fb6ad83464075b3ed8176f543bb4c3b4e607d78cd55ef940f446bb75be09eb7496321930413ce2b9
 DIST deblob-check-3.10 565672 SHA256 748df2cf5c1f012f9942948827e57b12bb05c569cae220416b3c0339520d9855 SHA512 341ea8a755c4f1f42ddbc4e7dfe8d786e8b29f497bee3fd72154c8c1c0bcadcb9efff04f2663090bd8741e5b5baafed26a62b9d16c31f3b31665cd3cd3e779d5 WHIRLPOOL 7e6c8eefa9b44e7d50011a9390baf7999533b4016122992c0ac0722cce05dbb8e4b7e96f1f05e9bfdd2ce3e4c08f0e06c8955b68ed8c044ff75f3a314a405824
 DIST genpatches-3.10-5.base.tar.xz 79792 SHA256 b6029fda1eff46b8bac312745f76450f58759019f80f2a1ebf5046637fd15caa SHA512 162cdc9adf56266c7b2ac821b7eeca0201a14507835cd8184969684ee797d8bb962490a288305bfbb3ea80abee6a1c62d25bef5d39484ab7e062baa6b58be1e7 WHIRLPOOL 5b0ee56ec432adc4a535084175ce1ec65e03b2694812103a6427197fc75ec6b5f50461f7a12763be949aab6d55c6eff33a0aa024addc4c8956ca88132828a222
+DIST genpatches-3.10-7.base.tar.xz 110968 SHA256 a1fd1e8c6ca30286a9c4487b18ffac8ec9b26f519bc2599eacec97a3c205423a SHA512 45ce0aa617801e386683ea4ad0c3a30ba5caa99c3ecfb06d427c5674668a279f0b9e864227c836aaad70c0e05ee7724e47e350341b794ab52dc3c20255c49966 WHIRLPOOL 0c948fd8e82378104370b84cf112f2aa8b4fa7a5cb727a1e8374404e29cb243371f84f2d67fd65b776e4a79d2a4689f62946f907db1cab80615c75f4fa478eb7
 DIST hardened-patches-3.10.2-1.extras.tar.bz2 718580 SHA256 5a0c9549f4d79b49b40e70ab0382d6641b2311c6b415dda82d95363cfeeed6f7 SHA512 90ee57f6baa210f74a52e2a5f86ec73ef97e9b37636174e05cc5b29b38d75126d74e1ac16fb7e674ad3973d6ea8a3d5c1b4db28e51a8331cab6e083353913e32 WHIRLPOOL 36474b85d0034411c0a0f44eee6a27cd9e9a97025529c64d5d0063eb5c55296340ec6c553e0b1c87916e2c5d3d25be86a0bbc7f1975ae857ebd416aef5c7b9c4
+DIST hardened-patches-3.10.3-1.extras.tar.bz2 720201 SHA256 c53eac900652837271c0d829b053d4a969b3ec383f7cc2c369714c2857666dcf SHA512 d521a0251338ed491e60c4aa5d4173555acd485bca1702e89c7d62551b77bea337f58ef6b970165cd03262bfb0307def3343bbc28c88b1f4a3bd42bdf9dda71d WHIRLPOOL d02f2ba1e49e7c0bb6a9ee6a93eaa58856440abb104e02d4dc80db9163af995e049a15c566e1ed1e4c7883629bed6a1f07e1d011978fa129bba1696ff26f19c0
 DIST linux-3.10.tar.xz 73175088 SHA256 df27fa92d27a9c410bfe6c4a89f141638500d7eadcca5cce578954efc2ad3544 SHA512 5fb109fcbd59bf3dffc911b853894f0a84afa75151368f783a1252c5ff60c7a1504de216c0012be446df983e2dea400ad8eeed3ce04f24dc61d0ef76c174dc35 WHIRLPOOL e7c0ccc2231e430b831218fc66f1940d095d2d5447d391329c6a7373d4a1d16708f64778b32e4847802ee2dae4fcf7cb67a1238fd4eb204fd0c4bce2d8134053
 EBUILD hardened-sources-3.10.2.ebuild 1525 SHA256 901b15034399294b5435100a970a79d0ae871fb99e46447c625c8dc148000985 SHA512 5b283c4c96ac0415e6916875689765cc976ac6a9cbd5e7576316305cf4545a8740a9266d9e15ff80e5c88557a252aa1e153f2e515f6857019926256b17f5cfdc WHIRLPOOL 892e267134a548353944bb6349861be16c40ecd0e6e4230d4d4261e7efe230d879887e32570957bcc98742cffd90b25fbd5d8fcc0342111a0da45dc32995f0a9
+EBUILD hardened-sources-3.10.3.ebuild 1525 SHA256 b4d426a0a87d615a09dba8ff69c5eda7e5dd9155c6b4f22e69e1c68658fcb5a8 SHA512 4db35216849bc0071951de8a253e5f4f0f2307a2c0d0be649b00933f9a79ab9f24b66626b1c85019a725e3d942dc8f8620f4fa95dfd52afd899dd27a12594cf3 WHIRLPOOL 945120454e3dfc402136c81957d0071d69b8f485dc64a9178fcc7c9ad4b906d64c2a9bae4d66c9939dd3691089ac30a23e9373613989f723792e085ac7e1ca7b

sys-kernel/hardened-sources/hardened-sources-3.10.3.ebuild

@@ -0,0 +1,47 @@
+# Copyright 1999-2013 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-3.10.3.ebuild,v 1.1 2013/07/27 15:30:39 blueness Exp $
+
+EAPI="5"
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base"
+K_GENPATCHES_VER="7"
+K_DEBLOB_AVAILABLE="1"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-1"
+HGPV_URI="http://dev.gentoo.org/~blueness/hardened-sources/hardened-patches/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="
+	1500_XATTR_USER_PREFIX.patch
+	1600_CVE-2013-4125-ipv6-fix-fib6_add_rt2node-BUG.patch
+	1600_CVE-2013-4127-fix-use-after-free-in-vhost_net_flush.patch
+	2900_dev-root-proc-mount-fix.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE="deblob"
+
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+RDEPEND=">=sys-devel/gcc-4.5"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.9.1*"
+
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}