[gentoo-commits] gentoo-x86 commit in profiles/hardened/linux: make.defaults package.mask package.use.mask parent use.mask virtuals

[Chris Gianelloni (wolf31o2)]

wolf31o2    08/04/01 17:41:10

  Added:                make.defaults package.mask package.use.mask parent
                        use.mask virtuals
  Log:
  Huge initial 2008.0 profile commit.  This will need to be adjusted synced with the current masks and such in the tree, but this will work for people doing beta installs.  Enjoy.

Revision  Changes    Path
1.1                  profiles/hardened/linux/make.defaults

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/profiles/hardened/linux/make.defaults?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/profiles/hardened/linux/make.defaults?rev=1.1&content-type=text/plain

Index: make.defaults
===================================================================
# Copyright 1999-2008 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/profiles/hardened/linux/make.defaults,v 1.1 2008/04/01 17:41:10 wolf31o2 Exp $

STAGE1_USE="hardened nptl nptlonly pic"

USE="hardened pic urandom -fortran -iconv"



1.1                  profiles/hardened/linux/package.mask

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/profiles/hardened/linux/package.mask?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/profiles/hardened/linux/package.mask?rev=1.1&content-type=text/plain

Index: package.mask
===================================================================
# Copyright 2007 Gentoo Foundation.
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/profiles/hardened/linux/package.mask,v 1.1 2008/04/01 17:41:10 wolf31o2 Exp $

# >=acml-3.6 depends on gcc-4*
>=sci-libs/acml-3.6

# Fails on hardened, bug 187120
=dev-lang/php-5.2.3-r3

# The following packages need =gcc-4*
=net-im/skype-1.4.0*

# gcc-4* still isn't ready.
=sys-devel/gcc-4*

# Mask off glibc-2.4 until the approach for SSP compatibilty is
# resolved in a way that doesn't break running systems, and we
# have a sensible upgrade path.  Advise having a static busybox
# around if you try it in a live system.
# 2006-03-13 kevquinn
=sys-libs/glibc-2.4*

# These packages do more harm than good w/ hardened.
# users must now the opensource xorg nv driver with nvidia cards.
# By placing Driver "nv" in xorg.conf
# 2006-06-29 solar
x11-drivers/nvidia-drivers
media-video/nvidia-settings

# Shouldn't be merging these SELinux packages on this profile
# but this keeps repoman happy since they require >=glibc-2.4
# 20061009 pebenito
>=sys-libs/libselinux-1.30.29
>=sys-libs/libsemanage-1.6.17
>=sys-apps/policycoreutils-1.30.30
>=sys-apps/checkpolicy-1.30.12
sec-policy/selinux-acpi
>=sec-policy/selinux-apache-20060101
>=sec-policy/selinux-arpwatch-20060101
>=sec-policy/selinux-asterisk-20060101
>=sec-policy/selinux-audio-entropyd-20060101
sec-policy/selinux-avahi
>=sec-policy/selinux-base-policy-20060101
>=sec-policy/selinux-bind-20060101
sec-policy/selinux-bluez
>=sec-policy/selinux-clamav-20060101
>=sec-policy/selinux-clockspeed-20060101
>=sec-policy/selinux-courier-imap-20060101
sec-policy/selinux-cups
>=sec-policy/selinux-cyrus-sasl-20060101
>=sec-policy/selinux-daemontools-20060101
>=sec-policy/selinux-dante-20060101
sec-policy/selinux-dbus
sec-policy/selinux-desktop
>=sec-policy/selinux-dhcp-20060101
>=sec-policy/selinux-distcc-20060101
>=sec-policy/selinux-djbdns-20060101
sec-policy/selinux-dnsmasq
>=sec-policy/selinux-ftpd-20060101
sec-policy/selinux-games
>=sec-policy/selinux-gnupg-20060101
>=sec-policy/selinux-gpm-20060101
sec-policy/selinux-hal
sec-policy/selinux-inetd
>=sec-policy/selinux-ipsec-tools-20060101
>=sec-policy/selinux-jabber-server-20060101
>=sec-policy/selinux-kerberos-20060101
>=sec-policy/selinux-logrotate-20060101
sec-policy/selinux-lpd
>=sec-policy/selinux-lvm-20060101
>=sec-policy/selinux-mdadm-20060101
sec-policy/selinux-munin
>=sec-policy/selinux-mysql-20060101
>=sec-policy/selinux-nfs-20060101
>=sec-policy/selinux-ntop-20060101
>=sec-policy/selinux-ntp-20060101
>=sec-policy/selinux-openldap-20060101
>=sec-policy/selinux-openvpn-20060101
sec-policy/selinux-pcmcia
>=sec-policy/selinux-portmap-20060101
>=sec-policy/selinux-postfix-20060101
>=sec-policy/selinux-postgresql-20060101
sec-policy/selinux-ppp
>=sec-policy/selinux-privoxy-20060101
>=sec-policy/selinux-procmail-20060101
>=sec-policy/selinux-publicfile-20060101
sec-policy/selinux-pyzor
>=sec-policy/selinux-qmail-20060101
sec-policy/selinux-razor
>=sec-policy/selinux-samba-20060101
>=sec-policy/selinux-screen-20060101
>=sec-policy/selinux-snmpd-20060101
>=sec-policy/selinux-snort-20060101
>=sec-policy/selinux-spamassassin-20060101
>=sec-policy/selinux-squid-20060101
>=sec-policy/selinux-stunnel-20060101
>=sec-policy/selinux-sudo-20060101
sec-policy/selinux-tcpd
>=sec-policy/selinux-tftpd-20060101
>=sec-policy/selinux-ucspi-tcp-20060101
>=sec-policy/selinux-wireshark-20060101



1.1                  profiles/hardened/linux/package.use.mask

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/profiles/hardened/linux/package.use.mask?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/profiles/hardened/linux/package.use.mask?rev=1.1&content-type=text/plain

Index: package.use.mask
===================================================================
# Note that this requires portage-2.1.1+ so if you need this functionality,
# make sure your package forces a new-enough portage.

sys-devel/gcc -hardened
www-apps/mediawiki math

# Michael Sterrett <mr_bones_@g.o> (30 Aug 2007)
# Security bug #190835
games-fps/doom-data doomsday
games-fps/freedoom doomsday



1.1                  profiles/hardened/linux/parent

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/profiles/hardened/linux/parent?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/profiles/hardened/linux/parent?rev=1.1&content-type=text/plain

Index: parent
===================================================================
../../default/linux



1.1                  profiles/hardened/linux/use.mask

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/profiles/hardened/linux/use.mask?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/profiles/hardened/linux/use.mask?rev=1.1&content-type=text/plain

Index: use.mask
===================================================================
# Copyright 1999-2004 Gentoo Foundation.
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/profiles/hardened/linux/use.mask,v 1.1 2008/04/01 17:41:10 wolf31o2 Exp $

emul-linux-x86

x264

# lvm2 clustered use flags (moved from default-linux)
clvm
gulm
cman

# tcc is x86-only
tcc

# precompiled headers are not compat with ASLR.
pch

# we love this stuff
-hardened



1.1                  profiles/hardened/linux/virtuals

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/profiles/hardened/linux/virtuals?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/profiles/hardened/linux/virtuals?rev=1.1&content-type=text/plain

Index: virtuals
===================================================================
# Copyright 1999-2005 Gentoo Foundation.
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/profiles/hardened/linux/virtuals,v 1.1 2008/04/01 17:41:10 wolf31o2 Exp $

virtual/alsa			sys-kernel/hardened-sources
virtual/linux-sources	sys-kernel/hardened-sources



-- 
gentoo-commits@l.g.o mailing list