/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.155 - (show annotations) (download)
Sat May 26 20:57:12 2007 UTC (7 years, 2 months ago) by phreak
Branch: MAIN
Changes since 1.154: +5 -1 lines
Fixing the grsecurity patch, had one '};' too much.
(Portage version: 2.1.2.7)

1 # ChangeLog for sys-kernel/hardened-sources
2 # Copyright 2000-2007 Gentoo Foundation; Distributed under the GPL v2
3 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.154 2007/05/26 20:30:01 phreak Exp $
4
5 26 May 2007; Christian Heim <phreak@gentoo.org>
6 hardened-sources-2.6.21-r2.ebuild:
7 Fixing the grsecurity patch, had one '};' too much.
8
9 *hardened-sources-2.6.21-r2 (26 May 2007)
10
11 26 May 2007; Christian Heim <phreak@gentoo.org>
12 -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
13 +hardened-sources-2.6.21-r2.ebuild:
14 Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
15 grsecurity patch to 2.1.10-2.6.21.1-200705221918.
16
17 *hardened-sources-2.6.20-r4 (26 May 2007)
18
19 26 May 2007; Christian Heim <phreak@gentoo.org>
20 -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
21 Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
22 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
23
24 15 May 2007; Christian Heim <phreak@gentoo.org>
25 hardened-sources-2.6.20-r3.ebuild:
26 Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
27 introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
28 grsecurity patch fail in that exact same hunk.
29
30 *hardened-sources-2.6.20-r3 (15 May 2007)
31
32 15 May 2007; Christian Heim <phreak@gentoo.org>
33 +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
34 Revision bump, incorporating Linux 2.6.20.11.
35
36 *hardened-sources-2.6.21-r1 (11 May 2007)
37
38 11 May 2007; Christian Heim <phreak@gentoo.org>
39 +hardened-sources-2.6.21-r1.ebuild:
40 Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
41 mentioned in #177234.
42
43 07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
44 files/digest-hardened-sources-2.6.21, Manifest:
45 Fix Manifest/digest for linux-2.6.21.tar.bz2
46
47 06 May 2007; Christian Heim <phreak@gentoo.org>
48 hardened-sources-2.6.21.ebuild:
49 Bumping the hardened-patches version, needed for the fix for #177234.
50
51 *hardened-sources-2.6.21 (02 May 2007)
52
53 02 May 2007; Christian Heim <phreak@gentoo.org>
54 +hardened-sources-2.6.21.ebuild:
55 Version bump, Linux 2.6.21-hardened.
56
57 29 Apr 2007; Christian Heim <phreak@gentoo.org>
58 hardened-sources-2.6.20-r2.ebuild:
59 Adding ~ia64 on Ned's request.
60
61 29 Apr 2007; Christian Heim <phreak@gentoo.org>
62 hardened-sources-2.6.20-r2.ebuild:
63 Fixing the included grsecurity patch, wasn't alligning due to the Index:
64 header line(s).
65
66 29 Apr 2007; Christian Heim <phreak@gentoo.org>
67 hardened-sources-2.6.20-r2.ebuild:
68 Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
69
70 *hardened-sources-2.6.20-r2 (10 Apr 2007)
71
72 10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
73 +hardened-sources-2.6.20-r2.ebuild:
74 Version bump, on behalf of phreak
75
76 *hardened-sources-2.6.20-r1 (04 Apr 2007)
77
78 04 Apr 2007; Christian Heim <phreak@gentoo.org>
79 +hardened-sources-2.6.20-r1.ebuild:
80 Revision bump, grabbing a newer grsecurity snapshot.
81
82 *hardened-sources-2.6.20 (25 Mar 2007)
83
84 25 Mar 2007; Christian Heim <phreak@gentoo.org>
85 +hardened-sources-2.6.20.ebuild:
86 Finally a hardened-sources version for 2.6.20; many people have been waiting
87 for this. Thanks to Steve for preliminary testing, thanks to Ned for the
88 testbox.
89
90 16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
91 hardened-sources-2.6.18-r6.ebuild:
92 Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
93
94 *hardened-sources-2.6.18-r6 (16 Mar 2007)
95
96 16 Mar 2007; Christian Heim <phreak@gentoo.org>
97 -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
98 Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
99 yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
100 supposed to be.
101
102 06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
103 Fixing the Manifest, the previous one was broken (as in still had the
104 deleted ebuild in it).
