blob: 98e89bd0bb4ed54c2956014c0975a7a7f1397942 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
|
# Copyright 1999-2003 Gentoo Technologies, Inc.
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/hardened-sources-2.4.22-r1.ebuild,v 1.1 2003/12/02 07:11:23 iggy Exp $
IUSE="build selinux"
# OKV=original kernel version, KV=patched kernel version. They can be the same.
ETYPE="sources"
inherit kernel || die
OKV=2.4.22
EXTRAVERSION=-hardened
KV=${OKV}${EXTRAVERSION}
S=${WORKDIR}/linux-${KV}
DESCRIPTION="Special Security Hardened Gentoo Linux Kernel"
SRC_URI="http://www.kernel.org/pub/linux/kernel/v2.4/linux-${OKV}.tar.bz2
mirror://gentoo/patches-${KV}.tar.bz2"
HOMEPAGE="http://www.kernel.org/ http://www.gentoo.org/proj/en/hardened/"
KEYWORDS="~x86 ~ppc"
SLOT="${KV}"
src_unpack() {
unpack linux-${OKV}.tar.bz2 patches-${KV}.tar.bz2
mv linux-${OKV} linux-${KV} || die
cd ${KV}
# We can't use LSM/SELinux and GRSec in the same kernel. If USE=selinux, we will
# patch in LSM/SELinux and drop support for GRsec. Otherwise we will include GRSec.
if [ "`use selinux`" ]; then
einfo "Enabling SELinux support. This will drop GRSec2 support."
for file in *grsec*; do
einfo "Dropping ${file}.."
rm -f ${file}
done
else
einfo "Did not find \"selinux\" in use, building with GRSec2 support."
for file in *lsm* *selinux*; do
einfo "Dropping ${file}..."
rm -f ${file}
done
fi
epatch ${FILESDIR}/do_brk_fix.patch || die "failed to patch for do_brk vuln"
kernel_src_unpack
}
pkg_postinst() {
einfo "This kernel contains LSM/SElinux or GRSecurity, and Systrace"
einfo "Also included are various other performance and security related patches"
einfo "If you experience problems with this kernel please report them by"
einfo "assigning bugs on bugs.gentoo.org to frogger@gentoo.org"
if [ "`use selinux`" ]; then
einfo ""
einfo "Warning! This kernel contains the new SELinux API and currently"
einfo "does not support ReiserFS. If you need ReiserFS support, and are"
einfo "using SELinux, then do not use this kernel."
einfo ""
einfo "The new SELinux API contains many changes from the previous API,"
einfo "including new userspace utilities. Please see "
einfo "http://www.gentoo.org/proj/en/hardened/selinux for more info."
fi
}
|
GitWeb
