/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.232 - (show annotations) (download)
Sat Aug 16 17:47:32 2008 UTC (6 years ago) by tove
Branch: MAIN
Changes since 1.231: +4 -1 lines
Remove phreak from metadata.xml (#96398)
(Portage version: 2.2_rc8/cvs/Linux 2.6.26-tuxonice i686)

1 # ChangeLog for sys-kernel/hardened-sources
2 # Copyright 2000-2008 Gentoo Foundation; Distributed under the GPL v2
3 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.231 2008/07/31 02:29:34 solar Exp $
4
5 16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
6 Remove phreak from metadata.xml (#96398)
7
8 *hardened-sources-2.6.25-r3 (31 Jul 2008)
9
10 31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
11 -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
12 +hardened-sources-2.6.25-r3.ebuild:
13 - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
14 fixes, including security bug #231750.
15
16 28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
17 Stable on ppc
18
19 *hardened-sources-2.6.25-r2 (05 Jul 2008)
20
21 05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
22 -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
23 +hardened-sources-2.6.25-r2.ebuild:
24 2.6.23-r4: Stable x86/amd64
25 2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
26 2.6.23-r{11,12}: Removed due to multiple vulns.
27 (gengor & kerframil)
28
29 04 Jul 2008; nixnut <nixnut@gentoo.org>
30 hardened-sources-2.6.23-r13.ebuild:
31 Stable on ppc
32
33 *hardened-sources-2.6.25-r1 (30 Jun 2008)
34
35 30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
36 +hardened-sources-2.6.25-r1.ebuild:
37 2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
38 grsecurity release. 2.6.23-r13: x86/amd64 stable
39
40 *hardened-sources-2.6.25 (17 Jun 2008)
41 *hardened-sources-2.6.24-r3 (17 Jun 2008)
42 *hardened-sources-2.6.23-r13 (17 Jun 2008)
43
44 17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
45 +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
46 * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
47 #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
48 #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
49 2.6.25: Initial 2.6.25 release.
50
51 15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
52 - fasttrack to stable x86/amd64
53
54 11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
55 Fix broken digest for linux-2.6.24.tar.bz2.
56
57 *hardened-sources-2.6.24-r2 (11 May 2008)
58 *hardened-sources-2.6.23-r12 (11 May 2008)
59
60 11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
61 -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
62 +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
63 -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
64 proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
65 220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
66 security bugs 219901, 220691, 220975, 220979, 221123. New
67 genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
68 should be removed as far as I'm concerned, everything else remove due to
69 vulnerable to numerous security bugs or brokeness.
70
71 10 May 2008; nixnut <nixnut@gentoo.org>
72 hardened-sources-2.6.23-r11.ebuild:
73 Stable on ppc
74
75 05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
76 - -r11 stable on x86/amd64
77
78 *hardened-sources-2.6.23-r11 (01 May 2008)
79
80 01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
81 - version bump to fix ulgy linux bugs
82
83 *hardened-sources-2.6.24-r1 (30 Apr 2008)
84
85 30 Apr 2008; Christian Heim <phreak@gentoo.org>
86 +hardened-sources-2.6.24-r1.ebuild:
87 Revision bump (thanks to Kerin and Gordon, again), pulling
88 genpatches-2.6.24-7, solving #219089. Additionally contains further security
89 fixes plus some minor updates.
90
91 *hardened-sources-2.6.23-r10 (30 Apr 2008)
92
93 30 Apr 2008; Christian Heim <phreak@gentoo.org>
94 +hardened-sources-2.6.23-r10.ebuild:
95 Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
96 Additional contains "various other fixes".
97
98 09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
99 Update the longdescription in metadata, thanks to Gordon Malm.
100
101 08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
102 Stable on ppc wrt bug #213255
103
104 07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
105 -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
106 - stable on x86/amd64 per request. Removed obsolete ebuilds
107
108 *hardened-sources-2.6.24 (07 Apr 2008)
109
110 07 Apr 2008; Christian Heim <phreak@gentoo.org>
111 +hardened-sources-2.6.24.ebuild:
112 Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
113 <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
114 for the many contributions and their continued effort in #216612) based on
115 2.6.24 and genpatches-2.6.24-5.
116
117 The current ebuild/patchset contains these things:
118 * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
119 * Introduces bespoke server and workstation oriented security levels
120 * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
121
122 30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
123 Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
124 maintaining it).
125
126 24 Mar 2008; Christian Heim <phreak@gentoo.org>
127 hardened-sources-2.4.35-r2.ebuild:
128 Fixing SRC_URI for 2.4.35-r2.
129
130 *hardened-sources-2.6.23-r9 (22 Mar 2008)
131
132 22 Mar 2008; Christian Heim <phreak@gentoo.org>
133 +hardened-sources-2.6.23-r9.ebuild:
134 * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
135 * Change the default GIDs for some grsecurity options
136 * Revamp the Hardened [Gentoo] security level and make it the default level
137 * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
138 * Fix a recursive lock -- call to capable() within ptrace_attach()
139 * Fix bug that allows audit and iscsi operations to be controlled via netlink
140
141 *hardened-sources-2.6.23-r8 (27 Feb 2008)
142
143 27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
144 - version bump from Kerin Millar bug 210026
145
146 17 Feb 2008; <solar@gentoo.org> metadata.xml,
147 -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
148 -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
149 -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
150 - stable on x86 and remove old ebuilds
151
152 15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
153 - stable on amd64 per request of amd64 lead
154
155 *hardened-sources-2.6.23-r7 (11 Feb 2008)
156
157 11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
158 - version bump from kerin.millar
159 Changes:
160
161 * Bump to genpatches-base-2.6.23-9
162 * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
163 * Disables COMPAT_VDSO in x86/defconfig
164 * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
165
166 25 Jan 2008; Christian Heim <phreak@gentoo.org>
167 -hardened-sources-2.6.22-r8.ebuild:
168 Cleaning up old versions.
169
170 *hardened-sources-2.6.23-r6 (25 Jan 2008)
