Bumps to address IA32 syscall exploit.

Package-Manager: portage-2.1.8.3/cvs/Linux x86_64

4 files changed, 111 insertions, 2 deletions

diff --git a/sys-kernel/hardened-sources/ChangeLog b/sys-kernel/hardened-sources/ChangeLog
index c6f489134f77..745e03ac9983 100644
--- a/sys-kernel/hardened-sources/ChangeLog
+++ b/sys-kernel/hardened-sources/ChangeLog
@@ -1,6 +1,17 @@
 # ChangeLog for sys-kernel/hardened-sources
 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.337 2010/09/15 10:06:28 blueness Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.338 2010/09/17 20:21:28 blueness Exp $
+
+*hardened-sources-2.6.34-r6 (17 Sep 2010)
+*hardened-sources-2.6.32-r18 (17 Sep 2010)
+
+  17 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
+  +hardened-sources-2.6.32-r18.ebuild, +hardened-sources-2.6.34-r6.ebuild:
+  hardened-sources-2.6.32-r18 based on 2.6.32.21 + genpatches +
+  grsec-2.2.0-2.6.32.21-201009162222
+  hardened-sources-2.6.34-r6 based on 2.6.34.7 + genpatches +
+  grsec-2.2.0-2.6.34.7-201009162222
+  Addresses IA32 syscall exploit.
 
 *hardened-sources-2.6.34-r5 (15 Sep 2010)
 *hardened-sources-2.6.32-r17 (15 Sep 2010)
diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index fa18d3c4d845..f4bc129a5d9e 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -14,6 +14,8 @@ DIST genpatches-2.6.32-19.base.tar.bz2 626746 RMD160 33f173582c333bac51e381fd40c
 DIST genpatches-2.6.32-19.extras.tar.bz2 24934 RMD160 e3e1d60fb45a3e3c818ddda36b9180d4fc46679e SHA1 d16a34dfa35d163ea4042058b3865c389f3802e9 SHA256 50b70c76461aa52f7f2ad88175e7f08eb555f7f1dfd274759ec0c2a9748bde5e
 DIST genpatches-2.6.34-10.base.tar.bz2 196949 RMD160 c55b2dae24fa7eedaef31d847a881544284b779e SHA1 4edff0d41fdf2197b64495b1a71ccd11e9e2ace6 SHA256 10d04ba90cb73f0f531ba90a371011d6b0a52ca5d3c0526d8bc0900b93a70702
 DIST genpatches-2.6.34-10.extras.tar.bz2 15527 RMD160 988e3878a7c2a4676988e54010e8e8c76ed9d999 SHA1 1e218561e5d5c2d86e471245819dcc8ce022905e SHA256 7e99fb2c4320446b312110fc6f9f5e2bcc60127f80f80d8cb09c34483c68dca9
+DIST genpatches-2.6.34-11.base.tar.bz2 197383 RMD160 34c58d50327c21e6c22338c0ee3b3f6c2e33daff SHA1 94d058939a99fcd0082516d88e1afbd89c79fc1c SHA256 9fcf0e28097d3fa8157c571a2651413ec50f4928810fb5bc12c776e2a9223324
+DIST genpatches-2.6.34-11.extras.tar.bz2 15531 RMD160 d53bc0b7ce3c87f254873008ad50b13f56612dc3 SHA1 b453eb91799a5954cc94bff0bc70cab897e8c6cc SHA256 45a49ab7eb9735569ce3960b213473bc904c0a7aea95adb1bcd8b12dd7191c6d
 DIST genpatches-2.6.34-8.base.tar.bz2 174160 RMD160 06f5495f115586396018c1725efc80e92d491b52 SHA1 3114cefc293921a0eac6f5535dc84f866143abc9 SHA256 dd2a5dafdef7c881e62761d3ed5c04560afbbc35379fe0e64d3aa2d79478657a
 DIST genpatches-2.6.34-8.extras.tar.bz2 15527 RMD160 988e3878a7c2a4676988e54010e8e8c76ed9d999 SHA1 1e218561e5d5c2d86e471245819dcc8ce022905e SHA256 7e99fb2c4320446b312110fc6f9f5e2bcc60127f80f80d8cb09c34483c68dca9
