/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.67 - (hide annotations) (download)
Sun Dec 4 13:42:52 2005 UTC (8 years, 4 months ago) by solar
Branch: MAIN
Changes since 1.66: +4 -1 lines
- stable on x86 security bug #114227 CAN-2005-3257
(Portage version: 2.0.53)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 tocharian 1.42 # Copyright 2000-2005 Gentoo Foundation; Distributed under the GPL v2
3 solar 1.67 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.66 2005/11/19 22:25:14 kang Exp $
4    
5     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
6     - stable on x86 security bug #114227 CAN-2005-3257
7 kang 1.66
8     *hardened-sources-2.4.32 (19 Nov 2005)
9    
10     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
11     +hardened-sources-2.4.32.ebuild:
12     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
13     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
14     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
15     rsbac >> /etc/portage/package.use)
16 johnm 1.65
17     *hardened-sources-2.6.14 (14 Nov 2005)
18    
19     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
20     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
21     Bumping 2.6 series to 2.6.14.2
22 johnm 1.64
23     *hardened-sources-2.6.13-r2 (20 Oct 2005)
24    
25     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
26     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
27     +hardened-sources-2.6.13-r2.ebuild:
28     Fixes minor build error in ppc.
29 johnm 1.63
30     *hardened-sources-2.6.13-r1 (17 Oct 2005)
31    
32     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
33     +hardened-sources-2.6.13-r1.ebuild:
34     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
35     2.6.13.4, fixes some major amd64 stability problems.
36 johnm 1.62
37     *hardened-sources-2.6.13 (16 Sep 2005)
38    
39     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
40     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
41     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
42     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
43     users should test this thoroughly.
44 solar 1.61
45     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
46     - stable on x86
47 johnm 1.60
48     *hardened-sources-2.6.11-r15 (27 Jun 2005)
49    
50     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
51     +hardened-sources-2.6.11-r15.ebuild:
52     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
53     grsec redefining curr_ip struct.
54 solar 1.59
55     *hardened-sources-2.4.31 (20 Jun 2005)
56    
57     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
58     initial import of 2.4.31 tree
59 johnm 1.58
60     *hardened-sources-2.6.11-r14 (14 Jun 2005)
61    
62     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
63     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
64     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
65     naming scheme to abide by genpatches
66 johnm 1.57
67     *hardened-sources-2.6.11-r13 (18 May 2005)
68    
69     18 May 2005; John Mylchreest <johnm@gentoo.org>
70     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
71     Managed to mangle the Makefile patch from grsec, to miss out the grsec
72     target. sorry about that. Fixes bug #93022
73 johnm 1.56
74     *hardened-sources-2.6.11-r12 (17 May 2005)
75    
76     17 May 2005; John Mylchreest <johnm@gentoo.org>
77     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
78     +hardened-sources-2.6.11-r12.ebuild:
79     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
80     merges in genpatches-base
81 johnm 1.55
82     *hardened-sources-2.6.11-r12 (17 May 2005)
83    
84     17 May 2005; John Mylchreest <johnm@gentoo.org>
85     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
86     +hardened-sources-2.6.11-r12.ebuild:
87     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
88     merges in genpatches-base
89 solar 1.54
90     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
91     -files/2.4.27-cmdline-race.patch,
92     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
93     -files/2.4.28-grsec-binfmt_a.out.patch,
94     -files/2.4.28-grsec-cmdline-race.patch,
95     -files/2.4.28-selinux-binfmt_a.out.patch,
96     -files/2.4.28-selinux-cmdline-race.patch,
97     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
98     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
99     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
100     cleanup..
