summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMarcin Deranek <marcin.deranek@slonko.net>2022-03-25 19:11:47 +0100
committerMarcin Deranek <marcin.deranek@slonko.net>2022-03-25 20:06:52 +0100
commite60feda2fa2454e00dd01f51d5ec3473bcb2ce61 (patch)
tree758ad6614fd80b67efe9750de678752231e62d26
parentefebf8305cffed000124a2f1d5026f1bea2afd0a (diff)
downloadportage-e60feda2fa2454e00dd01f51d5ec3473bcb2ce61.tar.gz
portage-e60feda2fa2454e00dd01f51d5ec3473bcb2ce61.tar.bz2
portage-e60feda2fa2454e00dd01f51d5ec3473bcb2ce61.zip
sys-kernel/hardened-sources added 5.16 branch
-rw-r--r--sys-kernel/hardened-sources/Manifest16
-rw-r--r--sys-kernel/hardened-sources/files/9999_revert-conflicts-v1.patch (renamed from sys-kernel/hardened-sources/files/9999_revert-conflicts.patch)0
-rw-r--r--sys-kernel/hardened-sources/files/9999_revert-conflicts-v2.patch23
-rw-r--r--sys-kernel/hardened-sources/files/linux-hardened-gentoo-v1.patch (renamed from sys-kernel/hardened-sources/files/linux-hardened-gentoo.patch)0
-rw-r--r--sys-kernel/hardened-sources/files/linux-hardened-gentoo-v2.patch10
-rw-r--r--sys-kernel/hardened-sources/hardened-sources-5.10.108.ebuild2
-rw-r--r--sys-kernel/hardened-sources/hardened-sources-5.15.31.ebuild2
-rw-r--r--sys-kernel/hardened-sources/hardened-sources-5.16.17.ebuild32
8 files changed, 79 insertions, 6 deletions
diff --git a/sys-kernel/hardened-sources/Manifest b/sys-kernel/hardened-sources/Manifest
index a4d0592..c93d327 100644
--- a/sys-kernel/hardened-sources/Manifest
+++ b/sys-kernel/hardened-sources/Manifest
@@ -1,21 +1,29 @@
-AUX 9999_revert-conflicts.patch 969 BLAKE2B 58eb5505076035e7f593b8abba38ca445ae1b630e8dbaa9d24e369681149a58a864814db50331a733c1b4e94dfc13ecc83bd46ad15c805eab974d0b9cdf8e330 SHA512 4ade1f7ba4884345de61433c7f4d6cf76ced2ccab795a9593ec4c3baad45043fe2b2452a21f321b959ae6cfedfd79dcd10c13440ddf80853bf473c5e8b8fc269
-AUX linux-hardened-gentoo.patch 434 BLAKE2B 97002272c4556335ee45e291a9561afd0a93efe2c7c3e6b2b05aa8a40c26cb61405e8fb5b65cb12c2afd2f67d740d93a9a9a38d9137f1ee92306e68db3100ae1 SHA512 6b8500c51c8757fd0c21cbff96eb70446a2ff692388d1a579492f36a7746217185d7e28a2ad7b218328c3a4afcdc3fb6856d0077cf216b9b33f8e09f48630b55
+AUX 9999_revert-conflicts-v1.patch 969 BLAKE2B 58eb5505076035e7f593b8abba38ca445ae1b630e8dbaa9d24e369681149a58a864814db50331a733c1b4e94dfc13ecc83bd46ad15c805eab974d0b9cdf8e330 SHA512 4ade1f7ba4884345de61433c7f4d6cf76ced2ccab795a9593ec4c3baad45043fe2b2452a21f321b959ae6cfedfd79dcd10c13440ddf80853bf473c5e8b8fc269
