/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.151 - (hide annotations) (download)
Tue May 15 04:29:36 2007 UTC (7 years, 7 months ago) by phreak
Branch: MAIN
Changes since 1.150: +14 -1 lines
Revision bump, incorporating Linux 2.6.20.11.
(Portage version: 2.1.2.7)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 opfer 1.130 # Copyright 2000-2007 Gentoo Foundation; Distributed under the GPL v2
3 phreak 1.151 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.150 2007/05/07 10:01:24 kevquinn Exp $
4    
5     *hardened-sources-2.6.20-r3 (15 May 2007)
6    
7     15 May 2007; Christian Heim <phreak@gentoo.org>
8     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
9     Revision bump, incorporating Linux 2.6.20.11.
10    
11     *hardened-sources-2.6.21-r1 (11 May 2007)
12    
13     11 May 2007; Christian Heim <phreak@gentoo.org>
14     +hardened-sources-2.6.21-r1.ebuild:
15     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
16     mentioned in #177234.
17 kevquinn 1.150
18     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
19     files/digest-hardened-sources-2.6.21, Manifest:
20     Fix Manifest/digest for linux-2.6.21.tar.bz2
21 phreak 1.149
22     06 May 2007; Christian Heim <phreak@gentoo.org>
23     hardened-sources-2.6.21.ebuild:
24     Bumping the hardened-patches version, needed for the fix for #177234.
25 phreak 1.148
26     *hardened-sources-2.6.21 (02 May 2007)
27    
28     02 May 2007; Christian Heim <phreak@gentoo.org>
29     +hardened-sources-2.6.21.ebuild:
30     Version bump, Linux 2.6.21-hardened.
31 phreak 1.147
32     29 Apr 2007; Christian Heim <phreak@gentoo.org>
33     hardened-sources-2.6.20-r2.ebuild:
34     Adding ~ia64 on Ned's request.
35 phreak 1.146
36     29 Apr 2007; Christian Heim <phreak@gentoo.org>
37     hardened-sources-2.6.20-r2.ebuild:
38     Fixing the included grsecurity patch, wasn't alligning due to the Index:
39     header line(s).
40 phreak 1.145
41     29 Apr 2007; Christian Heim <phreak@gentoo.org>
42     hardened-sources-2.6.20-r2.ebuild:
43     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
44 armin76 1.144
45     *hardened-sources-2.6.20-r2 (10 Apr 2007)
46    
47     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
48     +hardened-sources-2.6.20-r2.ebuild:
49     Version bump, on behalf of phreak
50 phreak 1.143
51     *hardened-sources-2.6.20-r1 (04 Apr 2007)
52    
53     04 Apr 2007; Christian Heim <phreak@gentoo.org>
54     +hardened-sources-2.6.20-r1.ebuild:
55     Revision bump, grabbing a newer grsecurity snapshot.
56 phreak 1.142
57     *hardened-sources-2.6.20 (25 Mar 2007)
58    
59     25 Mar 2007; Christian Heim <phreak@gentoo.org>
60     +hardened-sources-2.6.20.ebuild:
61     Finally a hardened-sources version for 2.6.20; many people have been waiting
62     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
63     testbox.
64 chainsaw 1.141
65     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
66     hardened-sources-2.6.18-r6.ebuild:
67     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
68 phreak 1.140
69     *hardened-sources-2.6.18-r6 (16 Mar 2007)
70    
71     16 Mar 2007; Christian Heim <phreak@gentoo.org>
72     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
73     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
74     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
75     supposed to be.
76 phreak 1.139
77     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
78     Fixing the Manifest, the previous one was broken (as in still had the
79     deleted ebuild in it).