105
106 06 Mar 2007; Christian Heim <phreak@gentoo.org>
107 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
108 +hardened-sources-2.6.18-r5.ebuild:
109 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
110 Linux 2.6.18.8. Also cleaning up the older version.
111
112 *hardened-sources-2.6.18-r5 (06 Mar 2007)
113
114 06 Mar 2007; Christian Heim <phreak@gentoo.org>
115 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
116 +hardened-sources-2.6.18-r5.ebuild:
117 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
118 Linux 2.6.18.8. Also cleaning up the older version.
119
120 24 Feb 2007; Christian Heim <phreak@gentoo.org>
121 -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
122 -hardened-sources-2.6.19-r5.ebuild:
123 Removing some of the old version, that didn't work.
124
125 *hardened-sources-2.6.19-r6 (12 Feb 2007)
126
127 12 Feb 2007; Christian Heim <phreak@gentoo.org>
128 +hardened-sources-2.6.19-r6.ebuild:
129 Revision bump, including a new grsec version fixing #166235.
130
131 *hardened-sources-2.4.34 (24 Jan 2007)
132
133 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
134 Manifest:
135 updating Manifest with checksums of new tarball and ebuild
136
137 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
138 +hardened-sources-2.4.34.ebuild:
139 I added new hardened sources 2.4 update, this is a critical path
140 security bugfix - all users of h-s are strongly advised
141 to update their existing hardened sources to this version.
142 It contains a fix for a kernel vulnerability that is pertaining
143 to the PaX changes to virtual memory management, possibly leading
144 to a local kernel exploit ... see grsecurity.net forums and homepage
145
146 23 Jan 2007; Christian Heim <phreak@gentoo.org>
147 files/digest-hardened-sources-2.6.19-r5, Manifest:
148 Fixing the patch-tarball digest.
149
150 *hardened-sources-2.6.19-r5 (23 Jan 2007)
151
152 23 Jan 2007; Christian Heim <phreak@gentoo.org>
153 +hardened-sources-2.6.19-r5.ebuild:
154 Revision bump, closing the recently discovered PaX expand_stack()
155 vulnerability.
156
157 *hardened-sources-2.6.19-r4 (14 Jan 2007)
158
159 14 Jan 2007; Christian Heim <phreak@gentoo.org>
160 +hardened-sources-2.6.19-r4.ebuild:
161 Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
162 dropping the randomized PID feature.
163
164 11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
165 hardened-sources-2.4.33.4.ebuild:
166 stable x86, bug #161171
167
168 *hardened-sources-2.6.19-r3 (27 Dec 2006)
169
170 27 Dec 2006; Christian Heim <phreak@gentoo.org>
171 -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
172 Revision bump for bug #157186 and #158786.
173
174 *hardened-sources-2.6.18-r4 (27 Dec 2006)
175
176 27 Dec 2006; Christian Heim <phreak@gentoo.org>
177 -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
178 Revision bump for bug #157186.
179
180 *hardened-sources-2.6.19-r2 (23 Dec 2006)
181
182 23 Dec 2006; Christian Heim <phreak@gentoo.org>
183 -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
184 Revision bump to pull in genpatches-2.6.19-3 for #157186.
185
186 17 Dec 2006; Christian Heim <phreak@gentoo.org>
187 hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
188 hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
189 hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
190 hardened-sources-2.6.19-r1.ebuild:
191 Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
192 adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
193
194 *hardened-sources-2.4.33.4 (17 Dec 2006)
195
196 17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
197 +hardened-sources-2.4.33.4.ebuild:
198 new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
199 and quilting
200
201 *hardened-sources-2.6.19-r1 (14 Dec 2006)
202
203 14 Dec 2006; Christian Heim <phreak@gentoo.org>
204 -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
205 Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
206 for reporting).
207
208 *hardened-sources-2.6.19 (13 Dec 2006)
209
210 13 Dec 2006; Christian Heim <phreak@gentoo.org>
211 +hardened-sources-2.6.19.ebuild:
212 And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
213 Brad for providing that prompt update.
214
215 *hardened-sources-2.6.18-r3 (13 Dec 2006)
216
217 13 Dec 2006; Christian Heim <phreak@gentoo.org>
218 -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
219 +hardened-sources-2.6.18-r3.ebuild:
220 Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
221 S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
222
223 09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
224 Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
225
226 08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
227 Stable on ppc wrt bug 157356
228
229 07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
230 hardened-sources-2.6.18.ebuild:
231 stable x86, bug #157356
232
233 *hardened-sources-2.6.18-r2 (06 Dec 2006)
234
235 06 Dec 2006; Christian Heim <phreak@gentoo.org>
236 +hardened-sources-2.6.18-r2.ebuild:
237 Revision bump, including 2.6.18.5 (via genpatches) and
238 4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
239 Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
240 redesign.
