# ChangeLog for Gentoo/AMD64 profile directory # Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2 # $Header: /var/cvsroot/gentoo-x86/profiles/hardened/ChangeLog,v 1.85 2015/05/19 22:45:54 blueness Exp $ 19 May 2015; Anthony G. Basile linux/musl/mips/package.mask, linux/musl/package.mask: Remove masking on >app-misc/pax-utils-0.7 for musl. Bug #549920. 09 May 2015; Anthony G. Basile linux/arm/package.mask: Mask >=sys-libs/glibc-2.20 because it requires >=sys-devel/gcc-4.8, pending the fix of bug #518598. 08 May 2015; Anthony G. Basile +linux/arm/package.mask, +linux/musl/arm/package.mask, linux/uclibc/arm/armv6j/parent, linux/uclibc/arm/armv7a/parent, +linux/uclibc/arm/package.mask: Mask gcc 4.8 and above pending the fix of bug #518598. Restructure linux/uclibc/arm slightly. 01 May 2015; Andrew Savchenko linux/package.mask, linux/package.use.mask: Mask net-fs/openafs-kernel since it can't be used on hardened kernels due to lack of C99 support by upstream (and they can't do that) and hardened kernel requirement of C99 struct init. See bug 540196, comment 9. 19 Apr 2015; Chris Reffett linux/amd64/no-multilib/package.mask: Mask multilib package games-roguelike/dwarf-fortress on no-multilib profile 28 Mar 2015; Michał Górny -linux/amd64/no-emul-linux-x86/eapi, -linux/amd64/no-emul-linux-x86/parent: emul-linux-x86 last rites. Remove no-emul-linux-x86 subprofiles that are now redundant. 28 Mar 2015; Anthony G. Basile linux/musl/package.mask: Mask >sys-kernel/linux-headers-3.16 on musl profiles. Bug #544476. 21 Feb 2015; Anthony G. Basile +linux/amd64/no-emul-linux-x86/eapi, +linux/amd64/no-emul-linux-x86/parent: Add hardened/linux/amd64/no-emul-linux-x86 profile 30 Jan 2015; Anthony G. Basile linux/musl/amd64/make.defaults, linux/musl/x86/make.defaults: musl: unhide the CPU_FLAGS_X86 USE_EXPANDs, mirror change from arch/{amd64,x86}/make.defaults. 28 Jan 2015; Michał Górny linux/musl/amd64/use.mask, linux/musl/x86/use.mask: Unmask CPU_FLAGS_X86 in musl profiles. 30 Dec 2014; Anthony G. Basile linux/musl/package.mask: Unmask >sys-apps/file-5.17 for musl, bug #525816 18 Nov 2014; Anthony G. Basile linux/musl/ppc/make.defaults: linux/musl/ppc/make.defaults: add mutlib ABI, thanks Felix Janda 23 Oct 2014; Anthony G. Basile +linux/musl/package.use.mask: Mask USE=sanitize on musl profiles, bug #504200 20 Oct 2014; Anthony G. Basile linux/musl/package.mask: Mask >app-misc/pax-utils-0.7 on musl for bug #526048 18 Oct 2014; Anthony G. Basile linux/musl/package.mask: Mask >sys-apps/file-5.17 on musl for bug #525816 12 Oct 2014; Magnus Granberg linux/amd64/package.use: Add pic for media-libs/libpostpros needed for the x86 part #523736 14 Oct 2014; Anthony G. Basile linux/musl/make.defaults: BOOTSTRAP_USE=-nls to avoid a clash between musl and gettext in stage2 11 Oct 2014; Tim Harder linux/package.use.mask: Mask skype use flag for net-im/bitlbee since skype doesn't work under hardened. 