80 phreak 1.138
81     06 Mar 2007; Christian Heim <phreak@gentoo.org>
82     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
83     +hardened-sources-2.6.18-r5.ebuild:
84     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
85     Linux 2.6.18.8. Also cleaning up the older version.
86    
87     *hardened-sources-2.6.18-r5 (06 Mar 2007)
88    
89     06 Mar 2007; Christian Heim <phreak@gentoo.org>
90     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
91     +hardened-sources-2.6.18-r5.ebuild:
92     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
93     Linux 2.6.18.8. Also cleaning up the older version.
94 phreak 1.137
95     24 Feb 2007; Christian Heim <phreak@gentoo.org>
96     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
97     -hardened-sources-2.6.19-r5.ebuild:
98     Removing some of the old version, that didn't work.
99 phreak 1.136
100     *hardened-sources-2.6.19-r6 (12 Feb 2007)
101    
102     12 Feb 2007; Christian Heim <phreak@gentoo.org>
103     +hardened-sources-2.6.19-r6.ebuild:
104     Revision bump, including a new grsec version fixing #166235.
105 pappy 1.134
106     *hardened-sources-2.4.34 (24 Jan 2007)
107    
108     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
109 pappy 1.135 Manifest:
110     updating Manifest with checksums of new tarball and ebuild
111    
112     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
113 pappy 1.134 +hardened-sources-2.4.34.ebuild:
114     I added new hardened sources 2.4 update, this is a critical path
115     security bugfix - all users of h-s are strongly advised
116     to update their existing hardened sources to this version.
117     It contains a fix for a kernel vulnerability that is pertaining
118     to the PaX changes to virtual memory management, possibly leading
119     to a local kernel exploit ... see grsecurity.net forums and homepage
120 phreak 1.133
121     23 Jan 2007; Christian Heim <phreak@gentoo.org>
122     files/digest-hardened-sources-2.6.19-r5, Manifest:
123     Fixing the patch-tarball digest.
124 phreak 1.132
125     *hardened-sources-2.6.19-r5 (23 Jan 2007)
126    
127     23 Jan 2007; Christian Heim <phreak@gentoo.org>
128     +hardened-sources-2.6.19-r5.ebuild:
129     Revision bump, closing the recently discovered PaX expand_stack()
130     vulnerability.
131 phreak 1.131
132     *hardened-sources-2.6.19-r4 (14 Jan 2007)
133    
134     14 Jan 2007; Christian Heim <phreak@gentoo.org>
135     +hardened-sources-2.6.19-r4.ebuild:
136     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
137     dropping the randomized PID feature.
138 opfer 1.130
139     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
140     hardened-sources-2.4.33.4.ebuild:
141     stable x86, bug #161171
142 phreak 1.129
143     *hardened-sources-2.6.19-r3 (27 Dec 2006)
144    
145     27 Dec 2006; Christian Heim <phreak@gentoo.org>
146     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
147     Revision bump for bug #157186 and #158786.
148 phreak 1.128
149     *hardened-sources-2.6.18-r4 (27 Dec 2006)
150    
151     27 Dec 2006; Christian Heim <phreak@gentoo.org>
152     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
153     Revision bump for bug #157186.
154 phreak 1.127
155     *hardened-sources-2.6.19-r2 (23 Dec 2006)
156    
157     23 Dec 2006; Christian Heim <phreak@gentoo.org>
158     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
159     Revision bump to pull in genpatches-2.6.19-3 for #157186.
160 phreak 1.126
161     17 Dec 2006; Christian Heim <phreak@gentoo.org>
162     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
163     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
164     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
165     hardened-sources-2.6.19-r1.ebuild:
166     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
167     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
168 pappy 1.125
169     *hardened-sources-2.4.33.4 (17 Dec 2006)
170    
171     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
172     +hardened-sources-2.4.33.4.ebuild:
173     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
174     and quilting
175 phreak 1.124
176     *hardened-sources-2.6.19-r1 (14 Dec 2006)
177    
178     14 Dec 2006; Christian Heim <phreak@gentoo.org>
179     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
180     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
181     for reporting).
182 phreak 1.123
183     *hardened-sources-2.6.19 (13 Dec 2006)
184    
185     13 Dec 2006; Christian Heim <phreak@gentoo.org>
186     +hardened-sources-2.6.19.ebuild:
187     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
188     Brad for providing that prompt update.
189 phreak 1.122
190     *hardened-sources-2.6.18-r3 (13 Dec 2006)
191    
192     13 Dec 2006; Christian Heim <phreak@gentoo.org>
193     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
194     +hardened-sources-2.6.18-r3.ebuild:
195     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
196     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
197 phreak 1.121
198     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
199     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
200 nixnut 1.120
201     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
202     Stable on ppc wrt bug 157356
203 opfer 1.119
204     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
205     hardened-sources-2.6.18.ebuild:
206     stable x86, bug #157356
207 phreak 1.118
208     *hardened-sources-2.6.18-r2 (06 Dec 2006)
209    
210     06 Dec 2006; Christian Heim <phreak@gentoo.org>
211     +hardened-sources-2.6.18-r2.ebuild:
212     Revision bump, including 2.6.18.5 (via genpatches) and
213     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
214     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
215     redesign.
