freedomofpress/securedrop — pull request #700 by dolanjs (2014-10-26 20:46:08+00:00)
Title: Grsec meta package

This adds a grsec meta package that would be hosted in the fpf repo with the grsec patched kernel. For each new version of the grsec kernel we will need to update the Depends line in the meta package control file and push this package to the fpf security and main repos.

A meta package is required for the kernel since you want to install an additional kernel not upgrade the current one.

We can add a clean up section to the DEBIAN postinst script that removes all but the last 3 kernels each time it is runs. This will be required since unattended-upgrades does not automatically remove unused kernels like it does for other packages.