diff options
Diffstat (limited to 'profiles')
| -rw-r--r-- | profiles/uclibc/README | 61 | ||||
| -rw-r--r-- | profiles/uclibc/arm/make.defaults | 35 | ||||
| -rw-r--r-- | profiles/uclibc/hardened/x86/make.defaults | 19 | ||||
| -rw-r--r-- | profiles/uclibc/mips/make.defaults | 35 | ||||
| -rw-r--r-- | profiles/uclibc/x86/make.defaults | 35 |
5 files changed, 121 insertions, 64 deletions
diff --git a/profiles/uclibc/README b/profiles/uclibc/README index 075381f00c96..1456da2ae332 100644 --- a/profiles/uclibc/README +++ b/profiles/uclibc/README @@ -1,57 +1,10 @@ -# $Header: /var/cvsroot/gentoo-x86/profiles/uclibc/README,v 1.5 2004/07/06 20:33:32 solar Exp $ +# $Header: /var/cvsroot/gentoo-x86/profiles/uclibc/README,v 1.6 2004/07/29 05:13:49 solar Exp $ # -# This subdir contains the cascading profiles for native uclibc environments +# This subdir contains the cascading profiles for native uclibc environments. -############################################################################### -# This profile is *not* production ready and may damage your systems -# integrity if used. It is therefore recomened to wait before trying to -# use this. -# -# In case you want try anyway.. -# ACCEPT_KEYWORDS="~x86" emerge -pve system -# unmask anything portage is yelling at you about -# You will need to unmask binutils as well. Bug #54059 -# echo '=sys-devel/binutils-2.15.91.0.1-r2 -* x86 ~x86' >> /etc/portage/packge.unmask -############################################################################### - - -mkdir -p /etc/portage/ -cat <<EOF>> /etc/portage/package.keywords - -# faulty on uclibc -#app-arch/tar ~x86 -#app-arch/gzip ~x86 -dev-libs/uclibc ~x86 -#net-misc/iputils ~x86 -#net-misc/openssh ~x86 -#sys-apps/file ~x86 -sys-apps/modutils ~x86 -#sys-apps/portage ~x86 -#sys-apps/shadow ~x86 -sys-devel/binutils -* ~x86 x86 -sys-devel/gcc -* ~x86 x86 -# stable libtool works too -sys-devel/libtool ~x86 -sys-devel/automake ~x86 -sys-fs/devfsd ~x86 -#sys-libs/zlib ~x86 -#sys-libs/db ~x86 -sys-libs/ncurses ~x86 -sys-devel/libperl ~x86 -dev-lang/perl ~x86 -sys-libs/cracklib ~x86 -dev-util/catalyst ~x86 -sys-apps/busybox ~x86 - -=net-analyzer/net-snmp-5.1.1 ~x86 -=net-irc/bnc-2.8.6-r1 ~x86 -=net-misc/quagga-0.96.4-r6 ~x86 -=net-wireless/ndiswrapper-0.6-r1 ~x86 -=sys-apps/paxctl-0.2 ~x86 -=sys-boot/lilo-22.5.9-r1 ~x86 -=sys-fs/cramfs-1.1 ~x86 -=sys-fs/jfsutils-1.1.5 ~x86 - -=net-wireless/chillispot-0.94 ~x86 +############################################################################## +# These profiles is *not* production ready and may damage your systems +# integrity if used. It is therefore recomened to wait before trying to +# use these in production envionments. +############################################################################## -EOF diff --git a/profiles/uclibc/arm/make.defaults b/profiles/uclibc/arm/make.defaults index 75551051e9e4..c636d80121da 100644 --- a/profiles/uclibc/arm/make.defaults +++ b/profiles/uclibc/arm/make.defaults @@ -5,5 +5,36 @@ ARCH="arm" COMPILER="gcc3" ACCEPT_KEYWORDS="arm" -FEATURES="sandbox sfperms strict" -#FEATURES="sandbox sfperms strict userpriv usersandbox" +# +# FEATURES are settings that affect the functionality of portage. Most of +# these settings are for developer use, but some are available to non- +# developers as well. +# +# 'nodoc' remove 'doc' in the preinstall phase. +# functionality equivalent to rm -rf usr/share/doc/ +# +# 'noinfo' remove 'info' pages in the preinstall phase. +# functionality equivalent to rm -rf usr/share/info/ +# +# 'noman' remove 'man' pages in the preinstall phase. +# functionality equivalent to rm -rf usr/share/man/ +# +# 'sandbox' enable sandbox-ing when running emerge and ebuild +# +# 'sfperms' feature for security minded people that causes portage to +# remove group+other readable bits on setuid files and +# remove the other readable bits on setgid files. +# +# 'strict' causes portage to react strongly to conditions that +# have the potential to be dangerous -- like missing or +# incorrect Manifest files. +# +# 'userpriv' allows portage to drop root privleges while it is compiling +# as a security measure, and as a side effect this can remove +# sandbox access violations for users. +# +# 'usersandbox' enables sandboxing while portage is running under userpriv. +# unpack -- for debugging purposes only. + +FEATURES="sandbox sfperms strict nodoc noinfo noman" +#FEATURES="${FEATURES} userpriv usersandbox" diff --git a/profiles/uclibc/hardened/x86/make.defaults b/profiles/uclibc/hardened/x86/make.defaults index 4ce44c830e94..112571f3b0c8 100644 --- a/profiles/uclibc/hardened/x86/make.defaults +++ b/profiles/uclibc/hardened/x86/make.defaults @@ -10,20 +10,31 @@ ACCEPT_KEYWORDS="x86" # these settings are for developer use, but some are available to non- # developers as well. # +# 'nodoc' remove 'doc' in the preinstall phase. +# functionality equivalent to rm -rf usr/share/doc/ +# +# 'noinfo' remove 'info' pages in the preinstall phase. +# functionality equivalent to rm -rf usr/share/info/ +# +# 'noman' remove 'man' pages in the preinstall phase. +# functionality equivalent to rm -rf usr/share/man/ +# # 'sandbox' enable sandbox-ing when running emerge and ebuild +# # 'sfperms' feature for security minded people that causes portage to # remove group+other readable bits on setuid files and # remove the other readable bits on setgid files. +# # 'strict' causes portage to react strongly to conditions that # have the potential to be dangerous -- like missing or # incorrect Manifest files. +# # 'userpriv' allows portage to drop root privleges while it is compiling # as a security measure, and as a side effect this can remove # sandbox access violations for users. +# # 'usersandbox' enables sandboxing while portage is running under userpriv. # unpack -- for debugging purposes only. -# - -FEATURES="sandbox sfperms strict" -#FEATURES="sandbox sfperms strict userpriv usersandbox" +FEATURES="sandbox sfperms strict nodoc noinfo noman" +#FEATURES="${FEATURES} userpriv usersandbox" diff --git a/profiles/uclibc/mips/make.defaults b/profiles/uclibc/mips/make.defaults index eeab49acf065..111c5678c242 100644 --- a/profiles/uclibc/mips/make.defaults +++ b/profiles/uclibc/mips/make.defaults @@ -5,5 +5,36 @@ ARCH="mips" COMPILER="gcc3" ACCEPT_KEYWORDS="mips" -FEATURES="sandbox sfperms strict" -#FEATURES="sandbox sfperms strict userpriv usersandbox" +# +# FEATURES are settings that affect the functionality of portage. Most of +# these settings are for developer use, but some are available to non- +# developers as well. +# +# 'nodoc' remove 'doc' in the preinstall phase. +# functionality equivalent to rm -rf usr/share/doc/ +# +# 'noinfo' remove 'info' pages in the preinstall phase. +# functionality equivalent to rm -rf usr/share/info/ +# +# 'noman' remove 'man' pages in the preinstall phase. +# functionality equivalent to rm -rf usr/share/man/ +# +# 'sandbox' enable sandbox-ing when running emerge and ebuild +# +# 'sfperms' feature for security minded people that causes portage to +# remove group+other readable bits on setuid files and +# remove the other readable bits on setgid files. +# +# 'strict' causes portage to react strongly to conditions that +# have the potential to be dangerous -- like missing or +# incorrect Manifest files. +# +# 'userpriv' allows portage to drop root privleges while it is compiling +# as a security measure, and as a side effect this can remove +# sandbox access violations for users. +# +# 'usersandbox' enables sandboxing while portage is running under userpriv. +# unpack -- for debugging purposes only. + +FEATURES="sandbox sfperms strict nodoc noinfo noman" +#FEATURES="${FEATURES} userpriv usersandbox" diff --git a/profiles/uclibc/x86/make.defaults b/profiles/uclibc/x86/make.defaults index e74b04f289ee..eff193ded011 100644 --- a/profiles/uclibc/x86/make.defaults +++ b/profiles/uclibc/x86/make.defaults @@ -5,5 +5,36 @@ ARCH="x86" COMPILER="gcc3" ACCEPT_KEYWORDS="x86" -FEATURES="sandbox sfperms strict" -#FEATURES="sandbox sfperms strict userpriv usersandbox" +# +# FEATURES are settings that affect the functionality of portage. Most of +# these settings are for developer use, but some are available to non- +# developers as well. +# +# 'nodoc' remove 'doc' in the preinstall phase. +# functionality equivalent to rm -rf usr/share/doc/ +# +# 'noinfo' remove 'info' pages in the preinstall phase. +# functionality equivalent to rm -rf usr/share/info/ +# +# 'noman' remove 'man' pages in the preinstall phase. +# functionality equivalent to rm -rf usr/share/man/ +# +# 'sandbox' enable sandbox-ing when running emerge and ebuild +# +# 'sfperms' feature for security minded people that causes portage to +# remove group+other readable bits on setuid files and +# remove the other readable bits on setgid files. +# +# 'strict' causes portage to react strongly to conditions that +# have the potential to be dangerous -- like missing or +# incorrect Manifest files. +# +# 'userpriv' allows portage to drop root privleges while it is compiling +# as a security measure, and as a side effect this can remove +# sandbox access violations for users. +# +# 'usersandbox' enables sandboxing while portage is running under userpriv. +# unpack -- for debugging purposes only. + +FEATURES="sandbox sfperms strict nodoc noinfo noman" +#FEATURES="${FEATURES} userpriv usersandbox" |