22 Sep 2014; Anthony G. Basile linux/make.defaults, linux/package.use.force: Default USE=xattr on for all hardened profiles, and force on for tar, coreutils and portage 21 Aug 2014; Anthony G. Basile +linux/musl/mips/package.mask: Mask some packages for musl/mipsel 16 Aug 2014; Anthony G. Basile -linux/uclibc/amd64/make.defaults, -linux/uclibc/amd64/package.mask, linux/uclibc/amd64/parent, -linux/uclibc/amd64/use.force, -linux/uclibc/amd64/use.mask, -linux/uclibc/arm/armv6j/make.defaults, linux/uclibc/arm/armv6j/parent, -linux/uclibc/arm/armv7a/make.defaults, linux/uclibc/arm/armv7a/parent, -linux/uclibc/arm/make.defaults, -linux/uclibc/arm/parent, -linux/uclibc/arm/use.force, -linux/uclibc/arm/use.mask, linux/uclibc/make.defaults, -linux/uclibc/mips/make.defaults, -linux/uclibc/mips/mipsel/make.defaults, linux/uclibc/mips/mipsel/parent, -linux/uclibc/mips/package.mask, linux/uclibc/mips/parent, -linux/uclibc/mips/use.force, -linux/uclibc/mips/use.mask, -linux/uclibc/package.mask, -linux/uclibc/packages, -linux/uclibc/packages.build, -linux/uclibc/parent, -linux/uclibc/ppc/make.defaults, -linux/uclibc/ppc/package.mask, -linux/uclibc/ppc/package.use.mask, linux/uclibc/ppc/parent, -linux/uclibc/ppc/use.force, -linux/uclibc/ppc/use.mask, -linux/uclibc/use.force, linux/uclibc/use.mask, -linux/uclibc/x86/make.defaults, linux/uclibc/x86/parent, -linux/uclibc/x86/use.force, -linux/uclibc/x86/use.mask: Inherit hardened/linux/uclibc from default/linux/uclibc 13 Aug 2014; Anthony G. Basile linux/musl/package.mask, linux/uclibc/package.mask: Use eudev on uclibc and musl. 04 Aug 2014; Robin H. Johnson linux/package.mask: hmaccalc depends in prelink. 23 Jul 2014; Anthony G. Basile linux/musl/package.mask: Remove unmasking of sys-libs/musl on musl profiles 22 Jul 2014; Christoph Junghans linux/amd64/no-multilib/package.mask: masked games-fps/enemy-territory-omnibot on no-multilib 17 Jul 2014; Magnus Granberg linux/amd64/no-multilib/make.defaults, +linux/amd64/no-multilib/package.use: Set -pic as we don't need it as we don't use x86 15 Jul 2014; Anthony G. Basile +linux/uclibc/ppc/package.mask: Mask openssh on hardened/linux/uclibc/ppc, bug #517160 12 Jul 2014; Anthony G. Basile linux/uclibc/package.mask: Mask >sys-fs/e2fsprogs-1.42.7 because of bug #516988 08 Jul 2014; Magnus Granberg linux/amd64/package.use: Add pic to package that need it when use of the new multilib 02 Jul 2014; Michał Górny linux/musl/mips/mipsel/make.defaults, linux/uclibc/mips/mipsel/make.defaults: Fix wrongly inherited CHOST_o32 in {musl,uclibc/mips/mipsel profiles. 01 Jul 2014; Anthony G. Basile linux/musl/amd64/make.defaults, linux/musl/amd64/use.force, linux/musl/amd64/use.mask, linux/musl/mips/make.defaults, linux/musl/mips/use.force, linux/musl/mips/use.mask, linux/musl/x86/make.defaults, linux/musl/x86/use.force, linux/musl/x86/use.mask: Make linux/musl multilib aware, bug #515130 01 Jul 2014; Anthony G. Basile linux/uclibc/amd64/make.defaults, linux/uclibc/amd64/use.force, linux/uclibc/amd64/use.mask, linux/uclibc/mips/make.defaults, linux/uclibc/mips/use.force, linux/uclibc/mips/use.mask, linux/uclibc/ppc/make.defaults, linux/uclibc/ppc/use.force, +linux/uclibc/ppc/use.mask, linux/uclibc/x86/make.defaults, linux/uclibc/x86/use.force, linux/uclibc/x86/use.mask: Make linux/uclibc multilib aware, bug #515130 13 Jun 2014; Anthony G. Basile linux/musl/mips/mipsel/make.defaults: Disable sandbox on mipsel-musl because its currently broken 09 Jun 2014; Anthony G. Basile linux/musl/amd64/make.defaults, linux/musl/make.defaults, linux/musl/x86/make.defaults: Remove redundant INSTALL_MASK in amd64 and x86 08 Jun 