241
242 06 Dec 2006; Christian Heim <phreak@gentoo.org>
243 hardened-sources-2.6.18.ebuild:
244 Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
245 of Mike Doty).
246
247 *hardened-sources-2.6.18-r1 (23 Nov 2006)
248
249 23 Nov 2006; Christian Heim <phreak@gentoo.org>
250 +hardened-sources-2.6.18-r1.ebuild:
251 Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
252
253 *hardened-sources-2.6.18 (11 Nov 2006)
254
255 11 Nov 2006; Christian Heim <phreak@gentoo.org>
256 +hardened-sources-2.6.18.ebuild:
257 Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
258
259 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
260 - mark amd64 stable also. bug #151877
261
262 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
263 - mark 2.6.17-r1 stable
264
265 27 Aug 2006; Christian Heim <phreak@gentoo.org>
266 -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
267 Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
268
269 *hardened-sources-2.6.17-r1 (26 Aug 2006)
270
271 26 Aug 2006; Christian Heim <phreak@gentoo.org>
272 +hardened-sources-2.6.17-r1.ebuild:
273 Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
274 grsecurity patch.
275
276 *hardened-sources-2.6.17 (17 Aug 2006)
277
278 17 Aug 2006; Christian Heim <phreak@gentoo.org>
279 +hardened-sources-2.6.17.ebuild:
280 Bumping the hardened-sources-2.6 series to 2.6.17, using
281 genpatches-2.6.17-6.base.
282
283 07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
284 - stable on x86 and amd64
285
286 *hardened-sources-2.6.16-r11 (15 Jul 2006)
287
288 15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
289 -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
290 -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
291 -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
292 - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
293 crusty ebuilds
294
295 14 Jul 2006; John Mylchreest <johnm@gentoo.org>
296 hardened-sources-2.6.16-r10.ebuild:
297 marking stable on x86 and amd64
298
299 13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
300 - 2.4.32-r6 stable on x86. RSBAC state unknown
301
302 *hardened-sources-2.4.32-r7 (10 Jul 2006)
303
304 10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
305 +hardened-sources-2.4.32-r7.ebuild:
306 Bump PaX for RSBAC to test-17
307
308 *hardened-sources-2.6.16-r9 (03 Jul 2006)
309
310 03 Jul 2006; John Mylchreest <johnm@gentoo.org>
311 -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
312 hardened-sources-2.6.16 bump to latest -base.
313
314 *hardened-sources-2.4.32-r6 (30 Jun 2006)
315
316 30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
317 hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
318 - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
319 sysctl controlable resource logging
320
321 *hardened-sources-2.6.16-r7 (05 Jun 2006)
322
323 05 Jun 2006; John Mylchreest <johnm@gentoo.org>
324 -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
325 push new 2.6.16 release in preparation for stable
326
327 22 May 2006; <solar@gentoo.org> :
328 - redigest bug 134002
329
330 *hardened-sources-2.4.32-r5 (16 May 2006)
331
332 16 May 2006; Guillaume Destuynder <kang@gentoo.org>
333 +hardened-sources-2.4.32-r5.ebuild:
334 Fixes rsbac common patching (new patch in new -r5 patchset)
335
336 *hardened-sources-2.4.32-r4 (13 May 2006)
337
338 13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
339 +hardened-sources-2.4.32-r4.ebuild:
340 - security bumps
341
342 *hardened-sources-2.6.16-r6 (03 May 2006)
343
344 03 May 2006; John Mylchreest <johnm@gentoo.org>
345 +hardened-sources-2.6.16-r6.ebuild:
346 bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
347
348 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
349 hardened-sources-2.6.14-r8.ebuild:
350 fix x86_64 build problem, this will delay the digest issue again for a short
351 while but it will sort itself out
352
353 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
354 hardened-sources-2.6.14-r8.ebuild:
355 bump hardened patchset
356
357 27 Apr 2006; Alec Warner <antarus@gentoo.org>
358 files/digest-hardened-sources-2.4.32-r2,
359 files/digest-hardened-sources-2.4.32-r3,
360 files/digest-hardened-sources-2.6.14-r8, Manifest:
361 Fixing duff SHA256 digests: Bug # 131293
362
363 *hardened-sources-2.6.16-r5 (27 Apr 2006)
364
365 27 Apr 2006; John Mylchreest <johnm@gentoo.org>
366 -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