216 phreak 1.117
217     06 Dec 2006; Christian Heim <phreak@gentoo.org>
218     hardened-sources-2.6.18.ebuild:
219     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
220     of Mike Doty).
221 phreak 1.116
222     *hardened-sources-2.6.18-r1 (23 Nov 2006)
223    
224     23 Nov 2006; Christian Heim <phreak@gentoo.org>
225     +hardened-sources-2.6.18-r1.ebuild:
226     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
227 phreak 1.115
228     *hardened-sources-2.6.18 (11 Nov 2006)
229    
230     11 Nov 2006; Christian Heim <phreak@gentoo.org>
231     +hardened-sources-2.6.18.ebuild:
232     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
233 solar 1.114
234     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
235     - mark amd64 stable also. bug #151877
236 solar 1.113
237     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
238     - mark 2.6.17-r1 stable
239 phreak 1.112
240     27 Aug 2006; Christian Heim <phreak@gentoo.org>
241     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
242     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
243 phreak 1.111
244     *hardened-sources-2.6.17-r1 (26 Aug 2006)
245    
246     26 Aug 2006; Christian Heim <phreak@gentoo.org>
247     +hardened-sources-2.6.17-r1.ebuild:
248     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
249     grsecurity patch.
250 phreak 1.110
251     *hardened-sources-2.6.17 (17 Aug 2006)
252    
253     17 Aug 2006; Christian Heim <phreak@gentoo.org>
254     +hardened-sources-2.6.17.ebuild:
255     Bumping the hardened-sources-2.6 series to 2.6.17, using
256     genpatches-2.6.17-6.base.
257 solar 1.109
258     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
259     - stable on x86 and amd64
260 solar 1.108
261     *hardened-sources-2.6.16-r11 (15 Jul 2006)
262    
263     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
264     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
265     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
266     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
267     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
268     crusty ebuilds
269 johnm 1.107
270     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
271     hardened-sources-2.6.16-r10.ebuild:
272     marking stable on x86 and amd64
273 solar 1.106
274     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
275     - 2.4.32-r6 stable on x86. RSBAC state unknown
276 kang 1.105
277     *hardened-sources-2.4.32-r7 (10 Jul 2006)
278    
279     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
280     +hardened-sources-2.4.32-r7.ebuild:
281     Bump PaX for RSBAC to test-17
282 johnm 1.104
283     *hardened-sources-2.6.16-r9 (03 Jul 2006)
284    
285     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
286     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
287     hardened-sources-2.6.16 bump to latest -base.