 DIST hardened-patches-2.6.28-10.extras.tar.bz2 233317 RMD160 7ff56366f73e8a223ca4da85e580f66888f4f0da SHA1 31b6d4e358517a28424f94c7983cdd72a42072bf SHA256 93f3385acaf2149081a04cf6c98d176dbe3300d044b9001bc4cd89d303f26d8b
@@ -22,10 +24,12 @@ DIST hardened-patches-2.6.32-17.extras.tar.bz2 338718 RMD160 3c3151a5d77fc83c587
 DIST hardened-patches-2.6.32-18.extras.tar.bz2 338638 RMD160 d98a8c20b9434a73622812374898e2fae2b14604 SHA1 edbc3fb3b30b488e816987aa6f2faf2f16790616 SHA256 2acffc6af209583325aa63b404373ea5749e230699e7debb82f900ea78c83bd2
 DIST hardened-patches-2.6.32-19.extras.tar.bz2 339909 RMD160 9d4f563e65a22812d21e9bf03a413ace2b7c74d7 SHA1 153dd14ee75c93824bc0ff58f81d493a43ae5b07 SHA256 03e5c21639e4d038dfeb1d111953d39ee18cc1338113748dbb644a07a2fef918
 DIST hardened-patches-2.6.32-20.extras.tar.bz2 339160 RMD160 93776e2e2831e441d87c06bc10d9e4890d710a27 SHA1 7f2d33529b6fc9f3c74852708f401704965d6cb8 SHA256 d5a5fecead2926dcf4cd6ee114e4a72593a0b9c472143e177ed2c282739a9be6
+DIST hardened-patches-2.6.32-21.extras.tar.bz2 344277 RMD160 e5d70e6ff1c073f4c24da5435b181525cbd6de95 SHA1 c6b0f899abe043439cce0d289f3b319a08362f97 SHA256 e7af8720f84ca4a50561a1db5f3cc87d5392d2e25927231b668532b2c4432b77
 DIST hardened-patches-2.6.34-3.extras.tar.bz2 328656 RMD160 354aa3d8c1841dcefdf7d4e67a0a207c444475a9 SHA1 7f0d529ed399fe111b903f04d97c2242b12ef0c2 SHA256 262042b14f18ae6534faa7ef3bd84a40383b911b3175bb1a1ebad5ce2526a22e
 DIST hardened-patches-2.6.34-4.extras.tar.bz2 328967 RMD160 ccd466ac49bffac44c3f661a18e12e231e4f1b3e SHA1 72ca0bd881ff6b436eac2858c133da90976d30e1 SHA256 13a25ac1570ce7d1b98554cf9539c064831bbc86e9e0c222b96b7ff243c65081
 DIST hardened-patches-2.6.34-5.extras.tar.bz2 329058 RMD160 1857f975b1da0c9271dd662e1dcc2cffb8904ab0 SHA1 0a7506b8dbac768dee24111a7837f472bfa4e052 SHA256 db875b2d6b90200a29897832f92ad59d1bc0026a0a53e9f9d6d0f1167dba79c2
 DIST hardened-patches-2.6.34-6.extras.tar.bz2 332061 RMD160 2ff07061ffd4dd7001f755e9d3fef1ec23e33ad8 SHA1 25c56f38cf7588ce5a81595136cc3ff1c9922d2f SHA256 ceb03d8b8bbc31587604cd7fad02c7198c11516000645f13be4f1af205e23f99
+DIST hardened-patches-2.6.34-7.extras.tar.bz2 337669 RMD160 7177ec91676644a863b94765a2b83d026d43a9dd SHA1 c96e2156f33aac21d4e1fa5950fe3098402714e0 SHA256 3fb2cda6fb2724296e0e1a946ca7b69293e04da9f21ecb563f2ba282f7a8099a
 DIST linux-2.6.28.tar.bz2 52665364 RMD160 47e8925220e29e239f9478228fc53543c1f7b300 SHA1 4f40f8bf3fd110b0cc6e1fea5f539c98f9959e94 SHA256 ae0d97c55efe7fce01273c97f8152af0deff5541e3bbf5b9ad98689112b54380
 DIST linux-2.6.32.tar.bz2 64424138 RMD160 b93742cbaf8174f2200d2dbef0d47a26c618039c SHA1 410b4fc818023bfef60064e973ff0ab46d3bfb19 SHA256 5099786d80b8407d98a619df00209c2353517f22d804fdd9533b362adcb4504e
 DIST linux-2.6.34.tar.bz2 67633622 RMD160 dafd721b00c13e3652405b517b379eed10020bf4 SHA1 4188857ba71f301991dc56285f593e9c311e5824 SHA256 fa395fec7de633df1cb85b6248b8f35af98380ed128a8bc465fb48bc4d252633