171
172 25 Jan 2008; Christian Heim <phreak@gentoo.org>
173 -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
174 Revision bump, pulling in the latest genpatches.
175
176 *hardened-sources-2.6.23-r5 (24 Dec 2007)
177
178 24 Dec 2007; Christian Heim <phreak@gentoo.org>
179 hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
180 hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
181 hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
182 Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
183
184 24 Dec 2007; Christian Heim <phreak@gentoo.org>
185 -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
186 -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
187 -hardened-sources-2.6.23-r3.ebuild:
188 Cleaning out some unused, old versions.
189
190 24 Dec 2007; Christian Heim <phreak@gentoo.org>
191 hardened-sources-2.6.23-r4.ebuild:
192 Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
193 in the tree for long, but there isn't much of a difference between this and
194 -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
195
196 *hardened-sources-2.6.23-r4 (23 Dec 2007)
197
198 23 Dec 2007; Christian Heim <phreak@gentoo.org>
199 +hardened-sources-2.6.23-r4.ebuild:
200 Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
201
202 *hardened-sources-2.6.23-r3 (04 Dec 2007)
203
204 04 Dec 2007; Christian Heim <phreak@gentoo.org>
205 +hardened-sources-2.6.23-r3.ebuild:
206 Revision bump, pulling in 2.6.23.9.
207
208 *hardened-sources-2.6.23-r2 (25 Nov 2007)
209
210 25 Nov 2007; Christian Heim <phreak@gentoo.org>
211 +hardened-sources-2.6.23-r2.ebuild:
212 Updated patchset, thanks to solar.
213
214 *hardened-sources-2.6.23-r1 (31 Oct 2007)
215
216 31 Oct 2007; Christian Heim <phreak@gentoo.org>
217 +hardened-sources-2.6.23-r1.ebuild:
218 Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
219
220 29 Oct 2007; <solar@gentoo.org> metadata.xml:
221 - update metadata.xml
222
223 25 Oct 2007; Christian Heim <phreak@gentoo.org>
224 hardened-sources-2.6.22-r8.ebuild:
225 Marking 2.6.22-r8 stable on amd64 and x86.
226
227 21 Oct 2007; Christian Heim <phreak@gentoo.org>
228 -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
229 -hardened-sources-2.6.21-r4.ebuild:
230 Removing old ebuilds.
231
232 *hardened-sources-2.4.35-r2 (21 Oct 2007)
233
234 21 Oct 2007; Christian Heim <phreak@gentoo.org>
235 +hardened-sources-2.4.35-r2.ebuild:
236 Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
237 patches.
238
239 *hardened-sources-2.6.22-r8 (21 Oct 2007)
240
241 21 Oct 2007; Christian Heim <phreak@gentoo.org>
242 +hardened-sources-2.6.22-r8.ebuild:
243 Yet another new patch, hopefully fixing the remaining issues we had w/
244 2.6.22. Candidate for stabling.
245
246 *hardened-sources-2.6.23 (13 Oct 2007)
247
248 13 Oct 2007; Christian Heim <phreak@gentoo.org>
249 +hardened-sources-2.6.23.ebuild:
250 Initial hardened-sources-2.6.23. If people still have problems w/ bug
251 194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
252
253 11 Oct 2007; Christian Heim <phreak@gentoo.org>
254 hardened-sources-2.6.20-r10.ebuild:
255 Pulling in yet another new genpatches version, fixing the PWC bug for real.
256
257 04 Oct 2007; Christian Heim <phreak@gentoo.org>
258 -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
259 Removing old versions.
260
261 *hardened-sources-2.6.22-r7 (01 Oct 2007)
262
263 01 Oct 2007; Christian Heim <phreak@gentoo.org>
264 +hardened-sources-2.6.22-r7.ebuild:
265 Revision bump, pulling in a newer patch. Should fix #194276.
266
267 30 Sep 2007; Christian Heim <phreak@gentoo.org>
268 hardened-sources-2.6.20-r10.ebuild:
269 Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
270 Mike Doty).
271
272 *hardened-sources-2.6.22-r6 (26 Sep 2007)
273
274 26 Sep 2007; Christian Heim <phreak@gentoo.org>
275 +hardened-sources-2.6.22-r6.ebuild:
276 Revision bump, grabbing up till Linux 2.6.22.9.
277
278 24 Sep 2007; Christian Heim <phreak@gentoo.org>
279 -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
280 Cleaning up further.
281
282 *hardened-sources-2.6.20-r10 (24 Sep 2007)
283
284 24 Sep 2007; Christian Heim <phreak@gentoo.org>
285 -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
286 +hardened-sources-2.6.20-r10.ebuild:
287 Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
288 revisions.
289
290 *hardened-sources-2.6.22-r5 (22 Sep 2007)
291
292 22 Sep 2007; Christian Heim <phreak@gentoo.org>
293 +hardened-sources-2.6.22-r5.ebuild:
294 Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
295
296 17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
297 Removing johnm from metadata.xml (see #186467 for reference).
298
299 *hardened-sources-2.6.22-r4 (17 Sep 2007)
300
301 17 Sep 2007; Christian Heim <phreak@gentoo.org>
302 +hardened-sources-2.6.22-r4.ebuild:
303 Revision bump, hopefully fixing all those weird PAX failures.
304
305 01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
306 Updating the metadata.xml.
307
308 01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
309 Removing tocharian from metadata due to his retirement (see #71718 for
310 reference).
311
312 *hardened-sources-2.6.20-r9 (30 Aug 2007)
313
314 30 Aug 2007; Christian Heim <phreak@gentoo.org>
315 +hardened-sources-2.6.20-r9.ebuild:
316 Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
317
318 29 Aug 2007; Christian Heim <phreak@gentoo.org>
319 -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
320 -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
321 -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
322 -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
323 -hardened-sources-2.6.22-r2.ebuild:
324 Removing some redundant versions.
325
326 *hardened-sources-2.4.35-r1 (29 Aug 2007)
327
328 29 Aug 2007; Christian Heim <phreak@gentoo.org>
329 +hardened-sources-2.4.35-r1.ebuild:
330 Revision bump, new grsecurity patch.
331
332 *hardened-sources-2.6.20-r8 (26 Aug 2007)
333
334 26 Aug 2007; Christian Heim <phreak@gentoo.org>
335 +hardened-sources-2.6.20-r8.ebuild:
336 Revision bump for Linux 2.6.20.17.
337
338 *hardened-sources-2.6.22-r3 (22 Aug 2007)
339
340 22 Aug 2007; Christian Heim <phreak@gentoo.org>
341 +hardened-sources-2.6.22-r3.ebuild:
342 Revision bump for Linux 2.6.22.4.
343
344 16 Aug 2007; Christian Heim <phreak@gentoo.org>
345 hardened-sources-2.6.22-r2.ebuild:
346 Updated patchset, to fix the alignment against 2.6.22.3.
347
348 *hardened-sources-2.6.22-r2 (16 Aug 2007)
349
350 16 Aug 2007; Christian Heim <phreak@gentoo.org>
351 +hardened-sources-2.6.22-r2.ebuild:
352 Revision bump for Linux 2.6.22.3.
353
354 *hardened-sources-2.4.35 (16 Aug 2007)
355
356 16 Aug 2007; Christian Heim <phreak@gentoo.org>
357 +hardened-sources-2.4.35.ebuild:
358 Version bump, initial version for Linux 2.4.35.
359
360 *hardened-sources-2.6.21-r4 (16 Aug 2007)
361
362 16 Aug 2007; Christian Heim <phreak@gentoo.org>
363 +hardened-sources-2.6.21-r4.ebuild:
364 Revision bump for Linux 2.6.21.6.
365
366 *hardened-sources-2.6.20-r7 (16 Aug 2007)
367
368 16 Aug 2007; Christian Heim <phreak@gentoo.org>
369 +hardened-sources-2.6.20-r7.ebuild:
370 Revision bump for Linux 2.6.20.16.
371
372 *hardened-sources-2.6.22-r1 (13 Aug 2007)
373
374 13 Aug 2007; Christian Heim <phreak@gentoo.org>
375 +hardened-sources-2.6.22-r1.ebuild:
376 Yet another revision bump.
377
378 *hardened-sources-2.6.22 (10 Aug 2007)
379
380 10 Aug 2007; Christian Heim <phreak@gentoo.org>
381 +hardened-sources-2.6.22.ebuild:
382 Initial release for 2.6.22. If you are using hardened-sources on a desktop
383 machine (P4 or newer), be aware you might need to disable
384 CONFIG_PAX_PAGEEXEC.
385
386 04 Aug 2007; Christian Heim <phreak@gentoo.org>
387 hardened-sources-2.6.20-r6.ebuild:
388 Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
389 2.6.20.15.
390
391 10 Jul 2007; Christian Heim <phreak@gentoo.org>
392 hardened-sources-2.6.20-r5.ebuild:
393 Marking hardened-sources-2.6.20-r5 stable on ppc.
394
395 10 Jul 2007; Christian Heim <phreak@gentoo.org>
396 -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
397 Cleanup.
398
399 *hardened-sources-2.6.20-r6 (08 Jul 2007)
400
401 08 Jul 2007; Christian Heim <phreak@gentoo.org>
402 +hardened-sources-2.6.20-r6.ebuild:
403 Revision bump, grabbing yet another stable release.
404
405 17 Jun 2007; Christian Heim <phreak@gentoo.org>
406 -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
407 -hardened-sources-2.6.21-r2.ebuild:
408 Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
409 alpha stable KEYWORD by mistake.
410
411 17 Jun 2007; Christian Heim <phreak@gentoo.org>
412 hardened-sources-2.6.20-r5.ebuild:
413 Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
414 genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
415
416 *hardened-sources-2.6.21-r3 (12 Jun 2007)
417
418 12 Jun 2007; Christian Heim <phreak@gentoo.org>
419 +hardened-sources-2.6.21-r3.ebuild:
420 Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
421 of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
422 love.
423
424 *hardened-sources-2.6.20-r5 (11 Jun 2007)
425
426 11 Jun 2007; Christian Heim <phreak@gentoo.org>
427 +hardened-sources-2.6.20-r5.ebuild:
428 Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
429 of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
430 love.
431
432 *hardened-sources-2.4.34.5 (11 Jun 2007)
433
434 11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
435 +hardened-sources-2.4.34.5.ebuild:
436 added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
437
438 30 May 2007; Christian Heim <phreak@gentoo.org>
439 -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
440 Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
441 stale ebuild(s).
442
443 30 May 2007; Christian Heim <phreak@gentoo.org>
444 -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
445 -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
446 -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
447 Doing some cleanups, remove stale ebuilds.
448
449 26 May 2007; Christian Heim <phreak@gentoo.org>
450 hardened-sources-2.6.21-r2.ebuild:
451 Fixing the grsecurity patch, had one '};' too much.
452
453 *hardened-sources-2.6.21-r2 (26 May 2007)
454
455 26 May 2007; Christian Heim <phreak@gentoo.org>
456 -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
457 +hardened-sources-2.6.21-r2.ebuild:
458 Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
459 grsecurity patch to 2.1.10-2.6.21.1-200705221918.
460
461 *hardened-sources-2.6.20-r4 (26 May 2007)
462
463 26 May 2007; Christian Heim <phreak@gentoo.org>
464 -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
465 Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
466 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
467
468 15 May 2007; Christian Heim <phreak@gentoo.org>
469 hardened-sources-2.6.20-r3.ebuild:
470 Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
471 introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
472 grsecurity patch fail in that exact same hunk.
473
474 *hardened-sources-2.6.20-r3 (15 May 2007)
475
476 15 May 2007; Christian Heim <phreak@gentoo.org>
477 +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
478 Revision bump, incorporating Linux 2.6.20.11.
479
480 *hardened-sources-2.6.21-r1 (11 May 2007)
481
482 11 May 2007; Christian Heim <phreak@gentoo.org>
483 +hardened-sources-2.6.21-r1.ebuild:
484 Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
485 mentioned in #177234.
486
487 07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
488 files/digest-hardened-sources-2.6.21, Manifest:
489 Fix Manifest/digest for linux-2.6.21.tar.bz2
490
491 06 May 2007; Christian Heim <phreak@gentoo.org>
492 hardened-sources-2.6.21.ebuild:
493 Bumping the hardened-patches version, needed for the fix for #177234.
494
495 *hardened-sources-2.6.21 (02 May 2007)
496
497 02 May 2007; Christian Heim <phreak@gentoo.org>
498 +hardened-sources-2.6.21.ebuild:
499 Version bump, Linux 2.6.21-hardened.
500
501 29 Apr 2007; Christian Heim <phreak@gentoo.org>
502 hardened-sources-2.6.20-r2.ebuild:
503 Adding ~ia64 on Ned's request.
504
505 29 Apr 2007; Christian Heim <phreak@gentoo.org>
506 hardened-sources-2.6.20-r2.ebuild:
507 Fixing the included grsecurity patch, wasn't alligning due to the Index:
508 header line(s).
