Add hardened-kernel-5.4.43 and hardened-kernel-4.19.125 ebuilds
parent
9dee55127e
commit
cf1bfd38f2
GPG Key ID:
E93720C6C73A77F4
|
|
@ -1,3 +1,50 @@
|
|||
DIST kernel-5.4.28.a-hardened.x86_64.rpm 61861019 BLAKE2B fd8687154a045d24c7dbb8afc92f19df116291a7640da2a874822804901fba874ad0501290774e018dc9db3611a7f9a0d6818e1178d51525286ca13d7b43338b SHA512 8560c690274787483f37e2bf6c2d6472ef56b446c8ea4b1119261e644137cf5924173f63e9a8e3c26d9edb72651d959c48c1cf94794739c447a9468887db8128
|
||||
DIST kernel-devel-5.4.28.a-hardened.x86_64.rpm 210645430 BLAKE2B cbd160bcb59a211e9bff8272d0d9c8c20271efd9842e35a56bbe87f98372b8cce746f035c9e482b5be1c351cad35bd28ef53faf4854b567288ff3e9471a39f6b SHA512 15c8e8429d16f8afbe634a63e1c25caefe47206f41c06e21271b56901056d4183530d91960decf5c7fed131a8ae83a504cc7be82f2997e03aad1cd699528cf6b
|
||||
EBUILD hardened-kernel-5.4.28.ebuild 1604 BLAKE2B 4f46183dd20bcf80d4592e2bbe27b679ad25d56112d7f83c88059a94960e3a36ac90a32d72097b7a0a352d4b088a89772e36696fcbc9103f9325460e0189d53e SHA512 e3d79b3ace2b9a79461f782aa55027944e1b1b8cc2beabc8c27f6d46f79a2358cbd6880c3fdb8c2ee97f9f440af0b9dd38c6eab749f17295f71c76a8ddda6a4f
|
||||
AUX linux-5.4.amd64.config 143286 BLAKE2B 160de9e2deeed5fc9489a2620fb56fa8f9b19dff2a7cfe6bf1e950ac1da199a9d26dc1de6ffc21f10749e8362053ea42c6d4a165864ceef1ae724af3e7abd387 SHA512 8b18486a2a6cb54bd8689dd59e7115e3c6a6cfdc8c894d6f194f5c52654d8187e0256bd9179d3b99ae248f504bf3a43861c648c5c01ebd36163757383c704b85
|
||||
AUX linux-5.4/9001_CVE-2019-12379.patch 1326 BLAKE2B 6eff041ea65aba116ddd96e5229d009f764f30e9ff0ef80d6674141cf26f6829a0ebe2f3674dc1a27ad63373766aa6644f33556e192a833092b7a0f3d18675dc SHA512 62e07dc31d5f6253fe747bef8e2816f59216cf4211b28397f16021a3db27596fbf42daa854b53ae6c5d3a6f6a4df3968e00ce3abe9c806e77cbf1f415e0b0c24
|
||||
AUX linux-5.4/9004_CVE-2019-19054.patch 1210 BLAKE2B 2184cbe9b15e8f7087a84f6d328af53de8766de8e1c85335877d113e0bc4355b1d92c4babd95458bcb2cf7df0218dfa440dbb904587bc9039d10a46344aecaca SHA512 2bf2ed725c826ab4446178a5d393f54810871caa9a0ca6a06a149cd4565c7b9923c4893f268a9acdacb46097348b713eae34602bf3286cf28abc4260196af86c
|
||||
AUX linux-5.4/9052_0052-drm-i915-save-AUD_FREQ_CNTRL-state-at-audio-domain-s.patch 3194 BLAKE2B 50632614e3bb13c8a4f1444dcbb2fe6de9fa6777fa78d5f50e0f2337d3c0efabfe175fc68b80c35c58e95c6081c2bb28c0dffa5ad4a537d71fa0a197e2e56e20 SHA512 7f2747b65bd5c2c0d0d89ea0609055b6df57ad4d86a16797864da6fcb6b7fc77f5f7756632caa1d3ea26155158521995c868b9b21360e73a8fd6ffef60710d7e
|
||||
AUX linux-5.4/9053_0053-drm-i915-Fix-audio-power-up-sequence-for-gen10-displ.patch 2278 BLAKE2B f10f0d7c003cf42abba502f9beaf8080bd6c57a28685148b70f25d85d47f51b266e3a33ab93560c5743eab27276291bb974480d6126d9548878a2e2552cef0e6 SHA512 1438ebf92ca3b36a906a21fc5eb657ac7dc48494264ecb83b6f672fa5707e16b02249517c42cb6800276e4f9d48d1a1e7dd01fe49558d77b51ef70b57501b347
|
||||
AUX linux-5.4/9054_0054-drm-i915-extend-audio-CDCLK-2-BCLK-constraint-to-mor.patch 1839 BLAKE2B cd7bd53bbb6d6406ad80f5d7f98d0a755931f716f426071cce19a9b151366d972e74064792c7756e7e761b01112fa81e4ca94eb7f1063333809ecc5a40a82adc SHA512 3b2c078008fb3528960e589a091b9aef12bc578ae6939e32830cafc00bd4ae5ce247587d41d5af1f8d570d0450cdb0263bfd25b05c8955333ad0cd612d863f5f
|
||||
AUX linux-5.4/9101_0101-i8042-decrease-debug-message-level-to-info.patch 2123 BLAKE2B fd3ed7dc924687a0606be77448af0f79f43bae5dce87d855eff0a1ae923efe7c3d14be8b23f1acbe2c499ce7e13827c29c61ba3766bb551d51a3f43c0e3547a9 SHA512 55038d455c7fdf2281f432745bc143b7274c0558acc47bba57e68ec0bc33a27dc2b177f1affde0bdddc32e632c8d2908cbbe0dcaffa1132511ee1f7cb278ff47
|
||||
AUX linux-5.4/9102_0102-Increase-the-ext4-default-commit-age.patch 1097 BLAKE2B a3a00f6ba5fef3abacc56c364667e3911cb9015366cc542f5cc339c91b71204afbeada2a23e2fceebe5596529f5608bd960eba10027190f711add92f1c3814fc SHA512 0085744c57ee80dda40f81fb7e57b7e895433b319bed4959ec8bc4b97e5313a67725667ac52639a497ef8c8c7740a33b4cd9b588008fa8c09a2e06de724b3d25
|
||||
AUX linux-5.4/9103_0103-silence-rapl.patch 831 BLAKE2B 2e39b8094132b38f118ef97c2c3915a74a0173cd2f88b6de176ab17117a3081b15407f44e9b4966d7f3b44eca1526d744ed8e58170dbe79c30724751e851573a SHA512 c978f3441b69ecc065ea12a482bcf73ce01d884703ccad9fd54d121ea78b545848302d491da984fc7551e798ed736b090770544c64f9a9e34f9bd9237aee5e98
|
||||
AUX linux-5.4/9104_0104-pci-pme-wakeups.patch 794 BLAKE2B 44563ee4b016b066ca44bc65a4d2b61f5f8c3a6663e1ce26f4de0d7189f7d6befb2fe9fa173f62fdbd52570bab231e7b94b8ef7114767fff62b37b1dcffbc4fd SHA512 dba6fc0aff4bd1dc968a2f08d21e15d791d30e1e515cd9f40cebed8fcb98d622a5deb34fce27537d5c8d2d726002941d912f41f714f87559f79a6095d40fb615
|
||||
AUX linux-5.4/9105_0105-ksm-wakeups.patch 1894 BLAKE2B 88041857a2f4cd78eeabdcc31c61d6d85e56b3c1a99faaa75d6b3884998c271be57ee42e9f611ec9a02ac09496330eba2cb9d7128da824a871df11646fa66206 SHA512 eea981d63fcd94f72a3fd7d714f7c738db08dcdbce324967aa232b4421eb42f20d214c3c87f9558e24bf8723d5e8adc5ff5095c2926c640cab41120e71644a99
