/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.301 - (hide annotations) (download)
Sun Mar 22 16:42:00 2009 UTC (5 years, 1 month ago) by nixnut
Branch: MAIN
Changes since 1.300: +4 -1 lines
ppc stable
(Portage version: 2.1.6.9/cvs/Linux ppc)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 gengor 1.268 # Copyright 2000-2009 Gentoo Foundation; Distributed under the GPL v2
3 nixnut 1.301 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.300 2009/03/21 10:56:26 gengor Exp $
4    
5     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
6     ppc stable
7 gengor 1.300
8     *hardened-sources-2.6.28-r6 (21 Mar 2009)
9    
10     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
11     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
12     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
13 gengor 1.299
14     *hardened-sources-2.6.28-r5 (20 Mar 2009)
15    
16     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
17     +hardened-sources-2.6.28-r5.ebuild:
18     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
19 gengor 1.298
20     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
21     hardened-sources-2.6.28-r4.ebuild:
22     Stable amd64/x86.
23 gengor 1.297
24     *hardened-sources-2.6.28-r4 (18 Mar 2009)
25    
26     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
27     +hardened-sources-2.6.28-r4.ebuild:
28     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
29     compilation with CPA_DEBUG and more.
30 gengor 1.296
31     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
32     hardened-sources-2.6.28-r3.ebuild:
33     Quick stable amd64/x86.
34 gengor 1.295
35     *hardened-sources-2.6.28-r3 (15 Mar 2009)
36    
37     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
38     +hardened-sources-2.6.28-r3.ebuild:
39     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
40 nixnut 1.294
41     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
42     ppc stable
43 gengor 1.293
44     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
45     hardened-sources-2.6.28-r2.ebuild:
46     Stable amd64/x86.
47 gengor 1.292
48     *hardened-sources-2.6.28-r2 (11 Mar 2009)
49    
50     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
51     +hardened-sources-2.6.28-r2.ebuild:
52     Version bump bringing in latest grsecurity patch.
53 gengor 1.291
54     *hardened-sources-2.6.28-r1 (09 Mar 2009)
55    
56     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
57     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
58     Version bump and remove old.
59 nixnut 1.290
60     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
61     ppc stable
62 gengor 1.289
63     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
64     hardened-sources-2.6.27-r8.ebuild:
65     Remove amd64 testing keyword, bug 256226.
66 gengor 1.288
67     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
68     hardened-sources-2.6.27-r8.ebuild:
69     Revert amd64 stable, bug #256226.
70 gengor 1.287
71     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
72     hardened-sources-2.6.27-r8.ebuild:
73     Stable on amd64/x86.
74 gengor 1.286
75     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
76     -hardened-sources-2.6.27-r6.ebuild:
77     Remove old 2.6.27 release.
78 gengor 1.285
79     *hardened-sources-2.6.27-r8 (24 Feb 2009)
80    
81     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
82     +hardened-sources-2.6.27-r8.ebuild:
83     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
84     and probably more.
85 nixnut 1.284
86     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
87     ppc stable
88 gengor 1.283
89     *hardened-sources-2.6.28 (25 Jan 2009)
90    
91     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
92     +hardened-sources-2.6.28.ebuild:
93     Initial 2.6.28 release.
94 gengor 1.282
95     *hardened-sources-2.6.27-r7 (25 Jan 2009)
96    
97     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
98     +hardened-sources-2.6.27-r7.ebuild:
99     Bump to Linux 2.6.27.13.
100 gengor 1.281
101     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
102     hardened-sources-2.6.26-r9.ebuild:
103     Stable amd64/x86.
104 gengor 1.280
105     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
106     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
107     -hardened-sources-2.6.27-r5.ebuild:
108     Remove problem versions.
109 gengor 1.279
110     *hardened-sources-2.6.27-r6 (24 Jan 2009)
111    
112     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
113     +hardened-sources-2.6.27-r6.ebuild:
114     Revert PaX test29 to test30 changes. Fixes bug 256226.
115 gengor 1.277
116     *hardened-sources-2.6.27-r5 (24 Jan 2009)
117    
118     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
119     +hardened-sources-2.6.27-r5.ebuild:
120 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
121 gengor 1.277 254843.
122 gengor 1.276
123     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
124     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
125     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
126     Remove problem versions.
127 nixnut 1.275
128     23 Jan 2009; nixnut <nixnut@gentoo.org>
129     hardened-sources-2.6.25-r13.ebuild:
130     ppc stable
131 gengor 1.274
132     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
133     hardened-sources-2.6.25-r13.ebuild:
134     Fasttrack stable amd64/x86.
135 gengor 1.273
136     *hardened-sources-2.6.26-r9 (21 Jan 2009)
137    
138     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
139     +hardened-sources-2.6.26-r9.ebuild:
140 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
141 gengor 1.272
142     *hardened-sources-2.6.25-r13 (20 Jan 2009)
143    
144     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
145     +hardened-sources-2.6.25-r13.ebuild:
146 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
147 nixnut 1.271
148     20 Jan 2009; nixnut <nixnut@gentoo.org>
149     hardened-sources-2.6.25-r12.ebuild:
150     ppc stable
151 gengor 1.270
152     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
153     hardened-sources-2.6.25-r12.ebuild:
154     Stable amd64/x86.
155 gengor 1.269
156     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
157     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
158     -hardened-sources-2.6.27-r2.ebuild:
159     Clean out old versions.
160 gengor 1.268
161     *hardened-sources-2.6.27-r4 (14 Jan 2009)
162     *hardened-sources-2.6.26-r8 (14 Jan 2009)
163     *hardened-sources-2.6.25-r12 (14 Jan 2009)
164    
165     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
166     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
167     +hardened-sources-2.6.27-r4.ebuild:
168     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
169     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
170     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
171     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
172 nixnut 1.267
173     15 Dec 2008; nixnut <nixnut@gentoo.org>
174     hardened-sources-2.6.25-r11.ebuild:
175     Stable on ppc
176 gengor 1.266
177     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
178     hardened-sources-2.6.25-r11.ebuild:
179     Stable amd64/x86.
180 gengor 1.265
181     *hardened-sources-2.6.27-r3 (07 Dec 2008)
182    
183     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
184     +hardened-sources-2.6.27-r3.ebuild:
185     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
186     Fixes bug #248754, #249729 and #246607.
187 gengor 1.264
188     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
189     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
190     Remove old versions.
191 gengor 1.262
192     *hardened-sources-2.6.26-r7 (03 Dec 2008)
193     *hardened-sources-2.6.25-r11 (03 Dec 2008)
194    
195 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
196     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
197 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
198     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
199     Both include many backports from 2.6.27.{6,7} -stable releases.
200 gengor 1.261
201     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
202     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
203     Remove versions broken on ARCHes != x86/amd64.
204 gengor 1.260
205     *hardened-sources-2.6.27-r2 (24 Nov 2008)
206    
207     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
208     +hardened-sources-2.6.27-r2.ebuild:
209     Bump to Linux 2.6.27.7 and latest grsecurity patch.
210 gengor 1.259
211     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
212     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
213     Remove old versions.
214 gengor 1.258
215     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
216     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
217     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
218 nixnut 1.257
219     16 Nov 2008; nixnut <nixnut@gentoo.org>
220     hardened-sources-2.6.25-r10.ebuild:
221     Stable on ppc
222 gengor 1.256
223     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
224     hardened-sources-2.6.25-r10.ebuild:
