#
-# NOTE:
-# the following bcond combos will not work
-# - without_vserver and any of the following
-# - with_grsecurity
-#
# LATEST VERSION CHECKER:
# # curl -s http://www.kernel.org/kdist/finger_banner
#
%bcond_with verbose # verbose build (V=1)
%bcond_with reiser4 # support for reiser4 fs (experimental)
-%bcond_with grsecurity # don't build grsecurity nor pax at all
-%bcond_with pax # build pax and grsecurity (ie. grsecurity && pax)
-
%bcond_with fbcondecor # build fbcondecor (disable FB_TILEBLITTING and affected fb modules)
%bcond_without pae # build PAE (HIGHMEM64G) support on 32bit i686 athlon pentium3 pentium4
%bcond_with nfsroot # build with root on NFS support
%{?debug:%define with_verbose 1}
-%if %{with vanilla}
-%unglobal with_grsecurity
-%endif
-
-%if %{without grsecurity}
-%unglobal with_pax
-%endif
-
-%if %{with pax}
-%define with_grsecurity 1
-%define with_pax 1
-%endif
-
%define have_drm 1
%define have_oss 1
%define have_sound 1
%define have_pcmcia 1
%if %{with rescuecd}
-%unglobal with_grsecurity
-%unglobal with_pax
%unglobal with_vserver
%define have_drm 0
%define have_sound 0
%define have_pcmcia 0
%endif
-%define rel 1
-%define basever 3.3
-%define postver .6
+%define rel 2
+%define basever 3.7
+%define postver .1
# __alt_kernel is list of features, empty string if none set
# _alt kernel is defined as: %{nil}%{?alt_kernel:-%{?alt_kernel}} (defined in rpm.macros)
# alt_kernel should be defined if __alt_kernel has non-empty value (for %{?alt_kernel:foo} constructs)
-%define __alt_kernel %{?with_pax:pax}%{?with_grsecurity:grsecurity}
+%define __alt_kernel %{nil}
%if "%{__alt_kernel}" != ""
%define alt_kernel %{__alt_kernel}
License: GPL v2
Group: Base/Kernel
Source0: http://www.kernel.org/pub/linux/kernel/v3.x/linux-%{basever}.tar.xz
-# Source0-md5: 7133f5a2086a7d7ef97abac610c094f5
+# Source0-md5: 21223369d682bcf44bcdfe1521095983
%if "%{postver}" != ".0"
Patch0: http://www.kernel.org/pub/linux/kernel/v3.x/patch-%{version}.bz2
-# Patch0-md5: 8c96e1b050036372599076a0a6b4d1eb
+# Patch0-md5: c391dc1a1b4dae81aaef6f08a0594813
%endif
Source3: kernel-autoconf.h
Source41: kernel-patches.config
Source43: kernel-vserver.config
-Source45: kernel-grsec.config
-Source49: kernel-pax.config
-Source50: kernel-no-pax.config
Source55: kernel-imq.config
Source56: kernel-reiser4.config
Patch10: kernel-pom-ng-IPV4OPTSSTRIP.patch
-Patch16: kernel-pom-ng-mms-conntrack-nat.patch
-Patch22: kernel-pom-ng-rsh.patch
-Patch23: kernel-pom-ng-rpc.patch
-
# http://ftp.linux-vserver.org/pub/people/dhozac/p/k/delta-owner-xid-feat02.diff
Patch37: kernel-owner-xid.patch
# http://zph.bratcheda.org/linux-2.6.26.3-zph.patch
Patch49: kernel-zph.patch
-# based on http://www.linuximq.net/patchs/patch-imqmq-3.1.diff.bz2
+# http://www.linuximq.net/patches/patch-imqmq-3.5.diff.xz
Patch50: kernel-imq.patch
-# http://www.kernel.org/pub/linux/kernel/people/edward/reiser4/reiser4-for-2.6/reiser4-for-2.6.35.patch.bz2
-Patch51: kernel-reiser4.patch
+Patch51: http://downloads.sourceforge.net/project/reiser4/reiser4-for-linux-3.x/reiser4-for-3.6.4.patch.gz
+# Patch51-md5: 4128aa3bd062d0289117dda6775a7f20