|
||||
AUX linux-5.4/9106_0106-intel_idle-tweak-cpuidle-cstates.patch 7229 BLAKE2B 990225de896037667e643e663491ee5de7d7a1984db7eae520f5c565f038a094cbe955601c8e97c04d6a990f57a9060a1b14e07277abd4ec75122ab56df6b6c4 SHA512 e52a2f0e604c84a42f8123508967e8f0ffc8131310720c85bc09c41b1330e19e0454343b543e1665973d65bd8539c99667b82f970d150e51aabdd5cf48e95645
|
||||
AUX linux-5.4/9107_0107-bootstats-add-printk-s-to-measure-boot-time-in-more-.patch 1026 BLAKE2B 9ffc62f4bef83c51c2b3b3a7f88a49cfc7ff1deff6d591b8ac475feaa7e2890314375ef4600e89ccf2acd53624a43128113c73c9b01f40465b3a1f9c24248c93 SHA512 c825c2e5d17d3c85efe8efc2077e4f931526a62cb8c62bc42e65cc43648d9612a09a4f381863af17871a7bbe955d5f65dd9cdd3741cee4269c3f28c2f082f93a
|
||||
AUX linux-5.4/9108_0108-smpboot-reuse-timer-calibration.patch 818 BLAKE2B f381dce4f6db246e86b7597883443af067a89fca27ba36f6d1c903c876c6001dd824bcbd313a9b37e222b9b9e2e67dc44ca75e760168a6a7278cb3dc5ea873c4 SHA512 12bcc0bea4d8dc9e9f144c9c195f4125918bb2ad337e3a27a76713218d85ba1019aa7cb9621bd6031ee202f42df8f86d6ad8f73cc5b75ba2ffa5f17d487cba58
|
||||
AUX linux-5.4/9109_0109-raid6-add-Kconfig-option-to-skip-raid6-benchmarking.patch 4362 BLAKE2B 85e4588e6c36e04507a1ae077bc4ec4e000a3b006e1145d2579da5b5180f354576942ef15a947b5dac3471aca7ec84a81efa789017765f56341b5d33f42445d9 SHA512 b8c5fcef11c5a6166f03197890c40a5f380ad1790b253cd98145391045b1bdb80cd67af69dbeba3febae3e2c7991467e49b87a3ce22e9374263c7c94e16fa46a
|
||||
AUX linux-5.4/9110_0110-Initialize-ata-before-graphics.patch 1569 BLAKE2B 0cb41106463350792c9dff3e069f1b54d8b65b187489760d6f28feadfc9b70d3e62b83a3b183b7de2e97243fece8dad1b5cfc49a40b05dad356186d5201b6424 SHA512 f12aac546e4199e061c3d100ce76c62a81a2452a567485db7152682e646c7904f9bb27956759b814ab8da569734b621188d498782a016f41a63168ebb603f51c
|
||||
AUX linux-5.4/9111_0111-give-rdrand-some-credit.patch 995 BLAKE2B 07bb1ea29c73dff2fdf40ceb1c39c76ba2fe5e0e0989bdbb461764bccfbcd29de66d697a6068a3a7da96fa96e2a59d82f17be46fef0ae4f51a6ed5e220f22909 SHA512 f1270e12534b861882f88853347a1545eb7f25e758885db941b9aa8d4b00fefb16d017175a4c5058ba4d1bc9ca900369ee6775798cdd13b6022835e617aa8285
|
||||
AUX linux-5.4/9112_0112-ipv4-tcp-allow-the-memory-tuning-for-tcp-to-go-a-lit.patch 952 BLAKE2B 88db4d1f070afba94dcd2144ac0e1ffa586ae6d042d5b672457b7aeca33c2149dc02fae17726d50bb6a8d3d7c3fd5959c82dff9efce7c5cc71363647e2d572b9 SHA512 18a294cea9c7fda95501895f1156216cd7371b5acae4f2093c650f35c169b6defbe01fa2b9257aa4f9eae1faec4a5259c3849c695dbce5f59b0fb311c41d6f89
|
||||
AUX linux-5.4/9113_0113-kernel-time-reduce-ntp-wakeups.patch 777 BLAKE2B 212e55668fb9b334ac34b2b75b13790a7830f2a172f7259e1f052ab639cd1065f87ae0b4233b3dcb11c687bfd84a0a11fdef7d075e80d6afe117f15e30d27726 SHA512 9d5a3b2d0315329fab7f1fae214a2491cbe1d6ebce6235311caa9b9ba0f80183d3feedb8c1abe04012ee2f98e5a836b418d85cb60d6650cd8065b077caaaff90
|
||||
AUX linux-5.4/9114_0114-init-wait-for-partition-and-retry-scan.patch 1447 BLAKE2B e971ed1cab8b84d0b3c01b973a21febfa80dfaf1411ece38083eff4e931ef19e2fef9c619a32cf747e368dc9b180b9e30dd33929ee72d06596d1954ecfb68ce3 SHA512 87ec090c374ea0fa4484a00d4d352c10811d50322696b4d2833798b426deb7adacdac7453c31003e917919d9d494804c39e8acb14356b9e6364634d9c803ff10
|
||||
AUX linux-5.4/9115_0115-print-fsync-count-for-bootchart.patch 1498 BLAKE2B 0a1020d2581e0d038f0874d7de3d3ecc417a129d7edd206a78485d5dfb03aed98c4c08d553a118872d2235dbad8c447accd3ca743d5750c7266e22df2cee151e SHA512 f1363ea29c7869da360094305d17de162379b2095f0f7c0ae481b6aeb02235cc93653581f0e59f7770289b5468b5d08e922f3b5bd12f44b56c0686ae71a7048e
|
||||
AUX linux-5.4/9116_0116-Add-boot-option-to-allow-unsigned-modules.patch 2198 BLAKE2B 2d8dfa5141b480b61ead02d6b8c0d055819b3f5be0bf6529d1b648b3a516ca78c2e26ff3cfe8d72ede2fe5b5d1a7a086478871db5f637800eeb699bf43e7ba3b SHA512 4f7eb5b8c21694e83432978ff17ceb8685fc730fd02f1c1e16ed1865d3482291e7b608180c27b87defc2f073bc37916e9416c39d67511dea9a3a5ef60e61800a
|
||||
AUX linux-5.4/9117_0117-Enable-stateless-firmware-loading.patch 1031 BLAKE2B 0e6465420a66194ca718231fbbab1cbf51f2d05a50968025efe5f56ee07586ba25339f099cecd4a56a7ac52aa2f9e1761d5b4207ef9a1d1f52bf95a8c2e30518 SHA512 101cd9e39fb6358c8fb575fea1e77690ac1a7fde7f748798c992a91e54899945b175ffa975fc21023600ee2380a29b21cf55639d7974032c8643a130ffe9c289
|
||||
AUX linux-5.4/9118_0118-Migrate-some-systemd-defaults-to-the-kernel-defaults.patch 1602 BLAKE2B be12ac13585fc3b2051eddf71920f481cc3677e02106b6f29ec451794c39cc1d37b5c13afeb21f0fc53acc29b1d979a2b2d85c8bf7e28f13952c61865162dcd7 SHA512 16ab23002ec19a4c5b351cc83f131838cf855b781962c230f71c1c6b6587abbd5aa077d36b6b0e34a888d77a6b4b52fe655fd9d85e19d1dc28761ac17b17c81f
|
||||