509
510 29 Apr 2007; Christian Heim <phreak@gentoo.org>
511 hardened-sources-2.6.20-r2.ebuild:
512 Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
513
514 *hardened-sources-2.6.20-r2 (10 Apr 2007)
515
516 10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
517 +hardened-sources-2.6.20-r2.ebuild:
518 Version bump, on behalf of phreak
519
520 *hardened-sources-2.6.20-r1 (04 Apr 2007)
521
522 04 Apr 2007; Christian Heim <phreak@gentoo.org>
523 +hardened-sources-2.6.20-r1.ebuild:
524 Revision bump, grabbing a newer grsecurity snapshot.
525
526 *hardened-sources-2.6.20 (25 Mar 2007)
527
528 25 Mar 2007; Christian Heim <phreak@gentoo.org>
529 +hardened-sources-2.6.20.ebuild:
530 Finally a hardened-sources version for 2.6.20; many people have been waiting
531 for this. Thanks to Steve for preliminary testing, thanks to Ned for the
532 testbox.
533
534 16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
535 hardened-sources-2.6.18-r6.ebuild:
536 Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
537
538 *hardened-sources-2.6.18-r6 (16 Mar 2007)
539
540 16 Mar 2007; Christian Heim <phreak@gentoo.org>
541 -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
542 Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
543 yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
544 supposed to be.
545
546 06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
547 Fixing the Manifest, the previous one was broken (as in still had the
548 deleted ebuild in it).
549
550 06 Mar 2007; Christian Heim <phreak@gentoo.org>
551 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
552 +hardened-sources-2.6.18-r5.ebuild:
553 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
554 Linux 2.6.18.8. Also cleaning up the older version.
555
556 *hardened-sources-2.6.18-r5 (06 Mar 2007)
557
558 06 Mar 2007; Christian Heim <phreak@gentoo.org>
559 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
560 +hardened-sources-2.6.18-r5.ebuild:
561 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
562 Linux 2.6.18.8. Also cleaning up the older version.
563
564 24 Feb 2007; Christian Heim <phreak@gentoo.org>
565 -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
566 -hardened-sources-2.6.19-r5.ebuild:
567 Removing some of the old version, that didn't work.
568
569 *hardened-sources-2.6.19-r6 (12 Feb 2007)
570
571 12 Feb 2007; Christian Heim <phreak@gentoo.org>
572 +hardened-sources-2.6.19-r6.ebuild:
573 Revision bump, including a new grsec version fixing #166235.
574
575 *hardened-sources-2.4.34 (24 Jan 2007)
576
577 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
578 Manifest:
579 updating Manifest with checksums of new tarball and ebuild
580
581 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
582 +hardened-sources-2.4.34.ebuild:
583 I added new hardened sources 2.4 update, this is a critical path
584 security bugfix - all users of h-s are strongly advised
585 to update their existing hardened sources to this version.
586 It contains a fix for a kernel vulnerability that is pertaining
587 to the PaX changes to virtual memory management, possibly leading
588 to a local kernel exploit ... see grsecurity.net forums and homepage
589
590 23 Jan 2007; Christian Heim <phreak@gentoo.org>
591 files/digest-hardened-sources-2.6.19-r5, Manifest:
592 Fixing the patch-tarball digest.
593
594 *hardened-sources-2.6.19-r5 (23 Jan 2007)
595
596 23 Jan 2007; Christian Heim <phreak@gentoo.org>
597 +hardened-sources-2.6.19-r5.ebuild:
598 Revision bump, closing the recently discovered PaX expand_stack()
599 vulnerability.
600
601 *hardened-sources-2.6.19-r4 (14 Jan 2007)
602
603 14 Jan 2007; Christian Heim <phreak@gentoo.org>
604 +hardened-sources-2.6.19-r4.ebuild:
605 Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
606 dropping the randomized PID feature.
607
608 11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
609 hardened-sources-2.4.33.4.ebuild:
610 stable x86, bug #161171
611
612 *hardened-sources-2.6.19-r3 (27 Dec 2006)
613
614 27 Dec 2006; Christian Heim <phreak@gentoo.org>
615 -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
616 Revision bump for bug #157186 and #158786.
617
618 *hardened-sources-2.6.18-r4 (27 Dec 2006)
619
620 27 Dec 2006; Christian Heim <phreak@gentoo.org>
621 -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
622 Revision bump for bug #157186.
623
624 *hardened-sources-2.6.19-r2 (23 Dec 2006)
625
626 23 Dec 2006; Christian Heim <phreak@gentoo.org>
627 -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
628 Revision bump to pull in genpatches-2.6.19-3 for #157186.
629
630 17 Dec 2006; Christian Heim <phreak@gentoo.org>
631 hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
632 hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
633 hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
634 hardened-sources-2.6.19-r1.ebuild:
635 Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
636 adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
637
638 *hardened-sources-2.4.33.4 (17 Dec 2006)
639
640 17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
641 +hardened-sources-2.4.33.4.ebuild:
642 new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
643 and quilting
644
645 *hardened-sources-2.6.19-r1 (14 Dec 2006)
646
647 14 Dec 2006; Christian Heim <phreak@gentoo.org>
648 -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
649 Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
650 for reporting).
651
652 *hardened-sources-2.6.19 (13 Dec 2006)
653
654 13 Dec 2006; Christian Heim <phreak@gentoo.org>
655 +hardened-sources-2.6.19.ebuild:
656 And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
657 Brad for providing that prompt update.
658
659 *hardened-sources-2.6.18-r3 (13 Dec 2006)
660
661 13 Dec 2006; Christian Heim <phreak@gentoo.org>
662 -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
663 +hardened-sources-2.6.18-r3.ebuild:
664 Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
665 S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
666
667 09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
668 Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
669
670 08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
671 Stable on ppc wrt bug 157356
672
673 07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
674 hardened-sources-2.6.18.ebuild:
675 stable x86, bug #157356
676
677 *hardened-sources-2.6.18-r2 (06 Dec 2006)
678
679 06 Dec 2006; Christian Heim <phreak@gentoo.org>
680 +hardened-sources-2.6.18-r2.ebuild:
681 Revision bump, including 2.6.18.5 (via genpatches) and
682 4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
683 Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
684 redesign.
