/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.80 - (show annotations) (download)
Wed Mar 15 21:52:25 2006 UTC (8 years, 1 month ago) by johnm
Branch: MAIN
Changes since 1.79: +6 -1 lines
cleanup old sources
(Portage version: 2.1_pre6-r3)

1 # ChangeLog for sys-kernel/hardened-sources
2 # Copyright 2000-2006 Gentoo Foundation; Distributed under the GPL v2
3 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.79 2006/03/15 21:49:07 johnm Exp $
4
5 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
6 -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
7 -hardened-sources-2.6.14-r4.ebuild:
8 Cleanup.
9
10 *hardened-sources-2.6.14-r6 (15 Mar 2006)
11
12 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
13 +hardened-sources-2.6.14-r6.ebuild:
14 Fixes grsec policy recreation bug and adds a
15 >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
16
17 02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
18 - stable on x86
19
20 19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
21 hardened-sources-2.6.14-r5.ebuild:
22 Stable on ppc.
23
24 *hardened-sources-2.6.14-r5 (01 Feb 2006)
25
26 01 Feb 2006; John Mylchreest <johnm@gentoo.org>
27 +hardened-sources-2.6.14-r5.ebuild:
28 fixing every known exploit
29
30 *hardened-sources-2.4.32-r2 (26 Jan 2006)
31
32 26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
33 +hardened-sources-2.4.32-r2.ebuild:
34 - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
35
36 *hardened-sources-2.6.14-r4 (12 Jan 2006)
37
38 12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
39 - version bump for new genpatches which fix up a few sec holes
40
41 *hardened-sources-2.4.32-r1 (05 Jan 2006)
42
43 05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
44 - revision bump to add misc vital linux kernel security patches.
45
46 *hardened-sources-2.6.14-r3 (30 Dec 2005)
47
48 30 Dec 2005; John Mylchreest <johnm@gentoo.org>
49 -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
50 Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
51
52 28 Dec 2005; John Mylchreest <johnm@gentoo.org>
53 hardened-sources-2.6.14-r2.ebuild:
54 making x86 & amd64 stable following testing.
55
56 *hardened-sources-2.6.14-r2 (27 Dec 2005)
57
58 27 Dec 2005; John Mylchreest <johnm@gentoo.org>
59 -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
60 Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
61 network hooks.
62
63 06 Dec 2005; John Mylchreest <johnm@gentoo.org>
64 hardened-sources-2.6.14-r1.ebuild:
65 bumping to stable early for sec fix on x86 & amd64
66
67 *hardened-sources-2.6.14-r1 (05 Dec 2005)
68
69 05 Dec 2005; John Mylchreest <johnm@gentoo.org>
70 -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
71 bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
72
73 04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
74 - stable on x86 security bug #114227 CAN-2005-3257
75
76 *hardened-sources-2.4.32 (19 Nov 2005)
77
78 19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
79 +hardened-sources-2.4.32.ebuild:
80 Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
81 Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
82 have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
83 rsbac >> /etc/portage/package.use)
84
85 *hardened-sources-2.6.14 (14 Nov 2005)
86
87 14 Nov 2005; John Mylchreest <johnm@gentoo.org>
88 -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
89 Bumping 2.6 series to 2.6.14.2
90
91 *hardened-sources-2.6.13-r2 (20 Oct 2005)
92
93 20 Oct 2005; John Mylchreest <johnm@gentoo.org>
94 -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
95 +hardened-sources-2.6.13-r2.ebuild:
96 Fixes minor build error in ppc.
97
98 *hardened-sources-2.6.13-r1 (17 Oct 2005)
99
100 17 Oct 2005; John Mylchreest <johnm@gentoo.org>
101 +hardened-sources-2.6.13-r1.ebuild:
102 Updating grsec to latest snapshot. Fixes some minor issues. Updating to
103 2.6.13.4, fixes some major amd64 stability problems.