225     Stable amd64/x86.
226 gengor 1.255
227     *hardened-sources-2.6.26-r6 (12 Nov 2008)
228    
229     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
230     +hardened-sources-2.6.26-r6.ebuild:
231     Bump to Linux 2.6.26.8 and fix security bug #245650.
232 gengor 1.254
233     *hardened-sources-2.6.25-r10 (12 Nov 2008)
234    
235     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
236     +hardened-sources-2.6.25-r10.ebuild:
237     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
238 gengor 1.253
239     *hardened-sources-2.6.27-r1 (09 Nov 2008)
240    
241     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
242     +hardened-sources-2.6.27-r1.ebuild:
243     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
244 gengor 1.252
245     *hardened-sources-2.6.27 (04 Nov 2008)
246    
247     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
248     +hardened-sources-2.6.27.ebuild:
249     Initial 2.6.27 release.
250 gengor 1.251
251     *hardened-sources-2.6.26-r5 (03 Nov 2008)
252    
253     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
254     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
255     +hardened-sources-2.6.26-r5.ebuild:
256     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
257     Clean out some old versions.
258 nixnut 1.250
259     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
260     Stable on ppc
261 gengor 1.249
262     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
263     hardened-sources-2.6.25-r9.ebuild:
264     Stable on amd64/x86.
265 gengor 1.248
266     *hardened-sources-2.6.25-r9 (26 Oct 2008)
267    
268     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
269     +hardened-sources-2.6.25-r9.ebuild:
270     Update to Linux 2.6.25.19
271 nixnut 1.247
272     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
273     Stable on ppc
274 gengor 1.246
275     *hardened-sources-2.6.26-r4 (14 Oct 2008)
276    
277     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
278     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
279     Update to latest grsecurity patch, fixing building of non-modular kernels.
280 gengor 1.245
281     *hardened-sources-2.6.26-r3 (12 Oct 2008)
282    
283     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
284     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
285     +hardened-sources-2.6.26-r3.ebuild:
286     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
287     2.6.26-r1: Removed.
288     2.6.25-r8: Stable amd64/x86.
289 gengor 1.244
290     *hardened-sources-2.6.25-r8 (09 Oct 2008)
291    
292     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
293     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
294     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
295     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
296 nixnut 1.243
297     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
298     Stable on ppc
299 gengor 1.242
300     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
301     hardened-sources-2.6.25-r7.ebuild:
302     Stable amd64/x86.
303 gengor 1.241
304     *hardened-sources-2.6.26-r2 (13 Sep 2008)
305    
306     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
307     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
308     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
309     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
310 gengor 1.240
311     *hardened-sources-2.6.25-r7 (13 Sep 2008)
312    
313     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
314     +hardened-sources-2.6.25-r7.ebuild:
315     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
316 gengor 1.239
317     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
318     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
319     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
320     hardened-sources-2.6.26-r1.ebuild:
321     Update DESCRIPTION and HGPV_URI.
322 gengor 1.238
323     *hardened-sources-2.6.25-r6 (09 Sep 2008)
324    
325     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
326     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
327     2.6.25-r6: Update to Linux 2.6.25.17.
328     2.6.24-r3: Removed.
329 gengor 1.237
330     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
331     hardened-sources-2.6.25-r5.ebuild:
332     Stable on amd64/x86
333 gengor 1.236
334     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
335     Update my email address.
336 nixnut 1.235
337     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
338     stable on ppc
339 battousai 1.234
340     *hardened-sources-2.6.26-r1 (23 Aug 2008)
341     *hardened-sources-2.6.25-r5 (23 Aug 2008)
342    
343     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
344     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
345     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
346     +hardened-sources-2.6.26-r1.ebuild:
347     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
348     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
349     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
350     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
351     (gengor).
352 solar 1.233
353     *hardened-sources-2.6.26 (18 Aug 2008)
354     *hardened-sources-2.6.25-r4 (18 Aug 2008)
355    
356     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
357     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
358     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
359     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
360     2.6.25-r2: Removed.
361 tove 1.232
362     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
363     Remove phreak from metadata.xml (#96398)
364 solar 1.231
365     *hardened-sources-2.6.25-r3 (31 Jul 2008)
366    
367     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
368     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
369     +hardened-sources-2.6.25-r3.ebuild:
370     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
371     fixes, including security bug #231750.
372 nixnut 1.230
373     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
374     Stable on ppc
375 solar 1.229
376     *hardened-sources-2.6.25-r2 (05 Jul 2008)
377    
378     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
379     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
380     +hardened-sources-2.6.25-r2.ebuild:
381     2.6.23-r4: Stable x86/amd64
382     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
383     2.6.23-r{11,12}: Removed due to multiple vulns.
384     (gengor & kerframil)
385 nixnut 1.228
386     04 Jul 2008; nixnut <nixnut@gentoo.org>
387     hardened-sources-2.6.23-r13.ebuild:
388     Stable on ppc
389 solar 1.227
390     *hardened-sources-2.6.25-r1 (30 Jun 2008)
391    
392     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
393     +hardened-sources-2.6.25-r1.ebuild:
394     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
395     grsecurity release. 2.6.23-r13: x86/amd64 stable
396 solar 1.226
397     *hardened-sources-2.6.25 (17 Jun 2008)
398     *hardened-sources-2.6.24-r3 (17 Jun 2008)
399     *hardened-sources-2.6.23-r13 (17 Jun 2008)
400    
401     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
402     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
403     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
404     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
405     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
406     2.6.25: Initial 2.6.25 release.
407 solar 1.225
408     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
409     - fasttrack to stable x86/amd64
410 swegener 1.224
411     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
412     Fix broken digest for linux-2.6.24.tar.bz2.
413 solar 1.223
414     *hardened-sources-2.6.24-r2 (11 May 2008)
415     *hardened-sources-2.6.23-r12 (11 May 2008)
416    
417     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
418     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
419     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
420     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
421     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
422     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
423     security bugs 219901, 220691, 220975, 220979, 221123. New
424     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
425     should be removed as far as I'm concerned, everything else remove due to
426     vulnerable to numerous security bugs or brokeness.
427 nixnut 1.222
428     10 May 2008; nixnut <nixnut@gentoo.org>
429     hardened-sources-2.6.23-r11.ebuild:
430     Stable on ppc
431 solar 1.221
432     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
433     - -r11 stable on x86/amd64
434 solar 1.220
435     *hardened-sources-2.6.23-r11 (01 May 2008)
436    
437     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
438     - version bump to fix ulgy linux bugs
439 phreak 1.219
440     *hardened-sources-2.6.24-r1 (30 Apr 2008)
441    
442     30 Apr 2008; Christian Heim <phreak@gentoo.org>
443     +hardened-sources-2.6.24-r1.ebuild:
444     Revision bump (thanks to Kerin and Gordon, again), pulling
445     genpatches-2.6.24-7, solving #219089. Additionally contains further security
446     fixes plus some minor updates.
447 phreak 1.218
448     *hardened-sources-2.6.23-r10 (30 Apr 2008)
449    
450     30 Apr 2008; Christian Heim <phreak@gentoo.org>
451     +hardened-sources-2.6.23-r10.ebuild:
452     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
453     Additional contains "various other fixes".
454 phreak 1.217
455     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
456     Update the longdescription in metadata, thanks to Gordon Malm.
457 nixnut 1.216
458     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
459     Stable on ppc wrt bug #213255
460 solar 1.215
461     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
462     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
463     - stable on x86/amd64 per request. Removed obsolete ebuilds
464 phreak 1.214
465     *hardened-sources-2.6.24 (07 Apr 2008)
466    
467     07 Apr 2008; Christian Heim <phreak@gentoo.org>
468     +hardened-sources-2.6.24.ebuild:
469     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
470     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
471     for the many contributions and their continued effort in #216612) based on
472     2.6.24 and genpatches-2.6.24-5.