101 solar 1.53
102     *hardened-sources-2.4.30-r1 (21 Apr 2005)
103    
104     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
105     - disable aout by default
106 solar 1.52
107     *hardened-sources-2.4.30 (18 Apr 2005)
108    
109     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
110     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
111     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
112     use
113 tocharian 1.50
114 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
115    
116     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
117     +hardened-sources-2.4.29.ebuild:
118     New hardened-patches-2.4-29.0 patchball.
119     Removed SELinux support, upgraded GRSecurity to 2.1.4.
120    
121     *hardened-sources-2.4.28-r5 (06 Mar 2005)
122    
123     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
124     +hardened-sources-2.4.28-r5.ebuild:
125     Added a fix for a PaX vulnerability.
126    
127     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
128 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
129     Stable on x86
130 solar 1.49
131     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
132     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
133     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
134     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
135     - fixed/added RDEPEND= in all kernel-2 ebuilds
136 tocharian 1.48
137     *hardened-sources-2.4.28-r4 (21 Jan 2005)
138    
139     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
140     +hardened-sources-2.4.28-r4.ebuild:
141     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
142     backport of neighbour hash updates.
143 tocharian 1.47
144     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
145     hardened-sources-2.4.28-r3.ebuild:
146     Stable on x86
147 tseng 1.46
148     *hardened-sources-2.6.10-r3 (20 Jan 2005)
149    
150     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
151     +hardened-sources-2.6.10-r3.ebuild:
152     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
153     in 2005.0
154 tocharian 1.45
155     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
156     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
157     hardened-sources-2.4.28-r2.ebuild:
158     Mark stable on x86
159 tocharian 1.44
160     *hardened-sources-2.4.28-r3 (17 Jan 2005)
161    
162     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
163     +hardened-sources-2.4.28-r3.ebuild:
164     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
165 tocharian 1.43
166     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
167     hardened-sources-2.4.28.ebuild:
168     Mark stable on x86.
169 tocharian 1.42
170     *hardened-sources-2.4.28-r2 (13 Jan 2005)
171    
172     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
173     +hardened-sources-2.4.28-r2.ebuild:
174     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
175     Mazinger for grsecurity patches as well.
176 plasmaroo 1.41
177     *hardened-sources-2.4.28-r1 (23 Dec 2004)
178    
179     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
180     Security bump. Thank tocharian for rolling a new patchset...
181 solar 1.40
182     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
183     +files/2.4.28-grsec-cmdline-race.patch,
184     +files/2.4.28-selinux-binfmt_a.out.patch,
185     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
186     - Round up remaining security patches that appear to be missing in 2.4.28. -
187     PaX standalone updated to current. hgpv=28.1
188 solar 1.39
189     *hardened-sources-2.4.28 (28 Nov 2004)
190    
191     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
192     security bump. Thank tocharian for rolling a new patchset
193 scox 1.31
194 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
195    
196     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
197     +hardened-sources-2.4.27-r3.ebuild:
198     Applies the new 2.4-27.2 patchball which updates
199     GRSecurity to the 2.0.1 version.
200    
201 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
202    
203     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
204     +hardened-sources-2.4.27-r2.ebuild:
205     Version bump.
206     This version uses the new 2.4-27.1 patchball which updates
207     both the SELinux PaX hooks patch and the SELinux headers.
208    
209 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
210    
211     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
212     +hardened-sources-2.4.27-r1.ebuild,
213     -hardened-sources-2.4.27.ebuild,
214     +files/2.4.27-cmdline-race.patch:
215     Version bump, fix for cmdline race. See bug #59905.
216    
217     *hardened-sources-2.4.26-r6 (09 Aug 2004)
218    
219     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
220     +hardened-sources-2.4.26-r6.ebuild,
221     -hardened-sources-2.4.26-r5.ebuild,
222     -hardened-sources-2.4.26-r4.ebuild,
223     +files/2.4.26-cmdline-race.patch:
224     Version bump, fix for cmdline race. See bug #59905.
225    
226 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
227    
228     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
229     +hardened-sources-2.4.27.ebuild,
230     +files/2.4.27-CAN-2004-0394.patch:
231     Ported the patchball to the 2.4.27 kernel version.
232    
233 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
234    
235     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
236     +hardened-sources-2.4.26-r5.ebuild:
237 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
238 scox 1.34 It adds the following features:
239     - Squashfs
240     - Ebtables
241     - Netdev random (core+drivers)
242     - Watchdog Timer (WDT) fix.