+AUX 9999_revert-conflicts-v2.patch 842 BLAKE2B 30712e46b5e0fd51f8490695a27d9d687583cb0cfda59e1650a05d4ce0f11fb56ae224b05293892f949784967222f51c84995df22b692e096e282174a07212e4 SHA512 ebe9b452dd5ec6daf6afca8cca50bd10081a691125202ed79d336e65ec9600a3828408f25943a84d4412793e716c040e15485f2108d4624357c4296483ca1bb4
+AUX linux-hardened-gentoo-v1.patch 434 BLAKE2B 97002272c4556335ee45e291a9561afd0a93efe2c7c3e6b2b05aa8a40c26cb61405e8fb5b65cb12c2afd2f67d740d93a9a9a38d9137f1ee92306e68db3100ae1 SHA512 6b8500c51c8757fd0c21cbff96eb70446a2ff692388d1a579492f36a7746217185d7e28a2ad7b218328c3a4afcdc3fb6856d0077cf216b9b33f8e09f48630b55
+AUX linux-hardened-gentoo-v2.patch 462 BLAKE2B 5c19e3dd9131ded2cefa0cbd3b3a09926aa4767db44abb186445f8d8d793b4f7be6d5ad05bad03f120fd5b8464e84e81f7eae57a797a198fb05a3775a32f9f86 SHA512 549e4e18eb543e8e6c7e2021219034f68942e7071b01db233ee545c5e45e5be3ad8e591e35d6a6fe810a3f812c334044278615865351ae80c2dc494de9a11e97
DIST genpatches-5.10-116.base.tar.xz 3156432 BLAKE2B e5aeca5226e01239e656045b1aedc5fb7c98f4848ecdd742a740a17194d2c3a3676cda189f3577bd102aba2d35daaa2f6c4afa0eb943772b9cbb1c5020443ac6 SHA512 6972aa205a3d7718490ef39cc46af7277a49c5d777c8c131b85db07a23a2c4825350ad1493fc9d17a5bca85251e961c3092585c58008df2ab2094c44d9284a93
DIST genpatches-5.10-116.experimental.tar.xz 16868 BLAKE2B d2350d7f39867911adb7732c6343e0ef3b5f5a2249aa37509c6b394b50b7c39b84ee99c072d032304bb154b34def540eb0b26a1d2722021d8deba32bfda2db59 SHA512 6e34a2ada37a62c1fc13a1323b394b78df175170cff1007e699f132e94ed0da09b98a6e0f6d9a4a9412387b6ba435db961e8479bf73397bec8031662b5f249ca
DIST genpatches-5.10-116.extras.tar.xz 3876 BLAKE2B c36a485ce2cb9916d163be827bbfd0fa687b4d106dbddcec3b657f4740896157b4442a4d21ed195a1542ab4680894857afd3f08c6111effb32214b626d6bfba4 SHA512 a6d91a7beceb43a9f348bbea9d7c0a78daec405f1d39a98321bc34efaef4d8f6f40f1351cc6e96f08ff86203b91bd911a8ec7eb689070c835e53890510b1df2f
DIST genpatches-5.15-33.base.tar.xz 1296164 BLAKE2B 25dce9e6d4047709a0995ff75999f36a5695accfcfb3b378d0e1a0782b6897035dec5285b678f79b71d05bc573ced2a49c2eaa891aa7201b1930049a95cc410e SHA512 e49f7e08120c2dfabe97107b15885e46dc469bb2cb537fa395e94518f1db8f326dac2a6b6176aad0d63d54e2e5e92a7689f3f54dfc64ac372a55dfc7ff75c655
DIST genpatches-5.15-33.experimental.tar.xz 5420 BLAKE2B 311e1e0453ca92fd455aa4eab63c2b76c6351371502f752d09bb8f736e3fd62da6184bda2e5bf1359267041f85fd8379a04218c0c0df9fc77f199ac7a1bc57d1 SHA512 c22b886c241a6b6249c6bf324e3efabb54424bde917b7d6e6791f93f9c99d2b03e0484f253588fdaf89d32b299862d06f804bb1270c890e071db330598634e24
DIST genpatches-5.15-33.extras.tar.xz 3876 BLAKE2B 4a7d695523ec637b847c28eb168bbd7543706ed346e863930c1c824b82087cd531d86b794605b26076000e67661f5894d0d8f081ed031b7d7e27b2f85a0d152f SHA512 f8b5b9264f917f79c6ea34605511d1b7e5a12b6336746495f42aa64a157b5879ab4fb23704e625eba53d9ce1c5a5dbb3bbf259e08c4bfb81edbe0ac6cbb1f55d
+DIST genpatches-5.16-18.base.tar.xz 761144 BLAKE2B f4d4b5225a2ef03e422230497861714663b430397d3118c8e1cd880eea9fbd2393a4b6848c674cce8892fdb145c06e4b3d828be05836d76a1c56501e07d840b4 SHA512 472f456ff01545dad0a9e21a3560eadca63dbbaa5dfea0cb4496d3ea8f10fc968967a97a7d483ab573312de53b6d719f8baa21761feb7b7474597af53e50abd0
+DIST genpatches-5.16-18.experimental.tar.xz 5420 BLAKE2B 9eeae1e63950d0b94deffa4e4750b80c02e0aa7821461bf82244fed7a28566f0b91f3746a75243ab40c329214f7b5f81232fd3cc7a0a4a2ff47656b9a6ec841b SHA512 8684e946a67ba66277ba5eea5833f31bf2c9e3342dc8ef28ade840a009816589fe194f59e8870f3f27c882740fbcc9bf57305964cc38c2d71631db345512712b
+DIST genpatches-5.16-18.extras.tar.xz 3800 BLAKE2B df1212d36eec642a4c5eff67afe7b531b1ff85ee74e594f7ca3ff1274a85ac380c986458f40a5d378392c36600a122a929b0ff5bd730e9442e34d77f625671df SHA512 14700769fb872ab062cccd49e45fb530aeb75198bf9f5715a98c2d106ba088230282d120d71d694e3aa405a6aac1bd23fcff11864ff738cd38aa766862edefc9
DIST genpatches-5.4-191.base.tar.xz 4508792 BLAKE2B 121c16f90445bf80db180aadd06505634d903d13a05271686eabe41c4bb6e19d38e730824d5dadecf3cac0ed28c9b78567b5d97475478a6799e0af3965f0a18a SHA512 2648edc327df3945a34100778ccb0ce26d304d9bc11e57c7f5694d7525b5aab11c9af4a332dce930d394ee4be278a6fb9631a8ea423aa01ca73bbedde3115bc4
DIST genpatches-5.4-191.experimental.tar.xz 16908 BLAKE2B c282b31b54a8f3118980c449e37208581ecac6eb31b544dbcf1e5178c95c2c70f5dc1c02ed7e82ea601c885bcffb8336a5af654f7edd06b42d4642b95757d15f SHA512 5ff9c63997d6d1e0ba6f91ecd026e72f73dd0c5eb80c724b6a80040b55ee17707aeea7dc9065e872103b1e48da0a5cc2a895d67e71f08a420bd6ec22b2c3ef0c
DIST genpatches-5.4-191.extras.tar.xz 1812 BLAKE2B 94beb2c654fb68206e4598dab054b4503ca7290519f18e4dd389da0a1c78b055c6139969c2ff6bfb67583ae56356fc9b45acee9b20c7636b8506c5426524d865 SHA512 c307a54a9ff2a274384dc8a09c326ef7b2bdeb1b43b064ab45a398e2e713616167e947dace4de8b0605b6d7a5a141d18cd9e5d15a6c78f6f8d86f5c03a47044d
DIST linux-5.10.tar.xz 116606704 BLAKE2B b923d7b66309224f42f35f8a5fa219421b0a9362d2adacdadd8d96251f61f7230878ea297a269a7f3b3c56830f0b177e068691e1d7f88501a05653b0a13274d1 SHA512 95bc137d0cf9148da6a9d1f1a878698dc27b40f68e22c597544010a6c591ce1b256f083489d3ff45ff77753289b535135590194d88ef9f007d0ddab3d74de70e
DIST linux-5.15.tar.xz 121913744 BLAKE2B 3921274b23f7938abdf3ed9334534b4581e13d7484303d3a5280eddb038999aaa8b836666a487472d9c4a219af0f06b9fecccaf348fb5510ab8762f4ef4b7e83 SHA512 d25ad40b5bcd6a4c6042fd0fd84e196e7a58024734c3e9a484fd0d5d54a0c1d87db8a3c784eff55e43b6f021709dc685eb0efa18d2aec327e4f88a79f405705a
+DIST linux-5.16.tar.xz 123114100 BLAKE2B 07a90cc640ff89e1359c06cee8c38abd33e51f9b9a89833e31a1d2750526fda4a59e8884db3c1ea63df0a37f0d3de6b5a922b014b7313d8abce20d90ac08adcb SHA512 7a257dd576bc8493595ec7d6f3c9cb6e22c772a8b2dbe735d2485c4f5c56e26a08695546e7e0f1f1cd04a533f25e829361958d4da0b98bf0ba8094dd57a85aaf
DIST linux-5.4.tar.xz 109441440 BLAKE2B 193bc4a3147e147d5529956164ec4912fad5d5c6fb07f909ff1056e57235834173194afc686993ccd785c1ff15804de0961b625f3008cca0e27493efc8f27b13 SHA512 9f60f77e8ab972b9438ac648bed17551c8491d6585a5e85f694b2eaa4c623fbc61eb18419b2656b6795eac5deec0edaa04547fc6723fbda52256bd7f3486898f
DIST linux-hardened-5.10.108-hardened1.patch 111171 BLAKE2B 931c40c07d50ce714a1bad92e0017a029e5b119441c9cb7bbfd7af61b48b2767f9bff7f06b27191d336ab496b17add0cb88934efb84c6bd5a04325442e3d2544 SHA512 d7f815b034c9e0b0bb2f226f987976f65d85afca13ac45159e7a82452dc8a350147a0f250e4f4440a33415b027231757e22d3e2e2b28c92a68068b982529c2d3
DIST linux-hardened-5.15.31-hardened1.patch 108298 BLAKE2B 39391dff4ce0af57d0c618d54d1d7f300d2aa6358e59c22515288617455e7b3f595937d771fda11328c63287e89bbbd47b03598a934780463a6c881412e89463 SHA512 84f17a041ff9217e0bb7ffc5eb86e6f22773b207268c837b6f26871414bd224ef5d77858d442c3a8c500f59e20efbbfb9200c855428933e5feb690541b91ed99
+DIST linux-hardened-5.16.17-hardened1.patch 101493 BLAKE2B 2785db2dce8b737b11cb3db846b43ba158a5e7c3c025e2bb249373eec15cbba41859a81745b19ec27f7001f0dcffaa89ac77d9b96d59028a4f1ef6db33f601b3 SHA512 e1f370f42969f5916a8167fbd6276b1fa2bafe82e6b49adeb6fe2aba4eed3394f6ea041123de5f7ad3ba624d9a85aa40b6859bc54262ea2327ece413a68740d8
DIST linux-hardened-5.4.187-hardened1.patch 108533 BLAKE2B 50102790685129d874a2c7deed0b9830fccbeb9d77d0b77e930bc0c9bce921816356063d7ff9f0bd583224d1ff45dd27b1c16d263df0c443f875d4a5d71a027c SHA512 15d1ead9fec51399741b742524458d03fdfb3d5302a9f120ba8c0e8589cda34b5d0b69eb905bcf4c0a375dfc449d7db22f25e372b0ea69d6c31d302c3ed4161c
-EBUILD hardened-sources-5.10.108.ebuild 1153 BLAKE2B 320d8e732516f4b2b72bbe552339cfc4e875ea718be60e1d7c7ac9d112e83c4099b5e6816df8ba87b8784511628e450b524f9ff0b4342c81a86a246026578fa5 SHA512 04ec59c13316fe0aea8c8dcad1ebfe5bdc0ee127134d2074a8c18b40232cc923c0ad6005d17d5ab3d71075a184d3c8377bcb6cc1452be077ef39a049f7c88efd