473    
474     The current ebuild/patchset contains these things:
475     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
476     * Introduces bespoke server and workstation oriented security levels
477     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
478 phreak 1.213
479     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
480     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
481     maintaining it).
482 phreak 1.212
483     24 Mar 2008; Christian Heim <phreak@gentoo.org>
484     hardened-sources-2.4.35-r2.ebuild:
485     Fixing SRC_URI for 2.4.35-r2.
486 phreak 1.211
487     *hardened-sources-2.6.23-r9 (22 Mar 2008)
488    
489     22 Mar 2008; Christian Heim <phreak@gentoo.org>
490     +hardened-sources-2.6.23-r9.ebuild:
491     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
492     * Change the default GIDs for some grsecurity options
493     * Revamp the Hardened [Gentoo] security level and make it the default level
494     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
495     * Fix a recursive lock -- call to capable() within ptrace_attach()
496     * Fix bug that allows audit and iscsi operations to be controlled via netlink
497 solar 1.210
498     *hardened-sources-2.6.23-r8 (27 Feb 2008)
499    
500     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
501     - version bump from Kerin Millar bug 210026
502 solar 1.209
503     17 Feb 2008; <solar@gentoo.org> metadata.xml,
504     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
505     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
506     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
507     - stable on x86 and remove old ebuilds
508 solar 1.207
509     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
510 solar 1.208 - stable on amd64 per request of amd64 lead
511 solar 1.206
512     *hardened-sources-2.6.23-r7 (11 Feb 2008)
513    
514     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
515     - version bump from kerin.millar
516     Changes:
517    
518     * Bump to genpatches-base-2.6.23-9
519     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
520     * Disables COMPAT_VDSO in x86/defconfig
521     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
522 phreak 1.205
523     25 Jan 2008; Christian Heim <phreak@gentoo.org>
524     -hardened-sources-2.6.22-r8.ebuild:
525     Cleaning up old versions.
526 phreak 1.204
527     *hardened-sources-2.6.23-r6 (25 Jan 2008)
528    
529     25 Jan 2008; Christian Heim <phreak@gentoo.org>
530     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
531     Revision bump, pulling in the latest genpatches.
532 phreak 1.203
533     *hardened-sources-2.6.23-r5 (24 Dec 2007)
534    
535     24 Dec 2007; Christian Heim <phreak@gentoo.org>
536     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
537     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
538     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
539     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
540 phreak 1.202
541     24 Dec 2007; Christian Heim <phreak@gentoo.org>
542     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
543     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
544     -hardened-sources-2.6.23-r3.ebuild:
545     Cleaning out some unused, old versions.
546 phreak 1.201
547     24 Dec 2007; Christian Heim <phreak@gentoo.org>
548     hardened-sources-2.6.23-r4.ebuild:
549     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
550     in the tree for long, but there isn't much of a difference between this and
551     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
552 phreak 1.200
553     *hardened-sources-2.6.23-r4 (23 Dec 2007)
554    
555     23 Dec 2007; Christian Heim <phreak@gentoo.org>
556     +hardened-sources-2.6.23-r4.ebuild:
557     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
558 phreak 1.199
559     *hardened-sources-2.6.23-r3 (04 Dec 2007)
560    
561     04 Dec 2007; Christian Heim <phreak@gentoo.org>
562     +hardened-sources-2.6.23-r3.ebuild:
563     Revision bump, pulling in 2.6.23.9.
564 phreak 1.198
565     *hardened-sources-2.6.23-r2 (25 Nov 2007)
566    
567     25 Nov 2007; Christian Heim <phreak@gentoo.org>
568     +hardened-sources-2.6.23-r2.ebuild:
569     Updated patchset, thanks to solar.
570 phreak 1.197
571     *hardened-sources-2.6.23-r1 (31 Oct 2007)
572    
573     31 Oct 2007; Christian Heim <phreak@gentoo.org>
574     +hardened-sources-2.6.23-r1.ebuild:
575     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
576 solar 1.196
577     29 Oct 2007; <solar@gentoo.org> metadata.xml:
578     - update metadata.xml
579 phreak 1.195
580     25 Oct 2007; Christian Heim <phreak@gentoo.org>
581     hardened-sources-2.6.22-r8.ebuild:
582     Marking 2.6.22-r8 stable on amd64 and x86.
583 phreak 1.194
584     21 Oct 2007; Christian Heim <phreak@gentoo.org>
585     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
586     -hardened-sources-2.6.21-r4.ebuild:
587     Removing old ebuilds.
588 phreak 1.193
589     *hardened-sources-2.4.35-r2 (21 Oct 2007)
590    
591     21 Oct 2007; Christian Heim <phreak@gentoo.org>
592     +hardened-sources-2.4.35-r2.ebuild:
593     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
594     patches.
595 phreak 1.192
596     *hardened-sources-2.6.22-r8 (21 Oct 2007)
597    
598     21 Oct 2007; Christian Heim <phreak@gentoo.org>
599     +hardened-sources-2.6.22-r8.ebuild:
600     Yet another new patch, hopefully fixing the remaining issues we had w/
601     2.6.22. Candidate for stabling.
602 phreak 1.191
603     *hardened-sources-2.6.23 (13 Oct 2007)
604    
605     13 Oct 2007; Christian Heim <phreak@gentoo.org>
606     +hardened-sources-2.6.23.ebuild:
607     Initial hardened-sources-2.6.23. If people still have problems w/ bug
608     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
609 phreak 1.190
610     11 Oct 2007; Christian Heim <phreak@gentoo.org>
611     hardened-sources-2.6.20-r10.ebuild:
612     Pulling in yet another new genpatches version, fixing the PWC bug for real.
613 phreak 1.189
614     04 Oct 2007; Christian Heim <phreak@gentoo.org>
615     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
616     Removing old versions.
617 phreak 1.188
618     *hardened-sources-2.6.22-r7 (01 Oct 2007)
619    
620     01 Oct 2007; Christian Heim <phreak@gentoo.org>
621     +hardened-sources-2.6.22-r7.ebuild:
622     Revision bump, pulling in a newer patch. Should fix #194276.
623 phreak 1.187
624     30 Sep 2007; Christian Heim <phreak@gentoo.org>
625     hardened-sources-2.6.20-r10.ebuild:
626     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
627     Mike Doty).
628 phreak 1.186
629     *hardened-sources-2.6.22-r6 (26 Sep 2007)
630    
631     26 Sep 2007; Christian Heim <phreak@gentoo.org>
632     +hardened-sources-2.6.22-r6.ebuild:
633     Revision bump, grabbing up till Linux 2.6.22.9.
634 phreak 1.185
635     24 Sep 2007; Christian Heim <phreak@gentoo.org>
636     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
637     Cleaning up further.
638 phreak 1.184
639     *hardened-sources-2.6.20-r10 (24 Sep 2007)
640    
641     24 Sep 2007; Christian Heim <phreak@gentoo.org>
642     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
643     +hardened-sources-2.6.20-r10.ebuild:
644     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
645     revisions.