AUX linux-5.4/9119_0119-xattr-allow-setting-user.-attributes-on-symlinks-by-.patch 2281 BLAKE2B 398839b04e6180b737c8fd1d544e70a4447a3f3eb75eec4e24fc8f67f36dccd0144386bf26a321c0d612cfdfc4e6a376a3797503ae9fde4d476cc3ebbb868b15 SHA512 92db7dd3419b64eee60b0e48da2975edff9907c29ca96e554c07954d00d19fa843519db70a58042133d3e8d9d845edb2b36dc4689e93f841505ff6bbb478bf4c
|
||||
AUX linux-5.4/9120_0120-add-scheduler-turbo3-patch.patch 2645 BLAKE2B dc8732e38aee23c33e2cf586aa7917c321719932ded24487e227326e2952919932477ea46ce88b60364aa413e10f965813d706912d07aecf9208989a401ebd9e SHA512 3075056ddf69aac1fa800f31451f9b10703854b8d96ec68b207b3d43ec375bdeb93c46f63be81c256fd9770296b5e78db97baa696abb5acf83398af4bd37bddf
|
||||
AUX linux-5.4/9121_0121-use-lfence-instead-of-rep-and-nop.patch 848 BLAKE2B 721e0488350ed4c739074680c9c2b9c5e0bcc63b459e03df2b91b28312b7c5fb5ff77d5524849a257004b3edd992e52e7b9174a723f9419fc6487a4084458072 SHA512 344d7aa32ceaad1ec78b379c8edbfc04992e75551b9752925964659862f27bc2c605f16d9d3ce1aafae4c167907850a969ab63306239e878cc3af77d82ca336f
|
||||
AUX linux-5.4/9122_0122-do-accept-in-LIFO-order-for-cache-efficiency.patch 3878 BLAKE2B 464c9bf40d2c3d1a1e2eb0fbd28bd55fb462d119f00d945bccddc6187536d18ff6881ca9151e44ce26b8d295e50e5102c440a2330baaf47a8070c236ce51977b SHA512 3827ae5499c013ab7aadfe1fc4c7c66d6096191f4a7bc44cad674ce7cdf57176fa89dd1ac2b9eae33fca567b80a04fd6b2c7bb1c09c5f8b7b1612ad0d980079a
|
||||
AUX linux-5.4/9123_0123-zero-extra-registers.patch 971 BLAKE2B 103455f353d5e408fbe4a3fe73ee993dd60af0df5ee057bbe2feda5a6de1ce3a2074a99d7c0acb29c69e369c44eda567affc991fdc90d863a666c27e8eab1af4 SHA512 528ee79439fc6ae4d0a4f57b8d05d69cf3850802efe5d90e70da23f414738356212120bf1d4ae900cccbc43e4600d6ddeb18519ecd2564db3f63e648d60fd2bd
|
||||
AUX linux-5.4/9124_0124-locking-rwsem-spin-faster.patch 1002 BLAKE2B 87514bcbbe30dbadf5bfe26231f78a35d4ca31f256703ef390f7d6cca14b965470e3c9405ca2adad7482fdd8b7bb8fd9fda5018b97d911ef85fc9d04d4982e08 SHA512 93831951ca8bf15a3660695453b21dfc87399b2c995434b1e89de71ad1ef82db8e06ad9a0086a3631da80a909f38204eaaf3cf27152c93559e37c818bb7868a6
|
||||
AUX linux-5.4/9125_0125-ata-libahci-ignore-staggered-spin-up.patch 1466 BLAKE2B a7765f9edb2d1f60b4f6fbc66cdc36a73661586d104e69f0faf2a1749378a4a1ad9643451d004dcb8627c129c772a5b70b21ff1e71c8de8fad82b5e9fc043d6b SHA512 daa47222b26ae0ab8b81ab7ec4efc91bc2aafb96029e81df8f71c965a10764e1eb010ae9d3ce87a4a0b2384ecd1c399b14fd666359d7eb5b377a5511f69cbdf7
|
||||
AUX linux-5.4/9126_0126-print-CPU-that-faults.patch 976 BLAKE2B 1cca18251ee83377d4ae83133d265331cfa0a8f46454b1f323cebd501f47ce6bc5aac2ef40f0fc6d23eb85c0569cddc42e78491a2e8468f5fe40bc88b5095c27 SHA512 88d12072c7a05bfd4215b9733fb87533615ef3f697f28e04c1c31166ba35ec9603273f516eed5a845704e75f1c58261b752fe42e996f9e9d936c23c5fb229459
|
||||
AUX linux-5.4/9127_0127-x86-microcode-Force-update-a-uCode-even-if-the-rev-i.patch 4328 BLAKE2B a5046c7eb4806c013174e15f81c0c645256a4044ac4f4775566a568810aff167923f260b13672e161bd2a8819018b0494697f3c3b98175955f8db116936980dc SHA512 32ce99684b12cc820f5cab6295c45c0ac12c86e896f84dc2873892e7fe6309e95905a23895dd161f8a73176888b5cec3dcf68eea4718bcab95c982bd1c59c8b4
|
||||
AUX linux-5.4/9128_0128-x86-microcode-echo-2-reload-to-force-load-ucode.patch 2137 BLAKE2B 6ebe1a45ab240e3b8388a189fead7908140705014f6ab649cb0083260f9214d22066d9fc6bfb15049e835617f0e760cbd0a381453a15c97f629daac2de7d174b SHA512 2c0545594364bce9a97b0e66cc6d53fe0064009d75a346fdc9c0b0f743f431f744349e61da916f9a7ef3f2834204f0dcc1a1fe47ba6b5a948e95685472c170e6
|
||||
AUX linux-5.4/9129_0129-fix-bug-in-ucode-force-reload-revision-check.patch 912 BLAKE2B d1340c3e9d2b65fcec19d44f6bf18a1e9b7af3f6df95e4d5757a356dbbe7967bd6a258b8cc17fa4d49e5e6b994577d1eb85b9ccd53a8325ba70037a719969a4d SHA512 8ba90dbaf05c8632ce4896cf0153d96385d812779800729010beac156cc643035af1db2b1ad726da1dd39a7ee92db7f947b26d5a1224567d9666cd687c33b181
|
||||
AUX linux-5.4/9131_0131-nvme-workaround.patch 957 BLAKE2B 417108734ef872b76ab5fd07e244b3bfac39045626bcdc422e37e7248ca2ce0844eec0babd57d0860145d2d18d334dfe46ce328a8a029cb29a4bd53164037a7a SHA512 ffe0e581f3e7efd5bd1de700cb434e9ef91761cc00d1f74da7e52d04478cc46e4bed655e934c8fbedd67434ef7c6c00baa5c59c471cca0bc494da9f6e5a4726c
|
||||
AUX linux-5.4/9199-WireGuard-fast-modern-secure-kernel-VPN-tunnel.patch 1735331 BLAKE2B 0cc5d12fe05bbbd5b1255549472640a04f1f2a82d8f2e0fb6d0af703727b8a0b887b496ba18d2cb8c7e1b0accb696254b10ba93e4e3078e99d237a987b1e0720 SHA512 b36f29ca8e920a14c5ad4877b2ff90e1758d495e6be49f03947fb942fb942ed08a87f8011e7af79e4c0b2ab568943bf403d4e8315ca550f487489352c7af761f
|
||||
DIST genpatches-4.19-124.base.tar.xz 3482680 BLAKE2B e8716be023f6512fb4613fab11a6ecf6472dd738cdb63669cfc6573e70030bfc5d3374c18672661867dd584d621cffdced21403a337af40b2428ff6703b6aa53 SHA512 dde38efe4b8e413b0aa1380c3fc4284b153b048a38cb8e05fdec34c14588d3e60092a20d247195389ceace0dc9e353caacaf9573c75a2327b4667dcad90c15fa
|
||||