104
105 *hardened-sources-2.6.13 (16 Sep 2005)
106
107 16 Sep 2005; John Mylchreest <johnm@gentoo.org>
108 -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
109 2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
110 ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
111 users should test this thoroughly.
112
113 01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
114 - stable on x86
115
116 *hardened-sources-2.6.11-r15 (27 Jun 2005)
117
118 27 Jun 2005; John Mylchreest <johnm@gentoo.org>
119 +hardened-sources-2.6.11-r15.ebuild:
120 Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
121 grsec redefining curr_ip struct.
122
123 *hardened-sources-2.4.31 (20 Jun 2005)
124
125 20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
126 initial import of 2.4.31 tree
127
128 *hardened-sources-2.6.11-r14 (14 Jun 2005)
129
130 14 Jun 2005; John Mylchreest <johnm@gentoo.org>
131 -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
132 Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
133 naming scheme to abide by genpatches
134
135 *hardened-sources-2.6.11-r13 (18 May 2005)
136
137 18 May 2005; John Mylchreest <johnm@gentoo.org>
138 -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
139 Managed to mangle the Makefile patch from grsec, to miss out the grsec
140 target. sorry about that. Fixes bug #93022
141
142 *hardened-sources-2.6.11-r12 (17 May 2005)
143
144 17 May 2005; John Mylchreest <johnm@gentoo.org>
145 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
146 +hardened-sources-2.6.11-r12.ebuild:
147 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
148 merges in genpatches-base
149
150 *hardened-sources-2.6.11-r12 (17 May 2005)
151
152 17 May 2005; John Mylchreest <johnm@gentoo.org>
153 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
154 +hardened-sources-2.6.11-r12.ebuild:
155 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
156 merges in genpatches-base
157
158 29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
159 -files/2.4.27-cmdline-race.patch,
160 -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
161 -files/2.4.28-grsec-binfmt_a.out.patch,
162 -files/2.4.28-grsec-cmdline-race.patch,
163 -files/2.4.28-selinux-binfmt_a.out.patch,
164 -files/2.4.28-selinux-cmdline-race.patch,
165 -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
166 hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
167 - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
168 cleanup..
169
170 *hardened-sources-2.4.30-r1 (21 Apr 2005)
171
172 21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
173 - disable aout by default
174
175 *hardened-sources-2.4.30 (18 Apr 2005)
176
177 18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
178 - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
179 and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
180 use
181
182 *hardened-sources-2.4.29 (30 Mar 2005)
183
184 30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
185 +hardened-sources-2.4.29.ebuild:
186 New hardened-patches-2.4-29.0 patchball.
187 Removed SELinux support, upgraded GRSecurity to 2.1.4.
188
189 *hardened-sources-2.4.28-r5 (06 Mar 2005)
190
191 06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
192 +hardened-sources-2.4.28-r5.ebuild:
193 Added a fix for a PaX vulnerability.
194
195 26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
196 hardened-sources-2.4.28-r4.ebuild:
197 Stable on x86
198
199 23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
200 hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
201 hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
202 hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
203 - fixed/added RDEPEND= in all kernel-2 ebuilds
204
205 *hardened-sources-2.4.28-r4 (21 Jan 2005)
206
207 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
208 +hardened-sources-2.4.28-r4.ebuild:
209 Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
210 backport of neighbour hash updates.