367 -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
368 stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
369 cleanup of old uneccessary sources
370
371 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
372 fix digest
373
374 *hardened-sources-2.6.14-r8 (20 Apr 2006)
375
376 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
377 +hardened-sources-2.6.14-r8.ebuild:
378 fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
379
380 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
381 Turning on gpg-signing again, and recomitting
382
383 *hardened-sources-2.6.16-r4 (20 Apr 2006)
384
385 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
386 -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
387 +hardened-sources-2.6.16-r4.ebuild:
388 Fix numerous security vulns
389
390 *hardened-sources-2.4.32-r3 (16 Apr 2006)
391
392 16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
393 -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
394 +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
395 - security bump for bug #112791. Removed old ebuilds
396
397 *hardened-sources-2.6.16-r3 (15 Apr 2006)
398
399 15 Apr 2006; John Mylchreest <johnm@gentoo.org>
400 +hardened-sources-2.6.16-r3.ebuild:
401 Removing silly localversion which I missed
402
403 *hardened-sources-2.6.14-r7 (14 Apr 2006)
404
405 14 Apr 2006; John Mylchreest <johnm@gentoo.org>
406 -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
407 Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
408
409 *hardened-sources-2.6.16-r2 (13 Apr 2006)
410
411 13 Apr 2006; John Mylchreest <johnm@gentoo.org>
412 -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
413 +hardened-sources-2.6.16-r2.ebuild:
414 Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
415 labels, dropping USERGROUP define fixes, since these were merged mainstream.
416
417 *hardened-sources-2.6.16-r1 (11 Apr 2006)
418
419 11 Apr 2006; John Mylchreest <johnm@gentoo.org>
420 +hardened-sources-2.6.16-r1.ebuild:
421 Bumping to include ppc build fix and 2.6.16.3
422
423 06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
424 hardened-sources-2.6.14-r6.ebuild:
425 Stable on x86; bug #127718
426
427 *hardened-sources-2.6.16 (31 Mar 2006)
428
429 31 Mar 2006; John Mylchreest <johnm@gentoo.org>
430 +hardened-sources-2.6.16.ebuild:
431 Bumping to new version of grsec, and kernel base. New squashfs. Based on
432 2.6.16.1
433
434 30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
435 hardened-sources-2.6.14-r6.ebuild:
436 Stable on amd64, bug 127718.
437
438 28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
439 Stable on ppc. Bug #127718
440
441 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
442 -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
443 -hardened-sources-2.6.14-r4.ebuild:
444 Cleanup.
445
446 *hardened-sources-2.6.14-r6 (15 Mar 2006)
447
448 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
449 +hardened-sources-2.6.14-r6.ebuild:
450 Fixes grsec policy recreation bug and adds a
451 >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
452
453 02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
454 - stable on x86
455
456 19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
457 hardened-sources-2.6.14-r5.ebuild:
458 Stable on ppc.
459
460 *hardened-sources-2.6.14-r5 (01 Feb 2006)
461
462 01 Feb 2006; John Mylchreest <johnm@gentoo.org>
463 +hardened-sources-2.6.14-r5.ebuild:
464 fixing every known exploit
465
466 *hardened-sources-2.4.32-r2 (26 Jan 2006)
467
468 26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
469 +hardened-sources-2.4.32-r2.ebuild:
470 - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
471
472 *hardened-sources-2.6.14-r4 (12 Jan 2006)
473
474 12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
475 - version bump for new genpatches which fix up a few sec holes
476
477 *hardened-sources-2.4.32-r1 (05 Jan 2006)
478
479 05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
480 - revision bump to add misc vital linux kernel security patches.
481
482 *hardened-sources-2.6.14-r3 (30 Dec 2005)
483
484 30 Dec 2005; John Mylchreest <johnm@gentoo.org>
485 -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
486 Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
487
488 28 Dec 2005; John Mylchreest <johnm@gentoo.org>
489 hardened-sources-2.6.14-r2.ebuild:
490 making x86 & amd64 stable following testing.