288 solar 1.103
289     *hardened-sources-2.4.32-r6 (30 Jun 2006)
290    
291     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
292     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
293     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
294     sysctl controlable resource logging
295 johnm 1.102
296     *hardened-sources-2.6.16-r7 (05 Jun 2006)
297    
298     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
299     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
300     push new 2.6.16 release in preparation for stable
301 solar 1.101
302     22 May 2006; <solar@gentoo.org> :
303     - redigest bug 134002
304 kang 1.100
305     *hardened-sources-2.4.32-r5 (16 May 2006)
306    
307     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
308     +hardened-sources-2.4.32-r5.ebuild:
309     Fixes rsbac common patching (new patch in new -r5 patchset)
310 solar 1.99
311     *hardened-sources-2.4.32-r4 (13 May 2006)
312    
313     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
314     +hardened-sources-2.4.32-r4.ebuild:
315     - security bumps
316 johnm 1.98
317     *hardened-sources-2.6.16-r6 (03 May 2006)
318    
319     03 May 2006; John Mylchreest <johnm@gentoo.org>
320     +hardened-sources-2.6.16-r6.ebuild:
321     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
322 johnm 1.97
323     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
324     hardened-sources-2.6.14-r8.ebuild:
325     fix x86_64 build problem, this will delay the digest issue again for a short
326     while but it will sort itself out
327 johnm 1.96
328     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
329     hardened-sources-2.6.14-r8.ebuild:
330     bump hardened patchset
331 antarus 1.94
332     27 Apr 2006; Alec Warner <antarus@gentoo.org>
333     files/digest-hardened-sources-2.4.32-r2,
334     files/digest-hardened-sources-2.4.32-r3,
335     files/digest-hardened-sources-2.6.14-r8, Manifest:
336     Fixing duff SHA256 digests: Bug # 131293
337 johnm 1.93
338 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
339    
340     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
341     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
342     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
343     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
344     cleanup of old uneccessary sources
345    
346 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
347     fix digest
348 johnm 1.92
349     *hardened-sources-2.6.14-r8 (20 Apr 2006)
350    
351     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
352     +hardened-sources-2.6.14-r8.ebuild:
353     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
354 johnm 1.91
355     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
356     Turning on gpg-signing again, and recomitting
357 johnm 1.90
358     *hardened-sources-2.6.16-r4 (20 Apr 2006)
359    
360     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
361     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
362     +hardened-sources-2.6.16-r4.ebuild:
363     Fix numerous security vulns
364 solar 1.89
365     *hardened-sources-2.4.32-r3 (16 Apr 2006)
366    
367     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
368     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
369     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
370     - security bump for bug #112791. Removed old ebuilds
371 johnm 1.88
372     *hardened-sources-2.6.16-r3 (15 Apr 2006)
373    
374     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
375     +hardened-sources-2.6.16-r3.ebuild:
376     Removing silly localversion which I missed
377 johnm 1.87
378     *hardened-sources-2.6.14-r7 (14 Apr 2006)
379    
380     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
381     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
382     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
383 johnm 1.86
384     *hardened-sources-2.6.16-r2 (13 Apr 2006)
385    
386     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
387     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
388     +hardened-sources-2.6.16-r2.ebuild:
389     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
390     labels, dropping USERGROUP define fixes, since these were merged mainstream.
391 johnm 1.85
392     *hardened-sources-2.6.16-r1 (11 Apr 2006)
393    
394     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
395     +hardened-sources-2.6.16-r1.ebuild:
396     Bumping to include ppc build fix and 2.6.16.3
397 tsunam 1.84
398     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
399     hardened-sources-2.6.14-r6.ebuild:
400     Stable on x86; bug #127718
401 johnm 1.83
402     *hardened-sources-2.6.16 (31 Mar 2006)
403    
404     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
405     +hardened-sources-2.6.16.ebuild:
406     Bumping to new version of grsec, and kernel base. New squashfs. Based on
407     2.6.16.1
408 cryos 1.82
409     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
410     hardened-sources-2.6.14-r6.ebuild:
411     Stable on amd64, bug 127718.
412 nixnut 1.81
413     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
414     Stable on ppc. Bug #127718
415 johnm 1.80
416     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
417     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
418     -hardened-sources-2.6.14-r4.ebuild:
419     Cleanup.
420 johnm 1.79
421     *hardened-sources-2.6.14-r6 (15 Mar 2006)
422    
423     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
424     +hardened-sources-2.6.14-r6.ebuild:
425     Fixes grsec policy recreation bug and adds a
426     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
427 solar 1.78
428     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
429     - stable on x86
430 hansmi 1.77
431     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
432     hardened-sources-2.6.14-r5.ebuild:
433     Stable on ppc.
434 johnm 1.76
435     *hardened-sources-2.6.14-r5 (01 Feb 2006)
436    
437     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
438     +hardened-sources-2.6.14-r5.ebuild:
439     fixing every known exploit
440 solar 1.75
441     *hardened-sources-2.4.32-r2 (26 Jan 2006)
442    
443     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
444     +hardened-sources-2.4.32-r2.ebuild:
445     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
446 solar 1.74
447     *hardened-sources-2.6.14-r4 (12 Jan 2006)
448    
449     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
450     - version bump for new genpatches which fix up a few sec holes
451 solar 1.73
452     *hardened-sources-2.4.32-r1 (05 Jan 2006)
453    
454     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
455     - revision bump to add misc vital linux kernel security patches.
456 johnm 1.72
457     *hardened-sources-2.6.14-r3 (30 Dec 2005)
458    
459     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
460     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
461     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
462 johnm 1.71
463     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
464     hardened-sources-2.6.14-r2.ebuild:
465     making x86 & amd64 stable following testing.
466 johnm 1.70
467     *hardened-sources-2.6.14-r2 (27 Dec 2005)
468    
469     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
470     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
471     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
472     network hooks.
473 johnm 1.69
474     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
475     hardened-sources-2.6.14-r1.ebuild:
476     bumping to stable early for sec fix on x86 & amd64
477 johnm 1.68
478     *hardened-sources-2.6.14-r1 (05 Dec 2005)
479    
480     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
481     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
482     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
483 solar 1.67
484     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
485     - stable on x86 security bug #114227 CAN-2005-3257
486 kang 1.66
487     *hardened-sources-2.4.32 (19 Nov 2005)
488    
489     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
490     +hardened-sources-2.4.32.ebuild:
491     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
492     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
493     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
494     rsbac >> /etc/portage/package.use)
495 johnm 1.65
496     *hardened-sources-2.6.14 (14 Nov 2005)
497    
498     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
499     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
500     Bumping 2.6 series to 2.6.14.2
501 johnm 1.64
502     *hardened-sources-2.6.13-r2 (20 Oct 2005)
503    
504     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
505     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
506     +hardened-sources-2.6.13-r2.ebuild:
507     Fixes minor build error in ppc.
508 johnm 1.63
509     *hardened-sources-2.6.13-r1 (17 Oct 2005)
510    
511     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
512     +hardened-sources-2.6.13-r1.ebuild:
513     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
514     2.6.13.4, fixes some major amd64 stability problems.
515 johnm 1.62
516     *hardened-sources-2.6.13 (16 Sep 2005)
517    
518     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
519     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
520     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
521     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
522     users should test this thoroughly.
523 solar 1.61
524     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
525     - stable on x86
526 johnm 1.60
527     *hardened-sources-2.6.11-r15 (27 Jun 2005)
528    
529     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
530     +hardened-sources-2.6.11-r15.ebuild:
531     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
532     grsec redefining curr_ip struct.
533 solar 1.59
534     *hardened-sources-2.4.31 (20 Jun 2005)
535    
536     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
537     initial import of 2.4.31 tree
538 johnm 1.58
539     *hardened-sources-2.6.11-r14 (14 Jun 2005)
540    
541     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
542     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
543     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
544     naming scheme to abide by genpatches
545 johnm 1.57
546     *hardened-sources-2.6.11-r13 (18 May 2005)
547    
548     18 May 2005; John Mylchreest <johnm@gentoo.org>
549     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
550     Managed to mangle the Makefile patch from grsec, to miss out the grsec
551     target. sorry about that. Fixes bug #93022
552 johnm 1.56
553     *hardened-sources-2.6.11-r12 (17 May 2005)
554    
555     17 May 2005; John Mylchreest <johnm@gentoo.org>
556     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
557     +hardened-sources-2.6.11-r12.ebuild:
558     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
559     merges in genpatches-base
560 johnm 1.55
561     *hardened-sources-2.6.11-r12 (17 May 2005)
562    
563     17 May 2005; John Mylchreest <johnm@gentoo.org>
564     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
565     +hardened-sources-2.6.11-r12.ebuild:
566     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
567     merges in genpatches-base
568 solar 1.54
569     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
570     -files/2.4.27-cmdline-race.patch,
571     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
572     -files/2.4.28-grsec-binfmt_a.out.patch,
573     -files/2.4.28-grsec-cmdline-race.patch,
574     -files/2.4.28-selinux-binfmt_a.out.patch,
575     -files/2.4.28-selinux-cmdline-race.patch,
576     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
577     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
578     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
579     cleanup..