@@ -34,10 +38,12 @@ EBUILD hardened-sources-2.6.32-r14.ebuild 1966 RMD160 211232d4292713c7f4b4a23144
 EBUILD hardened-sources-2.6.32-r15.ebuild 1708 RMD160 d987960c2951f433eb52c9e19dbbbafb50cac68b SHA1 1ec8f704955001f720d44942a5f0ccf4a2c2d71a SHA256 1a761b2b901b5864955acfd7d4b86d5d501c6ebdafe88563a403536bc48769ed
 EBUILD hardened-sources-2.6.32-r16.ebuild 1708 RMD160 e41a0647e193b10bc9e31962b5c293b722d0ea3e SHA1 aee8ea471ff88ddda320a595f52bd35f964d5e48 SHA256 74d14a42801f7376d2dba4be9697eb80122e2f58e53564341111923ebfcae83a
 EBUILD hardened-sources-2.6.32-r17.ebuild 1708 RMD160 e65caa628de7b6967b57ced20cf238114e5bf541 SHA1 4b75e0e704f098eba37b267983aec283f847aba3 SHA256 2303583bf4e82b2946936ba59a3763381fbcb8f692e782cfad571867a86eade0
+EBUILD hardened-sources-2.6.32-r18.ebuild 1708 RMD160 e8e550b474c29dad8103cd3dd17355e26f61c81e SHA1 c4550872ffb31c0c0a610ec328aa3bff5b8d4462 SHA256 5578a2fa094982e54979d5888d315f0be18ffb87bf05106ab5345cbc02a8eb8f
 EBUILD hardened-sources-2.6.32-r9.ebuild 1860 RMD160 18b591c7337e1aa801e8676ff80292b988ed332e SHA1 46a40ea2830743e0d6acc84f465c40ad3ec11f4f SHA256 9a3a5de2c2a5ee692202bfa7bdad128bd916b4aebc83ae816954e1795116b159
 EBUILD hardened-sources-2.6.34-r2.ebuild 1962 RMD160 776d392c223ff09eb0a140a551b7c7e09d2b47ec SHA1 125340555cd80a24ea0228b2d7d5f3d761168215 SHA256 7ebba4d7bcefa2ab9d0e0badd53c72bc957367532cbc7774d4f71fdbbf42fd5d
 EBUILD hardened-sources-2.6.34-r3.ebuild 1706 RMD160 354d220f01ce72e26ca317e2f2bb068016b3e6e0 SHA1 7c34c14eb21a898f489fab138233469402d3c176 SHA256 96b24f9f7ff09be220ca3dacf8f00c13811b0fa9271f27c0025bcbe9355c7faa
 EBUILD hardened-sources-2.6.34-r4.ebuild 1706 RMD160 464814bd700319723cc2d973b84f9ba7263d6dbb SHA1 3d55701638cb1bdfac8ec37f6030d85741a891e4 SHA256 1cd3b40e0f0f9996a41985ca4b6f3cce1b46e6666d869a9e129d43703b72c372
 EBUILD hardened-sources-2.6.34-r5.ebuild 1706 RMD160 bb3e1acbb608c790a681f71046a32e096f543fd1 SHA1 2b32ee56c447c7fdc3016e3a2f9d195bcb96d8f4 SHA256 5b713e98cd557045d738057023d0eca75469b6c303b30e373d67a1942695782e
-MISC ChangeLog 72026 RMD160 f7e34f04b928c425b57321c06461457ab7d8779c SHA1 b8214958bfc82d2c3cc24b80a5d6e9b38eacedfb SHA256 3a001fb16b6c69befd38af91975090bce4559b9b831004de17a45593c95efcd7
+EBUILD hardened-sources-2.6.34-r6.ebuild 1706 RMD160 80a71375ab8058ad2ac882d7e32ae6cca55c33e5 SHA1 baaa178ca8af11c48d8615d8dbe48eb9c5207bf6 SHA256 656abef0fd9894d405e697104065347212fc6d8ceb4b0b66616cbec33f74dde3
+MISC ChangeLog 72476 RMD160 df9958feb3d36f7df15d9df0aa9425f444a9d584 SHA1 365c929c2000547cb58d7fb5664f4185ddab5d6b SHA256 1be54e7a73a90dfed1c59d12fdf082e51a963c5a5362e8c6d58710000f4c9c3e
 MISC metadata.xml 578 RMD160 7ea189a37d0f863ae9c52170bb85df27d21686fb SHA1 4765c25d7770a69f7b9dda2b1accc8ff27b74ad0 SHA256 64140e091b51002a5355d8fcfd351f2f39ed63da68af3a5751fc2058d0d03813
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.32-r18.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r18.ebuild
new file mode 100644
index 000000000000..ba24b84b1d7c