# http://fatooh.org/esfq-2.6/sfq-2.6.24.1.tar.bz2
Patch53: kernel-esfq.patch
# http://patches.aircrack-ng.org/hostap-kernel-2.6.18.patch
Patch85: kernel-hostap.patch
-# http://vserver.13thfloor.at/Experimental/patch-3.3.1-vs2.3.3.2.diff
+# http://vserver.13thfloor.at/Experimental/patch-3.7.1-vs2.3.5.3.diff
+# note there are additional patches from above url:
+# - *fix* are real fixes (we want these)
+# - *feat* are new features/tests (we don't want these)
Patch100: kernel-vserver-2.3.patch
Patch101: kernel-vserver-fixes.patch
-# http://download.filesystems.org/unionfs/unionfs-2.x/unionfs-2.5.11_for_3.2.2.diff.gz
-Patch140: kernel-unionfs.patch
+# git clone git://kernel.opensuse.org/kernel-source.git
+# patches.suse/ovl*
+Patch110: ovl01-vfs-add-i_op-dentry_open.patch
+Patch111: ovl02-vfs-export-do_splice_direct-to-modules.patch
+Patch112: ovl03-vfs-introduce-clone_private_mount.patch
+Patch113: ovl04-overlay-filesystem.patch
+Patch114: ovl05-overlayfs-add-statfs-support.patch
+Patch115: ovl06-overlayfs-implement-show_options.patch
+Patch116: ovl07-overlay-overlay-filesystem-documentation.patch
+Patch117: ovl08-fs-limit-filesystem-stacking-depth.patch
+Patch118: ovl09-overlayfs-fix-possible-leak-in-ovl_new_inode.patch
+Patch119: ovl10-overlayfs-create-new-inode-in-ovl_link.patch
+Patch120: ovl11-vfs-export-__inode_permission-to-modules.patch
+Patch121: ovl12-ovl-switch-to-__inode_permission.patch
+Patch122: ovl13-overlayfs-copy-up-i_uid-i_gid-from-the-underlying-in.patch
# git://aufs.git.sourceforge.net/gitroot/aufs/aufs3-standalone.git, read README
# Patch creation:
# git clone git://aufs.git.sourceforge.net/gitroot/aufs/aufs3-standalone.git
# cd aufs3-standalone
-# git checkout -b aufs3.2 origin/aufs3.2
+# git checkout -b aufs3.7 origin/aufs3.7
# cat aufs3-kbuild.patch aufs3-base.patch aufs3-standalone.patch > ~/rpm/packages/kernel/kernel-aufs3.patch
# mkdir linux
# cp -a Documentation fs include linux
# diff -urN /usr/share/empty linux >> ~/rpm/packages/kernel/kernel-aufs3.patch
+# drop hunk at the end of patch (hunk is patching include/linux/Kbuild with single line change)
#
Patch145: kernel-aufs3.patch
-Patch146: kernel-aufs2-unionfs.patch
-Patch147: kernel-aufs2-no-const-grsec.patch
-Patch148: kernel-aufs2-reiser4.patch
# Show normal colors in menuconfig with ncurses ABI 6
Patch250: kernel-fix_256colors_menuconfig.patch
Patch2001: kernel-pwc-uncompress.patch
Patch2003: kernel-regressions.patch
-# 0001-AppArmor-compatibility-patch-for-v5-network-controll.patch
-# 0002-AppArmor-compatibility-patch-for-v5-interface.patch
-# from http://kernel.org/pub/linux/security/apparmor/apparmor-2.6.36-patches.tgz
+# http://git.kernel.org/?p=linux/kernel/git/jj/linux-apparmor.git;a=shortlog;h=refs/heads/v3.5-aa2.8
Patch5000: kernel-apparmor.patch
# for rescuecd
# based on ftp://ftp.leg.uct.ac.za/pub/linux/rip/tmpfs_root-2.6.30.diff.gz
Patch7000: kernel-inittmpfs.patch
-# based on http://grsecurity.net/~spender/grsecurity-2.2.2-3.1.1-201111181902.patch
-# NOTE: put raw upstream patches on kernel-grsec_full.patch:GRSECURITY_RAW for reference
-# (since upstream deletes older patches)
-# NOTE: mirror of old grsecurity patches:
-# https://github.com/slashbeast/grsecurity-scrape/tree/master/test
-Patch9999: kernel-grsec_full.patch
-Patch10000: kernel-grsec-caps.patch
-Patch10001: kernel-grsec-common.patch
-Patch10002: kernel-grsec_fixes.patch
-
# Do not remove this line, please. It is easier for me to uncomment two lines, then patch
# kernel.spec every time.
#Patch50000: kernel-usb_reset.patch
BuildRequires: xz >= 1:4.999.7
AutoReqProv: no
BuildRequires: hostname
-BuildRequires: virtual(module-tools)
+BuildRequires: kmod
BuildRequires: perl-base
BuildRequires: rpm-build >= 4.5-24
-BuildRequires: rpmbuild(macros) >= 1.217
+BuildRequires: rpmbuild(macros) >= 1.652
Requires(post): coreutils
Requires(post): geninitrd >= 10000-3
-Requires(post): virtual(module-tools)
+Requires(post): kmod >= 12-2
Requires: /sbin/depmod
Requires: coreutils
Requires: geninitrd >= 10000-3
-Requires: virtual(module-tools)
+Requires: kmod >= 12-2
%if %{with pae}
%ifarch i686 athlon pentium3 pentium4
Requires: cpuinfo(pae)
Conflicts: e2fsprogs < 1.29
Conflicts: isdn4k-utils < 3.1pre1
Conflicts: jfsutils < 1.1.3
+Conflicts: linux-firmware < 20120720
Conflicts: lvm2 < 2.02.40
Conflicts: module-init-tools < 3.16
Conflicts: nfs-utils < 1.0.5
%define _kernelsrcdir /usr/src/linux%{_alt_kernel}-%{version}
-%if "%{_target_base_arch}" != "%{_arch}"
+%if "%{_target_base_arch}" != "%{_host_base_arch}"
%define CrossOpts ARCH=%{_target_base_arch} CROSS_COMPILE=%{_target_cpu}-pld-linux-
%define DepMod /bin/true
- %if "%{_arch}" == "sparc" && "%{_target_base_arch}" == "sparc64"
+ %if "%{_host_base_arch}" == "sparc" && "%{_target_base_arch}" == "sparc64"
%define CrossOpts ARCH=%{_target_base_arch} CC="%{__cc}"
%define DepMod /sbin/depmod
%endif
- %if "%{_arch}" == "sparc64" && "%{_target_base_arch}" == "sparc"
+ %if "%{_host_base_arch}" == "sparc64" && "%{_target_base_arch}" == "sparc"
%define CrossOpts ARCH=%{_target_base_arch} CC="%{__cc}"
%define DepMod /sbin/depmod
%endif
- %if "%{_arch}" == "x86_64" && "%{_target_base_arch}" == "i386"
+ %if "%{_host_base_arch}" == "x86_64" && "%{_target_base_arch}" == "i386"
%define CrossOpts ARCH=%{_target_base_arch} CC="%{__cc}"
%define DepMod /sbin/depmod
%endif
%define MakeOpts %{CrossOpts} HOSTCC="%{__cc}"
%define __features \
-%{?with_grsecurity:Grsecurity support - enabled}\
-%{?with_pax:PaX support - enabled}\
%{?with_fbcondecor:Fbsplash/fbcondecor - enabled }\
%{?with_nfsroot:Root on NFS - enabled}\
Summary(pl.UTF-8): Pliki służące do budowania modułów jądra
Group: Development/Building
Requires: %{name}-headers = %{epoch}:%{version}-%{release}
-Conflicts: rpmbuild(macros) < 1.642
+Conflicts: rpmbuild(macros) < 1.652
AutoReqProv: no
%description module-build
ln -s %{SOURCE10} Makefile
cd linux-%{basever}
-# hack against warning in pax/grsec
-sed -i 's/-Werror//' arch/alpha/kernel/Makefile
-
-
%if "%{postver}" != ".0"