211
212 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
213 hardened-sources-2.4.28-r3.ebuild:
214 Stable on x86
215
216 *hardened-sources-2.6.10-r3 (20 Jan 2005)
217
218 20 Jan 2005; Brandon Hale <tseng@gentoo.org>
219 +hardened-sources-2.6.10-r3.ebuild:
220 Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
221 in 2005.0
222
223 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
224 -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
225 hardened-sources-2.4.28-r2.ebuild:
226 Mark stable on x86
227
228 *hardened-sources-2.4.28-r3 (17 Jan 2005)
229
230 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
231 +hardened-sources-2.4.28-r3.ebuild:
232 Fix SMP page fault handler vuln, and update device-mapper and evms patches.
233
234 14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
235 hardened-sources-2.4.28.ebuild:
236 Mark stable on x86.
237
238 *hardened-sources-2.4.28-r2 (13 Jan 2005)
239
240 13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
241 +hardened-sources-2.4.28-r2.ebuild:
242 Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
243 Mazinger for grsecurity patches as well.
244
245 *hardened-sources-2.4.28-r1 (23 Dec 2004)
246
247 23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
248 Security bump. Thank tocharian for rolling a new patchset...
249
250 28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
251 +files/2.4.28-grsec-cmdline-race.patch,
252 +files/2.4.28-selinux-binfmt_a.out.patch,
253 +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
254 - Round up remaining security patches that appear to be missing in 2.4.28. -
255 PaX standalone updated to current. hgpv=28.1
256
257 *hardened-sources-2.4.28 (28 Nov 2004)
258
259 28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
260 security bump. Thank tocharian for rolling a new patchset
261
262 *hardened-sources-2.4.27-r3 (08 Sep 2004)
263
264 08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
265 +hardened-sources-2.4.27-r3.ebuild:
266 Applies the new 2.4-27.2 patchball which updates
267 GRSecurity to the 2.0.1 version.
268
269 *hardened-sources-2.4.27-r2 (31 Aug 2004)
270
271 31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
272 +hardened-sources-2.4.27-r2.ebuild:
273 Version bump.
274 This version uses the new 2.4-27.1 patchball which updates
275 both the SELinux PaX hooks patch and the SELinux headers.
276
277 *hardened-sources-2.4.27-r1 (09 Aug 2004)
278
279 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
280 +hardened-sources-2.4.27-r1.ebuild,
281 -hardened-sources-2.4.27.ebuild,
282 +files/2.4.27-cmdline-race.patch:
283 Version bump, fix for cmdline race. See bug #59905.
284
285 *hardened-sources-2.4.26-r6 (09 Aug 2004)
286
287 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
288 +hardened-sources-2.4.26-r6.ebuild,
289 -hardened-sources-2.4.26-r5.ebuild,
290 -hardened-sources-2.4.26-r4.ebuild,
291 +files/2.4.26-cmdline-race.patch:
292 Version bump, fix for cmdline race. See bug #59905.
293
294 *hardened-sources-2.4.27 (08 Aug 2004)
295
296 08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
297 +hardened-sources-2.4.27.ebuild,
298 +files/2.4.27-CAN-2004-0394.patch:
299 Ported the patchball to the 2.4.27 kernel version.
300
301 *hardened-sources-2.4.26-r5 (07 Aug 2004)
302
303 07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
304 +hardened-sources-2.4.26-r5.ebuild:
305 Updated to use the new hardened-patches-2.4-26.1 patchball.
306 It adds the following features:
307 - Squashfs
308 - Ebtables
309 - Netdev random (core+drivers)
310 - Watchdog Timer (WDT) fix.
311
312 *hardened-sources-2.4.26-r4 (04 Aug 2004)
313
314 04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
315 +hardened-sources-2.4.26-r4.ebuild,
316 +files/2.4.26-CAN-2004-0415.patch,
317 -hardened-sources-2.4.26-3:
318 Version bump, fix for CAN 0415, see bug #59378.
319
320 *hardened-sources-2.4.26-r3 (22 Jul 2004)
321
322 22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
323 +hardened-sources-2.4.26-r3.ebuild,
324 +files/2.4.26-CAN-2004-0497.patch,
325 -hardened-sources-2.4.26-r2.ebuild:
326 Version bump, fixed CAN 0497, see bug #56171.
327
328 *hardened-sources-2.4.26-r2 (29 Jun 2004)
329
330 29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
331 +hardened-sources-2.4.26-r2.ebuild,
332 +files/2.4.26-CAN-2004-0495.patch,
333 +files/2.4.26-CAN-2004-0535.patch,
334 -hardened-sources-2.4.26-r1.ebuild:
335 Fixes for both CAN 0495 and 0535, see bug #54976
336
337 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
338 hardened-sources-2.4.26-r1.ebuild:
339 QA - fix use invocation
340
341 *hardened-sources-2.4.26-r1 (22 June 2004)
342
343 22 June 2004; Andrea Luzzardi <scox@gentoo.org>
344 +hardened-sources-2.4.26-r1.ebuild,
345 +files/2.4.26-CAN-2004-0394.patch,
346 +files/2.4.26-signal-race.patch,
347 -hardened-sources-2.4.26.ebuild,
348 -hardened-sources-2.4.24-r3.ebuild:
349 Version bump for the CAN-2004-0394 issue and bug #53804
350 Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
351
352
353 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
354 hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
355 Masked hardened-sources-2.4.26.ebuild broken for ppc
356
357 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
358 hardened-sources-2.4.24-r3.ebuild:
359 Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
360
361 *hardened-sources-2.4.26 (29 May 2004)
362
363 29 May 2004; Andrea Luzzardi <scox@gentoo.org>
364 +hardened-sources-2.4.26.ebuild:
365 Updated hardened-sources for the 2.4.26 kernel
366 Removed broken components, updated almost everything.
367
368 *hardened-sources-2.4.24-r3 (17 Apr 2004)
369
370 17 Apr 2004; <plasmaroo@gentoo.org>
371 +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
372 +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
373 +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
374 +hardened-sources-2.4.24-r3.ebuild:
375 Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
376 vulnerabilities. Old revisions removed.
377
378 *hardened-sources-2.4.24-r2 (15 Apr 2004)
379
380 15 Apr 2004; <plasmaroo@gentoo.org>
381 +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
382 -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
383 Version bump for the CAN-2004-0109 issue; bug #47881.
384
385 12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
386 hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
387 Add eutils to inherit.
388
389 *hardened-sources-2.4.24-r1 (19 Feb 2004)
390
391 19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
392 files/hardened-sources-2.4.24.munmap.patch:
393 Added the patch for the mremap/munmap vulnerability. Bug #42024.
394
395 *hardened-sources-2.4.24 (06 Feb 2004)
396
397 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
398 hardened-sources-2.4.24.ebuild:
399 Version bump, updated most of the components.
400 This release includes the following:
401
402 - Hardened security
403 - Netfilter patch-o-matic 20031219
404 - FreeSWAN 2.04 & x509 1.4.8
405 - EVMS 2.2.2
406 - XFS 1.3.1
407 - cryptoloop jari
408 - grsecurity 2.0-rc4
409 - SELinux
410 - PaX 200402060000
411 - PaX Obscurity 200308302223
412 - Others...
413
414 Neither -ck nor systrace are included anymore.
415
416 *hardened-sources-2.4.22-r2 (05 Jan 2004)
417
418 05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
419 hardened-sources-2.4.22-r2.ebuild:
420 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
421
422 *hardened-sources-2.4.22-r1 (02 Dec 2003)
423
424 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
425 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
426
427 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
428 hardened-sources-2.4.22-r1.ebuild:
429 Version bump for the 'do_brk' vulnerability.
430
431 01 Dec 2003; Brian Jackson <iggy@gentoo.org>
432 hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
433 hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
434 hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
435 Fix the 'do_brk' vulnerability.
436
437 03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
438 hardened-sources-2.4.22.ebuild:
439 - Removed the src_install() portion for SELinux flask
440 components. These are no longer handled in the kernel
441 so this code was not necessary.