2014; Anthony G. Basile linux/musl/make.defaults: Set INSTALL_MASK=charset.alias on musl profiles 05 Jun 2014; Anthony G. Basile linux/musl/packages.build: Make sure sandbox is part of stage1 for musl profiles 04 Jun 2014; Anthony G. Basile linux/musl/packages: Make sure sandbox is pulled in on all musl profiles 01 Jun 2014; Anthony G. Basile profiles/hardened/linux/musl: Enable sandbox on musl profiles 01 Jun 2014; Magnus Granberg linux/amd64/package.use: We need the pic use flag for the multilib abi_x86_32 part for media-libs/x264 bug # 490276 28 May 2014; Sven Vermeulen linux/amd64/no-multilib/package.mask: Remove huludesktop from package.mask (package has been removed) 30 Mar 2014; Michał Górny linux/amd64/package.use.stable.mask: Move abi_x86_32 package stable-mask to arch profile since it is EAPI=5 now. 30 Mar 2014; Chí-Thanh Christopher Nguyễn linux/amd64/package.use.stable.mask: Mask abi_x86_32 for libxshmfence, bug #506056. 27 Mar 2014; Andreas K. Huettel +eapi, +linux/amd64/no-multilib/eapi, +linux/amd64/no-multilib/selinux/eapi, +linux/amd64/selinux/eapi, +linux/amd64/x32/eapi, +linux/eapi, +linux/musl/eapi, +linux/musl/mips/mipsel/eapi, +linux/uclibc/eapi, +linux/uclibc/mips/mipsel/eapi, +linux/x86/selinux/eapi: Increase EAPI to 5 26 Mar 2014; Chí-Thanh Christopher Nguyễn linux/amd64/package.use.stable.mask: Mask multilib for wayland/weston, so they can go stable in bug #500368. 16 Mar 2014; Tom Wijsman linux/amd64/package.use.stable.mask, linux/x86/package.use.stable.mask: Mask unstable USE flags on media-video/vlc, see security bug #499806. 09 Mar 2014; Anthony G. Basile linux/uclibc/amd64/use.force, linux/uclibc/amd64/use.mask, linux/uclibc/x86/use.force, linux/uclibc/x86/use.mask, linux/musl/amd64/use.force, linux/musl/amd64/use.mask, linux/musl/x86/use.force, linux/musl/x86/use.mask: hardened/linux/{uclibc,musl}/{amd64,x86}: force default abi flags 28 Feb 2014; Anthony G. Basile +linux/musl/mips/eapi, +linux/musl/mips/make.defaults, +linux/musl/mips/mipsel/make.defaults, +linux/musl/mips/mipsel/parent, +linux/musl/mips/parent, +linux/musl/mips/use.force, +linux/musl/mips/use.mask: Add hardened/linux/musl/mips and hardened/linux/musl/mips/mipsel 21 Feb 2014; Anthony G. Basile +linux/musl/arm/armv7a/eapi, +linux/musl/arm/armv7a/make.defaults, +linux/musl/arm/armv7a/parent, +linux/musl/arm/eapi, +linux/musl/arm/make.defaults, +linux/musl/arm/parent, +linux/musl/arm/use.force, +linux/musl/arm/use.mask: Add hardened/linux/musl/arm/armv7a 17 Feb 2014; Anthony G. Basile linux/musl/amd64/make.defaults, linux/musl/x86/make.defaults: Sandbox from hardened-dev::musl overlay works 11 Feb 2014; Anthony G. Basile linux/make.defaults: Add xtpax to BOOTSTRAP_USE/USE in base hardened make.default, for sys-apps/elfix 03 Feb 2014; Anthony G. Basile linux/uclibc/package.mask: Remove -sys-libs/uclibc from hardened/linux/uclibc/package.mask, bug #500202 27 Jan 2014; Anthony G. Basile linux/musl/use.mask: hardened/linux/musl: provide nls support with gettext 26 Jan 2014; Anthony G. Basile linux/musl/packages.build: hardened/linux/musl: switch to dev-util/pkgconf which does better in musl 24 Jan 2014; Anthony G. Basile linux/musl/amd64/make.defaults, linux/musl/x86/make.defaults: Move musl's linker path to gcc's specs file 24 Jan 2014; Anthony G. Basile linux/musl/amd64/make.defaults, linux/musl/make.defaults, linux/musl/packages, linux/musl/packages.build, linux/musl/x86/make.defaults: linux/musl: fix linker path and remove libiconv 23 Jan 2014; Mikle Kolyada linux/amd64/package.use.stable.mask: Fix qt packages category. 