DIST genpatches-4.19-124.extras.tar.xz 17516 BLAKE2B 1c7db2f9f888a9becf0dd891a3f9980431419af50552a4cda06c51f1a7b5d923698d6ce625c619b73386a300438f858a551ca53adc2a5bc110d6eda2a575a22d SHA512 4f29e993be982e272205c6d57e1828e7cc837abbde4a1e7b59e6b20eac648315bec135338b8f6e33df2b49d81e855a9f5c7eeebf6238fa8bc3bbd2215c324eff
|
||||
DIST genpatches-5.4-43.base.tar.xz 1471384 BLAKE2B 5d95108953fa888770bc863ec3819bfb652e3cde4a8a9db3929e4dfe3cd87e100e993c83fe0d87d064e68878c4f548b327f33e89058d16d66dfe43cd0880c359 SHA512 3f387d99a5a3f458b366b8fb0d6ddc0891171b532741089fd3ccaa5900083102fc63ea54e811042dac9d6b0ac87781109944bd8ff3ac9b63e541e7c8c180d32b
|
||||
DIST genpatches-5.4-43.extras.tar.xz 1764 BLAKE2B 92a0a6bc5406ad2b27e6de9daa95b005a2ac80d0373d15cf8b080e6bda504285cc63137113230d7213a47722f3cbef61138034b6e844d8a1875c5098acc18b85 SHA512 15b38aef60c03de9ece8c48e27ac8398c2a21188223fa5fd830729a946738f1ab1f1b811f07a1909a172e394fd8e0b7ada5561cd58ef83112000436a741f0476
|
||||
DIST linux-4.19.tar.xz 103117552 BLAKE2B 1dbf16cf410867412d17568fe42bc1e90c034183b654d270b650621ff7664a321950943d0639205bc1ee7ef6210be170c1f2c785a042ed8a4ec5e3a486d890e0 SHA512 ab67cc746b375a8b135e8b23e35e1d6787930d19b3c26b2679787d62951cbdbc3bb66f8ededeb9b890e5008b2459397f9018f1a6772fdef67780b06a4cb9f6f4
|
||||
DIST linux-5.4.tar.xz 109441440 BLAKE2B 193bc4a3147e147d5529956164ec4912fad5d5c6fb07f909ff1056e57235834173194afc686993ccd785c1ff15804de0961b625f3008cca0e27493efc8f27b13 SHA512 9f60f77e8ab972b9438ac648bed17551c8491d6585a5e85f694b2eaa4c623fbc61eb18419b2656b6795eac5deec0edaa04547fc6723fbda52256bd7f3486898f
|
||||
DIST linux-hardened-4.19.125.a.patch 97705 BLAKE2B ca013aaf31bf90177b5d2d2cb2018bafaa0173c6017193bd5bbc3568a4bd34d628798a8dc56411add627340b3b1617f7d43b02a7e032bd7e4374166e7c3bf8e0 SHA512 771a696115a9879b36fb01d3dc7c4cc9cd02591c07f6cca6f73e956818fa77e1dc42289f79167c4fb2deb69ec8fd9b458757bf45403d7fce874b7b57eb551482
|
||||
DIST linux-hardened-5.4.43.b.patch 100923 BLAKE2B bd2eae1a0b6d21a442abe519f33c86e91f7b2d36329679988694959e3df324109c75ebcaa15075915861d16f4cb6d23fe3ac8b9082b3a335fc5f1a85122a08d3 SHA512 2f9a96dd2ffe640ed901790c94c054b478a97febd809397e17be422aeac42c3cc9cfee37fe7df5a52279a1194152db5d4af0e9763f3463ddc44ea780c234db5f
|
||||
DIST tinycorelinux-10.1-amd64.qcow2 16842752 BLAKE2B e013e76503c335739a9623c0901ca791937a0e6b177854535cadec1e2c2cd2df588283ed3128cf652595f32264fbfe5b3bd3a8c97665fd4da344e308535be366 SHA512 c3aeb20ff8769da9211694b7f701907cc7ae7582cdfad2c2fdc008d97ebcbd9dc08245b4e8f8450e1cb304bd705345a11fe79f901a47979fee91443841d55641
|
||||
DIST tinycorelinux-10.1-x86.qcow2 14876672 BLAKE2B 3c760eb7438b13261e52ecfaa33a53649ced95f1ab40aae52134b8cdc31a16d7aa0d6a6dd716e268ed148e9d77a10b7c700b141b61d70c82d271ffe88e8e2a3c SHA512 9964538dc42f232a11949f74b61d46422ea5da3bdc253a217119bd0b8a750c40fd2da0b07157067be9ac0226472614f210a1248114df0d331df390979867a895
|
||||
EBUILD hardened-kernel-4.19.125.ebuild 2524 BLAKE2B c5f921537902486362e68d1ac8268999b0c6f7b895269103b2d5b4a9625bfd39e3269a86a3668b7dca8c167c4fd2a39e1460e97940df636d14aaeafea1119f33 SHA512 98a798ce7d62cf32d907f8f954327a16d1d5edd89e4f4911eaadf880b6183764cfc93a50422d2a9b30a2f303b0fec9ca89c8f14b486eb386fd2ab070d18108ae
|
||||
EBUILD hardened-kernel-5.4.43.ebuild 2517 BLAKE2B 8951385558e28360ddae284e603ebaa2b9c6f2f58e20ce7b307fd7eece2f77d9c7572d0ba7de4c2959141444d1f8997e393922b039b834862a60930bbcfd2b4b SHA512 b3d6661d3516703ac8f8bd69460a3a0b9ee0294045fe00caaafcf9dbaefe453efd9d07a1945cc571c4479b7cffb1cb52d561b8dcbe5a071cede25dd5c06d4ce4
|
||||
MISC metadata.xml 345 BLAKE2B 4003222d76459210cbeba27d68bcef9b42f500dd3dafe53505dae42004c5224eeae395fb30d7582de614654d2fde19d118c8c31fbc35e5335c9150d93f42efc9 SHA512 994d288cd16858bad3177d383a279f0f549ddf40ef87c62683815540b331bd48d4afa4d0c6af947e409c58f8abb5e1da045bb98dc00a422ea724cdf0610d6619
|
||||
|
|
|
|||
File diff suppressed because it is too large
Load Diff
|
|
@ -0,0 +1,85 @@
|
|||
# Copyright 2020 Gentoo Authors
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
|
||||
EAPI=7
|
||||
|
||||
inherit kernel-build
|
||||
|
||||
MY_P=linux-${PV%.*}
|
||||
GENPATCHES_P=genpatches-${PV%.*}-$((${PV##*.}-1))
|
||||
HARDENED_PATCH_VER="${PV}.a"
|
||||
GENPATCHES_EXCLUDE="1500_XATTR_USER_PREFIX.patch
|
||||
1510_fs-enable-link-security-restrictions-by-default.patch
|
||||
2900_dev-root-proc-mount-fix.patch
|
||||
4200_fbcondecor.patch
|
||||
4400_alpha-sysctl-uac.patch"
|
||||
|
||||
|
||||
DESCRIPTION="Linux kernel built with Gentoo patches"
|
||||
HOMEPAGE="https://www.kernel.org/"
|
||||
SRC_URI+=" https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/${MY_P}.tar.xz
|
||||
https://dev.gentoo.org/~mpagano/dist/genpatches/${GENPATCHES_P}.base.tar.xz
|
||||
https://dev.gentoo.org/~mpagano/dist/genpatches/${GENPATCHES_P}.extras.tar.xz
|
||||
https://github.com/anthraxx/linux-hardened/releases/download/${HARDENED_PATCH_VER}/linux-hardened-${HARDENED_PATCH_VER}.patch"