580 solar 1.53
581     *hardened-sources-2.4.30-r1 (21 Apr 2005)
582    
583     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
584     - disable aout by default
585 solar 1.52
586     *hardened-sources-2.4.30 (18 Apr 2005)
587    
588     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
589     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
590     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
591     use
592 tocharian 1.50
593 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
594    
595     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
596     +hardened-sources-2.4.29.ebuild:
597     New hardened-patches-2.4-29.0 patchball.
598     Removed SELinux support, upgraded GRSecurity to 2.1.4.
599    
600     *hardened-sources-2.4.28-r5 (06 Mar 2005)
601    
602     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
603     +hardened-sources-2.4.28-r5.ebuild:
604     Added a fix for a PaX vulnerability.
605    
606     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
607 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
608     Stable on x86
609 solar 1.49
610     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
611     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
612     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
613     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
614     - fixed/added RDEPEND= in all kernel-2 ebuilds
615 tocharian 1.48
616     *hardened-sources-2.4.28-r4 (21 Jan 2005)
617    
618     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
619     +hardened-sources-2.4.28-r4.ebuild:
620     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
621     backport of neighbour hash updates.
622 tocharian 1.47
623     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
624     hardened-sources-2.4.28-r3.ebuild:
625     Stable on x86
626 tseng 1.46
627     *hardened-sources-2.6.10-r3 (20 Jan 2005)
628    
629     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
630     +hardened-sources-2.6.10-r3.ebuild:
631     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
632     in 2005.0
633 tocharian 1.45
634     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
635     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
636     hardened-sources-2.4.28-r2.ebuild:
637     Mark stable on x86
638 tocharian 1.44
639     *hardened-sources-2.4.28-r3 (17 Jan 2005)
640    
641     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
642     +hardened-sources-2.4.28-r3.ebuild:
643     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
644 tocharian 1.43
645     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
646     hardened-sources-2.4.28.ebuild:
647     Mark stable on x86.
648 tocharian 1.42
649     *hardened-sources-2.4.28-r2 (13 Jan 2005)
650    
651     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
652     +hardened-sources-2.4.28-r2.ebuild:
653     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
654     Mazinger for grsecurity patches as well.
655 plasmaroo 1.41
656     *hardened-sources-2.4.28-r1 (23 Dec 2004)
657    
658     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
659     Security bump. Thank tocharian for rolling a new patchset...
660 solar 1.40
661     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
662     +files/2.4.28-grsec-cmdline-race.patch,
663     +files/2.4.28-selinux-binfmt_a.out.patch,
664     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
665     - Round up remaining security patches that appear to be missing in 2.4.28. -
666     PaX standalone updated to current. hgpv=28.1
667 solar 1.39
668     *hardened-sources-2.4.28 (28 Nov 2004)
669    
670     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
671     security bump. Thank tocharian for rolling a new patchset
672 scox 1.31
673 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
674    
675     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
676     +hardened-sources-2.4.27-r3.ebuild:
677     Applies the new 2.4-27.2 patchball which updates
678     GRSecurity to the 2.0.1 version.
679    
680 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
681    
682     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
683     +hardened-sources-2.4.27-r2.ebuild:
684     Version bump.
685     This version uses the new 2.4-27.1 patchball which updates
686     both the SELinux PaX hooks patch and the SELinux headers.
687    
688 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
689    
690     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
691     +hardened-sources-2.4.27-r1.ebuild,
692     -hardened-sources-2.4.27.ebuild,
693     +files/2.4.27-cmdline-race.patch:
694     Version bump, fix for cmdline race. See bug #59905.
695    
696     *hardened-sources-2.4.26-r6 (09 Aug 2004)
697    
698     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
699     +hardened-sources-2.4.26-r6.ebuild,
700     -hardened-sources-2.4.26-r5.ebuild,
701     -hardened-sources-2.4.26-r4.ebuild,
702     +files/2.4.26-cmdline-race.patch:
703     Version bump, fix for cmdline race. See bug #59905.
704    
705 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
706    
707     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
708     +hardened-sources-2.4.27.ebuild,
709     +files/2.4.27-CAN-2004-0394.patch:
710     Ported the patchball to the 2.4.27 kernel version.
711    
712 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
713    
714     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
715     +hardened-sources-2.4.26-r5.ebuild:
716 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
717 scox 1.34 It adds the following features:
718     - Squashfs
719     - Ebtables
720     - Netdev random (core+drivers)
721     - Watchdog Timer (WDT) fix.