-EBUILD hardened-sources-5.15.31.ebuild 1152 BLAKE2B 0b96b8993a7d2ff119322d1f1acf90a72f81b2b70c9221fedb3f5b1deabde4250d8771b98e939d949d32d1daf05402be2bda61a90e3c260cd0faeb56438bb5ca SHA512 bce3b108225077c41a80a0eb6ec24ee1d255315c110c6474cd5cfa5585951d5b7128bf0e8c1472382c0e6c24a87fdc2a7931700c88c894f0b5a3223853cc32a2
+EBUILD hardened-sources-5.10.108.ebuild 1159 BLAKE2B e7cd685177002b1a0dcf34f25e46c43c980d3de246c8c70fddc0e4ecf23a555f554b08eea680fe434db4954f504c7a8344dfbaf8ba210eefd169a88c3ec84255 SHA512 6252a66efb118944815f9689f5253037bb998334660dfc1f7538a442b4fe6d2ed7087ea539b35ee42040c03cb99f481a76008e8d1814c9ce2740b0198e7bdc57
+EBUILD hardened-sources-5.15.31.ebuild 1158 BLAKE2B bc0125ea101a011869fac7bc7d37d8d883c7b72537bc06a01f186cd6d5bb0bc04c633d3865a5d4e2611616ce9e2f92138df75843df04eb9ab16f169016c3f9ec SHA512 ea45801a850ba7d433477fd381b96509c42829d0b98bde53db20fed2dc08c9ad2ee575e48ea239c95a293eeca8382553760231440d46f2503fa516b194578352
+EBUILD hardened-sources-5.16.17.ebuild 1152 BLAKE2B 99bbfa00dabaa3978d9446eab3645a191ff94e0252ebebfe236fbab215fac10aabbb757773e0843ab68de61699139641263d4ba008d74da252b9be1d35a0aeef SHA512 7249364282846604155637dac4c626e6259818215d8a348f4b40abf2c47fa708f537346e462a72f87ba8147d185d47f96529486d795dc53928e13d6e58155691
EBUILD hardened-sources-5.4.187.ebuild 1066 BLAKE2B 34d4d408d505c0fe84525b6eb6cf1d6d876063fa7599942236909c712a5c203344425b3d3f8b941bc0f32ba10d041ba63f1f7bf0e29fc190b1ff5026aa595592 SHA512 1d2618eaec18af19aa91314f2276b32185629f1c86cd8ca1b9ca4503677e0b13318552eac94767b046dac6f22214aa9edb16257b89e8fd18d35fc2b90e2eeb01
MISC metadata.xml 419 BLAKE2B 12e558e9aeff1016e8ad91fa0bc59fcd2ec5cc8a702a8f12e5c0c94bdb992088c817e6432bfd63e6149f78e8a1b4cb3825a345378575969e0ed8fe3a65b87e06 SHA512 54fb60680dbcacaf6dc21f5bca5083514385a32d680736c16ac1f6ec6ae4d4c33a04440a5b8de192eac96bce2fb288e90e2d0141a2bb92279bd6366396dd3fc7
diff --git a/sys-kernel/hardened-sources/files/9999_revert-conflicts.patch b/sys-kernel/hardened-sources/files/9999_revert-conflicts-v1.patch
index b46aa1c..b46aa1c 100644
--- a/sys-kernel/hardened-sources/files/9999_revert-conflicts.patch
+++ b/sys-kernel/hardened-sources/files/9999_revert-conflicts-v1.patch
diff --git a/sys-kernel/hardened-sources/files/9999_revert-conflicts-v2.patch b/sys-kernel/hardened-sources/files/9999_revert-conflicts-v2.patch
new file mode 100644
index 0000000..fabe571
--- /dev/null
+++ b/sys-kernel/hardened-sources/files/9999_revert-conflicts-v2.patch
@@ -0,0 +1,23 @@
+Reverse conflicting patches
+
+--- a/mm/Kconfig
++++ b/mm/Kconfig
+@@ -321,8 +321,6 @@ config KSM
+ config DEFAULT_MMAP_MIN_ADDR
+ int "Low address space to protect from user allocation"
+ depends on MMU
