summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRobin H. Johnson <robbat2@gentoo.org>2010-05-02 08:48:16 +0000
committerRobin H. Johnson <robbat2@gentoo.org>2010-05-02 08:48:16 +0000
commit6728244ed809aa37aba154e0597769fa8392f047 (patch)
treebe1e880744b1a4e082f0b93c6244ba5803b3e0bf /eclass/kernel-2.eclass
parentfix unaligned reads; bug #304921 (diff)
downloadhistorical-6728244ed809aa37aba154e0597769fa8392f047.tar.gz
historical-6728244ed809aa37aba154e0597769fa8392f047.tar.bz2
historical-6728244ed809aa37aba154e0597769fa8392f047.zip
Bug #318095: Improve K_SECURITY_UNSUPPORTED messages for deblobbing. Based a patch by Ulrich Müller <ulm@gentoo.org>.
Diffstat (limited to 'eclass/kernel-2.eclass')
-rw-r--r--eclass/kernel-2.eclass13
1 files changed, 9 insertions, 4 deletions
diff --git a/eclass/kernel-2.eclass b/eclass/kernel-2.eclass
index 0bf17691f2e7..0046e0b1a551 100644
--- a/eclass/kernel-2.eclass
+++ b/eclass/kernel-2.eclass
@@ -1,6 +1,6 @@
# Copyright 1999-2009 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/eclass/kernel-2.eclass,v 1.231 2010/04/26 08:05:10 robbat2 Exp $
+# $Header: /var/cvsroot/gentoo-x86/eclass/kernel-2.eclass,v 1.232 2010/05/02 08:48:16 robbat2 Exp $
# Description: kernel.eclass rewrite for a clean base regarding the 2.6
# series of kernel with back-compatibility for 2.4
@@ -669,7 +669,7 @@ postinst_sources() {
# if we're using a deblobbed kernel, it's not supported
[[ $K_DEBLOB_AVAILABLE == 1 ]] && \
use deblob && \
- K_SECURITY_UNSUPPORTED=1
+ K_SECURITY_UNSUPPORTED=deblob
# if we are to forcably symlink, delete it if it already exists first.
if [[ ${K_SYMLINK} > 0 ]]; then
@@ -714,9 +714,14 @@ postinst_sources() {
fi
# optionally display security unsupported message
- if [[ -n ${K_SECURITY_UNSUPPORTED} ]]; then
- echo
+ # Start with why
+ if [[ ${K_SECURITY_UNSUPPORTED} = deblob ]]; then
+ ewarn "Deblobbed kernels are UNSUPPORTED by Gentoo Security"
+ elif [[ -n ${K_SECURITY_UNSUPPORTED} ]]; then
ewarn "${PN} is UNSUPPORTED by Gentoo Security."
+ fi
+ # And now the general message.
+ if [[ -n ${K_SECURITY_UNSUPPORTED} ]]; then
ewarn "This means that it is likely to be vulnerable to recent security issues."
ewarn "For specific information on why this kernel is unsupported, please read:"
ewarn "http://www.gentoo.org/proj/en/security/kernel.xml"