685
686 06 Dec 2006; Christian Heim <phreak@gentoo.org>
687 hardened-sources-2.6.18.ebuild:
688 Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
689 of Mike Doty).
690
691 *hardened-sources-2.6.18-r1 (23 Nov 2006)
692
693 23 Nov 2006; Christian Heim <phreak@gentoo.org>
694 +hardened-sources-2.6.18-r1.ebuild:
695 Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
696
697 *hardened-sources-2.6.18 (11 Nov 2006)
698
699 11 Nov 2006; Christian Heim <phreak@gentoo.org>
700 +hardened-sources-2.6.18.ebuild:
701 Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
702
703 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
704 - mark amd64 stable also. bug #151877
705
706 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
707 - mark 2.6.17-r1 stable
708
709 27 Aug 2006; Christian Heim <phreak@gentoo.org>
710 -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
711 Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
712
713 *hardened-sources-2.6.17-r1 (26 Aug 2006)
714
715 26 Aug 2006; Christian Heim <phreak@gentoo.org>
716 +hardened-sources-2.6.17-r1.ebuild:
717 Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
718 grsecurity patch.
719
720 *hardened-sources-2.6.17 (17 Aug 2006)
721
722 17 Aug 2006; Christian Heim <phreak@gentoo.org>
723 +hardened-sources-2.6.17.ebuild:
724 Bumping the hardened-sources-2.6 series to 2.6.17, using
725 genpatches-2.6.17-6.base.
726
727 07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
728 - stable on x86 and amd64
729
730 *hardened-sources-2.6.16-r11 (15 Jul 2006)
731
732 15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
733 -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
734 -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
735 -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
736 - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
737 crusty ebuilds
738
739 14 Jul 2006; John Mylchreest <johnm@gentoo.org>
740 hardened-sources-2.6.16-r10.ebuild:
741 marking stable on x86 and amd64
742
743 13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
744 - 2.4.32-r6 stable on x86. RSBAC state unknown
745
746 *hardened-sources-2.4.32-r7 (10 Jul 2006)
747
748 10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
749 +hardened-sources-2.4.32-r7.ebuild:
750 Bump PaX for RSBAC to test-17
751
752 *hardened-sources-2.6.16-r9 (03 Jul 2006)
753
754 03 Jul 2006; John Mylchreest <johnm@gentoo.org>
755 -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
756 hardened-sources-2.6.16 bump to latest -base.
757
758 *hardened-sources-2.4.32-r6 (30 Jun 2006)
759
760 30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
761 hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
762 - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
763 sysctl controlable resource logging
764
765 *hardened-sources-2.6.16-r7 (05 Jun 2006)
766
767 05 Jun 2006; John Mylchreest <johnm@gentoo.org>
768 -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
769 push new 2.6.16 release in preparation for stable
770
771 22 May 2006; <solar@gentoo.org> :
772 - redigest bug 134002
773
774 *hardened-sources-2.4.32-r5 (16 May 2006)
775
776 16 May 2006; Guillaume Destuynder <kang@gentoo.org>
777 +hardened-sources-2.4.32-r5.ebuild:
778 Fixes rsbac common patching (new patch in new -r5 patchset)
779
780 *hardened-sources-2.4.32-r4 (13 May 2006)
781
782 13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
783 +hardened-sources-2.4.32-r4.ebuild:
784 - security bumps
785
786 *hardened-sources-2.6.16-r6 (03 May 2006)
787
788 03 May 2006; John Mylchreest <johnm@gentoo.org>
789 +hardened-sources-2.6.16-r6.ebuild:
790 bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
791
792 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
793 hardened-sources-2.6.14-r8.ebuild:
794 fix x86_64 build problem, this will delay the digest issue again for a short
795 while but it will sort itself out
796
797 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
798 hardened-sources-2.6.14-r8.ebuild:
799 bump hardened patchset
800
801 27 Apr 2006; Alec Warner <antarus@gentoo.org>
802 files/digest-hardened-sources-2.4.32-r2,
803 files/digest-hardened-sources-2.4.32-r3,
804 files/digest-hardened-sources-2.6.14-r8, Manifest:
805 Fixing duff SHA256 digests: Bug # 131293
806
807 *hardened-sources-2.6.16-r5 (27 Apr 2006)
808
809 27 Apr 2006; John Mylchreest <johnm@gentoo.org>
810 -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
811 -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
812 stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
813 cleanup of old uneccessary sources
814
815 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
816 fix digest
817
818 *hardened-sources-2.6.14-r8 (20 Apr 2006)
819
820 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
821 +hardened-sources-2.6.14-r8.ebuild:
822 fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
823
824 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
825 Turning on gpg-signing again, and recomitting
826
827 *hardened-sources-2.6.16-r4 (20 Apr 2006)
828
829 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
830 -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
831 +hardened-sources-2.6.16-r4.ebuild:
832 Fix numerous security vulns
833
834 *hardened-sources-2.4.32-r3 (16 Apr 2006)
835
836 16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
837 -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
838 +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
839 - security bump for bug #112791. Removed old ebuilds
840
841 *hardened-sources-2.6.16-r3 (15 Apr 2006)
842
843 15 Apr 2006; John Mylchreest <johnm@gentoo.org>
844 +hardened-sources-2.6.16-r3.ebuild:
845 Removing silly localversion which I missed
846
847 *hardened-sources-2.6.14-r7 (14 Apr 2006)
848
849 14 Apr 2006; John Mylchreest <johnm@gentoo.org>
850 -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
851 Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
852
853 *hardened-sources-2.6.16-r2 (13 Apr 2006)
854
855 13 Apr 2006; John Mylchreest <johnm@gentoo.org>
856 -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
857 +hardened-sources-2.6.16-r2.ebuild:
858 Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
859 labels, dropping USERGROUP define fixes, since these were merged mainstream.
