blob: d8612530e6804b5792c7394f10910d8e5d973244 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
|
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
_flavor=vserver
pkgname=linux-${_flavor}
pkgver=3.6.11
pkgrel=5
_vsver=vs2.3.4.6
if [ "${pkgver##*.*.*}" = "$pkgver" ]; then
_kernver=$pkgver
else
_kernver=${pkgver%.*}
fi
pkgdesc="Linux kernel with vserver"
url="http://linux-vserver.org/"
depends="mkinitfs linux-firmware"
makedepends="perl installkernel"
options="!strip"
_config=${config:-kernelconfig.${CARCH}}
install=
source="http://www.kernel.org/pub/linux/kernel/v3.x/linux-$_kernver.tar.xz
http://www.kernel.org/pub/linux/kernel/v3.x/patch-$pkgver.xz
patch-3.6.11-al4.patch
patch-$pkgver-$_vsver.diff
CVE-2013-2015.patch
CVE-2013-2094.patch
CVE-2013-2164.patch
CVE-2013-2206.patch
CVE-2013-2850.patch
CVE-2013-2851.patch
CVE-2013-2852.patch
CVE-2013-4348.patch
CVE-2013-4350.patch
CVE-2013-4387.patch
CVE-2013-4470.patch
kernelconfig.x86
kernelconfig.x86_64
"
subpackages="$pkgname-dev"
arch="all"
license="GPL-2"
_abi_release=${pkgver}-${_vsver}
prepare() {
cd "$srcdir"/linux-$_kernver
if [ "${pkgver%.0}" = "$pkgver" ]; then
msg "Applying $i"
unxz -c < ../patch-$pkgver.xz | patch -p1 -N || return 1
fi
# ERR is no valid signal
sed -i -e '/^trap/s/ERR//' scripts/link-vmlinux.sh
# first apply patches in specified order
for i in $source; do
i=${i##*/}
case $i in
*.patch|*.diff)
msg "Applying $i..."
patch -s -p1 -i "$srcdir"/$i || return 1
;;
esac
done
mkdir -p "$srcdir"/build
cp "$srcdir"/$_config "$srcdir"/build/.config || return 1
make -C "$srcdir"/linux-$_kernver O="$srcdir"/build HOSTCC="${CC:-gcc}" \
silentoldconfig
}
# this is so we can do: 'abuild menuconfig' to reconfigure kernel
menuconfig() {
cd "$srcdir"/build
make menuconfig
cp .config "$startdir"/$_config || return 1
}
build() {
cd "$srcdir"/build
export GCC_SPECS=/usr/share/gcc/hardenednopie.specs
make CC="${CC:-gcc}" \
KBUILD_BUILD_VERSION="$((pkgrel + 1 ))-Alpine" \
|| return 1
}
package() {
cd "$srcdir"/build
mkdir -p "$pkgdir"/boot "$pkgdir"/lib/modules
make -j1 modules_install install \
INSTALL_MOD_PATH="$pkgdir" \
INSTALL_PATH="$pkgdir"/boot \
|| return 1
rm -rf "$pkgdir"/lib/modules/*/build \
"$pkgdir"/lib/modules/*/source
rm -rf "$pkgdir"/lib/firmware
install -D include/config/kernel.release \
"$pkgdir"/usr/share/kernel/$_flavor/kernel.release
}
dev() {
# copy the only the parts that we really need for build 3rd party
# kernel modules and install those as /usr/src/linux-headers,
# simlar to what ubuntu does
#
# this way you dont need to install the 300-400 kernel sources to
# build a tiny kernel module
#
pkgdesc="Headers and script for third party modules for grsec kernel"
local dir="$subpkgdir"/usr/src/linux-headers-${_abi_release}
# first we import config, run prepare to set up for building
# external modules, and create the scripts
mkdir -p "$dir"
cp "$srcdir"/$_config "$dir"/.config
make -j1 -C "$srcdir"/linux-$_kernver O="$dir" HOSTCC="${CC:-gcc}" \
silentoldconfig prepare scripts
# remove the stuff that poits to real sources. we want 3rd party
# modules to believe this is the soruces
rm "$dir"/Makefile "$dir"/source
# copy the needed stuff from real sources
#
# this is taken from ubuntu kernel build script
# http://kernel.ubuntu.com/git?p=ubuntu/ubuntu-jaunty.git;a=blob;f=debian/rules.d/3-binary-indep.mk;hb=HEAD
cd "$srcdir"/linux-$_kernver
find . -path './include/*' -prune -o -path './scripts/*' -prune \
-o -type f \( -name 'Makefile*' -o -name 'Kconfig*' \
-o -name 'Kbuild*' -o -name '*.sh' -o -name '*.pl' \
-o -name '*.lds' \) | cpio -pdm "$dir"
cp -a drivers/media/dvb/dvb-core/*.h "$dir"/drivers/media/dvb/dvb-core
cp -a drivers/media/video/*.h "$dir"/drivers/media/video
cp -a drivers/media/dvb/frontends/*.h "$dir"/drivers/media/dvb/frontends
cp -a scripts include "$dir"
find $(find arch -name include -type d -print) -type f \
| cpio -pdm "$dir"
install -Dm644 "$srcdir"/build/Module.symvers \
"$dir"/Module.symvers
mkdir -p "$subpkgdir"/lib/modules/${_abi_release}
ln -sf /usr/src/linux-headers-${_abi_release} \
"$subpkgdir"/lib/modules/${_abi_release}/build
}
md5sums="1a1760420eac802c541a20ab51a093d1 linux-3.6.tar.xz
bd4bba74093405887d521309a74c19e9 patch-3.6.11.xz
fa0ca65fb8e9f9d08c04f06ae5c316ec patch-3.6.11-al4.patch
27809872b8bc0dffce4e383d68d1c989 patch-3.6.11-vs2.3.4.6.diff
7d6f154a6ec24b8fa031c40d3599772c CVE-2013-2015.patch
cfc7b3d39f8a16bfa0a584ca7c38fc17 CVE-2013-2094.patch
df04be24efa715b32bf189c390ee20f7 CVE-2013-2164.patch
7bb978457d16d25624a2d48bd6a4f378 CVE-2013-2206.patch
1f1bbf8c6db0a26bcfe6115b254d793d CVE-2013-2850.patch
eca3b4897b2a2191576ba719609cc654 CVE-2013-2851.patch
41013055e0ea2cd02fc066b16f65f732 CVE-2013-2852.patch
09ae7985af988c75ff35ed503558eb8b CVE-2013-4348.patch
e1354333366e923b931fb3cd9fae43ad CVE-2013-4350.patch
38cd6143c76d3edc969e20e9ee2207a1 CVE-2013-4387.patch
1623d123133b7a390c1a4b10b21146e2 CVE-2013-4470.patch
b28263bb0d529a80d4f13fbdd76520b2 kernelconfig.x86
1e9e12d5bd63552127331b875a554992 kernelconfig.x86_64"
|