646 phreak 1.183
647     *hardened-sources-2.6.22-r5 (22 Sep 2007)
648    
649     22 Sep 2007; Christian Heim <phreak@gentoo.org>
650     +hardened-sources-2.6.22-r5.ebuild:
651     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
652 phreak 1.182
653     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
654     Removing johnm from metadata.xml (see #186467 for reference).
655 phreak 1.181
656     *hardened-sources-2.6.22-r4 (17 Sep 2007)
657    
658     17 Sep 2007; Christian Heim <phreak@gentoo.org>
659     +hardened-sources-2.6.22-r4.ebuild:
660     Revision bump, hopefully fixing all those weird PAX failures.
661 phreak 1.180
662     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
663     Updating the metadata.xml.
664 phreak 1.179
665     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
666     Removing tocharian from metadata due to his retirement (see #71718 for
667     reference).
668 phreak 1.178
669     *hardened-sources-2.6.20-r9 (30 Aug 2007)
670    
671     30 Aug 2007; Christian Heim <phreak@gentoo.org>
672     +hardened-sources-2.6.20-r9.ebuild:
673     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
674 phreak 1.177
675     29 Aug 2007; Christian Heim <phreak@gentoo.org>
676     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
677     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
678     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
679     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
680     -hardened-sources-2.6.22-r2.ebuild:
681     Removing some redundant versions.
682 phreak 1.176
683     *hardened-sources-2.4.35-r1 (29 Aug 2007)
684    
685     29 Aug 2007; Christian Heim <phreak@gentoo.org>
686     +hardened-sources-2.4.35-r1.ebuild:
687     Revision bump, new grsecurity patch.
688 phreak 1.175
689     *hardened-sources-2.6.20-r8 (26 Aug 2007)
690    
691     26 Aug 2007; Christian Heim <phreak@gentoo.org>
692     +hardened-sources-2.6.20-r8.ebuild:
693     Revision bump for Linux 2.6.20.17.
694 phreak 1.174
695     *hardened-sources-2.6.22-r3 (22 Aug 2007)
696    
697     22 Aug 2007; Christian Heim <phreak@gentoo.org>
698     +hardened-sources-2.6.22-r3.ebuild:
699     Revision bump for Linux 2.6.22.4.
700 phreak 1.173
701     16 Aug 2007; Christian Heim <phreak@gentoo.org>
702     hardened-sources-2.6.22-r2.ebuild:
703     Updated patchset, to fix the alignment against 2.6.22.3.
704 phreak 1.172
705     *hardened-sources-2.6.22-r2 (16 Aug 2007)
706    
707     16 Aug 2007; Christian Heim <phreak@gentoo.org>
708     +hardened-sources-2.6.22-r2.ebuild:
709     Revision bump for Linux 2.6.22.3.
710 phreak 1.171
711     *hardened-sources-2.4.35 (16 Aug 2007)
712    
713     16 Aug 2007; Christian Heim <phreak@gentoo.org>
714     +hardened-sources-2.4.35.ebuild:
715     Version bump, initial version for Linux 2.4.35.
716 phreak 1.170
717     *hardened-sources-2.6.21-r4 (16 Aug 2007)
718    
719     16 Aug 2007; Christian Heim <phreak@gentoo.org>
720     +hardened-sources-2.6.21-r4.ebuild:
721     Revision bump for Linux 2.6.21.6.
722 phreak 1.169
723     *hardened-sources-2.6.20-r7 (16 Aug 2007)
724    
725     16 Aug 2007; Christian Heim <phreak@gentoo.org>
726     +hardened-sources-2.6.20-r7.ebuild:
727     Revision bump for Linux 2.6.20.16.
728 phreak 1.168
729     *hardened-sources-2.6.22-r1 (13 Aug 2007)
730    
731     13 Aug 2007; Christian Heim <phreak@gentoo.org>
732     +hardened-sources-2.6.22-r1.ebuild:
733     Yet another revision bump.
734 phreak 1.167
735     *hardened-sources-2.6.22 (10 Aug 2007)
736    
737     10 Aug 2007; Christian Heim <phreak@gentoo.org>
738     +hardened-sources-2.6.22.ebuild:
739     Initial release for 2.6.22. If you are using hardened-sources on a desktop
740     machine (P4 or newer), be aware you might need to disable
741     CONFIG_PAX_PAGEEXEC.
742 phreak 1.166
743     04 Aug 2007; Christian Heim <phreak@gentoo.org>
744     hardened-sources-2.6.20-r6.ebuild:
745     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
746     2.6.20.15.
747 phreak 1.165
748     10 Jul 2007; Christian Heim <phreak@gentoo.org>
749     hardened-sources-2.6.20-r5.ebuild:
750     Marking hardened-sources-2.6.20-r5 stable on ppc.
751 phreak 1.164
752     10 Jul 2007; Christian Heim <phreak@gentoo.org>
753     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
754     Cleanup.
755 phreak 1.163
756     *hardened-sources-2.6.20-r6 (08 Jul 2007)
757    
758     08 Jul 2007; Christian Heim <phreak@gentoo.org>
759     +hardened-sources-2.6.20-r6.ebuild:
760     Revision bump, grabbing yet another stable release.
761 phreak 1.162
762     17 Jun 2007; Christian Heim <phreak@gentoo.org>
763     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
764     -hardened-sources-2.6.21-r2.ebuild:
765     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
766     alpha stable KEYWORD by mistake.
767 phreak 1.161
768     17 Jun 2007; Christian Heim <phreak@gentoo.org>
769     hardened-sources-2.6.20-r5.ebuild:
770     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
771     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
772 phreak 1.160
773     *hardened-sources-2.6.21-r3 (12 Jun 2007)
774    
775     12 Jun 2007; Christian Heim <phreak@gentoo.org>
776     +hardened-sources-2.6.21-r3.ebuild:
777     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
778     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
779     love.
780 phreak 1.159
781     *hardened-sources-2.6.20-r5 (11 Jun 2007)
782    
783     11 Jun 2007; Christian Heim <phreak@gentoo.org>
784     +hardened-sources-2.6.20-r5.ebuild:
785     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
786     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
787     love.
788 pappy 1.158
789     *hardened-sources-2.4.34.5 (11 Jun 2007)
790    
791     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
792     +hardened-sources-2.4.34.5.ebuild:
793     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
794 phreak 1.157
795     30 May 2007; Christian Heim <phreak@gentoo.org>
796     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
797     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
798     stale ebuild(s).
799 phreak 1.156
800     30 May 2007; Christian Heim <phreak@gentoo.org>
801     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
802     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
803     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
804     Doing some cleanups, remove stale ebuilds.
805 phreak 1.155
806     26 May 2007; Christian Heim <phreak@gentoo.org>
807     hardened-sources-2.6.21-r2.ebuild:
808     Fixing the grsecurity patch, had one '};' too much.
809 phreak 1.154
810     *hardened-sources-2.6.21-r2 (26 May 2007)
811    
812     26 May 2007; Christian Heim <phreak@gentoo.org>
813     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
814     +hardened-sources-2.6.21-r2.ebuild:
815     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
816     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
817 phreak 1.153
818     *hardened-sources-2.6.20-r4 (26 May 2007)
819    
820     26 May 2007; Christian Heim <phreak@gentoo.org>
821     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
822     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
823 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
824 phreak 1.152
825     15 May 2007; Christian Heim <phreak@gentoo.org>
826     hardened-sources-2.6.20-r3.ebuild:
827     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
828     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
829     grsecurity patch fail in that exact same hunk.
