[gentoo-commits] proj/hardened-dev:uclibc commit in: profiles/default/linux/, profiles/uclibc/x86/, profiles/uclibc/, ...

[Anthony G. Basile]

commit:     d242b2d6b10dd47b053fc9de55f0d7bd798a9406
Author:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
AuthorDate: Wed Dec 21 13:24:27 2011 +0000
Commit:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
CommitDate: Wed Dec 21 13:24:27 2011 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-dev.git;a=commit;h=d242b2d6

Restructued hardened/linux/uclibc profiles

---
 profiles/base/make.defaults                        |  106 ++++++
 profiles/base/package.mask                         |  260 +++++++++++++++
 profiles/base/package.use                          |   19 ++
 profiles/base/package.use.force                    |   46 +++
 profiles/base/package.use.mask                     |  342 ++++++++++++++++++++
 profiles/base/packages                             |   74 +++++
 profiles/base/profile.bashrc                       |    9 +
 profiles/base/use.force                            |    9 +
 profiles/base/use.mask                             |  274 ++++++++++++++++
 profiles/default/linux/make.defaults               |   64 ++++
 profiles/default/linux/package.use                 |    7 +
 profiles/default/linux/package.use.mask            |   32 ++
 profiles/default/linux/packages                    |   13 +
 profiles/default/linux/packages.build              |   45 +++
 profiles/default/linux/use.mask                    |   14 +
 profiles/{ => hardened/linux}/uclibc/make.defaults |    0
 profiles/{ => hardened/linux}/uclibc/package.mask  |    0
 profiles/{ => hardened/linux}/uclibc/packages      |    0
 .../{ => hardened/linux}/uclibc/packages.build     |    0
 profiles/hardened/linux/uclibc/parent              |    2 +
 profiles/{ => hardened/linux}/uclibc/use.force     |    0
 profiles/{ => hardened/linux}/uclibc/use.mask      |    0
 .../{ => hardened/linux}/uclibc/x86/make.defaults  |    0
 .../linux}/uclibc/x86/package.use.mask             |    0
 profiles/{ => hardened/linux}/uclibc/x86/parent    |    0
 profiles/uclibc/parent                             |    2 -
 26 files changed, 1316 insertions(+), 2 deletions(-)

diff --git a/profiles/base/make.defaults b/profiles/base/make.defaults
new file mode 100644
index 0000000..d6cd04b
--- /dev/null
+++ b/profiles/base/make.defaults
@@ -0,0 +1,106 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/base/make.defaults,v 1.72 2011/11/17 01:14:26 jmbsvicetto Exp $
+#
+# System-wide defaults for the Portage system
+# See portage(5) manpage
+
+# Env vars to expand into USE vars.  Modifying this requires prior
+# discussion on gentoo-dev@g.o.
+USE_EXPAND="APACHE2_MODULES APACHE2_MPMS CALLIGRA_FEATURES FOO2ZJS_DEVICES MISDN_CARDS FRITZCAPI_CARDS FCDSL_CARDS VIDEO_CARDS DVB_CARDS LIRC_DEVICES INPUT_DEVICES LINGUAS USERLAND KERNEL ELIBC CROSSCOMPILE_OPTS ALSA_CARDS ALSA_PCM_PLUGINS LCD_DEVICES CAMERAS NETBEANS_MODULES QEMU_SOFTMMU_TARGETS QEMU_USER_TARGETS SANE_BACKENDS RUBY_TARGETS PHP_TARGETS NGINX_MODULES_HTTP NGINX_MODULES_MAIL XFCE_PLUGINS XTABLES_ADDONS GPSD_PROTOCOLS COLLECTD_PLUGINS DRACUT_MODULES OFED_DRIVERS GRUB_PLATFORMS"
+
+# USE_EXPAND variables whose contents are not shown in package manager
+# output. Changes need discussion on gentoo-dev.
+USE_EXPAND_HIDDEN="USERLAND KERNEL ELIBC CROSSCOMPILE_OPTS"
+
+CONFIG_PROTECT="/etc"
+CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf"
+
+# Variables that are set exclusively by the profile
+# and not by user configuration files.
+PROFILE_ONLY_VARIABLES="ARCH ELIBC KERNEL USERLAND"
+
+# 'Sane' defaults
+ELIBC="glibc"
+KERNEL="linux"
+USERLAND="GNU"
+INPUT_DEVICES="keyboard mouse"
+
+# Tomáš Chvátal <scarabeus@g.o> (12 Aug 2011)
+# By default do not build any grub platform and let it guess.
+GRUB_PLATFORMS=""
+
+# Tomáš Chvátal <scarabeus@g.o> (15 May 2011)
+# Andreas K. Hüttel <dilfridge@g.o> (19 Aug 2011)
+# By default build all koffice / calligra features.
+CALLIGRA_FEATURES="kexi words flow plan stage tables krita karbon braindump"
+
+# Pacho Ramos <pacho@g.o> (14 Feb 2010)
+# Enable 'ptp2' by default as it is available for most cameras.
+CAMERAS="ptp2"
+
+# Ole Markus With <olemarkus@g.o> (09 Oct 2010)
+# Default PHP targets (should always be latest stable version)
+PHP_TARGETS="php5-3"
+
+# Andreas K. Huettel <dilfridge@g.o> (28 Sep 2010)
+# Small default list of enabled plugins for collectd
+COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog"
+
+# Tomáš Chvátal <scarabeus@g.o> (26 Oct 2010)
+# By default enable all protocols for average GPS user
+GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx"
+
+# Diego Pettenò <flameeyes@g.o> (21 Dec 2006)
+# Build everything for the average user
+ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol"
+
+# Benedikt Böhm <hollow@g.o> (27 Nov 2007)
+# Sane defaults for built-in apache modules
+APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias"
+
+# Peter Volkov <pva@g.o> (29 Apr 2010)
+# Set some defaults or package will fail to build (Check mconfig in package sources)
+XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
+
+# Robert Buchholz <rbu@g.o> (17 Jan 2006)
+# Some common lcd devices
+LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text"
+
+# 2006/10/17 - Daniel Drake <dsd@g.o>
+# cracklib is becoming optional in shadow (and removed from system) as of
+# today. However, cracklib is very standard across the Linux world so we
+# enable it by default.
+#
+# Diego Pettenò <flameeyes@g.o> (14 Jul 2007)
+# Moved to base/ profile from default-linux/ so that it also applies to
+# embedded and hardened profiles.
+USE="cracklib"
+
+# Miroslav Šulc <fordfrog@g.o> (19 Nov 2008)
+# Netbeans modules/clusters
+NETBEANS="apisupport cnd groovy gsf harness ide identity j2ee java mobility nb php profiler soa visualweb webcommon websvccommon xml"
+
+# 2009/09/21 Robin H. Johnson <robbat2@g.o>
+# http://archives.gentoo.org/gentoo-dev/msg_dc705dc2c1a45e18a85aa62e8fb17009.xml
+# Build kernel modules from linux-mod by default:
+USE="${USE} modules"
+
+# Alex Legler <a3li@g.o> (30 Nov 2009)
+# Default Ruby build targets
+RUBY_TARGETS="ruby18"
+
+# Samuli Suominen <ssuominen@g.o> (03 Dec 2009)
+# Enable USE cxx by default so base-system and toolchain pkgs can start using USE cxx
+# instead of USE nocxx.
+# http://archives.gentoo.org/gentoo-dev/msg_a181cd0d36600067b599f4b996c6989f.xml
+USE="${USE} cxx"
+
+# Tiziano Müller <dev-zero@g.o> (24 Jan 2010)
+# We usually don't want python to (re)write .py[co] files during phase runs
+# since it could cause sandbox violations
+PYTHONDONTWRITEBYTECODE="1"
+
+# Jorge Manuel B. S. Vicetto <jmbsvicetto@g.o> (16 Nov 2011)
+# Add default USE value for bootstrap and rename it from STAGE1_USE to BOOTSTRAP_USE
+BOOTSTRAP_USE="cxx unicode"

diff --git a/profiles/base/package.mask b/profiles/base/package.mask
new file mode 100644
index 0000000..f12c042
--- /dev/null
+++ b/profiles/base/package.mask
@@ -0,0 +1,260 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/base/package.mask,v 1.32 2011/12/11 12:01:30 swift Exp $
+
+# Diego Elio Pettenò <flameeyes@g.o> (8 Feb 2011)
+#  on behalf of QA team <qa@g.o
+#
+# Make sure uClibc is available as sys-libs/uclibc only on uclibc
+# profiles, as the "dynamic slot generation" is broken. The package is
+# still available on default profiles to be used with crossdev.
+sys-libs/uclibc
+
+# Diego E. Pettenò <flameeyes@g.o> (25 Apr 2010)
+#  on behalf of QA team <qa@g.o
+#
+# Mask SElinux packages on all the profile and unmask it only for
+# selinux itself; automagic dependencies can break systems otherwise
+#
+# Please keep this mask in sync between profiles/package.mask and
+# selinux/package.mask (with - prefix there).
+app-admin/setools
+dev-python/python-selinux
+dev-python/sepolgen
+sys-apps/checkpolicy
+sys-apps/policycoreutils
+sys-libs/libselinux
+sys-libs/libsemanage
+sys-libs/libsepol
+sec-policy/selinux-acct
+sec-policy/selinux-acpi
+sec-policy/selinux-ada
+sec-policy/selinux-afs
+sec-policy/selinux-aide
+sec-policy/selinux-alsa
+sec-policy/selinux-amanda
+sec-policy/selinux-amavis
+sec-policy/selinux-apache
+sec-policy/selinux-apcupsd
+sec-policy/selinux-apm
+sec-policy/selinux-arpwatch
+sec-policy/selinux-asterisk
+sec-policy/selinux-audio-entropyd
+sec-policy/selinux-automount
+sec-policy/selinux-avahi
+sec-policy/selinux-awstats
+sec-policy/selinux-base-policy
+sec-policy/selinux-bind
+sec-policy/selinux-bitlbee
+sec-policy/selinux-bluetooth
+sec-policy/selinux-bluez
+sec-policy/selinux-brctl
+sec-policy/selinux-calamaris
+sec-policy/selinux-canna
+sec-policy/selinux-ccs
+sec-policy/selinux-cdrecord
+sec-policy/selinux-cgroup
+sec-policy/selinux-chronyd
+sec-policy/selinux-clamav
+sec-policy/selinux-clockspeed
+sec-policy/selinux-consolekit
+sec-policy/selinux-corosync
+sec-policy/selinux-courier
+sec-policy/selinux-courier-imap
+sec-policy/selinux-cpucontrol
+sec-policy/selinux-cpufreqselector
+sec-policy/selinux-cups
+sec-policy/selinux-cvs
+sec-policy/selinux-cyphesis
+sec-policy/selinux-cyrus-sasl
+sec-policy/selinux-daemontools
+sec-policy/selinux-dante
+sec-policy/selinux-dbskk
+sec-policy/selinux-dbus
+sec-policy/selinux-dcc
+sec-policy/selinux-ddclient
+sec-policy/selinux-ddcprobe
+sec-policy/selinux-denyhosts
+sec-policy/selinux-desktop
+sec-policy/selinux-dhcp
+sec-policy/selinux-dictd
+sec-policy/selinux-distcc
+sec-policy/selinux-djbdns
+sec-policy/selinux-dkim
+sec-policy/selinux-dmidecode
+sec-policy/selinux-dnsmasq
+sec-policy/selinux-dovecot
+sec-policy/selinux-dpkg
+sec-policy/selinux-entropyd
+sec-policy/selinux-evolution
+sec-policy/selinux-exim
+sec-policy/selinux-fail2ban
+sec-policy/selinux-fetchmail
+sec-policy/selinux-finger
+sec-policy/selinux-fprintd
+sec-policy/selinux-ftp
+sec-policy/selinux-ftpd
+sec-policy/selinux-games
+sec-policy/selinux-gatekeeper
+sec-policy/selinux-gift
+sec-policy/selinux-gitosis
+sec-policy/selinux-gnome
+sec-policy/selinux-gnupg
+sec-policy/selinux-gpg
+sec-policy/selinux-gorg
+sec-policy/selinux-gpm
+sec-policy/selinux-gpsd
+sec-policy/selinux-haveged
+sec-policy/selinux-hddtemp
+sec-policy/selinux-howl
+sec-policy/selinux-icecast
+sec-policy/selinux-ifplugd
+sec-policy/selinux-imaze
+sec-policy/selinux-inetd
+sec-policy/selinux-inn
+sec-policy/selinux-ipsec
+sec-policy/selinux-ipsec-tools
+sec-policy/selinux-irc
+sec-policy/selinux-ircd
+sec-policy/selinux-irqbalance
+sec-policy/selinux-jabber
+sec-policy/selinux-jabber-server
+sec-policy/selinux-java
+sec-policy/selinux-kdump
+sec-policy/selinux-kerberos
+sec-policy/selinux-kerneloops
+sec-policy/selinux-kismet
+sec-policy/selinux-ksmtuned
+sec-policy/selinux-kudzu
+sec-policy/selinux-ldap
+sec-policy/selinux-links
+sec-policy/selinux-lircd
+sec-policy/selinux-loadkeys
+sec-policy/selinux-lockdev
+sec-policy/selinux-logrotate
+sec-policy/selinux-logwatch
+sec-policy/selinux-lpd
+sec-policy/selinux-mailman
+sec-policy/selinux-mcelog
+sec-policy/selinux-memcached
+sec-policy/selinux-milter
+sec-policy/selinux-modemmanager
+sec-policy/selinux-mono
+sec-policy/selinux-mozilla
+sec-policy/selinux-mpd
+sec-policy/selinux-mplayer
+sec-policy/selinux-mrtg
+sec-policy/selinux-munin
+sec-policy/selinux-mutt
+sec-policy/selinux-mysql
+sec-policy/selinux-nagios
+sec-policy/selinux-ncftool
+sec-policy/selinux-nessus
+sec-policy/selinux-networkmanager
+sec-policy/selinux-nfs
+sec-policy/selinux-nginx
+sec-policy/selinux-ntop
+sec-policy/selinux-ntp
+sec-policy/selinux-nut
+sec-policy/selinux-nx
+sec-policy/selinux-oident
+sec-policy/selinux-oidentd
+sec-policy/selinux-openct
+sec-policy/selinux-openldap
+sec-policy/selinux-openvpn
+sec-policy/selinux-pan
+sec-policy/selinux-pcmcia
+sec-policy/selinux-perdition
+sec-policy/selinux-plymouthd
+sec-policy/selinux-podsleuth
+sec-policy/selinux-policykit
+sec-policy/selinux-portmap
+sec-policy/selinux-postfix
+sec-policy/selinux-postgresql
+sec-policy/selinux-postgrey
+sec-policy/selinux-ppp
+sec-policy/selinux-prelink
+sec-policy/selinux-prelude
+sec-policy/selinux-privoxy
+sec-policy/selinux-procmail
+sec-policy/selinux-psad
+sec-policy/selinux-publicfile
+sec-policy/selinux-pulseaudio
+sec-policy/selinux-puppet
+sec-policy/selinux-pyicqt
+sec-policy/selinux-pyzor
+sec-policy/selinux-qemu
+sec-policy/selinux-qmail
+sec-policy/selinux-quota
+sec-policy/selinux-radius
+sec-policy/selinux-radvd
+sec-policy/selinux-razor
+sec-policy/selinux-remotelogin
+sec-policy/selinux-rgmanager
+sec-policy/selinux-roundup
+sec-policy/selinux-rpc
+sec-policy/selinux-rpcbind
+sec-policy/selinux-rpm
+sec-policy/selinux-rssh
+sec-policy/selinux-rtkit
+sec-policy/selinux-samba
+sec-policy/selinux-sasl
+sec-policy/selinux-screen
+sec-policy/selinux-sendmail
+sec-policy/selinux-shorewall
+sec-policy/selinux-shutdown
+sec-policy/selinux-skype
+sec-policy/selinux-slocate
+sec-policy/selinux-slrnpull
+sec-policy/selinux-smartmon
+sec-policy/selinux-smokeping
+sec-policy/selinux-snmp
+sec-policy/selinux-snmpd
+sec-policy/selinux-snort
+sec-policy/selinux-soundserver
+sec-policy/selinux-spamassassin
+sec-policy/selinux-speedtouch
+sec-policy/selinux-squid
+sec-policy/selinux-stunnel
+sec-policy/selinux-sudo
+sec-policy/selinux-sxid
+sec-policy/selinux-sysstat
+sec-policy/selinux-tcpd
+sec-policy/selinux-telnet
+sec-policy/selinux-tftp
+sec-policy/selinux-tftpd
+sec-policy/selinux-tgtd
+sec-policy/selinux-thunderbird
+sec-policy/selinux-timidity
+sec-policy/selinux-tmpreaper
+sec-policy/selinux-tor
+sec-policy/selinux-tripwire
+sec-policy/selinux-tvtime
+sec-policy/selinux-ucspi-tcp
+sec-policy/selinux-ucspitcp
+sec-policy/selinux-ulogd
+sec-policy/selinux-uucp
+sec-policy/selinux-uml
+sec-policy/selinux-uptime
+sec-policy/selinux-usbmuxd
+sec-policy/selinux-uwimap
+sec-policy/selinux-varnishd
+sec-policy/selinux-vbetool
+sec-policy/selinux-vde
+sec-policy/selinux-virt
+sec-policy/selinux-vlock
+sec-policy/selinux-vmware
+sec-policy/selinux-vnstatd
+sec-policy/selinux-vpn
+sec-policy/selinux-watchdog
+sec-policy/selinux-webalizer
+sec-policy/selinux-wine
+sec-policy/selinux-wireshark
+sec-policy/selinux-wm
+sec-policy/selinux-xen
+sec-policy/selinux-xfce4
+sec-policy/selinux-xfs
+sec-policy/selinux-xprint
+sec-policy/selinux-xscreensaver
+sec-policy/selinux-xserver
+sec-policy/selinux-zabbix

diff --git a/profiles/base/package.use b/profiles/base/package.use
new file mode 100644
index 0000000..4855038
--- /dev/null
+++ b/profiles/base/package.use
@@ -0,0 +1,19 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/base/package.use,v 1.28 2011/04/10 23:02:57 flameeyes Exp $
+
+# Zac Medico <zmedico@g.o> (04 Dec 2009)
+# Bug #295615 - Disable cxx by default, in order to avoid a die
+# in pkg_setup with default USE settings (cxx requires sasl).
+net-nds/openldap -cxx
+
+# Doug Goldstein <cardoe@g.o> (30 Aug 2010)
+# bug #332077 - