The kernel-2.eclass calls epatch_user, so AFAIK you don't have to create a local ebuild copy in order to patch the kernel, just drop your patches in /etc/portage/patches/sys-kernel/hardened-sources/.
Regards, Luis Ressel
signature.asc
Description: PGP signature