|
||||
|
||||
S=${WORKDIR}/${MY_P}
|
||||
|
||||
LICENSE="GPL-2"
|
||||
KEYWORDS="~amd64"
|
||||
|
||||
BDEPEND="
|
||||
!initramfs? ( sys-kernel/initramfs-image )
|
||||
app-crypt/sbsigntools"
|
||||
RDEPEND="
|
||||
!sys-kernel/gentoo-kernel:${SLOT}
|
||||
!sys-kernel/gentoo-kernel-bin:${SLOT}
|
||||
!sys-kernel/vanilla-kernel:${SLOT}
|
||||
!sys-kernel/vanilla-kernel-bin:${SLOT}"
|
||||
|
||||
src_prepare() {
|
||||
# remove some genpatches causes conflicts with linux-hardened patch
|
||||
for patch in ${GENPATCHES_EXCLUDE}; do
|
||||
rm -f ${WORKDIR}/${patch}
|
||||
done
|
||||
# include linux-hardened patch with priority
|
||||
cp ${DISTDIR}/linux-hardened-${HARDENED_PATCH_VER}.patch ${WORKDIR}/1199_linux-hardened-${HARDENED_PATCH_VER}.patch
|
||||
# copy Clear Linux patches
|
||||
cp "${FILESDIR}"/${MY_P}/*.patch ${WORKDIR}/
|
||||
|
||||
local PATCHES=(
|
||||
# meh, genpatches have no directory
|
||||
"${WORKDIR}"/*.patch
|
||||
)
|
||||
default
|
||||
|
||||
# prepare the default config
|
||||
case ${ARCH} in
|
||||
amd64)
|
||||
cp "${FILESDIR}"/${MY_P}.amd64.config .config || die
|
||||
;;
|
||||
*)
|
||||
die "Unsupported arch ${ARCH}"
|
||||
;;
|
||||
esac
|
||||
|
||||
local config_tweaks=(
|
||||
# shove arch under the carpet!
|
||||
-e 's:^CONFIG_DEFAULT_HOSTNAME=:&"gentoo":'
|
||||
# disable signatures
|
||||
-e '/CONFIG_MODULE_SIG/d'
|
||||
-e '/CONFIG_SECURITY_LOCKDOWN/d'
|
||||
# disable compression to allow stripping
|
||||
-e '/CONFIG_MODULE_COMPRESS/d'
|
||||
)
|
||||
sed -i "${config_tweaks[@]}" .config || die
|
||||
}
|
||||
|
||||
src_install() {
|
||||
default
|
||||
|
||||
if [[ -z "${UEFI_SB_KEY}" && -z "${UEFI_SB_CRT}" ]] ;then
|
||||
sbsign --key ${UEFI_SB_KEY} --cert ${UEFI_SB_CRT} --output ${D}/usr/src/linux-${PV}/arch/x86/boot/bzImage.signed \
|
||||
${D}/usr/src/linux-${PV}/arch/x86/boot/bzImage && \
|
||||
mv ${D}/usr/src/linux-${PV}/arch/x86/boot/bzImage.signed ${D}/usr/src/linux-${PV}/arch/x86/boot/bzImage
|
||||
fi
|
||||
}
|
||||
|
|
@ -1,66 +0,0 @@
|
|||
# Copyright 1999-2016 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
# $Id$
|
||||
|
||||
EAPI=7
|
||||
|
||||
SUFF_VER=".a-hardened"
|
||||
MY_PV="${PVR}${SUFF_VER}"
|
||||
|
||||
inherit rpm kernel-install
|
||||
|
||||
DESCRIPTION="Precompiled hardened kernel image with modules"
|
||||
HOMEPAGE="http://www.gentoo.org/proj/en/hardened/"
|
||||
SRC_URI="https://localhost/kernel-${MY_PV}.x86_64.rpm
|
||||
kernel-devel-${MY_PV}.x86_64.rpm"
|
||||
|
||||
S=${WORKDIR}
|
||||
|
||||
LICENSE="GPL-2"
|
||||
SLOT="${PVR}"
|
||||
KEYWORDS="amd64 -*"
|
||||
IUSE=""
|
||||
|
||||
DEPEND=""
|
||||
RDEPEND=""
|
||||
|
||||
QA_PREBUILT='*'
|
||||
|
||||
RESTRICT="strip"
|
||||
|
||||
src_install() {
|
||||
mkdir -p "${ED}"/usr/src "${ED}"/lib/modules
|
||||
mv lib/modules/${MY_PV} "${ED}"/lib/modules/${MY_PV} || die
|
||||
mv usr/src/${MY_PV} "${ED}"/usr/src/linux-${MY_PV} || die
|
||||
}
|
||||
|
||||
pkg_postinst() {
|
||||
if [[ -z ${ROOT} ]]; then
|
||||
mount-boot_pkg_preinst
|
||||
|
||||
local image_path=$(kernel-install_get_image_path)
|
||||
if use initramfs; then
|
||||
# putting it alongside kernel image as 'initrd' makes
|
||||
# kernel-install happier
|
||||
kernel-install_build_initramfs \
|
||||
"${EROOT}/usr/src/linux-${MY_PV}/${image_path%/*}/initrd" \
|
||||
"${MY_PV}"
|
||||
fi
|
||||
|
||||
kernel-install_install_kernel "${MY_PV}" \
|
||||
"${EROOT}/usr/src/linux-${MY_PV}/${image_path}" \
|
||||
"${EROOT}/usr/src/linux-${MY_PV}/System.map"
|
||||
fi
|
||||
|
||||
kernel-install_update_symlink "${EROOT}/usr/src/linux" "${MY_PV}"
|
||||
}
|
||||
|
||||
pkg_postrm() {
|
||||
if [[ -z ${ROOT} ]] && use initramfs; then
|
||||
local image_path=$(kernel-install_get_image_path)
|
||||
ebegin "Removing initramfs"
|
||||
rm -f "${EROOT}/usr/src/linux-${MY_PV}/${image_path%/*}/initrd" &&
|
||||
find "${EROOT}/usr/src/linux-${MY_PV}" -depth -type d -empty -delete
|
||||
eend ${?}
|
||||
fi
|
||||
}
|
||||
|
|
@ -0,0 +1,85 @@
|
|||
# Copyright 2020 Gentoo Authors
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
|
||||
EAPI=7
|
||||
|
||||
inherit kernel-build
|
||||
|
||||
MY_P=linux-${PV%.*}
|
||||
GENPATCHES_P=genpatches-${PV%.*}-${PV##*.}
|
||||
HARDENED_PATCH_VER="${PV}.b"
|
||||
GENPATCHES_EXCLUDE="1500_XATTR_USER_PREFIX.patch
|
||||
1510_fs-enable-link-security-restrictions-by-default.patch
|
||||
2900_dev-root-proc-mount-fix.patch
|
||||
4200_fbcondecor.patch
|
||||
4400_alpha-sysctl-uac.patch"
|
||||
|
||||
|
||||
DESCRIPTION="Linux kernel built with Gentoo patches"
|
||||
HOMEPAGE="https://www.kernel.org/"
|
||||
SRC_URI+=" https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/${MY_P}.tar.xz
|
||||
https://dev.gentoo.org/~mpagano/dist/genpatches/${GENPATCHES_P}.base.tar.xz
|
||||