491
492 *hardened-sources-2.6.14-r2 (27 Dec 2005)
493
494 27 Dec 2005; John Mylchreest <johnm@gentoo.org>
495 -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
496 Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
497 network hooks.
498
499 06 Dec 2005; John Mylchreest <johnm@gentoo.org>
500 hardened-sources-2.6.14-r1.ebuild:
501 bumping to stable early for sec fix on x86 & amd64
502
503 *hardened-sources-2.6.14-r1 (05 Dec 2005)
504
505 05 Dec 2005; John Mylchreest <johnm@gentoo.org>
506 -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
507 bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
508
509 04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
510 - stable on x86 security bug #114227 CAN-2005-3257
511
512 *hardened-sources-2.4.32 (19 Nov 2005)
513
514 19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
515 +hardened-sources-2.4.32.ebuild:
516 Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
517 Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
518 have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
519 rsbac >> /etc/portage/package.use)
520
521 *hardened-sources-2.6.14 (14 Nov 2005)
522
523 14 Nov 2005; John Mylchreest <johnm@gentoo.org>
524 -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
525 Bumping 2.6 series to 2.6.14.2
526
527 *hardened-sources-2.6.13-r2 (20 Oct 2005)
528
529 20 Oct 2005; John Mylchreest <johnm@gentoo.org>
530 -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
531 +hardened-sources-2.6.13-r2.ebuild:
532 Fixes minor build error in ppc.
533
534 *hardened-sources-2.6.13-r1 (17 Oct 2005)
535
536 17 Oct 2005; John Mylchreest <johnm@gentoo.org>
537 +hardened-sources-2.6.13-r1.ebuild:
538 Updating grsec to latest snapshot. Fixes some minor issues. Updating to
539 2.6.13.4, fixes some major amd64 stability problems.
540
541 *hardened-sources-2.6.13 (16 Sep 2005)
542
543 16 Sep 2005; John Mylchreest <johnm@gentoo.org>
544 -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
545 2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
546 ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
547 users should test this thoroughly.
548
549 01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
550 - stable on x86
551
552 *hardened-sources-2.6.11-r15 (27 Jun 2005)
553
554 27 Jun 2005; John Mylchreest <johnm@gentoo.org>
555 +hardened-sources-2.6.11-r15.ebuild:
556 Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
557 grsec redefining curr_ip struct.
558
559 *hardened-sources-2.4.31 (20 Jun 2005)
560
561 20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
562 initial import of 2.4.31 tree
563
564 *hardened-sources-2.6.11-r14 (14 Jun 2005)
565
566 14 Jun 2005; John Mylchreest <johnm@gentoo.org>
567 -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
568 Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
569 naming scheme to abide by genpatches
570
571 *hardened-sources-2.6.11-r13 (18 May 2005)
572
573 18 May 2005; John Mylchreest <johnm@gentoo.org>
574 -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
575 Managed to mangle the Makefile patch from grsec, to miss out the grsec
576 target. sorry about that. Fixes bug #93022
577
578 *hardened-sources-2.6.11-r12 (17 May 2005)
579
580 17 May 2005; John Mylchreest <johnm@gentoo.org>
581 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
582 +hardened-sources-2.6.11-r12.ebuild:
583 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
584 merges in genpatches-base
585
586 *hardened-sources-2.6.11-r12 (17 May 2005)
587
588 17 May 2005; John Mylchreest <johnm@gentoo.org>
589 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
590 +hardened-sources-2.6.11-r12.ebuild:
591 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
592 merges in genpatches-base
593
594 29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
595 -files/2.4.27-cmdline-race.patch,
596 -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
597 -files/2.4.28-grsec-binfmt_a.out.patch,
598 -files/2.4.28-grsec-cmdline-race.patch,
599 -files/2.4.28-selinux-binfmt_a.out.patch,
600 -files/2.4.28-selinux-cmdline-race.patch,
601 -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
602 hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
603 - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
604 cleanup..