722    
723 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
724    
725     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
726     +hardened-sources-2.4.26-r4.ebuild,
727     +files/2.4.26-CAN-2004-0415.patch,
728     -hardened-sources-2.4.26-3:
729     Version bump, fix for CAN 0415, see bug #59378.
730    
731 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
732    
733     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
734     +hardened-sources-2.4.26-r3.ebuild,
735     +files/2.4.26-CAN-2004-0497.patch,
736     -hardened-sources-2.4.26-r2.ebuild:
737     Version bump, fixed CAN 0497, see bug #56171.
738    
739 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
740    
741     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
742 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
743 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
744     +files/2.4.26-CAN-2004-0535.patch,
745     -hardened-sources-2.4.26-r1.ebuild:
746     Fixes for both CAN 0495 and 0535, see bug #54976
747 pvdabeel 1.27
748 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
749     hardened-sources-2.4.26-r1.ebuild:
750     QA - fix use invocation
751 scox 1.28
752     *hardened-sources-2.4.26-r1 (22 June 2004)
753    
754     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
755     +hardened-sources-2.4.26-r1.ebuild,
756     +files/2.4.26-CAN-2004-0394.patch,
757     +files/2.4.26-signal-race.patch,
758     -hardened-sources-2.4.26.ebuild,
759     -hardened-sources-2.4.24-r3.ebuild:
760     Version bump for the CAN-2004-0394 issue and bug #53804
761     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
762    
763    
764 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
765     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
766     Masked hardened-sources-2.4.26.ebuild broken for ppc
767    
768     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
769     hardened-sources-2.4.24-r3.ebuild:
770     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
771 plasmaroo 1.25
772 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
773    
774     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
775     +hardened-sources-2.4.26.ebuild:
776     Updated hardened-sources for the 2.4.26 kernel
777     Removed broken components, updated almost everything.
778    
779 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
780    
781     17 Apr 2004; <plasmaroo@gentoo.org>
782     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
783     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
784     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
785     +hardened-sources-2.4.24-r3.ebuild:
786     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
787     vulnerabilities. Old revisions removed.
788 plasmaroo 1.24
789     *hardened-sources-2.4.24-r2 (15 Apr 2004)
790    
791     15 Apr 2004; <plasmaroo@gentoo.org>
792     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
793     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
794     Version bump for the CAN-2004-0109 issue; bug #47881.
795 aliz 1.23
796     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
797     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
798     Add eutils to inherit.
799 plasmaroo 1.22
800     *hardened-sources-2.4.24-r1 (19 Feb 2004)
801    
802     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
803     files/hardened-sources-2.4.24.munmap.patch:
804     Added the patch for the mremap/munmap vulnerability. Bug #42024.
805 scox 1.19
806 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
807 scox 1.26
808 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
809     hardened-sources-2.4.24.ebuild:
810     Version bump, updated most of the components.
811     This release includes the following:
812    
813     - Hardened security
814     - Netfilter patch-o-matic 20031219
815     - FreeSWAN 2.04 & x509 1.4.8
816     - EVMS 2.2.2
817     - XFS 1.3.1
818     - cryptoloop jari
819     - grsecurity 2.0-rc4
820     - SELinux
821     - PaX 200402060000
822     - PaX Obscurity 200308302223
823     - Others...
824    
825     Neither -ck nor systrace are included anymore.
826    
827 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
828    
829     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
830     hardened-sources-2.4.22-r2.ebuild:
831 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
832 scox 1.19
833     *hardened-sources-2.4.22-r1 (02 Dec 2003)
834 iggy 1.17
835     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
836 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
837 iggy 1.16
838     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
839 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
840     Version bump for the 'do_brk' vulnerability.
841 iggy 1.15
842     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
843     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
844     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
845     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
846 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
847 frogger 1.14
848     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
849     hardened-sources-2.4.22.ebuild:
850 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
851     components. These are no longer handled in the kernel
852     so this code was not necessary.