https://dev.gentoo.org/~mpagano/dist/genpatches/${GENPATCHES_P}.extras.tar.xz
|
||||
https://github.com/anthraxx/linux-hardened/releases/download/${HARDENED_PATCH_VER}/linux-hardened-${HARDENED_PATCH_VER}.patch"
|
||||
|
||||
S=${WORKDIR}/${MY_P}
|
||||
|
||||
LICENSE="GPL-2"
|
||||
KEYWORDS="~amd64"
|
||||
|
||||
BDEPEND="
|
||||
!initramfs? ( sys-kernel/initramfs-image )
|
||||
app-crypt/sbsigntools"
|
||||
RDEPEND="
|
||||
!sys-kernel/gentoo-kernel:${SLOT}
|
||||
!sys-kernel/gentoo-kernel-bin:${SLOT}
|
||||
!sys-kernel/vanilla-kernel:${SLOT}
|
||||
!sys-kernel/vanilla-kernel-bin:${SLOT}"
|
||||
|
||||
src_prepare() {
|
||||
# remove some genpatches causes conflicts with linux-hardened patch
|
||||
for patch in ${GENPATCHES_EXCLUDE}; do
|
||||
rm -f ${WORKDIR}/${patch}
|
||||
done
|
||||
# include linux-hardened patch with priority
|
||||
cp ${DISTDIR}/linux-hardened-${HARDENED_PATCH_VER}.patch ${WORKDIR}/1199_linux-hardened-${HARDENED_PATCH_VER}.patch
|
||||
# copy Clear Linux patches
|
||||
cp "${FILESDIR}"/${MY_P}/*.patch ${WORKDIR}/
|
||||
|
||||
local PATCHES=(
|
||||
# meh, genpatches have no directory
|
||||
"${WORKDIR}"/*.patch
|
||||
)
|
||||
default
|
||||
|
||||
# prepare the default config
|
||||
case ${ARCH} in
|
||||
amd64)
|
||||
cp "${FILESDIR}"/${MY_P}.amd64.config .config || die
|
||||
;;
|
||||
*)
|
||||
die "Unsupported arch ${ARCH}"
|
||||
;;
|
||||
esac
|
||||
|
||||
local config_tweaks=(
|
||||
# shove arch under the carpet!
|
||||
-e 's:^CONFIG_DEFAULT_HOSTNAME=:&"gentoo":'
|
||||
# disable signatures
|
||||
-e '/CONFIG_MODULE_SIG/d'
|
||||
-e '/CONFIG_SECURITY_LOCKDOWN/d'
|
||||
# disable compression to allow stripping
|
||||
-e '/CONFIG_MODULE_COMPRESS/d'
|
||||
)
|
||||
sed -i "${config_tweaks[@]}" .config || die
|
||||
}
|
||||
|
||||
src_install() {
|
||||
default
|
||||
|
||||
if [[ -z "${UEFI_SB_KEY}" && -z "${UEFI_SB_CRT}" ]] ;then
|
||||
sbsign --key ${UEFI_SB_KEY} --cert ${UEFI_SB_CRT} --output ${D}/usr/src/linux-${PV}/arch/x86/boot/bzImage.signed \
|
||||
${D}/usr/src/linux-${PV}/arch/x86/boot/bzImage && \
|
||||
mv ${D}/usr/src/linux-${PV}/arch/x86/boot/bzImage.signed ${D}/usr/src/linux-${PV}/arch/x86/boot/bzImage
|
||||
fi
|
||||
}
|
||||
|
|
@ -0,0 +1,11 @@
|
|||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
|
||||
<pkgmetadata>
|
||||
<maintainer type="person">
|
||||
<email>alex@millerson.name</email>
|
||||
<name>Alexander Miroshnichenko</name>
|
||||
</maintainer>
|
||||
<use>
|
||||
<flag name='initramfs'>Build initramfs along with the kernel.</flag>
|
||||
</use>
|
||||
</pkgmetadata>
|
||||
|
|
@ -1,11 +0,0 @@
|
|||
DIST genpatches-4.19-25.base.tar.xz 744736 BLAKE2B e88e4c307d93db643f0b2ffb9f97b81763c1d7a903db652c52c29ace6eb2e911b0b685d66120203156caa8a50a6cf927594c62e5b45b4bf490217f367c3cc9b3 SHA512 3939582c9d641e4bd1e13f35b52dde7720bc3e9f4052145d7c88e88d0929474461fbb5d42ee58378150b8e64c276d455193467835cb38e9639e212de932434ef
|
||||
DIST genpatches-4.19-25.experimental.tar.xz 5808 BLAKE2B fb7b0ae0e7aba6f696e1ca23b97a84ca92764bce107596309d4f692f24a51deee3b45c6c3d5921de28bbca79677c1582ee2c36ab307005fa2f330123e4ef9018 SHA512 574ef13dbfaee86613336e356efb50b83e11a8cf5fa83533b946d706245a462fc5d47d6cdf93586ab63770b06af637fa739811159d50439e60f45629705741a0
|
||||
DIST genpatches-4.19-25.extras.tar.xz 17484 BLAKE2B 68a2cad49ec8b0f54b108728aa69accbe0e4eb209f5fde95142adfe7df5625291a7ab03a9b051e6b198bfb95b85c156aac3cc295835e74568be75d5e9575c91b SHA512 b407e59af09d8951fe2bf195c430054cadba0e1cc60d712ad7040a50ca198cdf17adb5fc932b69ec50fdd71287cd8736f34fd0d9648e32b9ae802e98dae76aa3
|
||||
DIST genpatches-4.19-73.base.tar.xz 1930676 BLAKE2B e78338d3682fc056aa5102cec8e765265799b0f6b580a30acce46e4666b1fccab2f51a25e1c6120cba78ea43a37a8a4787de7dbf9851d68d18dc8873f36b53a6 SHA512 1c6a28f59b66e7cc91b351311db148f7c5ea4652c6f5a90cd6dc1d0bf69768f6a9aa3f3e4c5480e540ff2440be06a905e4be4ead4bbc1e02dabbbdf0fb3f11d8
|
||||
DIST genpatches-4.19-73.experimental.tar.xz 6428 BLAKE2B d56a1db68b77db07424bb8e6aa4fbc43eb7dcedd606de329441aed889af04cee488df91d9a03eb1d777ff32afaba42b1d6742f9a19a7c82513887abbb0987168 SHA512 5a134ba909f271e1eb495b9b83881482b715bd7135b60b803af834a8c6766a5dabc6698dc4a95ef2e2ba44a10020ba3f13d9fc459790cfada9f4b0df3a020b50
|
||||
DIST genpatches-4.19-73.extras.tar.xz 17484 BLAKE2B 29e7117d721b835060eb37485efafa7ad96ea689f9b9fc7af370f5800c0174609131b44d9591ccc89657fc38829ecc502edd23de80a484210d388c7c2b73af9c SHA512 23bcb8ca9c6fbb083aa199937b4724160839acce09b1f3127b1133ae8efcf1c28a8e1a8cedbffcd301176441bd0cdb7dd2801d0e6eb2861add6801ea35a2f9dd
|
||||
DIST linux-4.19.tar.xz 103117552 BLAKE2B 1dbf16cf410867412d17568fe42bc1e90c034183b654d270b650621ff7664a321950943d0639205bc1ee7ef6210be170c1f2c785a042ed8a4ec5e3a486d890e0 SHA512 ab67cc746b375a8b135e8b23e35e1d6787930d19b3c26b2679787d62951cbdbc3bb66f8ededeb9b890e5008b2459397f9018f1a6772fdef67780b06a4cb9f6f4
