/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.18 - (show annotations) (download)
Thu Dec 4 23:04:03 2003 UTC (11 years ago) by plasmaroo
Branch: MAIN
Changes since 1.17: +31 -27 lines
Fix ChangeLog.

1 # ChangeLog for sys-kernel/hardened-sources
2 # Copyright 2000-2003 Gentoo Technologies, Inc.; Distributed under the GPL v2
3 # $Header: /home/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.17 2003/12/02 23:14:31 iggy Exp $
4
5 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
6 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
7
8 *hardened-sources-2.4.22-r1 (02 Dec 2003)
9
10 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
11 hardened-sources-2.4.22-r1.ebuild:
12 Version bump for the 'do_brk' vulnerability.
13
14 01 Dec 2003; Brian Jackson <iggy@gentoo.org>
15 hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
16 hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
17 hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
18 Fix the 'do_brk' vulnerability.
19
20 03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
21 hardened-sources-2.4.22.ebuild:
22 - Removed the src_install() portion for SELinux flask
23 components. These are no longer handled in the kernel
24 so this code was not necessary.
25
26 29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
27 New 2.4.22 based hardened-sources thanks to
28 Phil West <p.west@computer.org>.
29
30 These sources include:
31 - New SELinux API
32 - Updated CK-base
33 - Updated GRSec
34 - Systrace
35 - SuperFreeS/WAN 1.99.8
36 - Propolice kernel build support
37 - EVMS
38 - Other various security related patches
39
40 *hardened-sources-2.4.21 (14 Sep 2003)
41
42 14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
43 Updated hardened-sources based on the 2.4.21 Linux kernel.
44 This includes updates to most major components such as:
45 - ck-base-0306300059
46 - selinux-2.4-2003071106
47 - grsecurity-2.0-rc1
48 - Updated IPTables patch-o-matic
49 - Updated SuperFreeS/WAN
50
51 Thanks to Phil West <pwest@computer.org> for his work in getting this
52 updated patch set ready for the 2.4.21 based kernel.
53
54 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
55 Initial import of hardened-sources-2.4.20-r4. This revision
56 includes only a few changes, but one of these is an important
57 security fix. It is recommended all users of hardened-sources
58 upgrade to this release.
59
60 - ioperm bug fix
61 - fixed compilation failure when building without GRSec
62
63 SAL (Secure Auditing for Linux) is NOT included in this revision
64 due to time constraints, but is planned for inclusion in the near
65 future.
66
67 *hardened-sources-2.4.20-r2 (12 Jun 2003)
68
69 12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
70 hardened-sources-2.4.20-r3.ebuild:
71 Add Header...
72
73 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
74 hardened-sources-2.4.20-r3.ebuild:
75 Removed warnings from ebuild. This kernel should be safe to
76 use at this point.
77
78 *hardened-sources-2.4.20-r3 (08 Jun 2003)
79
80 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
81 hardened-sources-2.4.20-r3.ebuild:
82 New revision. Includes the following changes over -r2:
83
84 - ck7-base (O(1), preempt, low latency)
85 - Super FreeS/WAN 1.99.7rc2
86 - PaX for the LSM/SELinux branch
87 - GRSecurity 2.0-pre4 (role based access control)
88 - Systrace 1.3
89 - EXT3 fixes
90 - EVMS 2.0.1
91 - GCC 3.1+ compile optimizations
92 - ProPolice kernel build support
93 - Hashing table security fixes
94
95 *hardened-sources-2.4.20-r1 (09 Apr 2003)
96
97 23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
98 Initial import of hardened-sources-r2. This new
99 ebuild includes many new performance and security
100 related patches. As in -r1, it will patch in
101 LSM/SELinux if "selinux" is in USE, otherwise it
102 will patch in GRSecurity. The following patches
103 are included in this revision:
104
105 - O(1) Scheduler, Low Latency, and Preempt
106 (pulled from the base CK patch)
107 - ptrace exploit patch for the LSM kernel
108 (the GRSec patch already fixes this)
109 - LSM 2.4-2003040709
110 - SELinux 2.4-2003040709
111 - Systrace v1.2
112 - IPTables patch-o-matic base patches - 20030107
113 - CryptoAPI 2.4.20.1 w/ loop-jari patch
114 - Super FreeS/WAN 1.99.6.1
115 - GRSecurity 1.9.9g
116 - MPPE
117 - EXT3 data journal fix
118 - CIPE 1.5.4
119
120 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
121 hardened-sources-2.4.20-r1.ebuild, manifest:
122 Updated to install flask components correctly for selinux.
123
124 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
125 hardened-sources-2.4.20-r1.ebuild:
126 LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
127 is patched in instead. Ptrace patches for selinux have also been added. In
128 either case, systrace support will be patched in as well.
129
130 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
131 hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
132 Revision bump for new sources.
133
134 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
135 hardened-sources-2.4.20-r1.ebuild:
136 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
137
138 *hardened-sources-2.4.20 (30 Mar 2003)
139
140 30 Mar 2003; Joshua Brindle <method@gentoo.org>
141 hardened-sources-2.4.20.ebuild:
142 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20