853 frogger 1.13
854     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
855     New 2.4.22 based hardened-sources thanks to
856     Phil West <p.west@computer.org>.
857    
858     These sources include:
859 plasmaroo 1.18 - New SELinux API
860     - Updated CK-base
861     - Updated GRSec
862     - Systrace
863     - SuperFreeS/WAN 1.99.8
864     - Propolice kernel build support
865     - EVMS
866     - Other various security related patches
867 frogger 1.11
868 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
869    
870     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
871     Updated hardened-sources based on the 2.4.21 Linux kernel.
872     This includes updates to most major components such as:
873 plasmaroo 1.18 - ck-base-0306300059
874     - selinux-2.4-2003071106
875     - grsecurity-2.0-rc1
876     - Updated IPTables patch-o-matic
877     - Updated SuperFreeS/WAN
878    
879 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
880     updated patch set ready for the 2.4.21 based kernel.
881    
882 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
883     Initial import of hardened-sources-2.4.20-r4. This revision
884     includes only a few changes, but one of these is an important
885     security fix. It is recommended all users of hardened-sources
886     upgrade to this release.
887 plasmaroo 1.18
888 frogger 1.11 - ioperm bug fix
889     - fixed compilation failure when building without GRSec
890 plasmaroo 1.18
891 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
892     due to time constraints, but is planned for inclusion in the near
893     future.
894 msterret 1.10
895     *hardened-sources-2.4.20-r2 (12 Jun 2003)
896    
897     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
898     hardened-sources-2.4.20-r3.ebuild:
899 plasmaroo 1.18 Add Header...
900 frogger 1.9
901     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
902     hardened-sources-2.4.20-r3.ebuild:
903     Removed warnings from ebuild. This kernel should be safe to
904     use at this point.
905 frogger 1.8
906     *hardened-sources-2.4.20-r3 (08 Jun 2003)
907    
908     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
909     hardened-sources-2.4.20-r3.ebuild:
910     New revision. Includes the following changes over -r2:
911 plasmaroo 1.18
912 frogger 1.8 - ck7-base (O(1), preempt, low latency)
913     - Super FreeS/WAN 1.99.7rc2
914     - PaX for the LSM/SELinux branch
915     - GRSecurity 2.0-pre4 (role based access control)
916     - Systrace 1.3
917     - EXT3 fixes
918     - EVMS 2.0.1
919     - GCC 3.1+ compile optimizations
920     - ProPolice kernel build support
921     - Hashing table security fixes
922 frogger 1.3
923     *hardened-sources-2.4.20-r1 (09 Apr 2003)
924 frogger 1.7
925     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
926     Initial import of hardened-sources-r2. This new
927     ebuild includes many new performance and security
928     related patches. As in -r1, it will patch in
929     LSM/SELinux if "selinux" is in USE, otherwise it
930     will patch in GRSecurity. The following patches
931     are included in this revision:
932 plasmaroo 1.18
933 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
934     (pulled from the base CK patch)
935     - ptrace exploit patch for the LSM kernel
936     (the GRSec patch already fixes this)
937     - LSM 2.4-2003040709
938     - SELinux 2.4-2003040709
939     - Systrace v1.2
940     - IPTables patch-o-matic base patches - 20030107
941     - CryptoAPI 2.4.20.1 w/ loop-jari patch
942     - Super FreeS/WAN 1.99.6.1
943     - GRSecurity 1.9.9g
944     - MPPE
945     - EXT3 data journal fix
946     - CIPE 1.5.4
947 frogger 1.6
948     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
949     hardened-sources-2.4.20-r1.ebuild, manifest:
950 plasmaroo 1.18 Updated to install flask components correctly for selinux.
951 frogger 1.5
952     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
953     hardened-sources-2.4.20-r1.ebuild:
954     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
955     is patched in instead. Ptrace patches for selinux have also been added. In
956     either case, systrace support will be patched in as well.
957 frogger 1.3
958     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
959     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
960 plasmaroo 1.18 Revision bump for new sources.
961 frogger 1.4
962 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
963 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
964 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
965 method 1.1
966 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
967    
968 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
969     hardened-sources-2.4.20.ebuild:
970 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20