605
606 *hardened-sources-2.4.30-r1 (21 Apr 2005)
607
608 21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
609 - disable aout by default
610
611 *hardened-sources-2.4.30 (18 Apr 2005)
612
613 18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
614 - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
615 and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
616 use
617
618 *hardened-sources-2.4.29 (30 Mar 2005)
619
620 30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
621 +hardened-sources-2.4.29.ebuild:
622 New hardened-patches-2.4-29.0 patchball.
623 Removed SELinux support, upgraded GRSecurity to 2.1.4.
624
625 *hardened-sources-2.4.28-r5 (06 Mar 2005)
626
627 06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
628 +hardened-sources-2.4.28-r5.ebuild:
629 Added a fix for a PaX vulnerability.
630
631 26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
632 hardened-sources-2.4.28-r4.ebuild:
633 Stable on x86
634
635 23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
636 hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
637 hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
638 hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
639 - fixed/added RDEPEND= in all kernel-2 ebuilds
640
641 *hardened-sources-2.4.28-r4 (21 Jan 2005)
642
643 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
644 +hardened-sources-2.4.28-r4.ebuild:
645 Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
646 backport of neighbour hash updates.
647
648 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
649 hardened-sources-2.4.28-r3.ebuild:
650 Stable on x86
651
652 *hardened-sources-2.6.10-r3 (20 Jan 2005)
653
654 20 Jan 2005; Brandon Hale <tseng@gentoo.org>
655 +hardened-sources-2.6.10-r3.ebuild:
656 Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
657 in 2005.0
658
659 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
660 -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
661 hardened-sources-2.4.28-r2.ebuild:
662 Mark stable on x86
663
664 *hardened-sources-2.4.28-r3 (17 Jan 2005)
665
666 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
667 +hardened-sources-2.4.28-r3.ebuild:
668 Fix SMP page fault handler vuln, and update device-mapper and evms patches.
669
670 14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
671 hardened-sources-2.4.28.ebuild:
672 Mark stable on x86.
673
674 *hardened-sources-2.4.28-r2 (13 Jan 2005)
675
676 13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
677 +hardened-sources-2.4.28-r2.ebuild:
678 Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
679 Mazinger for grsecurity patches as well.
680
681 *hardened-sources-2.4.28-r1 (23 Dec 2004)
682
683 23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
684 Security bump. Thank tocharian for rolling a new patchset...
685
686 28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
687 +files/2.4.28-grsec-cmdline-race.patch,
688 +files/2.4.28-selinux-binfmt_a.out.patch,
689 +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
690 - Round up remaining security patches that appear to be missing in 2.4.28. -
691 PaX standalone updated to current. hgpv=28.1
692
693 *hardened-sources-2.4.28 (28 Nov 2004)
694
695 28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
696 security bump. Thank tocharian for rolling a new patchset
697
698 *hardened-sources-2.4.27-r3 (08 Sep 2004)
699
700 08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
701 +hardened-sources-2.4.27-r3.ebuild:
702 Applies the new 2.4-27.2 patchball which updates
703 GRSecurity to the 2.0.1 version.
704
705 *hardened-sources-2.4.27-r2 (31 Aug 2004)
706
707 31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
708 +hardened-sources-2.4.27-r2.ebuild:
709 Version bump.
710 This version uses the new 2.4-27.1 patchball which updates
711 both the SELinux PaX hooks patch and the SELinux headers.
712
713 *hardened-sources-2.4.27-r1 (09 Aug 2004)
714
715 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
716 +hardened-sources-2.4.27-r1.ebuild,
717 -hardened-sources-2.4.27.ebuild,
718 +files/2.4.27-cmdline-race.patch:
719 Version bump, fix for cmdline race. See bug #59905.
720
721 *hardened-sources-2.4.26-r6 (09 Aug 2004)
722
723 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
724 +hardened-sources-2.4.26-r6.ebuild,
725 -hardened-sources-2.4.26-r5.ebuild,
726 -hardened-sources-2.4.26-r4.ebuild,
727 +files/2.4.26-cmdline-race.patch:
728 Version bump, fix for cmdline race. See bug #59905.
729
730 *hardened-sources-2.4.27 (08 Aug 2004)
731
732 08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
733 +hardened-sources-2.4.27.ebuild,
734 +files/2.4.27-CAN-2004-0394.patch:
735 Ported the patchball to the 2.4.27 kernel version.
736
737 *hardened-sources-2.4.26-r5 (07 Aug 2004)
738
739 07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
740 +hardened-sources-2.4.26-r5.ebuild:
741 Updated to use the new hardened-patches-2.4-26.1 patchball.
742 It adds the following features:
743 - Squashfs
744 - Ebtables
745 - Netdev random (core+drivers)
746 - Watchdog Timer (WDT) fix.