442
443 29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
444 New 2.4.22 based hardened-sources thanks to
445 Phil West <p.west@computer.org>.
446
447 These sources include:
448 - New SELinux API
449 - Updated CK-base
450 - Updated GRSec
451 - Systrace
452 - SuperFreeS/WAN 1.99.8
453 - Propolice kernel build support
454 - EVMS
455 - Other various security related patches
456
457 *hardened-sources-2.4.21 (14 Sep 2003)
458
459 14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
460 Updated hardened-sources based on the 2.4.21 Linux kernel.
461 This includes updates to most major components such as:
462 - ck-base-0306300059
463 - selinux-2.4-2003071106
464 - grsecurity-2.0-rc1
465 - Updated IPTables patch-o-matic
466 - Updated SuperFreeS/WAN
467
468 Thanks to Phil West <pwest@computer.org> for his work in getting this
469 updated patch set ready for the 2.4.21 based kernel.
470
471 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
472 Initial import of hardened-sources-2.4.20-r4. This revision
473 includes only a few changes, but one of these is an important
474 security fix. It is recommended all users of hardened-sources
475 upgrade to this release.
476
477 - ioperm bug fix
478 - fixed compilation failure when building without GRSec
479
480 SAL (Secure Auditing for Linux) is NOT included in this revision
481 due to time constraints, but is planned for inclusion in the near
482 future.
483
484 *hardened-sources-2.4.20-r2 (12 Jun 2003)
485
486 12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
487 hardened-sources-2.4.20-r3.ebuild:
488 Add Header...
489
490 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
491 hardened-sources-2.4.20-r3.ebuild:
492 Removed warnings from ebuild. This kernel should be safe to
493 use at this point.
494
495 *hardened-sources-2.4.20-r3 (08 Jun 2003)
496
497 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
498 hardened-sources-2.4.20-r3.ebuild:
499 New revision. Includes the following changes over -r2:
500
501 - ck7-base (O(1), preempt, low latency)
502 - Super FreeS/WAN 1.99.7rc2
503 - PaX for the LSM/SELinux branch
504 - GRSecurity 2.0-pre4 (role based access control)
505 - Systrace 1.3
506 - EXT3 fixes
507 - EVMS 2.0.1
508 - GCC 3.1+ compile optimizations
509 - ProPolice kernel build support
510 - Hashing table security fixes
511
512 *hardened-sources-2.4.20-r1 (09 Apr 2003)
513
514 23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
515 Initial import of hardened-sources-r2. This new
516 ebuild includes many new performance and security
517 related patches. As in -r1, it will patch in
518 LSM/SELinux if "selinux" is in USE, otherwise it
519 will patch in GRSecurity. The following patches
520 are included in this revision:
521
522 - O(1) Scheduler, Low Latency, and Preempt
523 (pulled from the base CK patch)
524 - ptrace exploit patch for the LSM kernel
525 (the GRSec patch already fixes this)
526 - LSM 2.4-2003040709
527 - SELinux 2.4-2003040709
528 - Systrace v1.2
529 - IPTables patch-o-matic base patches - 20030107
530 - CryptoAPI 2.4.20.1 w/ loop-jari patch
531 - Super FreeS/WAN 1.99.6.1
532 - GRSecurity 1.9.9g
533 - MPPE
534 - EXT3 data journal fix
535 - CIPE 1.5.4
536
537 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
538 hardened-sources-2.4.20-r1.ebuild, manifest:
539 Updated to install flask components correctly for selinux.
540
541 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
542 hardened-sources-2.4.20-r1.ebuild:
543 LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
544 is patched in instead. Ptrace patches for selinux have also been added. In
545 either case, systrace support will be patched in as well.
546
547 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
548 hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
549 Revision bump for new sources.
550
551 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
552 hardened-sources-2.4.20-r1.ebuild:
553 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
554
555 *hardened-sources-2.4.20 (30 Mar 2003)
556
557 30 Mar 2003; Joshua Brindle <method@gentoo.org>
558 hardened-sources-2.4.20.ebuild:
559 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20