Gentoo Archives: gentoo-commits

From: "Ian Stakenvicius (axs)" <axs@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] gentoo-x86 commit in profiles/hardened/linux: make.defaults
Date: Wed, 03 Sep 2014 18:48:19
Message-Id: 20140903184815.5970349FE@oystercatcher.gentoo.org
1 axs 14/09/03 18:48:15
2
3 Modified: make.defaults
4 Log:
5 add a var to hardened profiles to help ebuilds tell end-users about things that are bad to do on hardened, reviewed by Zero_Chaos and OKed by Zorry
6
7 Revision Changes Path
8 1.19 profiles/hardened/linux/make.defaults
9
10 file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/hardened/linux/make.defaults?rev=1.19&view=markup
11 plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/hardened/linux/make.defaults?rev=1.19&content-type=text/plain
12 diff : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/hardened/linux/make.defaults?r1=1.18&r2=1.19
13
14 Index: make.defaults
15 ===================================================================
16 RCS file: /var/cvsroot/gentoo-x86/profiles/hardened/linux/make.defaults,v
17 retrieving revision 1.18
18 retrieving revision 1.19
19 diff -u -r1.18 -r1.19
20 --- make.defaults 11 Feb 2014 16:47:27 -0000 1.18
21 +++ make.defaults 3 Sep 2014 18:48:15 -0000 1.19
22 @@ -1,9 +1,16 @@
23 # Copyright 1999-2014 Gentoo Foundation.
24 # Distributed under the terms of the GNU General Public License v2
25 -# $Header: /var/cvsroot/gentoo-x86/profiles/hardened/linux/make.defaults,v 1.18 2014/02/11 16:47:27 blueness Exp $
26 +# $Header: /var/cvsroot/gentoo-x86/profiles/hardened/linux/make.defaults,v 1.19 2014/09/03 18:48:15 axs Exp $
27
28 # Jorge Manuel B. S. Vicetto <jmbsvicetto@g.o> (16 Nov 2011)
29 # Rename STAGE1_USE to BOOTSTRAP_USE and stack it to the parent value
30 BOOTSTRAP_USE="${BOOTSTRAP_USE} hardened pax_kernel pic xtpax -jit -orc"
31
32 USE="hardened pax_kernel pic urandom xtpax -fortran -jit -orc"
33 +
34 +# Ian Stakenvicius, 2014-09-03
35 +# Set a variable just to indicate that the current profile is a hardened one
36 +# This variable can be leveraged in ebuilds for pkg_postinst messages that
37 +# indicate said package is, say, configured in a way that defeats the purpose
38 +# of running hardened.
39 +PROFILE_IS_HARDENED=1