747
748 *hardened-sources-2.4.26-r4 (04 Aug 2004)
749
750 04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
751 +hardened-sources-2.4.26-r4.ebuild,
752 +files/2.4.26-CAN-2004-0415.patch,
753 -hardened-sources-2.4.26-3:
754 Version bump, fix for CAN 0415, see bug #59378.
755
756 *hardened-sources-2.4.26-r3 (22 Jul 2004)
757
758 22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
759 +hardened-sources-2.4.26-r3.ebuild,
760 +files/2.4.26-CAN-2004-0497.patch,
761 -hardened-sources-2.4.26-r2.ebuild:
762 Version bump, fixed CAN 0497, see bug #56171.
763
764 *hardened-sources-2.4.26-r2 (29 Jun 2004)
765
766 29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
767 +hardened-sources-2.4.26-r2.ebuild,
768 +files/2.4.26-CAN-2004-0495.patch,
769 +files/2.4.26-CAN-2004-0535.patch,
770 -hardened-sources-2.4.26-r1.ebuild:
771 Fixes for both CAN 0495 and 0535, see bug #54976
772
773 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
774 hardened-sources-2.4.26-r1.ebuild:
775 QA - fix use invocation
776
777 *hardened-sources-2.4.26-r1 (22 June 2004)
778
779 22 June 2004; Andrea Luzzardi <scox@gentoo.org>
780 +hardened-sources-2.4.26-r1.ebuild,
781 +files/2.4.26-CAN-2004-0394.patch,
782 +files/2.4.26-signal-race.patch,
783 -hardened-sources-2.4.26.ebuild,
784 -hardened-sources-2.4.24-r3.ebuild:
785 Version bump for the CAN-2004-0394 issue and bug #53804
786 Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
787
788
789 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
790 hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
791 Masked hardened-sources-2.4.26.ebuild broken for ppc
792
793 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
794 hardened-sources-2.4.24-r3.ebuild:
795 Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
796
797 *hardened-sources-2.4.26 (29 May 2004)
798
799 29 May 2004; Andrea Luzzardi <scox@gentoo.org>
800 +hardened-sources-2.4.26.ebuild:
801 Updated hardened-sources for the 2.4.26 kernel
802 Removed broken components, updated almost everything.
803
804 *hardened-sources-2.4.24-r3 (17 Apr 2004)
805
806 17 Apr 2004; <plasmaroo@gentoo.org>
807 +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
808 +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
809 +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
810 +hardened-sources-2.4.24-r3.ebuild:
811 Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
812 vulnerabilities. Old revisions removed.
813
814 *hardened-sources-2.4.24-r2 (15 Apr 2004)
815
816 15 Apr 2004; <plasmaroo@gentoo.org>
817 +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
818 -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
819 Version bump for the CAN-2004-0109 issue; bug #47881.
820
821 12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
822 hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
823 Add eutils to inherit.
824
825 *hardened-sources-2.4.24-r1 (19 Feb 2004)
826
827 19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
828 files/hardened-sources-2.4.24.munmap.patch:
829 Added the patch for the mremap/munmap vulnerability. Bug #42024.
830
831 *hardened-sources-2.4.24 (06 Feb 2004)
832
833 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
834 hardened-sources-2.4.24.ebuild:
835 Version bump, updated most of the components.
836 This release includes the following:
837
838 - Hardened security
839 - Netfilter patch-o-matic 20031219
840 - FreeSWAN 2.04 & x509 1.4.8
841 - EVMS 2.2.2
842 - XFS 1.3.1
843 - cryptoloop jari
844 - grsecurity 2.0-rc4
845 - SELinux
846 - PaX 200402060000
847 - PaX Obscurity 200308302223
848 - Others...
849
850 Neither -ck nor systrace are included anymore.
851
852 *hardened-sources-2.4.22-r2 (05 Jan 2004)
853
854 05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
855 hardened-sources-2.4.22-r2.ebuild:
856 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
857
858 *hardened-sources-2.4.22-r1 (02 Dec 2003)
859
860 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
861 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
862
863 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
864 hardened-sources-2.4.22-r1.ebuild:
865 Version bump for the 'do_brk' vulnerability.
866
867 01 Dec 2003; Brian Jackson <iggy@gentoo.org>
868 hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
869 hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
870 hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
871 Fix the 'do_brk' vulnerability.
872
873 03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
874 hardened-sources-2.4.22.ebuild:
875 - Removed the src_install() portion for SELinux flask
876 components. These are no longer handled in the kernel
877 so this code was not necessary.