830 phreak 1.151
831     *hardened-sources-2.6.20-r3 (15 May 2007)
832    
833     15 May 2007; Christian Heim <phreak@gentoo.org>
834     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
835     Revision bump, incorporating Linux 2.6.20.11.
836    
837     *hardened-sources-2.6.21-r1 (11 May 2007)
838    
839     11 May 2007; Christian Heim <phreak@gentoo.org>
840     +hardened-sources-2.6.21-r1.ebuild:
841     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
842     mentioned in #177234.
843 kevquinn 1.150
844     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
845     files/digest-hardened-sources-2.6.21, Manifest:
846     Fix Manifest/digest for linux-2.6.21.tar.bz2
847 phreak 1.149
848     06 May 2007; Christian Heim <phreak@gentoo.org>
849     hardened-sources-2.6.21.ebuild:
850     Bumping the hardened-patches version, needed for the fix for #177234.
851 phreak 1.148
852     *hardened-sources-2.6.21 (02 May 2007)
853    
854     02 May 2007; Christian Heim <phreak@gentoo.org>
855     +hardened-sources-2.6.21.ebuild:
856     Version bump, Linux 2.6.21-hardened.
857 phreak 1.147
858     29 Apr 2007; Christian Heim <phreak@gentoo.org>
859     hardened-sources-2.6.20-r2.ebuild:
860     Adding ~ia64 on Ned's request.
861 phreak 1.146
862     29 Apr 2007; Christian Heim <phreak@gentoo.org>
863     hardened-sources-2.6.20-r2.ebuild:
864     Fixing the included grsecurity patch, wasn't alligning due to the Index:
865     header line(s).
866 phreak 1.145
867     29 Apr 2007; Christian Heim <phreak@gentoo.org>
868     hardened-sources-2.6.20-r2.ebuild:
869     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
870 armin76 1.144
871     *hardened-sources-2.6.20-r2 (10 Apr 2007)
872    
873     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
874     +hardened-sources-2.6.20-r2.ebuild:
875     Version bump, on behalf of phreak
876 phreak 1.143
877     *hardened-sources-2.6.20-r1 (04 Apr 2007)
878    
879     04 Apr 2007; Christian Heim <phreak@gentoo.org>
880     +hardened-sources-2.6.20-r1.ebuild:
881     Revision bump, grabbing a newer grsecurity snapshot.
882 phreak 1.142
883     *hardened-sources-2.6.20 (25 Mar 2007)
884    
885     25 Mar 2007; Christian Heim <phreak@gentoo.org>
886     +hardened-sources-2.6.20.ebuild:
887     Finally a hardened-sources version for 2.6.20; many people have been waiting
888     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
889     testbox.
890 chainsaw 1.141
891     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
892     hardened-sources-2.6.18-r6.ebuild:
893     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
894 phreak 1.140
895     *hardened-sources-2.6.18-r6 (16 Mar 2007)
896    
897     16 Mar 2007; Christian Heim <phreak@gentoo.org>
898     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
899     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
900     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
901     supposed to be.
902 phreak 1.139
903     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
904     Fixing the Manifest, the previous one was broken (as in still had the
905     deleted ebuild in it).
906 phreak 1.138
907     06 Mar 2007; Christian Heim <phreak@gentoo.org>
908     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
909     +hardened-sources-2.6.18-r5.ebuild:
910     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
911     Linux 2.6.18.8. Also cleaning up the older version.
912    
913     *hardened-sources-2.6.18-r5 (06 Mar 2007)
914    
915     06 Mar 2007; Christian Heim <phreak@gentoo.org>
916     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
917     +hardened-sources-2.6.18-r5.ebuild:
918     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
919     Linux 2.6.18.8. Also cleaning up the older version.
920 phreak 1.137
921     24 Feb 2007; Christian Heim <phreak@gentoo.org>
922     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
923     -hardened-sources-2.6.19-r5.ebuild:
924     Removing some of the old version, that didn't work.
925 phreak 1.136
926     *hardened-sources-2.6.19-r6 (12 Feb 2007)
927    
928     12 Feb 2007; Christian Heim <phreak@gentoo.org>
929     +hardened-sources-2.6.19-r6.ebuild:
930     Revision bump, including a new grsec version fixing #166235.
931 pappy 1.134
932     *hardened-sources-2.4.34 (24 Jan 2007)
933    
934     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
935 pappy 1.135 Manifest:
936     updating Manifest with checksums of new tarball and ebuild
937    
938     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
939 pappy 1.134 +hardened-sources-2.4.34.ebuild:
940     I added new hardened sources 2.4 update, this is a critical path
941     security bugfix - all users of h-s are strongly advised
942     to update their existing hardened sources to this version.
943     It contains a fix for a kernel vulnerability that is pertaining
944     to the PaX changes to virtual memory management, possibly leading
945     to a local kernel exploit ... see grsecurity.net forums and homepage
946 phreak 1.133
947     23 Jan 2007; Christian Heim <phreak@gentoo.org>
948     files/digest-hardened-sources-2.6.19-r5, Manifest:
949     Fixing the patch-tarball digest.
950 phreak 1.132
951     *hardened-sources-2.6.19-r5 (23 Jan 2007)
952    
953     23 Jan 2007; Christian Heim <phreak@gentoo.org>
954     +hardened-sources-2.6.19-r5.ebuild:
955     Revision bump, closing the recently discovered PaX expand_stack()
956     vulnerability.
957 phreak 1.131
958     *hardened-sources-2.6.19-r4 (14 Jan 2007)
959    
960     14 Jan 2007; Christian Heim <phreak@gentoo.org>
961     +hardened-sources-2.6.19-r4.ebuild:
962     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
963     dropping the randomized PID feature.
964 opfer 1.130
965     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
966     hardened-sources-2.4.33.4.ebuild:
967     stable x86, bug #161171
968 phreak 1.129
969     *hardened-sources-2.6.19-r3 (27 Dec 2006)
970    
971     27 Dec 2006; Christian Heim <phreak@gentoo.org>
972     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
973     Revision bump for bug #157186 and #158786.
974 phreak 1.128
975     *hardened-sources-2.6.18-r4 (27 Dec 2006)
976    
977     27 Dec 2006; Christian Heim <phreak@gentoo.org>
978     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
979     Revision bump for bug #157186.
980 phreak 1.127
981     *hardened-sources-2.6.19-r2 (23 Dec 2006)
982    
983     23 Dec 2006; Christian Heim <phreak@gentoo.org>
984     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
985     Revision bump to pull in genpatches-2.6.19-3 for #157186.
986 phreak 1.126
987     17 Dec 2006; Christian Heim <phreak@gentoo.org>
988     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
989     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
990     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
991     hardened-sources-2.6.19-r1.ebuild:
992     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
993     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
994 pappy 1.125
995     *hardened-sources-2.4.33.4 (17 Dec 2006)
996    
997     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
998     +hardened-sources-2.4.33.4.ebuild:
999     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1000     and quilting
1001 phreak 1.124
1002     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1003    
1004     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1005     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1006     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1007     for reporting).
1008 phreak 1.123
1009     *hardened-sources-2.6.19 (13 Dec 2006)
1010    
1011     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1012     +hardened-sources-2.6.19.ebuild:
1013     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1014     Brad for providing that prompt update.