|
||||
DIST linux-hardened-4.19.25.a.patch 92707 BLAKE2B 9407d2b9f7c9ce4deb4711cbbf53a7d27e200843ab2550b05fe2869c7e383cca274c233ba4f9216f867652ee15833b53ec1ee8344d083f896854c7536574398c SHA512 feb38fcc59280b45f8b1d7ea4f49c890614cdb9fd0c2e7351980f479821d93f87082ae7a38026557155dfda43f489619aff6436ea366c79054b1271b6deffe0a
|
||||
DIST linux-hardened-4.19.73.a.patch 93401 BLAKE2B 6b3593a85ae68f2e46810ef1606564049715020aca438ec9b7008b65b543fea44f738ac061579be160fed1c9489ce3a4a3156a855a7302f108aaa3f2495650fe SHA512 c8f88bf48ddafc9789f34bf62d37b90fae79cfc642a0d0a3c81a321223e2c7a99919100682d5c73789ecaa5340263bfd21bd7fcbacd11ae4071750c628437d34
|
||||
EBUILD linux-hardened-sources-4.19.25.ebuild 1713 BLAKE2B 66a5f28b006d057d8894e32434a299429a6522d2a0cd849c66599533fa597673243ffefc9b7e6868ffe5636c39dd8f806b75b87bf97951984b2fe35684250e34 SHA512 06f5d3f8900a80327b87224051f7b278576938031a7873748534910cc1c77e8c9a4da8b45235ad99731618671fd44663d1fbf98800de7bf5257a9d6529d27d6f
|
||||
EBUILD linux-hardened-sources-4.19.73.ebuild 1713 BLAKE2B 30aee68d89c318f45b024969d9475e490929f69b393014938a49efb6233ed55d4af6c8468f30782b845afd0b4f10edd6ce6923a0bbf6e4613bc4985f77269eea SHA512 5e6933e550f4d3f1a3cf77ba55f0aecec44cb8e1b859dd184e014b80d55dc24121c484ccb93f6fdaeb36d2586af09c44e35797bfb9bc3a5a16a13b4e5b4df4f7
|
||||
|
|
@ -1,40 +0,0 @@
|
|||
diff -ur linux-5.4.21.a-hardened/scripts/package/mkspec linux-5.4.21.a-hardened.new/scripts/package/mkspec
|
||||
--- linux-5.4.21.a-hardened/scripts/package/mkspec 2019-11-25 03:32:01.000000000 +0300
|
||||
+++ linux-5.4.21.a-hardened.new/scripts/package/mkspec 2020-03-28 17:07:06.136236182 +0300
|
||||
@@ -85,9 +85,11 @@
|
||||
mkdir -p %{buildroot}/boot
|
||||
%ifarch ia64
|
||||
mkdir -p %{buildroot}/boot/efi
|
||||
+ /usr/local/bin/sbsign_local.sh \$($MAKE image_name)
|
||||
cp \$($MAKE image_name) %{buildroot}/boot/efi/vmlinuz-$KERNELRELEASE
|
||||
ln -s efi/vmlinuz-$KERNELRELEASE %{buildroot}/boot/
|
||||
%else
|
||||
+ /usr/local/bin/sbsign_local.sh \$($MAKE image_name)
|
||||
cp \$($MAKE image_name) %{buildroot}/boot/vmlinuz-$KERNELRELEASE
|
||||
%endif
|
||||
$M $MAKE %{?_smp_mflags} INSTALL_MOD_PATH=%{buildroot} modules_install
|
||||
@@ -98,11 +100,11 @@
|
||||
mv vmlinux.bz2 %{buildroot}/boot/vmlinux-$KERNELRELEASE.bz2
|
||||
$S$M rm -f %{buildroot}/lib/modules/$KERNELRELEASE/build
|
||||
$S$M rm -f %{buildroot}/lib/modules/$KERNELRELEASE/source
|
||||
-$S$M mkdir -p %{buildroot}/usr/src/kernels/$KERNELRELEASE
|
||||
-$S$M tar cf - $EXCLUDES . | tar xf - -C %{buildroot}/usr/src/kernels/$KERNELRELEASE
|
||||
+$S$M mkdir -p %{buildroot}/usr/src/$KERNELRELEASE
|
||||
+$S$M tar cf - $EXCLUDES . | tar xf - -C %{buildroot}/usr/src/$KERNELRELEASE
|
||||
$S$M cd %{buildroot}/lib/modules/$KERNELRELEASE
|
||||
-$S$M ln -sf /usr/src/kernels/$KERNELRELEASE build
|
||||
-$S$M ln -sf /usr/src/kernels/$KERNELRELEASE source
|
||||
+$S$M ln -sf /usr/src/$KERNELRELEASE build
|
||||
+$S$M ln -sf /usr/src/$KERNELRELEASE source
|
||||
|
||||
%clean
|
||||
rm -rf %{buildroot}
|
||||
@@ -141,7 +143,7 @@
|
||||
$S$M
|
||||
$S$M %files devel
|
||||
$S$M %defattr (-, root, root)
|
||||
-$S$M /usr/src/kernels/$KERNELRELEASE
|
||||
+$S$M /usr/src/$KERNELRELEASE
|
||||
$S$M /lib/modules/$KERNELRELEASE/build
|
||||
$S$M /lib/modules/$KERNELRELEASE/source
|
||||
EOF
|
||||
|
|
@ -1,50 +0,0 @@
|
|||
# Copyright 1999-2018 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
|
||||
# See https://blogs.gentoo.org/ago/2017/08/21/sys-kernel-grsecurity-sources-available
|
||||
|
||||
EAPI="6"
|
||||
|
||||
ETYPE="sources"
|
||||
#K_GENPATCHES_VER="not-empty" # Set to not-empty to avoid the useless download of patch-*.xz
|
||||
K_WANT_GENPATCHES="base extras experimental"
|
||||
K_GENPATCHES_VER="25"
|
||||
K_NOSETEXTRAVERSION="1"
|
||||
NAME="linux-hardened"
|
||||
MINOR_VER=".a"
|
||||
PN="hardened"
|
||||
|
||||
inherit kernel-2
|
||||
detect_version
|
||||
detect_arch
|
||||
|
||||
UNIPATCH_LIST="${DISTDIR}/${NAME}-${PV}.a.patch"
|
||||
# ${FILESDIR}/4.14/*.patch"
|
||||
UNIPATCH_EXCLUDE="1500_XATTR_USER_PREFIX.patch
|
||||
1510_fs-enable-link-security-restrictions-by-default.patch
|
||||
2900_dev-root-proc-mount-fix.patch
|
||||
4200_fbcondecor.patch
|
||||
4400_alpha-sysctl-uac.patch"
|
||||
|
||||
LINHARD_URI="https://github.com/anthraxx/${NAME}/releases/download/${PV}${MINOR_VER}/${NAME}-${PV}${MINOR_VER}.patch"
|
||||
|
||||
KEYWORDS="~alpha amd64 ~arm ~arm64 ~hppa ~ia64 ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86"
|
||||
HOMEPAGE="https://dev.gentoo.org/~mpagano/genpatches"
|
||||
IUSE="experimental"
|
||||
|
||||
DESCRIPTION="Full sources including the Gentoo, ArchLinux and Linux Hardened patches for the ${KV_MAJOR}.${KV_MINOR} kernel tree"
|
||||
SRC_URI="${KERNEL_URI} ${GENPATCHES_URI} ${LINHARD_URI} ${ARCH_URI}"
|
||||
|
||||
src_compile() {
|
||||
echo "${MINOR_VER}-hardened" > ${S}/localversion-hardened
|
||||
}
|
||||
|
||||
pkg_postinst() {
|
||||
kernel-2_pkg_postinst
|
||||
einfo "For more info on this patchset, and how to report problems, see:"
|
||||
einfo "${HOMEPAGE}"
|
||||
}
|
||||
|
||||
pkg_postrm() {
|
||||
kernel-2_pkg_postrm
|
||||
}
|
||||
|
|
@ -1,50 +0,0 @@
|
|||
# Copyright 1999-2018 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
|
||||
# See https://blogs.gentoo.org/ago/2017/08/21/sys-kernel-grsecurity-sources-available
|
||||
|
||||
EAPI="6"
|
||||
|
||||
ETYPE="sources"
|
||||
#K_GENPATCHES_VER="not-empty" # Set to not-empty to avoid the useless download of patch-*.xz
|
||||
K_WANT_GENPATCHES="base extras experimental"
|
||||
K_GENPATCHES_VER="73"
|
||||
K_NOSETEXTRAVERSION="1"
|
||||
NAME="linux-hardened"
|
||||
MINOR_VER=".a"
|
||||
PN="hardened"
|
||||
|
||||
inherit kernel-2
|
||||
detect_version
|
||||
detect_arch
|
||||
|
||||
UNIPATCH_LIST="${DISTDIR}/${NAME}-${PV}.a.patch"
|
||||
# ${FILESDIR}/4.14/*.patch"
|
||||
UNIPATCH_EXCLUDE="1500_XATTR_USER_PREFIX.patch
|
||||
1510_fs-enable-link-security-restrictions-by-default.patch
|
||||
2900_dev-root-proc-mount-fix.patch
|
||||
4200_fbcondecor.patch
|
||||
4400_alpha-sysctl-uac.patch"
|
||||
|
||||
LINHARD_URI="https://github.com/anthraxx/${NAME}/releases/download/${PV}${MINOR_VER}/${NAME}-${PV}${MINOR_VER}.patch"
|
||||
|
||||
KEYWORDS="~alpha amd64 ~arm ~arm64 ~hppa ~ia64 ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86"
|
||||
HOMEPAGE="https://dev.gentoo.org/~mpagano/genpatches"
|
||||
IUSE="experimental"
|
||||
|
||||
DESCRIPTION="Full sources including the Gentoo, ArchLinux and Linux Hardened patches for the ${KV_MAJOR}.${KV_MINOR} kernel tree"
|
||||
SRC_URI="${KERNEL_URI} ${GENPATCHES_URI} ${LINHARD_URI} ${ARCH_URI}"
|
||||
|
||||
src_compile() {
|
||||
echo "${MINOR_VER}-hardened" > ${S}/localversion-hardened
|
||||
}
|
||||
|
||||
pkg_postinst() {
|
||||
kernel-2_pkg_postinst
|
||||
einfo "For more info on this patchset, and how to report problems, see:"
|
||||
einfo "${HOMEPAGE}"
|
||||
}
|
||||
|
||||
pkg_postrm() {
|
||||
kernel-2_pkg_postrm
|
||||
}
|
||||
|
|
@ -1,55 +0,0 @@
|
|||
# Copyright 1999-2018 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
|
||||
# See https://blogs.gentoo.org/ago/2017/08/21/sys-kernel-grsecurity-sources-available
|
||||
|
||||
EAPI="6"
|
||||
|
||||
ETYPE="sources"
|
||||
UNIPATCH_STRICTORDER="no"
|
||||
K_SECURITY_UNSUPPORTED="0"
|
||||
#K_GENPATCHES_VER="not-empty" # Set to not-empty to avoid the useless download of patch-*.xz
|
||||
K_WANT_GENPATCHES="base extras experimental"
|
||||
K_GENPATCHES_VER="28"
|
||||
K_NOSETEXTRAVERSION="1"
|
||||
NAME="linux-hardened"
|
||||
MINOR_VER=".a"
|
||||
PN="hardened"
|
||||
|
||||
inherit kernel-2
|
||||
detect_version
|
||||
detect_arch
|
||||
|
||||
UNIPATCH_LIST="${DISTDIR}/1199_${NAME}-${PV}.a.patch
|
||||
${FILESDIR}/5.4/*.patch
|
||||
${FILESDIR}/mkspec_script_local.patch"
|
||||
UNIPATCH_EXCLUDE="1500_XATTR_USER_PREFIX.patch
|
||||
1510_fs-enable-link-security-restrictions-by-default.patch
|
||||
2900_dev-root-proc-mount-fix.patch
|
||||
4200_fbcondecor.patch
|
||||
4400_alpha-sysctl-uac.patch"
|
||||
|
||||
LINHARD_URI="https://github.com/anthraxx/${NAME}/releases/download/${PV}${MINOR_VER}/${NAME}-${PV}${MINOR_VER}.patch -> 1199_${NAME}-${PV}${MINOR_VER}.patch"
|
||||
|
||||
KEYWORDS="~alpha amd64 ~arm ~arm64 ~hppa ~ia64 ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86"
|
||||
HOMEPAGE="https://dev.gentoo.org/~mpagano/genpatches"
|
||||
IUSE="experimental"
|
||||
|
||||
DESCRIPTION="Full sources including the Gentoo, ArchLinux, Clear Linux and Linux Hardened patches for the ${KV_MAJOR}.${KV_MINOR} kernel tree"
|
||||
SRC_URI="${KERNEL_URI} ${GENPATCHES_URI} ${LINHARD_URI} ${ARCH_URI}"
|
||||
|
||||
src_compile() {
|
||||
echo "${MINOR_VER}-hardened" > ${S}/localversion-hardened
|
||||
}
|
||||
|
||||
|
||||
K_EXTRAEINFO="For more info on this patchset, and for how to report problems, see: \
|
||||
${HOMEPAGE}"
|
||||
|
||||
pkg_postinst() {
|
||||
kernel-2_pkg_postinst
|
||||
}
|
||||
|
||||
pkg_postrm() {
|
||||
kernel-2_pkg_postrm
|
||||
}
|
||||
|
|
@ -1,13 +0,0 @@
|
|||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
|
||||
<pkgmetadata>
|
||||
<maintainer type="person">
|
||||
<email>alex@millerson.name</email>
|
||||
<name>Alexander Miroshnichenko</name>
|
||||
<description>Maintainer. Assign bugs to him</description>
|
||||
</maintainer>
|
||||
<longdescription>
|
||||
Minimal supplement to upstream Kernel Self Protection Project changes.
|
||||
Features already provided by SELinux + Yama and archs other than multiarch arm64 / x86_64 aren't in scope
|
||||
</longdescription>
|
||||
</pkgmetadata>
|
||||
Loading…
Reference in New Issue