860
861 *hardened-sources-2.6.16-r1 (11 Apr 2006)
862
863 11 Apr 2006; John Mylchreest <johnm@gentoo.org>
864 +hardened-sources-2.6.16-r1.ebuild:
865 Bumping to include ppc build fix and 2.6.16.3
866
867 06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
868 hardened-sources-2.6.14-r6.ebuild:
869 Stable on x86; bug #127718
870
871 *hardened-sources-2.6.16 (31 Mar 2006)
872
873 31 Mar 2006; John Mylchreest <johnm@gentoo.org>
874 +hardened-sources-2.6.16.ebuild:
875 Bumping to new version of grsec, and kernel base. New squashfs. Based on
876 2.6.16.1
877
878 30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
879 hardened-sources-2.6.14-r6.ebuild:
880 Stable on amd64, bug 127718.
881
882 28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
883 Stable on ppc. Bug #127718
884
885 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
886 -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
887 -hardened-sources-2.6.14-r4.ebuild:
888 Cleanup.
889
890 *hardened-sources-2.6.14-r6 (15 Mar 2006)
891
892 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
893 +hardened-sources-2.6.14-r6.ebuild:
894 Fixes grsec policy recreation bug and adds a
895 >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
896
897 02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
898 - stable on x86
899
900 19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
901 hardened-sources-2.6.14-r5.ebuild:
902 Stable on ppc.
903
904 *hardened-sources-2.6.14-r5 (01 Feb 2006)
905
906 01 Feb 2006; John Mylchreest <johnm@gentoo.org>
907 +hardened-sources-2.6.14-r5.ebuild:
908 fixing every known exploit
909
910 *hardened-sources-2.4.32-r2 (26 Jan 2006)
911
912 26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
913 +hardened-sources-2.4.32-r2.ebuild:
914 - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
915
916 *hardened-sources-2.6.14-r4 (12 Jan 2006)
917
918 12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
919 - version bump for new genpatches which fix up a few sec holes
920
921 *hardened-sources-2.4.32-r1 (05 Jan 2006)
922
923 05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
924 - revision bump to add misc vital linux kernel security patches.
925
926 *hardened-sources-2.6.14-r3 (30 Dec 2005)
927
928 30 Dec 2005; John Mylchreest <johnm@gentoo.org>
929 -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
930 Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
931
932 28 Dec 2005; John Mylchreest <johnm@gentoo.org>
933 hardened-sources-2.6.14-r2.ebuild:
934 making x86 & amd64 stable following testing.
935
936 *hardened-sources-2.6.14-r2 (27 Dec 2005)
937
938 27 Dec 2005; John Mylchreest <johnm@gentoo.org>
939 -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
940 Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
941 network hooks.
942
943 06 Dec 2005; John Mylchreest <johnm@gentoo.org>
944 hardened-sources-2.6.14-r1.ebuild:
945 bumping to stable early for sec fix on x86 & amd64
946
947 *hardened-sources-2.6.14-r1 (05 Dec 2005)
948
949 05 Dec 2005; John Mylchreest <johnm@gentoo.org>
950 -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
951 bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
952
953 04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
954 - stable on x86 security bug #114227 CAN-2005-3257
955
956 *hardened-sources-2.4.32 (19 Nov 2005)
957
958 19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
959 +hardened-sources-2.4.32.ebuild:
960 Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
961 Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
962 have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
963 rsbac >> /etc/portage/package.use)
964
965 *hardened-sources-2.6.14 (14 Nov 2005)
966
967 14 Nov 2005; John Mylchreest <johnm@gentoo.org>
968 -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
969 Bumping 2.6 series to 2.6.14.2
970
971 *hardened-sources-2.6.13-r2 (20 Oct 2005)
972
973 20 Oct 2005; John Mylchreest <johnm@gentoo.org>
974 -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
975 +hardened-sources-2.6.13-r2.ebuild:
976 Fixes minor build error in ppc.
977
978 *hardened-sources-2.6.13-r1 (17 Oct 2005)
979
980 17 Oct 2005; John Mylchreest <johnm@gentoo.org>
981 +hardened-sources-2.6.13-r1.ebuild:
982 Updating grsec to latest snapshot. Fixes some minor issues. Updating to
983 2.6.13.4, fixes some major amd64 stability problems.
984
985 *hardened-sources-2.6.13 (16 Sep 2005)
986
987 16 Sep 2005; John Mylchreest <johnm@gentoo.org>
988 -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
989 2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
990 ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
991 users should test this thoroughly.
992
993 01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
994 - stable on x86
995
996 *hardened-sources-2.6.11-r15 (27 Jun 2005)
997
998 27 Jun 2005; John Mylchreest <johnm@gentoo.org>
999 +hardened-sources-2.6.11-r15.ebuild:
1000 Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1001 grsec redefining curr_ip struct.
1002
1003 *hardened-sources-2.4.31 (20 Jun 2005)
1004
1005 20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1006 initial import of 2.4.31 tree
1007
1008 *hardened-sources-2.6.11-r14 (14 Jun 2005)
1009
1010 14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1011 -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1012 Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1013 naming scheme to abide by genpatches
1014
1015 *hardened-sources-2.6.11-r13 (18 May 2005)
1016
1017 18 May 2005; John Mylchreest <johnm@gentoo.org>
1018 -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1019 Managed to mangle the Makefile patch from grsec, to miss out the grsec
1020 target. sorry about that. Fixes bug #93022
1021
1022 *hardened-sources-2.6.11-r12 (17 May 2005)
1023
1024 17 May 2005; John Mylchreest <johnm@gentoo.org>
1025 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1026 +hardened-sources-2.6.11-r12.ebuild:
1027 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1028 merges in genpatches-base
1029
1030 *hardened-sources-2.6.11-r12 (17 May 2005)
1031
1032 17 May 2005; John Mylchreest <johnm@gentoo.org>
1033 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1034 +hardened-sources-2.6.11-r12.ebuild:
1035 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1036 merges in genpatches-base
1037
1038 29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1039 -files/2.4.27-cmdline-race.patch,
1040 -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1041 -files/2.4.28-grsec-binfmt_a.out.patch,
1042 -files/2.4.28-grsec-cmdline-race.patch,
1043 -files/2.4.28-selinux-binfmt_a.out.patch,
1044 -files/2.4.28-selinux-cmdline-race.patch,
1045 -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1046 hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1047 - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1048 cleanup..
1049
1050 *hardened-sources-2.4.30-r1 (21 Apr 2005)
1051
1052 21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1053 - disable aout by default
1054
1055 *hardened-sources-2.4.30 (18 Apr 2005)
1056
1057 18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1058 - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1059 and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1060 use
1061
1062 *hardened-sources-2.4.29 (30 Mar 2005)
1063
1064 30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1065 +hardened-sources-2.4.29.ebuild:
1066 New hardened-patches-2.4-29.0 patchball.
1067 Removed SELinux support, upgraded GRSecurity to 2.1.4.
1068
1069 *hardened-sources-2.4.28-r5 (06 Mar 2005)
1070
1071 06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1072 +hardened-sources-2.4.28-r5.ebuild:
1073 Added a fix for a PaX vulnerability.
1074
1075 26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1076 hardened-sources-2.4.28-r4.ebuild:
1077 Stable on x86
1078
1079 23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1080 hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1081 hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1082 hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1083 - fixed/added RDEPEND= in all kernel-2 ebuilds
1084
1085 *hardened-sources-2.4.28-r4 (21 Jan 2005)
1086
1087 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1088 +hardened-sources-2.4.28-r4.ebuild:
1089 Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1090 backport of neighbour hash updates.
1091
1092 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1093 hardened-sources-2.4.28-r3.ebuild:
1094 Stable on x86
1095
1096 *hardened-sources-2.6.10-r3 (20 Jan 2005)
1097
1098 20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1099 +hardened-sources-2.6.10-r3.ebuild:
1100 Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1101 in 2005.0
1102
1103 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1104 -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1105 hardened-sources-2.4.28-r2.ebuild:
1106 Mark stable on x86
1107
1108 *hardened-sources-2.4.28-r3 (17 Jan 2005)
1109
1110 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1111 +hardened-sources-2.4.28-r3.ebuild:
1112 Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1113
1114 14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1115 hardened-sources-2.4.28.ebuild:
1116 Mark stable on x86.
1117
1118 *hardened-sources-2.4.28-r2 (13 Jan 2005)
1119
1120 13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1121 +hardened-sources-2.4.28-r2.ebuild:
1122 Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1123 Mazinger for grsecurity patches as well.
1124
1125 *hardened-sources-2.4.28-r1 (23 Dec 2004)
1126
1127 23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1128 Security bump. Thank tocharian for rolling a new patchset...
1129
1130 28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1131 +files/2.4.28-grsec-cmdline-race.patch,
1132 +files/2.4.28-selinux-binfmt_a.out.patch,
1133 +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1134 - Round up remaining security patches that appear to be missing in 2.4.28. -
1135 PaX standalone updated to current. hgpv=28.1
1136
1137 *hardened-sources-2.4.28 (28 Nov 2004)
1138
1139 28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1140 security bump. Thank tocharian for rolling a new patchset
1141
1142 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1143
1144 08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1145 +hardened-sources-2.4.27-r3.ebuild:
1146 Applies the new 2.4-27.2 patchball which updates
1147 GRSecurity to the 2.0.1 version.
1148
1149 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1150
1151 31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1152 +hardened-sources-2.4.27-r2.ebuild:
1153 Version bump.
1154 This version uses the new 2.4-27.1 patchball which updates
1155 both the SELinux PaX hooks patch and the SELinux headers.
1156
1157 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1158
1159 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1160 +hardened-sources-2.4.27-r1.ebuild,
1161 -hardened-sources-2.4.27.ebuild,
1162 +files/2.4.27-cmdline-race.patch:
1163 Version bump, fix for cmdline race. See bug #59905.
1164
1165 *hardened-sources-2.4.26-r6 (09 Aug 2004)
1166
1167 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1168 +hardened-sources-2.4.26-r6.ebuild,
1169 -hardened-sources-2.4.26-r5.ebuild,
1170 -hardened-sources-2.4.26-r4.ebuild,
1171 +files/2.4.26-cmdline-race.patch:
1172 Version bump, fix for cmdline race. See bug #59905.
1173
1174 *hardened-sources-2.4.27 (08 Aug 2004)
1175
1176 08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1177 +hardened-sources-2.4.27.ebuild,
1178 +files/2.4.27-CAN-2004-0394.patch:
1179 Ported the patchball to the 2.4.27 kernel version.
1180
1181 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1182
1183 07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1184 +hardened-sources-2.4.26-r5.ebuild:
1185 Updated to use the new hardened-patches-2.4-26.1 patchball.
1186 It adds the following features:
1187 - Squashfs
1188 - Ebtables
1189 - Netdev random (core+drivers)
1190 - Watchdog Timer (WDT) fix.
1191
1192 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1193
1194 04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1195 +hardened-sources-2.4.26-r4.ebuild,
1196 +files/2.4.26-CAN-2004-0415.patch,
1197 -hardened-sources-2.4.26-3:
1198 Version bump, fix for CAN 0415, see bug #59378.
1199
1200 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1201
1202 22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1203 +hardened-sources-2.4.26-r3.ebuild,
1204 +files/2.4.26-CAN-2004-0497.patch,
1205 -hardened-sources-2.4.26-r2.ebuild:
1206 Version bump, fixed CAN 0497, see bug #56171.
1207
1208 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1209
1210 29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1211 +hardened-sources-2.4.26-r2.ebuild,
1212 +files/2.4.26-CAN-2004-0495.patch,
1213 +files/2.4.26-CAN-2004-0535.patch,
1214 -hardened-sources-2.4.26-r1.ebuild:
1215 Fixes for both CAN 0495 and 0535, see bug #54976
1216
1217 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1218 hardened-sources-2.4.26-r1.ebuild:
1219 QA - fix use invocation
1220
1221 *hardened-sources-2.4.26-r1 (22 June 2004)
1222
1223 22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1224 +hardened-sources-2.4.26-r1.ebuild,
1225 +files/2.4.26-CAN-2004-0394.patch,
1226 +files/2.4.26-signal-race.patch,
1227 -hardened-sources-2.4.26.ebuild,
1228 -hardened-sources-2.4.24-r3.ebuild:
1229 Version bump for the CAN-2004-0394 issue and bug #53804
1230 Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1231
1232
1233 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1234 hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1235 Masked hardened-sources-2.4.26.ebuild broken for ppc
1236
1237 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1238 hardened-sources-2.4.24-r3.ebuild:
1239 Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1240
1241 *hardened-sources-2.4.26 (29 May 2004)
1242
1243 29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1244 +hardened-sources-2.4.26.ebuild:
1245 Updated hardened-sources for the 2.4.26 kernel
1246 Removed broken components, updated almost everything.
1247
1248 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1249
1250 17 Apr 2004; <plasmaroo@gentoo.org>
1251 +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1252 +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1253 +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1254 +hardened-sources-2.4.24-r3.ebuild:
1255 Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1256 vulnerabilities. Old revisions removed.