1015 phreak 1.122
1016     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1017    
1018     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1019     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1020     +hardened-sources-2.6.18-r3.ebuild:
1021     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1022     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1023 phreak 1.121
1024     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1025     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1026 nixnut 1.120
1027     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1028     Stable on ppc wrt bug 157356
1029 opfer 1.119
1030     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1031     hardened-sources-2.6.18.ebuild:
1032     stable x86, bug #157356
1033 phreak 1.118
1034     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1035    
1036     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1037     +hardened-sources-2.6.18-r2.ebuild:
1038     Revision bump, including 2.6.18.5 (via genpatches) and
1039     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1040     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1041     redesign.
1042 phreak 1.117
1043     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1044     hardened-sources-2.6.18.ebuild:
1045     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1046     of Mike Doty).
1047 phreak 1.116
1048     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1049    
1050     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1051     +hardened-sources-2.6.18-r1.ebuild:
1052     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1053 phreak 1.115
1054     *hardened-sources-2.6.18 (11 Nov 2006)
1055    
1056     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1057     +hardened-sources-2.6.18.ebuild:
1058     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1059 solar 1.114
1060     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1061     - mark amd64 stable also. bug #151877
1062 solar 1.113
1063     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1064     - mark 2.6.17-r1 stable
1065 phreak 1.112
1066     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1067     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1068     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1069 phreak 1.111
1070     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1071    
1072     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1073     +hardened-sources-2.6.17-r1.ebuild:
1074     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1075     grsecurity patch.
1076 phreak 1.110
1077     *hardened-sources-2.6.17 (17 Aug 2006)
1078    
1079     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1080     +hardened-sources-2.6.17.ebuild:
1081     Bumping the hardened-sources-2.6 series to 2.6.17, using
1082     genpatches-2.6.17-6.base.
1083 solar 1.109
1084     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1085     - stable on x86 and amd64
1086 solar 1.108
1087     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1088    
1089     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1090     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1091     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1092     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1093     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1094     crusty ebuilds
1095 johnm 1.107
1096     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1097     hardened-sources-2.6.16-r10.ebuild:
1098     marking stable on x86 and amd64
1099 solar 1.106
1100     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1101     - 2.4.32-r6 stable on x86. RSBAC state unknown
1102 kang 1.105
1103     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1104    
1105     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1106     +hardened-sources-2.4.32-r7.ebuild:
1107     Bump PaX for RSBAC to test-17
1108 johnm 1.104
1109     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1110    
1111     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1112     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1113     hardened-sources-2.6.16 bump to latest -base.
1114 solar 1.103
1115     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1116    
1117     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1118     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1119     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1120     sysctl controlable resource logging
1121 johnm 1.102
1122     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1123    
1124     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1125     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1126     push new 2.6.16 release in preparation for stable
1127 solar 1.101
1128     22 May 2006; <solar@gentoo.org> :
1129     - redigest bug 134002
1130 kang 1.100
1131     *hardened-sources-2.4.32-r5 (16 May 2006)
1132    
1133     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1134     +hardened-sources-2.4.32-r5.ebuild:
1135     Fixes rsbac common patching (new patch in new -r5 patchset)
1136 solar 1.99
1137     *hardened-sources-2.4.32-r4 (13 May 2006)
1138    
1139     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1140     +hardened-sources-2.4.32-r4.ebuild:
1141     - security bumps
1142 johnm 1.98
1143     *hardened-sources-2.6.16-r6 (03 May 2006)
1144    
1145     03 May 2006; John Mylchreest <johnm@gentoo.org>
1146     +hardened-sources-2.6.16-r6.ebuild:
1147     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1148 johnm 1.97
1149     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1150     hardened-sources-2.6.14-r8.ebuild:
1151     fix x86_64 build problem, this will delay the digest issue again for a short
1152     while but it will sort itself out
1153 johnm 1.96
1154     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1155     hardened-sources-2.6.14-r8.ebuild:
1156     bump hardened patchset
1157 antarus 1.94
1158     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1159     files/digest-hardened-sources-2.4.32-r2,
1160     files/digest-hardened-sources-2.4.32-r3,
1161     files/digest-hardened-sources-2.6.14-r8, Manifest:
1162     Fixing duff SHA256 digests: Bug # 131293
1163 johnm 1.93
1164 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1165    
1166     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1167     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1168     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1169     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1170     cleanup of old uneccessary sources
1171    
1172 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1173     fix digest
1174 johnm 1.92
1175     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1176    
1177     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1178     +hardened-sources-2.6.14-r8.ebuild:
1179     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1180 johnm 1.91
1181     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1182     Turning on gpg-signing again, and recomitting
1183 johnm 1.90
1184     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1185    
1186     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1187     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1188     +hardened-sources-2.6.16-r4.ebuild:
1189     Fix numerous security vulns
1190 solar 1.89
1191     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1192    
1193     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1194     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1195     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1196     - security bump for bug #112791. Removed old ebuilds
1197 johnm 1.88
1198     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1199    
1200     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1201     +hardened-sources-2.6.16-r3.ebuild:
1202     Removing silly localversion which I missed
1203 johnm 1.87
1204     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1205    
1206     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1207     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1208     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1209 johnm 1.86
1210     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1211    
1212     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1213     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1214     +hardened-sources-2.6.16-r2.ebuild:
1215     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1216     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1217 johnm 1.85
1218     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1219    
1220     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1221     +hardened-sources-2.6.16-r1.ebuild:
1222     Bumping to include ppc build fix and 2.6.16.3
1223 tsunam 1.84
1224     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1225     hardened-sources-2.6.14-r6.ebuild:
1226     Stable on x86; bug #127718
1227 johnm 1.83
1228     *hardened-sources-2.6.16 (31 Mar 2006)
1229    
1230     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1231     +hardened-sources-2.6.16.ebuild:
1232     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1233     2.6.16.1
1234 cryos 1.82
1235     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1236     hardened-sources-2.6.14-r6.ebuild:
1237     Stable on amd64, bug 127718.
1238 nixnut 1.81
1239     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1240     Stable on ppc. Bug #127718
1241 johnm 1.80
1242     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1243     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1244     -hardened-sources-2.6.14-r4.ebuild:
1245     Cleanup.
1246 johnm 1.79
1247     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1248    
1249     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1250     +hardened-sources-2.6.14-r6.ebuild:
1251     Fixes grsec policy recreation bug and adds a
1252     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1253 solar 1.78
1254     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1255     - stable on x86
1256 hansmi 1.77
1257     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1258     hardened-sources-2.6.14-r5.ebuild:
1259     Stable on ppc.
1260 johnm 1.76
1261     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1262    
1263     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1264     +hardened-sources-2.6.14-r5.ebuild:
1265     fixing every known exploit
1266 solar 1.75
1267     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1268    
1269     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1270     +hardened-sources-2.4.32-r2.ebuild:
1271     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1272 solar 1.74
1273     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1274    
1275     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1276     - version bump for new genpatches which fix up a few sec holes
1277 solar 1.73
1278     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1279    
1280     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1281     - revision bump to add misc vital linux kernel security patches.
1282 johnm 1.72
1283     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1284    
1285     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1286     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1287     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1288 johnm 1.71
1289     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1290     hardened-sources-2.6.14-r2.ebuild:
1291     making x86 & amd64 stable following testing.
1292 johnm 1.70
1293     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1294    
1295     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1296     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1297     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1298     network hooks.
