Get Gentoo!
gentoo.org sites
gentoo.org Wiki Bugs Forums Packages
Planet Archives Sources
Infra Status
summaryrefslogtreecommitdiff
path: root/profiles/hardened
Commit message (Collapse)AuthorAgeFilesLines
* profiles: unset default USE=justify in hardened profiles.Michael Orlitzky2017-12-191-1/+1
| | | | | | | | | | | | | | The "justify" USE flag is local to only app-editors/nano, but it was enabled by default in two hardened profiles, * hardened/linux/amd64/make.defaults * features/hardened/amd64/make.defaults The reasoning for that is lost to time, but probably dates back to when nano was part of the @system set, and we wanted the stages to be built with USE=justify set for nano (before per-package USE defaults). Closes: https://bugs.gentoo.org/635066
* profiles: hardened/linux/musl inherits from default/linux/muslAnthony G. Basile2017-12-1250-543/+11
| | | | Signed-off-by: Anthony G. Basile <blueness@gentoo.org>
* profiles: force pie, ssp and -pch on hardened/linux/{uclibc,musl}Anthony G. Basile2017-12-124-1/+35
| | | | Signed-off-by: Anthony G. Basile <blueness@gentoo.org>
* profiles: unmask pie for hardened/linux/uclibcAnthony G. Basile2017-12-121-0/+6
| | | | Signed-off-by: Anthony G. Basile <blueness@gentoo.org>
* profiles: mask <net-firewall/fwbuilder-5.3.7 on musl and uclibcSergei Trofimovich2017-12-101-1/+5
| | | | | | Both require dev-libs/elfutils (works only on glibc). Signed-off-by: Sergei Trofimovich <slyfox@gentoo.org>
* profiles: Move the SYMLINK_LIB=yes setup to a 'lib32' subprofileMichał Górny2017-12-081-1/+1
| | | | | | | | Move the custom Gentoo SYMLINK_LIB=yes setup to arch/amd64/lib32 subprofile, making the top profile SYMLINK_LIB=no at the same time. Update the inheritance tree so that all current profiles switch to the sub-profile, and remove redundant SYMLINK_LIB=no overrides in arch/amd64/x32 sub-profile.
* profiles: Cleanup obsolete package.use.{,stable}.mask linesAndreas Sturmlechner2017-11-303-15/+0
|
* profiles: Simplify video_cards_siliconmotion maskMatt Turner2017-11-231-1/+0
| | | | | Instead of masking it on all the platforms it's not available, unmask it on the only three platforms it is.
* profiles: Simplify video_cards_{i915,i965,intel} masksMatt Turner2017-11-231-1/+0
| | | | | Instead of masking them on all the platforms they're not available, unmask them on the only two platforms they are.
* profiles: Remove dead video_cards_nsc maskMatt Turner2017-11-231-1/+0
| | | | | Not even sure what this hardware is, but xf86-video-nsc was not even in the tree at the time of the git conversion.
* profiles/hardened/linux/musl/x86/use.mask: ssp is broken on x86 muslAnthony G. Basile2017-11-211-0/+3
| | | | Signed-off-by: Anthony G. Basile <blueness@gentoo.org>
* profiles/package.mask: remove last-rited pkgAustin English2017-11-132-9/+0
| | | | Signed-off-by: Austin English <wizardedit@gentoo.org>
* profiles: remove pax_kernel from default use flagsZero_Chaos2017-10-193-9/+9
| | | | | | With the removal of the only pax hardened kernel sources in gentoo, this use flag default no longer makes sense. I weep for all of us. https://www.gentoo.org/news/2017/08/19/hardened-sources-removal.html
* profiles: USE mask LUA for www-servers/nginx on ppc 64bit userlandThomas Deutschmann2017-10-171-1/+6
|
* profiles/hardened/linux/p.use: Revert "disable default gdbm USE for ↵Ilya Tumaykin2017-09-061-7/+0
| | | | | | | | net-firewall/fwknop" We will enable server USE by default and fix REQUIRED_USE instead. Reverts: 99b480992dfb2ae7559f877a46fe64129e122ceb
* profiles: Remove last mentions of sci-libs/acmlDavid Seifert2017-09-022-7/+0
|
* sci-chemistry/icm: Remove last-rited pkg, #622414Michał Górny2017-08-141-1/+0
|
* profiles: Mask nvidia-drivers[static-libs] where [tools] is maskedMichał Górny2017-08-081-2/+3
|
* profiles/hardened/linux/p.use: disable default gdbm USE for net-firewall/fwknopIlya Tumaykin2017-07-281-0/+7
| | | | Otherwise it enforces server USE to all users via REQUIRED_USE.
* profiles: arch/amd64/no-multilib: app-emulation/xen-tools: fix GLEP73 ↵Yixun Lan2017-07-121-0/+4
| | | | | | immutability Signed-off-by: Yixun Lan <dlan@gentoo.org>
* www-plugins/pipelight: Remove last-rited pkg, #603282Michał Górny2017-07-051-1/+0
|
* profiles/hardened: remove obsolete package.use.stable.maskMichael Palimaka2017-06-242-16/+0
| | | | Gentoo-bug: 605678
* games-rpg/baldurs-gate-ee: new packageDiogo Pereira2017-06-181-0/+1
| | | | | Closes: https://github.com/gentoo/gentoo/pull/4928 Package-Manager: Portage-2.3.5, Repoman-2.3.1
* www-client/firefox: bump to 54.0Ian Stakenvicius2017-06-141-0/+6
| | | | | | | | | | | Firefox 54.0 and above requires dev-lang/rust, as such is it currently only supported on glibc amd64 and x86 systems. As support for rust is added to other platforms, the availability of firefox on those platforms will grow as well. Firefox-54 is also p.masked on musl profiles for now for the same reason Package-Manager: Portage-2.3.5, Repoman-2.3.1
* app-emulation/crossover-office-pro-bin: Remove last-rited pkg, #612720Michał Górny2017-05-151-1/+0
|
* app-emulation/crossover-office-bin: Remove last-rited pkg, #612718Michał Górny2017-05-151-1/+0
|
* profiles: update pie use-flag masks for sys-devel/gccMatthias Maier2017-05-123-4/+8
| | | | | | | - mask pie for sys-devel/gcc unconditionally in base/ - selectively unmask pie use-flag for hardened/linux and hardened/linux/musl profiles
* profiles: hardened/musl/amd64: enable pie use flag for >=gcc-6.3.0Matthias Maier2017-05-071-0/+6
|
* profiles: mask <net-mail/mailutils-3.2 on musl, bug #604212Anthony G. Basile2017-04-071-0/+3
|
* profiles: Add CPU_FLAGS_ARM to USE_EXPANDMichał Górny2017-03-232-0/+8
| | | | | Add it as hidden USE_EXPAND in top-level profiles, and unhide in specific arch profiles.
* profiles/hardened/linux/amd64/no-multilib: inherit arch/amd64/no-multilib lateMichael Haubenwallner2017-03-061-1/+1
| | | | | | | | | | Whether arch/amd64/no-multilib does _inherit_ arch/amd64 or not, arch/amd64/no-multilib does _extend_ arch/amd64 anyway. So inheriting arch/amd64/no-multilib before arch/amd64 always will reset the arch/amd64/no-multilib to the arch/amd64 values. Sort-of-acked-by: blueness
* Drop $Id$ per council decision in bug #611234.Robin H. Johnson2017-02-2879-79/+0
| | | | Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
* profiles/hardened/linux/musl/package.mask: remove dev-libs/pth referenceAlon Bar-Lev2017-02-181-3/+0
| | | | Bug: 596010
* profile: mask glibc-2.24-r1 on hardened bug #608788Magnus Granberg2017-02-091-0/+4
|
* profiles: Inline features/32bit-userlandMichał Górny2017-02-012-1/+7
|
* profiles/*/ppc64: stop using features/64bit-nativeMichał Górny2017-02-012-1/+8
|
* profiles/*/amd64/*/no-multilib: stop using features/64bit-nativeMichał Górny2017-02-012-2/+5
|
* profiles/hardened: Include base amd64-multilib profile in subprofileMichał Górny2017-02-011-0/+1
| | | | | | Include arch/amd64/no-multilib in the hardened no-multilib amd64 variant. Confirmed with profile-dumper that it does not currently change anything.
* profiles: Mask "java" USE flag for hardened/linux/powerpc/ppc64/32bit-userlandThomas Deutschmann2017-01-281-1/+5
| | | | Acked-by: James Le Cuirot <chewi@gentoo.org>
* profiles: mask app-emulation/genymotion-bin for amd64/hardened/no-multilib ↵Marco Genasci2017-01-241-0/+1
| | | | | | wrt bug #516448 Signed-off-by: Ettore Di Giacinto <mudler@gentoo.org>
* profiles: Inherit arch/base for musl+uclibc profilesMichał Górny2017-01-221-0/+1
|
* profiles: extend some qtwebkit-related masks to all ppc profilesDavide Pesavento2017-01-221-4/+7
|
* profiles: mask USE=qt5 for dev-python/qscintilla-python on ppcDavide Pesavento2017-01-221-1/+5
|
* profiles: Clean up 3dnow & avx flags from use.maskMichał Górny2017-01-212-2/+0
| | | | | | | Remove 3dnow & avx flags from mask files. They are no longer used to represent CPU flags (CPU_FLAGS_X86 are used for that purpose). Instead, they are used as local flags in app-emulation/bochs to enable emulation of instruction sets.
* profiles: Second part of use.* cleanupMichał Górny2017-01-212-20/+2
| | | | Clean up -foo flags from use.* as well.
* profiles: Clean up obsolete use.force/use.force entriesMichał Górny2017-01-202-9/+1
|
* profiles/hardened: Clean obsolete package.use* entriesMichał Górny2017-01-205-28/+4
|
* profiles: Clean up multiple obsolete package.mask entriesMichał Górny2017-01-193-35/+3
| | | | | Clean up most of the old package.mask entries that correspond to removed packages.
* profiles: mask media-video/mpv[cuda] everywhere except for amd64 and x86Ilya Tumaykin2017-01-191-1/+5
| | | | Due to x11-drivers/nvidia-drivers dependency.
* profiles: Drop dead 'd3d' use.mask.Matt Turner2017-01-171-4/+0
|