243    
244 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
245    
246     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
247     +hardened-sources-2.4.26-r4.ebuild,
248     +files/2.4.26-CAN-2004-0415.patch,
249     -hardened-sources-2.4.26-3:
250     Version bump, fix for CAN 0415, see bug #59378.
251    
252 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
253    
254     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
255     +hardened-sources-2.4.26-r3.ebuild,
256     +files/2.4.26-CAN-2004-0497.patch,
257     -hardened-sources-2.4.26-r2.ebuild:
258     Version bump, fixed CAN 0497, see bug #56171.
259    
260 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
261    
262     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
263 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
264 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
265     +files/2.4.26-CAN-2004-0535.patch,
266     -hardened-sources-2.4.26-r1.ebuild:
267     Fixes for both CAN 0495 and 0535, see bug #54976
268 pvdabeel 1.27
269 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
270     hardened-sources-2.4.26-r1.ebuild:
271     QA - fix use invocation
272 scox 1.28
273     *hardened-sources-2.4.26-r1 (22 June 2004)
274    
275     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
276     +hardened-sources-2.4.26-r1.ebuild,
277     +files/2.4.26-CAN-2004-0394.patch,
278     +files/2.4.26-signal-race.patch,
279     -hardened-sources-2.4.26.ebuild,
280     -hardened-sources-2.4.24-r3.ebuild:
281     Version bump for the CAN-2004-0394 issue and bug #53804
282     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
283    
284    
285 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
286     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
287     Masked hardened-sources-2.4.26.ebuild broken for ppc
288    
289     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
290     hardened-sources-2.4.24-r3.ebuild:
291     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
292 plasmaroo 1.25
293 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
294    
295     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
296     +hardened-sources-2.4.26.ebuild:
297     Updated hardened-sources for the 2.4.26 kernel
298     Removed broken components, updated almost everything.
299    
300 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
301    
302     17 Apr 2004; <plasmaroo@gentoo.org>
303     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
304     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
305     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
306     +hardened-sources-2.4.24-r3.ebuild:
307     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
308     vulnerabilities. Old revisions removed.
309 plasmaroo 1.24
310     *hardened-sources-2.4.24-r2 (15 Apr 2004)
311    
312     15 Apr 2004; <plasmaroo@gentoo.org>
313     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
314     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
315     Version bump for the CAN-2004-0109 issue; bug #47881.
316 aliz 1.23
317     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
318     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
319     Add eutils to inherit.
320 plasmaroo 1.22
321     *hardened-sources-2.4.24-r1 (19 Feb 2004)
322    
323     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
324     files/hardened-sources-2.4.24.munmap.patch:
325     Added the patch for the mremap/munmap vulnerability. Bug #42024.
326 scox 1.19
327 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
328 scox 1.26
329 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
330     hardened-sources-2.4.24.ebuild:
331     Version bump, updated most of the components.
332     This release includes the following:
333    
334     - Hardened security
335     - Netfilter patch-o-matic 20031219
336     - FreeSWAN 2.04 & x509 1.4.8
337     - EVMS 2.2.2
338     - XFS 1.3.1
339     - cryptoloop jari
340     - grsecurity 2.0-rc4
341     - SELinux
342     - PaX 200402060000
343     - PaX Obscurity 200308302223
344     - Others...
345    
346     Neither -ck nor systrace are included anymore.
347    
348 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
349    
350     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
351     hardened-sources-2.4.22-r2.ebuild:
352 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
353 scox 1.19
354     *hardened-sources-2.4.22-r1 (02 Dec 2003)
355 iggy 1.17
356     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
357 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
358 iggy 1.16
359     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
360 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
361     Version bump for the 'do_brk' vulnerability.
362 iggy 1.15
363     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
364     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
365     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
366     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
367 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
368 frogger 1.14
369     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
370     hardened-sources-2.4.22.ebuild:
371 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
372     components. These are no longer handled in the kernel
373     so this code was not necessary.