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.32-r18.ebuild
@@ -0,0 +1,46 @@
+# Copyright 1999-2010 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.32-r18.ebuild,v 1.1 2010/09/17 20:21:28 blueness Exp $
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="19"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-21"
+HGPV_URI="mirror://gentoo/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE=""
+
+KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.2.0*"
+
+	ewarn
+	ewarn "Hardened Gentoo provides four different predefined grsecurity level:"
+	ewarn "[server], [server no rbac] [workstation] [workstation no rbac]"
+	ewarn
+	ewarn "Those who intend to use one of these predefined grsecurity levels"
+	ewarn "should read the help associated with the level.  Users importing a"
+	ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
+	ewarn "should review their selected grsecurity/PaX options carefully."
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}
diff --git a/sys-kernel/hardened-sources/hardened-sources-2.6.34-r6.ebuild b/sys-kernel/hardened-sources/hardened-sources-2.6.34-r6.ebuild
new file mode 100644
index 000000000000..915c131da859
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-2.6.34-r6.ebuild
@@ -0,0 +1,46 @@
+# Copyright 1999-2010 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.6.34-r6.ebuild,v 1.1 2010/09/17 20:21:28 blueness Exp $
+
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras"
+K_GENPATCHES_VER="11"
+
+inherit kernel-2
+detect_version
+
+HGPV="${KV_MAJOR}.${KV_MINOR}.${KV_PATCH}-7"
+HGPV_URI="mirror://gentoo/hardened-patches-${HGPV}.extras.tar.bz2"
+SRC_URI="${KERNEL_URI} ${HGPV_URI} ${GENPATCHES_URI} ${ARCH_URI}"
+
+UNIPATCH_LIST="${DISTDIR}/hardened-patches-${HGPV}.extras.tar.bz2"
+UNIPATCH_EXCLUDE="4200_fbcondecor-0.9.6.patch"
+
+DESCRIPTION="Hardened kernel sources (kernel series ${KV_MAJOR}.${KV_MINOR})"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
+IUSE=""
+
+KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+pkg_postinst() {
+	kernel-2_pkg_postinst
+
+	local GRADM_COMPAT="sys-apps/gradm-2.2.0*"
+
+	ewarn
+	ewarn "Hardened Gentoo provides four different predefined grsecurity level:"
+	ewarn "[server], [server no rbac] [workstation] [workstation no rbac]"
+	ewarn
+	ewarn "Those who intend to use one of these predefined grsecurity levels"
+	ewarn "should read the help associated with the level.  Users importing a"
+	ewarn "kernel configuration from a kernel prior to ${PN}-2.6.32,"
+	ewarn "should review their selected grsecurity/PaX options carefully."
+	ewarn
+	ewarn "Users of grsecurity's RBAC system must ensure they are using"
+	ewarn "${GRADM_COMPAT}, which is compatible with ${PF}."
+	ewarn "It is strongly recommended that the following command is issued"
+	ewarn "prior to booting a ${PF} kernel for the first time:"
+	ewarn
+	ewarn "emerge -na =${GRADM_COMPAT}"
+	ewarn
+}