%patch0 -p1
%endif
# kernel-pom-ng-IPV4OPTSSTRIP.patch
%patch10 -p1
-# kernel-pom-ng-mms-conntrack-nat.patch
-%patch16 -p1
-
-# kernel-pom-ng-rsh.patch
-%patch22 -p1
-
-# kernel-pom-ng-rpc.patch
-%patch23 -p1
-
# kernel-owner-xid.patch
%if %{with vserver}
%patch37 -p1
%patch101 -p1
%endif
-# aufs2
-%if %{with reiser4}
-%patch148 -p1
-%endif
+%patch110 -p1
+%patch111 -p1
+%patch112 -p1
+%patch113 -p1
+%patch114 -p1
+%patch115 -p1
+%patch116 -p1
+%patch117 -p1
+%patch118 -p1
+%patch119 -p1
+%patch120 -p1
+%patch121 -p1
+%patch122 -p1
+
+# aufs3
%patch145 -p1
-%patch146 -p1
-
-# unionfs
-%patch140 -p1
%if %{with rescuecd}
%patch7000 -p1
%endif
-# grsecurity & pax stuff
-#
-%if %{with grsecurity}
-exit 0
-%patch9999 -p1
-# aufs needs this
-%patch147 -p1
-%{?with_vserver:%patch10000 -p1}
-%{?with_vserver:%patch10001 -p1}
-%{?with_vserver:%patch10002 -p1}
-%endif
-#
-# end of grsecurity & pax stuff
-
# apparmor
%patch5000 -p1
#%patch2003 -p1
# Do not remove this, please!
-#%patch50000 -p1
+#%%patch50000 -p1
# Fix EXTRAVERSION in main Makefile
sed -i 's#EXTRAVERSION =.*#EXTRAVERSION = %{?alt_kernel:.%{alt_kernel}}#g' Makefile
DEFCONFIG := %{defconfig}
EOF
-PaXconfig() {
- set -x
- cat <<-EOCONFIG > $1
- %ifarch %{ix86}
- CONFIG_PAX_SEGMEXEC=y
- # performance impact on CPUs without NX bit
- CONFIG_PAX_PAGEEXEC=n
- # Testing KERNEXEC
-
- CONFIG_HOTPLUG_PCI_COMPAQ_NVRAM=n
- CONFIG_PCI_BIOS=n
- CONFIG_EFI=n
- %endif
-
- %ifarch ppc64
- CONFIG_PAX_NOELFRELOCS=n
- %endif
- %ifarch ppc
- CONFIG_PAX_EMUTRAMP=y
- CONFIG_PAX_EMUSIGRT=y
- CONFIG_PAX_EMUPLT=y
- %endif
-
- %ifarch sparc sparc64 alpha
- CONFIG_PAX_EMUPLT=y
- %endif
-
- # Now we have to check MAC system integration. Grsecurity uses PAX_HAVE_ACL_FLAGS
- # setting (direct acces). grsec_minimal probably have no idea about PaX so we probably
- # could use PAX_NO_ACL_FLAGS, but for testing the hooks setting will be used
- # PAX_HOOK_ACL_FLAGS.
-
- %if %{with grsecurity}
- # Hardening grsec options if with pax
- CONFIG_GRKERNSEC_PROC_MEMMAP=y
- # almost rational (see HIDESYM help)
- CONFIG_GRKERNSEC_HIDESYM=y
-
- # no change needed CONFIG=PAX_HAVE_ACL_FLAGS=y is taken from the kernel-pax.config
- %else
- CONFIG_PAX_HAVE_ACL_FLAGS=n
- CONFIG_PAX_HOOK_ACL_FLAGS=y
- %endif
-EOCONFIG
-
- return 0
-}
-
RescueConfig() {
set -x
cat <<-EOCONFIG > $1
CONFIG_NFS_FS=y
CONFIG_ROOT_NFS=y
%endif
-
-# Temporary disabled RELOCATABLE. Needed only on x86??