878
879 29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
880 New 2.4.22 based hardened-sources thanks to
881 Phil West <p.west@computer.org>.
882
883 These sources include:
884 - New SELinux API
885 - Updated CK-base
886 - Updated GRSec
887 - Systrace
888 - SuperFreeS/WAN 1.99.8
889 - Propolice kernel build support
890 - EVMS
891 - Other various security related patches
892
893 *hardened-sources-2.4.21 (14 Sep 2003)
894
895 14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
896 Updated hardened-sources based on the 2.4.21 Linux kernel.
897 This includes updates to most major components such as:
898 - ck-base-0306300059
899 - selinux-2.4-2003071106
900 - grsecurity-2.0-rc1
901 - Updated IPTables patch-o-matic
902 - Updated SuperFreeS/WAN
903
904 Thanks to Phil West <pwest@computer.org> for his work in getting this
905 updated patch set ready for the 2.4.21 based kernel.
906
907 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
908 Initial import of hardened-sources-2.4.20-r4. This revision
909 includes only a few changes, but one of these is an important
910 security fix. It is recommended all users of hardened-sources
911 upgrade to this release.
912
913 - ioperm bug fix
914 - fixed compilation failure when building without GRSec
915
916 SAL (Secure Auditing for Linux) is NOT included in this revision
917 due to time constraints, but is planned for inclusion in the near
918 future.
919
920 *hardened-sources-2.4.20-r2 (12 Jun 2003)
921
922 12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
923 hardened-sources-2.4.20-r3.ebuild:
924 Add Header...
925
926 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
927 hardened-sources-2.4.20-r3.ebuild:
928 Removed warnings from ebuild. This kernel should be safe to
929 use at this point.
930
931 *hardened-sources-2.4.20-r3 (08 Jun 2003)
932
933 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
934 hardened-sources-2.4.20-r3.ebuild:
935 New revision. Includes the following changes over -r2:
936
937 - ck7-base (O(1), preempt, low latency)
938 - Super FreeS/WAN 1.99.7rc2
939 - PaX for the LSM/SELinux branch
940 - GRSecurity 2.0-pre4 (role based access control)
941 - Systrace 1.3
942 - EXT3 fixes
943 - EVMS 2.0.1
944 - GCC 3.1+ compile optimizations
945 - ProPolice kernel build support
946 - Hashing table security fixes
947
948 *hardened-sources-2.4.20-r1 (09 Apr 2003)
949
950 23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
951 Initial import of hardened-sources-r2. This new
952 ebuild includes many new performance and security
953 related patches. As in -r1, it will patch in
954 LSM/SELinux if "selinux" is in USE, otherwise it
955 will patch in GRSecurity. The following patches
956 are included in this revision:
957
958 - O(1) Scheduler, Low Latency, and Preempt
959 (pulled from the base CK patch)
960 - ptrace exploit patch for the LSM kernel
961 (the GRSec patch already fixes this)
962 - LSM 2.4-2003040709
963 - SELinux 2.4-2003040709
964 - Systrace v1.2
965 - IPTables patch-o-matic base patches - 20030107
966 - CryptoAPI 2.4.20.1 w/ loop-jari patch
967 - Super FreeS/WAN 1.99.6.1
968 - GRSecurity 1.9.9g
969 - MPPE
970 - EXT3 data journal fix
971 - CIPE 1.5.4
972
973 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
974 hardened-sources-2.4.20-r1.ebuild, manifest:
975 Updated to install flask components correctly for selinux.
976
977 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
978 hardened-sources-2.4.20-r1.ebuild:
979 LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
980 is patched in instead. Ptrace patches for selinux have also been added. In
981 either case, systrace support will be patched in as well.
982
983 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
984 hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
985 Revision bump for new sources.
986
987 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
988 hardened-sources-2.4.20-r1.ebuild:
989 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
990
991 *hardened-sources-2.4.20 (30 Mar 2003)
992
993 30 Mar 2003; Joshua Brindle <method@gentoo.org>
994 hardened-sources-2.4.20.ebuild:
995 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20