+- default 65536 if ( X86_64 || X86_32 || PPC64 || IA64 ) && GENTOO_KERNEL_SELF_PROTECTION
+- default 32768 if ( ARM64 || ARM ) && GENTOO_KERNEL_SELF_PROTECTION
+ default 4096
+ help
+ This is the portion of low virtual memory which should be protected
+--- a/security/Kconfig
++++ b/security/Kconfig
+@@ -167,7 +167,6 @@ config HARDENED_USERCOPY_PAGESPAN
+ bool "Refuse to copy allocations that span multiple pages"
+ depends on HARDENED_USERCOPY
+ depends on EXPERT
+- depends on !GENTOO_KERNEL_SELF_PROTECTION
+ help
+ When a multi-page allocation is done without __GFP_COMP,
+ hardened usercopy will reject attempts to copy it. There are,
diff --git a/sys-kernel/hardened-sources/files/linux-hardened-gentoo.patch b/sys-kernel/hardened-sources/files/linux-hardened-gentoo-v1.patch
index 5bd9820..5bd9820 100644
--- a/sys-kernel/hardened-sources/files/linux-hardened-gentoo.patch
+++ b/sys-kernel/hardened-sources/files/linux-hardened-gentoo-v1.patch
diff --git a/sys-kernel/hardened-sources/files/linux-hardened-gentoo-v2.patch b/sys-kernel/hardened-sources/files/linux-hardened-gentoo-v2.patch
new file mode 100644
index 0000000..6e32cd1
--- /dev/null
+++ b/sys-kernel/hardened-sources/files/linux-hardened-gentoo-v2.patch
@@ -0,0 +1,10 @@
+--- a/security/Kconfig 2021-12-05 18:20:55.655677710 -0500
++++ b/security/Kconfig 2021-12-05 18:23:42.404251618 -0500
+@@ -167,6 +167,7 @@ config HARDENED_USERCOPY_PAGESPAN
+ bool "Refuse to copy allocations that span multiple pages"
+ depends on HARDENED_USERCOPY
+ depends on EXPERT
++ depends on !GENTOO_KERNEL_SELF_PROTECTION
+ help
+ When a multi-page allocation is done without __GFP_COMP,
+ hardened usercopy will reject attempts to copy it. There are,
diff --git a/sys-kernel/hardened-sources/hardened-sources-5.10.108.ebuild b/sys-kernel/hardened-sources/hardened-sources-5.10.108.ebuild
index 6008b93..bf8f183 100644
--- a/sys-kernel/hardened-sources/hardened-sources-5.10.108.ebuild
+++ b/sys-kernel/hardened-sources/hardened-sources-5.10.108.ebuild
@@ -15,7 +15,7 @@ HARDENED_URI="https://github.com/anthraxx/linux-hardened/releases/download/${PV}
KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86"
HOMEPAGE="https://dev.gentoo.org/~mpagano/genpatches https://github.com/anthraxx/linux-hardened"
IUSE="experimental"
-UNIPATCH_LIST="${FILESDIR}/9999_revert-conflicts.patch ${DISTDIR}/linux-hardened-${PV}-${SUBREL}.patch ${FILESDIR}/linux-hardened-gentoo.patch"
+UNIPATCH_LIST="${FILESDIR}/9999_revert-conflicts-v1.patch ${DISTDIR}/linux-hardened-${PV}-${SUBREL}.patch ${FILESDIR}/linux-hardened-gentoo-v1.patch"