1299 johnm 1.69
1300     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1301     hardened-sources-2.6.14-r1.ebuild:
1302     bumping to stable early for sec fix on x86 & amd64
1303 johnm 1.68
1304     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1305    
1306     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1307     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1308     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1309 solar 1.67
1310     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1311     - stable on x86 security bug #114227 CAN-2005-3257
1312 kang 1.66
1313     *hardened-sources-2.4.32 (19 Nov 2005)
1314    
1315     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1316     +hardened-sources-2.4.32.ebuild:
1317     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1318     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1319     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1320     rsbac >> /etc/portage/package.use)
1321 johnm 1.65
1322     *hardened-sources-2.6.14 (14 Nov 2005)
1323    
1324     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1325     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1326     Bumping 2.6 series to 2.6.14.2
1327 johnm 1.64
1328     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1329    
1330     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1331     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1332     +hardened-sources-2.6.13-r2.ebuild:
1333     Fixes minor build error in ppc.
1334 johnm 1.63
1335     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1336    
1337     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1338     +hardened-sources-2.6.13-r1.ebuild:
1339     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1340     2.6.13.4, fixes some major amd64 stability problems.
1341 johnm 1.62
1342     *hardened-sources-2.6.13 (16 Sep 2005)
1343    
1344     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1345     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1346     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1347     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1348     users should test this thoroughly.
1349 solar 1.61
1350     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1351     - stable on x86
1352 johnm 1.60
1353     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1354    
1355     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1356     +hardened-sources-2.6.11-r15.ebuild:
1357     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1358     grsec redefining curr_ip struct.
1359 solar 1.59
1360     *hardened-sources-2.4.31 (20 Jun 2005)
1361    
1362     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1363     initial import of 2.4.31 tree
1364 johnm 1.58
1365     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1366    
1367     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1368     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1369     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1370     naming scheme to abide by genpatches
1371 johnm 1.57
1372     *hardened-sources-2.6.11-r13 (18 May 2005)
1373    
1374     18 May 2005; John Mylchreest <johnm@gentoo.org>
1375     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1376     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1377     target. sorry about that. Fixes bug #93022
1378 johnm 1.56
1379     *hardened-sources-2.6.11-r12 (17 May 2005)
1380    
1381     17 May 2005; John Mylchreest <johnm@gentoo.org>
1382     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1383     +hardened-sources-2.6.11-r12.ebuild:
1384     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1385     merges in genpatches-base
1386 johnm 1.55
1387     *hardened-sources-2.6.11-r12 (17 May 2005)
1388    
1389     17 May 2005; John Mylchreest <johnm@gentoo.org>
1390     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1391     +hardened-sources-2.6.11-r12.ebuild:
1392     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1393     merges in genpatches-base
1394 solar 1.54
1395     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1396     -files/2.4.27-cmdline-race.patch,
1397     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1398     -files/2.4.28-grsec-binfmt_a.out.patch,
1399     -files/2.4.28-grsec-cmdline-race.patch,
1400     -files/2.4.28-selinux-binfmt_a.out.patch,
1401     -files/2.4.28-selinux-cmdline-race.patch,
1402     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1403     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1404     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1405     cleanup..
1406 solar 1.53
1407     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1408    
1409     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1410     - disable aout by default
1411 solar 1.52
1412     *hardened-sources-2.4.30 (18 Apr 2005)
1413    
1414     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1415     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1416     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1417     use
1418 tocharian 1.50
1419 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1420    
1421     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1422     +hardened-sources-2.4.29.ebuild:
1423     New hardened-patches-2.4-29.0 patchball.
1424     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1425    
1426     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1427    
1428     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1429     +hardened-sources-2.4.28-r5.ebuild:
1430     Added a fix for a PaX vulnerability.
1431    
1432     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1433 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1434     Stable on x86
1435 solar 1.49
1436     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1437     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1438     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1439     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1440     - fixed/added RDEPEND= in all kernel-2 ebuilds
1441 tocharian 1.48
1442     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1443    
1444     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1445     +hardened-sources-2.4.28-r4.ebuild:
1446     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1447     backport of neighbour hash updates.
1448 tocharian 1.47
1449     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1450     hardened-sources-2.4.28-r3.ebuild:
1451     Stable on x86
1452 tseng 1.46
1453     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1454    
1455     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1456     +hardened-sources-2.6.10-r3.ebuild:
1457     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1458     in 2005.0
1459 tocharian 1.45
1460     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1461     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1462     hardened-sources-2.4.28-r2.ebuild:
1463     Mark stable on x86
1464 tocharian 1.44
1465     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1466    
1467     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1468     +hardened-sources-2.4.28-r3.ebuild:
1469     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1470 tocharian 1.43
1471     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1472     hardened-sources-2.4.28.ebuild:
1473     Mark stable on x86.
1474 tocharian 1.42
1475     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1476    
1477     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1478     +hardened-sources-2.4.28-r2.ebuild:
1479     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1480     Mazinger for grsecurity patches as well.
1481 plasmaroo 1.41
1482     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1483    
1484     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1485     Security bump. Thank tocharian for rolling a new patchset...
1486 solar 1.40
1487     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1488     +files/2.4.28-grsec-cmdline-race.patch,
1489     +files/2.4.28-selinux-binfmt_a.out.patch,
1490     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1491     - Round up remaining security patches that appear to be missing in 2.4.28. -
1492     PaX standalone updated to current. hgpv=28.1
1493 solar 1.39
1494     *hardened-sources-2.4.28 (28 Nov 2004)
1495    
1496     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1497     security bump. Thank tocharian for rolling a new patchset
1498 scox 1.31
1499 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1500    
1501     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1502     +hardened-sources-2.4.27-r3.ebuild:
1503     Applies the new 2.4-27.2 patchball which updates
1504     GRSecurity to the 2.0.1 version.
1505    
1506 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1507    
1508     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1509     +hardened-sources-2.4.27-r2.ebuild:
1510     Version bump.
1511     This version uses the new 2.4-27.1 patchball which updates
1512     both the SELinux PaX hooks patch and the SELinux headers.
1513    
1514 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1515    
1516     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1517     +hardened-sources-2.4.27-r1.ebuild,
1518     -hardened-sources-2.4.27.ebuild,
1519     +files/2.4.27-cmdline-race.patch:
1520     Version bump, fix for cmdline race. See bug #59905.
1521    
1522     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1523    
1524     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1525     +hardened-sources-2.4.26-r6.ebuild,
1526     -hardened-sources-2.4.26-r5.ebuild,
1527     -hardened-sources-2.4.26-r4.ebuild,
1528     +files/2.4.26-cmdline-race.patch:
1529     Version bump, fix for cmdline race. See bug #59905.
1530    
1531 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1532    
1533     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1534     +hardened-sources-2.4.27.ebuild,
1535     +files/2.4.27-CAN-2004-0394.patch:
1536     Ported the patchball to the 2.4.27 kernel version.
1537    
1538 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1539    
1540     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1541     +hardened-sources-2.4.26-r5.ebuild:
1542 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1543 scox 1.34 It adds the following features:
1544     - Squashfs
1545     - Ebtables
1546     - Netdev random (core+drivers)
1547     - Watchdog Timer (WDT) fix.
