grsecurity: Fix build under new generic kernel derivation
grsecurity: Update stable and test patches

stable: 3.0-3.2.53-201312021727 -> 3.0-3.2.54-201401191012
test:   3.0-3.12.2-201312021733 -> 3.0-3.12.8-201401191015
add glog 0.3.3
hiphopvm: update to commit 1e23dec9f0
Add libyubikey (aka yubico-c) package
Add ykpers (aka yubikey-personalization) package
Implement authentication for a LUKS device with a yubikey (HMAC-SHA1); supports simple challenge-response and two-factor authentication
Add #include <unisted.h> for sleep and usleep
add arpack-3.1.4
phantomjs: update to 1.9.7
Rewrite as a pre-boot authentication module (mostly) comforming to the design specification of
'YubiKey Integration for Full Disk Encryption Pre-Boot Authentication (Copyright) Yubico, 2011 Version: 1.1'.

Used binaries:
  * uuidgen - for generation of random sequence numbers
  * ykchalresp - for challenging a Yubikey
  * ykinfo - to check if a Yubikey is plugged in at boot (fallback to passphrase authentication otherwise)
  * openssl - for calculation of SHA-1, HMAC-SHA-1, as well as AES-256-CTR (de/en)cryption

Main differences to the specification mentioned above:
  * No user management (yet), only one password+yubikey per LUKS device
  * SHA-512 instead of CRC-16 for checksum

Main differences to the previous implementation:
  * Instead of changing the key slot of the LUKS device each boot,
    the actual key for the LUKS device will be encrypted itself
  * Since the response for the new challenge is now calculated
    locally with openssl, the MITM-USB-attack with which previously
    an attacker could obtain the new response (that was used as the new
    encryption key for the LUKS device) by listening to the
    Yubikey has ideally become useless (as long as uuidgen can
    successfuly generate new random sequence numbers).

Remarks:
  * This is not downwards compatible to the previous implementation
gdb: Build on Darwin

Note that it doesn't actually work unless you run it as root, because
the Darwin kernel disallows unsigned debuggers (you'll get an error
message "please check gdb is codesigned").
qt5: disable parallel building, as it often fails
less: Build on Darwin
openjdk-darwin: Behave the same as openjdk-linux
junixsocket: Support Darwin

Patch borrowed from Rob Vermaas.
ipython: disable support for qtconsole, pylabQt and pylab on Darwin

Qt and CUPS are not supported on Darwin and are dependencies.

Note: this makes ipython the same as ipythonLight on Darwin, but
ipython is used as an input for other packages (ipdb and ipdplugin)
and it is reasonable to assume that users on other platforms may
choose ipythonLight.
Merge pull request #1567 from wizeman/u/grsec-upd-and-fix

grsecurity: Fix build and update patches
pull module blacklist from Ubuntu and use it by default

People often have serious problems due to bogus modules like *fb.
cpio: Fix build on Darwin