UNIPATCH_EXCLUDE="1510_fs-enable-link-security-restrictions-by-default.patch"
DESCRIPTION="Minimal supplement to upstream Kernel Self Protection Project"
diff --git a/sys-kernel/hardened-sources/hardened-sources-5.15.31.ebuild b/sys-kernel/hardened-sources/hardened-sources-5.15.31.ebuild
index e3346b0..3436ac4 100644
--- a/sys-kernel/hardened-sources/hardened-sources-5.15.31.ebuild
+++ b/sys-kernel/hardened-sources/hardened-sources-5.15.31.ebuild
@@ -15,7 +15,7 @@ HARDENED_URI="https://github.com/anthraxx/linux-hardened/releases/download/${PV}
KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86"
HOMEPAGE="https://dev.gentoo.org/~mpagano/genpatches https://github.com/anthraxx/linux-hardened"
IUSE="experimental"
-UNIPATCH_LIST="${FILESDIR}/9999_revert-conflicts.patch ${DISTDIR}/linux-hardened-${PV}-${SUBREL}.patch ${FILESDIR}/linux-hardened-gentoo.patch"
+UNIPATCH_LIST="${FILESDIR}/9999_revert-conflicts-v1.patch ${DISTDIR}/linux-hardened-${PV}-${SUBREL}.patch ${FILESDIR}/linux-hardened-gentoo-v1.patch"
UNIPATCH_EXCLUDE="1510_fs-enable-link-security-restrictions-by-default.patch"
DESCRIPTION="Minimal supplement to upstream Kernel Self Protection Project"
diff --git a/sys-kernel/hardened-sources/hardened-sources-5.16.17.ebuild b/sys-kernel/hardened-sources/hardened-sources-5.16.17.ebuild
new file mode 100644
index 0000000..7737c5e
--- /dev/null
+++ b/sys-kernel/hardened-sources/hardened-sources-5.16.17.ebuild
@@ -0,0 +1,32 @@
+# Copyright 1999-2022 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI="8"
+ETYPE="sources"
+K_WANT_GENPATCHES="base extras experimental"
+K_GENPATCHES_VER="18"
+
+inherit kernel-2
+detect_version
+detect_arch
+SUBREL="hardened1"
+HARDENED_URI="https://github.com/anthraxx/linux-hardened/releases/download/${PV}-${SUBREL}/linux-hardened-${PV}-${SUBREL}.patch"
+
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86"
+HOMEPAGE="https://dev.gentoo.org/~mpagano/genpatches https://github.com/anthraxx/linux-hardened"
+IUSE="experimental"
+UNIPATCH_LIST="${FILESDIR}/9999_revert-conflicts-v2.patch ${DISTDIR}/linux-hardened-${PV}-${SUBREL}.patch ${FILESDIR}/linux-hardened-gentoo-v2.patch"
+UNIPATCH_EXCLUDE="1510_fs-enable-link-security-restrictions-by-default.patch"
+
+DESCRIPTION="Minimal supplement to upstream Kernel Self Protection Project"
+SRC_URI="${KERNEL_URI} ${GENPATCHES_URI} ${HARDENED_URI} ${ARCH_URI}"
+
+pkg_postinst() {
+ kernel-2_pkg_postinst
+ einfo "For more info on this patchset, and how to report problems, see:"
+ einfo "${HOMEPAGE}"
+}
+
+pkg_postrm() {
+ kernel-2_pkg_postrm
+}