374 frogger 1.13
375     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
376     New 2.4.22 based hardened-sources thanks to
377     Phil West <p.west@computer.org>.
378    
379     These sources include:
380 plasmaroo 1.18 - New SELinux API
381     - Updated CK-base
382     - Updated GRSec
383     - Systrace
384     - SuperFreeS/WAN 1.99.8
385     - Propolice kernel build support
386     - EVMS
387     - Other various security related patches
388 frogger 1.11
389 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
390    
391     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
392     Updated hardened-sources based on the 2.4.21 Linux kernel.
393     This includes updates to most major components such as:
394 plasmaroo 1.18 - ck-base-0306300059
395     - selinux-2.4-2003071106
396     - grsecurity-2.0-rc1
397     - Updated IPTables patch-o-matic
398     - Updated SuperFreeS/WAN
399    
400 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
401     updated patch set ready for the 2.4.21 based kernel.
402    
403 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
404     Initial import of hardened-sources-2.4.20-r4. This revision
405     includes only a few changes, but one of these is an important
406     security fix. It is recommended all users of hardened-sources
407     upgrade to this release.
408 plasmaroo 1.18
409 frogger 1.11 - ioperm bug fix
410     - fixed compilation failure when building without GRSec
411 plasmaroo 1.18
412 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
413     due to time constraints, but is planned for inclusion in the near
414     future.
415 msterret 1.10
416     *hardened-sources-2.4.20-r2 (12 Jun 2003)
417    
418     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
419     hardened-sources-2.4.20-r3.ebuild:
420 plasmaroo 1.18 Add Header...
421 frogger 1.9
422     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
423     hardened-sources-2.4.20-r3.ebuild:
424     Removed warnings from ebuild. This kernel should be safe to
425     use at this point.
426 frogger 1.8
427     *hardened-sources-2.4.20-r3 (08 Jun 2003)
428    
429     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
430     hardened-sources-2.4.20-r3.ebuild:
431     New revision. Includes the following changes over -r2:
432 plasmaroo 1.18
433 frogger 1.8 - ck7-base (O(1), preempt, low latency)
434     - Super FreeS/WAN 1.99.7rc2
435     - PaX for the LSM/SELinux branch
436     - GRSecurity 2.0-pre4 (role based access control)
437     - Systrace 1.3
438     - EXT3 fixes
439     - EVMS 2.0.1
440     - GCC 3.1+ compile optimizations
441     - ProPolice kernel build support
442     - Hashing table security fixes
443 frogger 1.3
444     *hardened-sources-2.4.20-r1 (09 Apr 2003)
445 frogger 1.7
446     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
447     Initial import of hardened-sources-r2. This new
448     ebuild includes many new performance and security
449     related patches. As in -r1, it will patch in
450     LSM/SELinux if "selinux" is in USE, otherwise it
451     will patch in GRSecurity. The following patches
452     are included in this revision:
453 plasmaroo 1.18
454 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
455     (pulled from the base CK patch)
456     - ptrace exploit patch for the LSM kernel
457     (the GRSec patch already fixes this)
458     - LSM 2.4-2003040709
459     - SELinux 2.4-2003040709
460     - Systrace v1.2
461     - IPTables patch-o-matic base patches - 20030107
462     - CryptoAPI 2.4.20.1 w/ loop-jari patch
463     - Super FreeS/WAN 1.99.6.1
464     - GRSecurity 1.9.9g
465     - MPPE
466     - EXT3 data journal fix
467     - CIPE 1.5.4
468 frogger 1.6
469     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
470     hardened-sources-2.4.20-r1.ebuild, manifest:
471 plasmaroo 1.18 Updated to install flask components correctly for selinux.
472 frogger 1.5
473     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
474     hardened-sources-2.4.20-r1.ebuild:
475     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
476     is patched in instead. Ptrace patches for selinux have also been added. In
477     either case, systrace support will be patched in as well.
478 frogger 1.3
479     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
480     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
481 plasmaroo 1.18 Revision bump for new sources.
482 frogger 1.4
483 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
484 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
485 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
486 method 1.1
487 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
488    
489 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
490     hardened-sources-2.4.20.ebuild:
491 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20