-%if %{with pax} || %{with grsecurity}
- CONFIG_RELOCATABLE=n
-%endif
EOCONFIG
%if %{with rescuecd}
RescueConfig rescue.config
%endif
-%if %{with pax}
- PaXconfig pax.config
-%endif
-
# prepare kernel-style config file from multiple config files
%{__awk} -v arch="all %{target_arch_dir} %{_target_base_arch} %{_target_cpu}" -f %{SOURCE6} \
%if %{with myown}
rescue.config \
%endif
\
-%if %{with pax}
- %{SOURCE45} \
- %{SOURCE49} \
- pax.config \
-%else
- %if %{with grsecurity}
- %{SOURCE45} \
- %{SOURCE50} \
- %endif
-%endif
- \
%if %{with reiser4}
%{SOURCE56} \
%endif
devname \
softdep \
symbols{,.bin} \
- {pci,usb,ccw,isapnp,input,ieee1394,serio,of}map \
; do
test -f $RPM_BUILD_ROOT/lib/modules/%{kernel_release}/modules.$a
> $RPM_BUILD_ROOT/lib/modules/%{kernel_release}/modules.$a
# ghosted initrd
touch $RPM_BUILD_ROOT%{initrd_dir}/initrd-%{kernel_release}.gz
+touch $RPM_BUILD_ROOT%{initrd_dir}/initramfs-%{kernel_release}.img
-%if "%{_target_base_arch}" != "%{_arch}"
+%if "%{_target_base_arch}" != "%{_host_base_arch}"
touch $RPM_BUILD_ROOT/lib/modules/%{kernel_release}/modules.dep
%endif
find $RPM_BUILD_ROOT%{_kernelsrcdir}/$dir -name '.*.cmd' -exec rm "{}" ";"
done
+# version.h location changed in 3.7, but a lot of external modules don't know about it
+# add a compatibility symlink
+ln -s %{_kernelsrcdir}/include/generated/uapi/linux/version.h $RPM_BUILD_ROOT%{_kernelsrcdir}/include/linux/version.h
+
# disable this here, causes a lot of build-time problems and our rpm-build disables it anyway
%{__sed} -i -e 's|\(CONSTIFY_PLUGIN.*:=.*\)|# \1|' $RPM_BUILD_ROOT%{_kernelsrcdir}/Makefile
# if dracut is present then generate full-featured initramfs
if [ -x /sbin/dracut ]; then
- /sbin/dracut --quiet /boot/initramfs-%{kernel_release}.img %{kernel_release}
+ /sbin/dracut --force --quiet /boot/initramfs-%{kernel_release}.img %{kernel_release}
fi
# update boot loaders when old package files are gone from filesystem
/boot/vmlinuz-%{kernel_release}
/boot/System.map-%{kernel_release}
%ghost %{initrd_dir}/initrd-%{kernel_release}.gz
+%ghost %{initrd_dir}/initramfs-%{kernel_release}.img
/lib/firmware/%{kernel_release}
%dir /lib/modules/%{kernel_release}
/lib/modules/%{kernel_release}/kernel/sound/ac97_bus.ko*
/lib/modules/%{kernel_release}/kernel/sound/sound*.ko*
%ifnarch sparc
-%exclude /lib/modules/%{kernel_release}/kernel/drivers/media/video/cx88/cx88-alsa.ko*
-%exclude /lib/modules/%{kernel_release}/kernel/drivers/media/video/em28xx/em28xx-alsa.ko*
-%exclude /lib/modules/%{kernel_release}/kernel/drivers/media/video/saa7134/saa7134-alsa.ko*
+%exclude /lib/modules/%{kernel_release}/kernel/drivers/media/pci/cx88/cx88-alsa.ko*
+%exclude /lib/modules/%{kernel_release}/kernel/drivers/media/usb/em28xx/em28xx-alsa.ko*
+%exclude /lib/modules/%{kernel_release}/kernel/drivers/media/pci/saa7134/saa7134-alsa.ko*
%endif
%endif
%dir /lib/modules/%{kernel_release}/misc
%exclude /lib/modules/%{kernel_release}/kernel/drivers/bluetooth/*_cs.ko*
%exclude /lib/modules/%{kernel_release}/kernel/drivers/isdn/hardware/avm/avm_cs.ko*
%exclude /lib/modules/%{kernel_release}/kernel/drivers/isdn/hardware/avm/b1pcmcia.ko*
-%exclude /lib/modules/%{kernel_release}/kernel/drivers/telephony/ixj_pcmcia.ko*
+%exclude /lib/modules/%{kernel_release}/kernel/drivers/staging/telephony/ixj_pcmcia.ko*
%exclude /lib/modules/%{kernel_release}/kernel/drivers/usb/gadget/g_midi.ko*
%endif
%exclude /lib/modules/%{kernel_release}/kernel/drivers/ide/ide-cs.ko*
# rest modules.* are ghost (regenerated by post depmod -a invocation)
%ghost /lib/modules/%{kernel_release}/modules.alias
%ghost /lib/modules/%{kernel_release}/modules.alias.bin
-%ghost /lib/modules/%{kernel_release}/modules.ccwmap
%ghost /lib/modules/%{kernel_release}/modules.dep
%ghost /lib/modules/%{kernel_release}/modules.dep.bin
%ghost /lib/modules/%{kernel_release}/modules.devname
-%ghost /lib/modules/%{kernel_release}/modules.ieee1394map
-%ghost /lib/modules/%{kernel_release}/modules.inputmap
-%ghost /lib/modules/%{kernel_release}/modules.isapnpmap
-%ghost /lib/modules/%{kernel_release}/modules.ofmap
-%ghost /lib/modules/%{kernel_release}/modules.pcimap
-%ghost /lib/modules/%{kernel_release}/modules.seriomap
%ghost /lib/modules/%{kernel_release}/modules.softdep
%ghost /lib/modules/%{kernel_release}/modules.symbols
%ghost /lib/modules/%{kernel_release}/modules.symbols.bin
-%ghost /lib/modules/%{kernel_release}/modules.usbmap
# symlinks pointing to kernelsrcdir
%ghost /lib/modules/%{kernel_release}/build
/lib/modules/%{kernel_release}/kernel/drivers/bluetooth/*_cs.ko*
/lib/modules/%{kernel_release}/kernel/drivers/isdn/hardware/avm/avm_cs.ko*
/lib/modules/%{kernel_release}/kernel/drivers/isdn/hardware/avm/b1pcmcia.ko*
-/lib/modules/%{kernel_release}/kernel/drivers/telephony/ixj_pcmcia.ko*
+/lib/modules/%{kernel_release}/kernel/drivers/staging/telephony/ixj_pcmcia.ko*
%endif
/lib/modules/%{kernel_release}/kernel/drivers/ata/pata_pcmcia.ko*
/lib/modules/%{kernel_release}/kernel/drivers/ide/ide-cs.ko*
%endif
%ifnarch sparc
/lib/modules/%{kernel_release}/kernel/drivers/usb/gadget/g_midi.ko*
-/lib/modules/%{kernel_release}/kernel/drivers/media/video/cx88/cx88-alsa.ko*
-/lib/modules/%{kernel_release}/kernel/drivers/media/video/em28xx/em28xx-alsa.ko*
-/lib/modules/%{kernel_release}/kernel/drivers/media/video/saa7134/saa7134-alsa.ko*
+/lib/modules/%{kernel_release}/kernel/drivers/media/pci/cx88/cx88-alsa.ko*
+/lib/modules/%{kernel_release}/kernel/drivers/media/usb/em28xx/em28xx-alsa.ko*
+/lib/modules/%{kernel_release}/kernel/drivers/media/pci/saa7134/saa7134-alsa.ko*
%endif
%if %{have_oss}
%{_kernelsrcdir}/arch/*/kernel/asm-offsets*
%{_kernelsrcdir}/arch/*/kernel/sigframe*.h
%{_kernelsrcdir}/drivers/lguest/lg.h
-%{_kernelsrcdir}/drivers/media/video/bt8xx/bttv.h
+%{_kernelsrcdir}/drivers/media/pci/bt8xx/bttv.h
%{_kernelsrcdir}/kernel/bounds.c
%{_kernelsrcdir}/scripts/basic/*.c
%attr(755,root,root) %{_kernelsrcdir}/scripts/kconfig/*.sh
%{_kernelsrcdir}/scripts/selinux/mdp/*.c
%exclude %dir %{_kernelsrcdir}/security
%exclude %dir %{_kernelsrcdir}/security/selinux
-%if %{with grsecurity}
-%{_kernelsrcdir}/tools/gcc/*.c
-%endif
%if %{with doc}
%files doc
%exclude %{_kernelsrcdir}/arch/*/kernel/asm-offsets*
%exclude %{_kernelsrcdir}/arch/*/kernel/sigframe*.h
%exclude %{_kernelsrcdir}/drivers/lguest/lg.h
-%exclude %{_kernelsrcdir}/drivers/media/video/bt8xx/bttv.h
+%exclude %{_kernelsrcdir}/drivers/media/pci/bt8xx/bttv.h
%{_kernelsrcdir}/block
%{_kernelsrcdir}/crypto
%{_kernelsrcdir}/drivers
%{_kernelsrcdir}/firmware
%{_kernelsrcdir}/fs
-%if %{with grsecurity} && %{without rescuecd}
-%{_kernelsrcdir}/grsecurity
-%endif
%{_kernelsrcdir}/init
%{_kernelsrcdir}/ipc
%{_kernelsrcdir}/kernel
%{_kernelsrcdir}/security
%exclude %{_kernelsrcdir}/security/selinux/include
%{_kernelsrcdir}/tools/*
-%if %{with grsecurity}
-%exclude %{_kernelsrcdir}/tools/gcc/*.c
-%endif
%{_kernelsrcdir}/usr
%{_kernelsrcdir}/COPYING
%{_kernelsrcdir}/CREDITS