public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

grsecurity: decouple from mainline

Browse Source
This commit is contained in:
tg(x)
2016-02-27 19:33:35 +01:00
parent 7547960546
commit 75f353ffbd
4 changed files with 61 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
pkgs/os-specific/linux/kernel/linux-grsecurity-3.14.nix Normal file
View File

@@ -0,0 +1,19 @@
{ stdenv, fetchurl, perl, buildLinux, ... } @ args:
import ./generic.nix (args // rec {
version = "3.14.51";
extraMeta.branch = "3.14";
src = fetchurl {
url = "mirror://kernel/linux/kernel/v3.x/linux-${version}.tar.xz";
sha256 = "1gqsd69cqijff4c4br4ydmcjl226d0yy6vrmgfvy16xiraavq1mk";
};
kernelPatches = args.kernelPatches;
features.iwlwifi = true;
features.efiBootStub = true;
features.needsCifsUtils = true;
features.canDisableNetfilterConntrackHelpers = true;
features.netfilterRPFilter = true;
} // (args.argsOverride or {}))

19
pkgs/os-specific/linux/kernel/linux-grsecurity-4.4.nix Normal file
View File

@@ -0,0 +1,19 @@
{ stdenv, fetchurl, perl, buildLinux, ... } @ args:
import ./generic.nix (args // rec {
version = "4.4.2";
extraMeta.branch = "4.4";
src = fetchurl {
url = "mirror://kernel/linux/kernel/v4.x/linux-${version}.tar.xz";
sha256 = "09l6y0nb8yv7l16arfwhy4i5h9pkxcbd7hlbw0015n7gm4i2mzc2";
};
kernelPatches = args.kernelPatches;
features.iwlwifi = true;
features.efiBootStub = true;
features.needsCifsUtils = true;
features.canDisableNetfilterConntrackHelpers = true;
features.netfilterRPFilter = true;
} // (args.argsOverride or {}))

8
pkgs/os-specific/linux/kernel/patches.nix
View File

@@ -23,7 +23,9 @@ let
{ name = "grsecurity-${grversion}-${kversion}";
inherit grversion kernel kversion revision;
patch = fetchurl {
url = "https://github.com/slashbeast/grsecurity-scrape/blob/master/${branch}/grsecurity-${grversion}-${kversion}-${revision}.patch?raw=true";
url = if branch == "stable"
then "https://github.com/kdave/grsecurity-patches/blob/master/grsecurity_patches/grsecurity-${grversion}-${kversion}-${revision}.patch?raw=true"
else "https://github.com/slashbeast/grsecurity-scrape/blob/master/${branch}/grsecurity-${grversion}-${kversion}-${revision}.patch?raw=true";
inherit sha256;
};
features.grsecurity = true;
@@ -81,7 +83,7 @@ rec {
};
grsecurity_stable = grsecPatch
{ kernel = pkgs.linux_3_14;
{ kernel = pkgs.linux_grsecurity_3_14;
kversion = "3.14.51";
revision = "201508181951";
branch = "stable";
@@ -89,7 +91,7 @@ rec {
};
grsecurity_testing = grsecPatch
{ kernel = pkgs.linux_4_4;
{ kernel = pkgs.linux_grsecurity_4_4;
kversion = "4.4.2";
revision = "201602182048";
branch = "test";