1257
1258 *hardened-sources-2.4.24-r2 (15 Apr 2004)
1259
1260 15 Apr 2004; <plasmaroo@gentoo.org>
1261 +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1262 -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1263 Version bump for the CAN-2004-0109 issue; bug #47881.
1264
1265 12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1266 hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1267 Add eutils to inherit.
1268
1269 *hardened-sources-2.4.24-r1 (19 Feb 2004)
1270
1271 19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1272 files/hardened-sources-2.4.24.munmap.patch:
1273 Added the patch for the mremap/munmap vulnerability. Bug #42024.
1274
1275 *hardened-sources-2.4.24 (06 Feb 2004)
1276
1277 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1278 hardened-sources-2.4.24.ebuild:
1279 Version bump, updated most of the components.
1280 This release includes the following:
1281
1282 - Hardened security
1283 - Netfilter patch-o-matic 20031219
1284 - FreeSWAN 2.04 & x509 1.4.8
1285 - EVMS 2.2.2
1286 - XFS 1.3.1
1287 - cryptoloop jari
1288 - grsecurity 2.0-rc4
1289 - SELinux
1290 - PaX 200402060000
1291 - PaX Obscurity 200308302223
1292 - Others...
1293
1294 Neither -ck nor systrace are included anymore.
1295
1296 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1297
1298 05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1299 hardened-sources-2.4.22-r2.ebuild:
1300 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1301
1302 *hardened-sources-2.4.22-r1 (02 Dec 2003)
1303
1304 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1305 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1306
1307 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1308 hardened-sources-2.4.22-r1.ebuild:
1309 Version bump for the 'do_brk' vulnerability.
1310
1311 01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1312 hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1313 hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1314 hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1315 Fix the 'do_brk' vulnerability.
1316
1317 03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1318 hardened-sources-2.4.22.ebuild:
1319 - Removed the src_install() portion for SELinux flask
1320 components. These are no longer handled in the kernel
1321 so this code was not necessary.
1322
1323 29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1324 New 2.4.22 based hardened-sources thanks to
1325 Phil West <p.west@computer.org>.
1326
1327 These sources include:
1328 - New SELinux API
1329 - Updated CK-base
1330 - Updated GRSec
1331 - Systrace
1332 - SuperFreeS/WAN 1.99.8
1333 - Propolice kernel build support
1334 - EVMS
1335 - Other various security related patches
1336
1337 *hardened-sources-2.4.21 (14 Sep 2003)
1338
1339 14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1340 Updated hardened-sources based on the 2.4.21 Linux kernel.
1341 This includes updates to most major components such as:
1342 - ck-base-0306300059
1343 - selinux-2.4-2003071106
1344 - grsecurity-2.0-rc1
1345 - Updated IPTables patch-o-matic
1346 - Updated SuperFreeS/WAN
1347
1348 Thanks to Phil West <pwest@computer.org> for his work in getting this
1349 updated patch set ready for the 2.4.21 based kernel.
1350
1351 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1352 Initial import of hardened-sources-2.4.20-r4. This revision
1353 includes only a few changes, but one of these is an important
1354 security fix. It is recommended all users of hardened-sources
1355 upgrade to this release.
1356
1357 - ioperm bug fix
1358 - fixed compilation failure when building without GRSec
1359
1360 SAL (Secure Auditing for Linux) is NOT included in this revision
1361 due to time constraints, but is planned for inclusion in the near
1362 future.
1363
1364 *hardened-sources-2.4.20-r2 (12 Jun 2003)
1365
1366 12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1367 hardened-sources-2.4.20-r3.ebuild:
1368 Add Header...
1369
1370 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1371 hardened-sources-2.4.20-r3.ebuild:
1372 Removed warnings from ebuild. This kernel should be safe to
1373 use at this point.
1374
1375 *hardened-sources-2.4.20-r3 (08 Jun 2003)
1376
1377 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1378 hardened-sources-2.4.20-r3.ebuild:
1379 New revision. Includes the following changes over -r2:
1380
1381 - ck7-base (O(1), preempt, low latency)
1382 - Super FreeS/WAN 1.99.7rc2
1383 - PaX for the LSM/SELinux branch
1384 - GRSecurity 2.0-pre4 (role based access control)
1385 - Systrace 1.3
1386 - EXT3 fixes
1387 - EVMS 2.0.1
1388 - GCC 3.1+ compile optimizations
1389 - ProPolice kernel build support
1390 - Hashing table security fixes
1391
1392 *hardened-sources-2.4.20-r1 (09 Apr 2003)
1393
1394 23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1395 Initial import of hardened-sources-r2. This new
1396 ebuild includes many new performance and security
1397 related patches. As in -r1, it will patch in
1398 LSM/SELinux if "selinux" is in USE, otherwise it
1399 will patch in GRSecurity. The following patches
1400 are included in this revision:
1401
1402 - O(1) Scheduler, Low Latency, and Preempt
1403 (pulled from the base CK patch)
1404 - ptrace exploit patch for the LSM kernel
1405 (the GRSec patch already fixes this)
1406 - LSM 2.4-2003040709
1407 - SELinux 2.4-2003040709
1408 - Systrace v1.2
1409 - IPTables patch-o-matic base patches - 20030107
1410 - CryptoAPI 2.4.20.1 w/ loop-jari patch
1411 - Super FreeS/WAN 1.99.6.1
1412 - GRSecurity 1.9.9g
1413 - MPPE
1414 - EXT3 data journal fix
1415 - CIPE 1.5.4
1416
1417 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1418 hardened-sources-2.4.20-r1.ebuild, manifest:
1419 Updated to install flask components correctly for selinux.
1420
1421 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1422 hardened-sources-2.4.20-r1.ebuild:
1423 LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1424 is patched in instead. Ptrace patches for selinux have also been added. In
1425 either case, systrace support will be patched in as well.
1426
1427 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1428 hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1429 Revision bump for new sources.
1430
1431 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1432 hardened-sources-2.4.20-r1.ebuild:
1433 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1434
1435 *hardened-sources-2.4.20 (30 Mar 2003)
1436
1437 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1438 hardened-sources-2.4.20.ebuild:
1439 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20