1548    
1549 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1550    
1551     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1552     +hardened-sources-2.4.26-r4.ebuild,
1553     +files/2.4.26-CAN-2004-0415.patch,
1554     -hardened-sources-2.4.26-3:
1555     Version bump, fix for CAN 0415, see bug #59378.
1556    
1557 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1558    
1559     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1560     +hardened-sources-2.4.26-r3.ebuild,
1561     +files/2.4.26-CAN-2004-0497.patch,
1562     -hardened-sources-2.4.26-r2.ebuild:
1563     Version bump, fixed CAN 0497, see bug #56171.
1564    
1565 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1566    
1567     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1568 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1569 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1570     +files/2.4.26-CAN-2004-0535.patch,
1571     -hardened-sources-2.4.26-r1.ebuild:
1572     Fixes for both CAN 0495 and 0535, see bug #54976
1573 pvdabeel 1.27
1574 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1575     hardened-sources-2.4.26-r1.ebuild:
1576     QA - fix use invocation
1577 scox 1.28
1578     *hardened-sources-2.4.26-r1 (22 June 2004)
1579    
1580     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1581     +hardened-sources-2.4.26-r1.ebuild,
1582     +files/2.4.26-CAN-2004-0394.patch,
1583     +files/2.4.26-signal-race.patch,
1584     -hardened-sources-2.4.26.ebuild,
1585     -hardened-sources-2.4.24-r3.ebuild:
1586     Version bump for the CAN-2004-0394 issue and bug #53804
1587     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1588    
1589    
1590 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1591     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1592     Masked hardened-sources-2.4.26.ebuild broken for ppc
1593    
1594     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1595     hardened-sources-2.4.24-r3.ebuild:
1596     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1597 plasmaroo 1.25
1598 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1599    
1600     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1601     +hardened-sources-2.4.26.ebuild:
1602     Updated hardened-sources for the 2.4.26 kernel
1603     Removed broken components, updated almost everything.
1604    
1605 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1606    
1607     17 Apr 2004; <plasmaroo@gentoo.org>
1608     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1609     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1610     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1611     +hardened-sources-2.4.24-r3.ebuild:
1612     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1613     vulnerabilities. Old revisions removed.
1614 plasmaroo 1.24
1615     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1616    
1617     15 Apr 2004; <plasmaroo@gentoo.org>
1618     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1619     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1620     Version bump for the CAN-2004-0109 issue; bug #47881.
1621 aliz 1.23
1622     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1623     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1624     Add eutils to inherit.
1625 plasmaroo 1.22
1626     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1627    
1628     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1629     files/hardened-sources-2.4.24.munmap.patch:
1630     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1631 scox 1.19
1632 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1633 scox 1.26
1634 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1635     hardened-sources-2.4.24.ebuild:
1636     Version bump, updated most of the components.
1637     This release includes the following:
1638    
1639     - Hardened security
1640     - Netfilter patch-o-matic 20031219
1641     - FreeSWAN 2.04 & x509 1.4.8
1642     - EVMS 2.2.2
1643     - XFS 1.3.1
1644     - cryptoloop jari
1645     - grsecurity 2.0-rc4
1646     - SELinux
1647     - PaX 200402060000
1648     - PaX Obscurity 200308302223
1649     - Others...
1650    
1651     Neither -ck nor systrace are included anymore.
1652    
1653 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1654    
1655     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1656     hardened-sources-2.4.22-r2.ebuild:
1657 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1658 scox 1.19
1659     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1660 iggy 1.17
1661     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1662 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1663 iggy 1.16
1664     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1665 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1666     Version bump for the 'do_brk' vulnerability.
1667 iggy 1.15
1668     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1669     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1670     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1671     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1672 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1673 frogger 1.14
1674     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1675     hardened-sources-2.4.22.ebuild:
1676 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1677     components. These are no longer handled in the kernel
1678     so this code was not necessary.
1679 frogger 1.13
1680     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1681     New 2.4.22 based hardened-sources thanks to
1682     Phil West <p.west@computer.org>.
1683    
1684     These sources include:
1685 plasmaroo 1.18 - New SELinux API
1686     - Updated CK-base
1687     - Updated GRSec
1688     - Systrace
1689     - SuperFreeS/WAN 1.99.8
1690     - Propolice kernel build support
1691     - EVMS
1692     - Other various security related patches
1693 frogger 1.11
1694 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1695    
1696     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1697     Updated hardened-sources based on the 2.4.21 Linux kernel.
1698     This includes updates to most major components such as:
1699 plasmaroo 1.18 - ck-base-0306300059
1700     - selinux-2.4-2003071106
1701     - grsecurity-2.0-rc1
1702     - Updated IPTables patch-o-matic
1703     - Updated SuperFreeS/WAN
1704    
1705 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1706     updated patch set ready for the 2.4.21 based kernel.
1707    
1708 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1709     Initial import of hardened-sources-2.4.20-r4. This revision
1710     includes only a few changes, but one of these is an important
1711     security fix. It is recommended all users of hardened-sources
1712     upgrade to this release.
1713 plasmaroo 1.18
1714 frogger 1.11 - ioperm bug fix
1715     - fixed compilation failure when building without GRSec
1716 plasmaroo 1.18
1717 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1718     due to time constraints, but is planned for inclusion in the near
1719     future.
1720 msterret 1.10
1721     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1722    
1723     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1724     hardened-sources-2.4.20-r3.ebuild:
1725 plasmaroo 1.18 Add Header...
1726 frogger 1.9
1727     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1728     hardened-sources-2.4.20-r3.ebuild:
1729     Removed warnings from ebuild. This kernel should be safe to
1730     use at this point.
1731 frogger 1.8
1732     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1733    
1734     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1735     hardened-sources-2.4.20-r3.ebuild:
1736     New revision. Includes the following changes over -r2:
1737 plasmaroo 1.18
1738 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1739     - Super FreeS/WAN 1.99.7rc2
1740     - PaX for the LSM/SELinux branch
1741     - GRSecurity 2.0-pre4 (role based access control)
1742     - Systrace 1.3
1743     - EXT3 fixes
1744     - EVMS 2.0.1
1745     - GCC 3.1+ compile optimizations
1746     - ProPolice kernel build support
1747     - Hashing table security fixes
1748 frogger 1.3
1749     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1750 frogger 1.7
1751     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1752     Initial import of hardened-sources-r2. This new
1753     ebuild includes many new performance and security
1754     related patches. As in -r1, it will patch in
1755     LSM/SELinux if "selinux" is in USE, otherwise it
1756     will patch in GRSecurity. The following patches
1757     are included in this revision:
1758 plasmaroo 1.18
1759 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1760     (pulled from the base CK patch)
1761     - ptrace exploit patch for the LSM kernel
1762     (the GRSec patch already fixes this)
1763     - LSM 2.4-2003040709
1764     - SELinux 2.4-2003040709
1765     - Systrace v1.2
1766     - IPTables patch-o-matic base patches - 20030107
1767     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1768     - Super FreeS/WAN 1.99.6.1
1769     - GRSecurity 1.9.9g
1770     - MPPE
1771     - EXT3 data journal fix
1772     - CIPE 1.5.4
1773 frogger 1.6
1774     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1775     hardened-sources-2.4.20-r1.ebuild, manifest:
1776 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1777 frogger 1.5
1778     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1779     hardened-sources-2.4.20-r1.ebuild:
1780     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1781     is patched in instead. Ptrace patches for selinux have also been added. In
1782     either case, systrace support will be patched in as well.
1783 frogger 1.3
1784     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1785     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1786 plasmaroo 1.18 Revision bump for new sources.
1787 frogger 1.4
1788 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1789 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1790 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1791 method 1.1
1792 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1793    
1794 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1795     hardened-sources-2.4.20.ebuild:
1796 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20