21 Jan 2014; Samuli Suominen linux/amd64/package.use.stable.mask: Missing abi_x86_32 mask for dev-libs/libcdio-paranoia wrt #497246 by Pacho Ramos 31 Dec 2013; Anthony G. Basile +linux/arm/use.stable.mask: Disable stable-mask for python3.3 flags on arm 30 Dec 2013; Anthony G. Basile linux/uclibc/package.mask: Bug #490008 is fixed, unmask >sys-kernel/linux-headers-3.9 25 Dec 2013; Anthony G. Basile linux/uclibc/amd64/package.mask: Unmask >sys-libs/uclibc-0.9.33.2-r4 since bug #495256 is fixed 24 Dec 2013; Anthony G. Basile linux/uclibc/amd64/package.mask: Mask >sys-libs/uclibc-0.9.33.2-r4 until bug #495256 is fixed 20 Dec 2013; Anthony G. Basile -linux/amd64/desktop/deprecated, -linux/amd64/desktop/parent, -linux/amd64/developer/deprecated, -linux/amd64/developer/parent, -linux/amd64/server/deprecated, -linux/amd64/server/parent, -linux/ia64/desktop/deprecated, -linux/ia64/desktop/parent, -linux/ia64/developer/deprecated, -linux/ia64/developer/parent, -linux/ia64/server/deprecated, -linux/ia64/server/parent, -linux/powerpc/ppc32/desktop/deprecated, -linux/powerpc/ppc32/desktop/parent, -linux/powerpc/ppc32/developer/deprecated, -linux/powerpc/ppc32/developer/parent, -linux/powerpc/ppc32/server/deprecated, -linux/powerpc/ppc32/server/parent, -linux/powerpc/ppc64/32bit-userland/desktop/deprecated, -linux/powerpc/ppc64/32bit-userland/desktop/parent, -linux/powerpc/ppc64/32bit-userland/developer/deprecated, -linux/powerpc/ppc64/32bit-userland/developer/parent, -linux/powerpc/ppc64/32bit-userland/server/deprecated, -linux/powerpc/ppc64/32bit-userland/server/parent, -linux/powerpc/ppc64/64bit-userland/desktop/deprecated, -linux/powerpc/ppc64/64bit-userland/desktop/parent, -linux/powerpc/ppc64/64bit-userland/developer/deprecated, -linux/powerpc/ppc64/64bit-userland/developer/parent, -linux/powerpc/ppc64/64bit-userland/server/deprecated, -linux/powerpc/ppc64/64bit-userland/server/parent, -linux/powerpc/ppc64/desktop/deprecated, -linux/powerpc/ppc64/desktop/parent, -linux/powerpc/ppc64/developer/deprecated, -linux/powerpc/ppc64/developer/parent, -linux/powerpc/ppc64/server/deprecated, -linux/powerpc/ppc64/server/parent, -linux/x86/desktop/deprecated, -linux/x86/desktop/parent, -linux/x86/developer/deprecated, -linux/x86/developer/parent, -linux/x86/minimal/deprecated, -linux/x86/minimal/make.defaults, -linux/x86/minimal/parent, -linux/x86/server/deprecated, -linux/x86/server/parent: Remove all deprecated /desktop /developer /server profiles 01 Dec 2013; Mike Gilbert +linux/amd64/use.stable.mask: Disable stable-mask for python3.3 flags, bug 474128. 31 Oct 2013; Anthony G. Basile linux/uclibc/package.mask: Mask >sys-kernel/linux-headers-3.9 on uclibc, bug #490008 26 Oct 2013; Anthony G. Basile linux/uclibc/mips/package.mask: Unmask latest perl on uclibc/mips 22 Oct 2013; Anthony G. Basile +linux/musl/amd64/eapi, +linux/musl/x86/eapi: Update all hardened musl arches to eapi 5 22 Oct 2013; Anthony G. Basile +linux/uclibc/amd64/eapi, +linux/uclibc/arm/armv6j/eapi, +linux/uclibc/arm/armv7a/eapi, +linux/uclibc/arm/eapi, +linux/uclibc/mips/eapi, +linux/uclibc/ppc/eapi, +linux/uclibc/x86/eapi: Update all hardened uclibc arches to eapi 5 22 Oct 2013; Anthony G. Basile +linux/ia64/eapi: Update ia64 to eapi 5 21 Oct 2013; Anthony G. Basile +linux/powerpc/eapi, +linux/powerpc/ppc32/eapi, +linux/powerpc/ppc64/32bit-userland/eapi, +linux/powerpc/ppc64/64bit-userland/eapi, +linux/powerpc/ppc64/eapi: Update powerpc to eapi 5 21 Oct 2013; Anthony G. Basile +linux/mips/eapi, +linux/mips/mipsel/eapi, +linux/mips/mipsel/multilib/eapi, +linux/mips/mipsel/multilib/n32/eapi, +linux/mips/mipsel/multilib/n64/eapi, +linux/mips/mipsel/n32/eapi, +linux/mips/mipsel/n64/eapi, +linux/mips/multilib/eapi, +linux/mips/multilib/n32/eapi, +linux/mips/multilib/n64/eapi, +linux/mips/n32/eapi, +linux/mips/n64/eapi: Update mips to eapi 5 21 Oct 2013; Anthony G. Basile linux/arm/armv4/eapi, linux/arm/armv4t/eapi, linux/arm/armv5te/eapi, linux/arm/armv6j/eapi, linux/arm/armv7a/eapi, linux/arm/armv7a/selinux/eapi, linux/arm/eapi: Update arm to eapi 5 03 Oct 2013; Matt Turner linux/amd64/package.use.stable.mask: Drop unneeded libtxc_dxtn abi_x86_32 stable use mask. 24 Sep 2013; Michał Górny linux/amd64/package.use.stable.mask: Add missing abi_x86_32 masks as reported by Patrick Lauer. 24 Sep 2013; Michał Górny linux/amd64/package.use.mask, +linux/amd64/package.use.stable.mask: Move the abi_x86_32 mask to stable.mask, since the profile is EAPI=5 now. 23 Sep 2013; Magnus Granberg +linux/amd64/eapi +/linux/x86/eapi update amd64 and x86 to eapi 5 22 Sep 2013; Michał Górny linux/amd64/package.use.mask: Mask abi_x86_32 on hardened as well, to make the way for stablereq. 03 Aug 2013; Anthony G. Basile linux/uclibc/mips/make.defaults: linux/uclibc/mips/make.defaults: add abi and libdir info, bug #479656 01 Aug 2013; Anthony G. Basile +linux/arm/armv7a/selinux/eapi, +linux/arm/armv7a/selinux/parent: linux/arm/armv7a/selinux: add hardened selinux for hardened armv7a 22 Jun 2013; Anthony G. Basile +linux/musl/amd64/make.defaults, +linux/musl/amd64/package.mask, +linux/musl/amd64/parent, +linux/musl/amd64/use.force, +linux/musl/amd64/use.mask, +linux/musl/make.defaults, +linux/musl/package.mask, +linux/musl/packages, +linux/musl/packages.build, +linux/musl/parent, +linux/musl/use.force, +linux/musl/use.mask: Add very experimental hardened/linux/musl, only amd64 for now 09 Jun 2013; Ulrich Müller linux/amd64/no-multilib/package.mask: Remove mask for media-libs/realcodecs and media-libs/win32codecs. Packages have been removed. 30 May 2013; Justin Lecher linux/amd64/no-multilib/package.mask: Mask sci-chemistry/xdsgui due to missing support for sci-chemistry/xdsstat-bin 30 May 2013; Justin Lecher linux/amd64/no-multilib/package.mask: Mask sci-chemistry/xdsstat-bin due to missing emul package 17 May 2013; Magnus Granberg linux/amd64/no-multilib/package.mask: Readd some missings masks 16 May 2013; Magnus Granberg linux/amd64/no-multilib/make.defaults, linux/amd64/no-multilib/package.mask, linux/amd64/no-multilib/package.use.force, linux/amd64/no-multilib/package.use.mask, linux/amd64/no-multilib/parent, linux/amd64/no-multilib/use.mask, ChangeLog: bug 470092 and 469254 qa on parent and missing arch/amd64/no-multilib(mirroring)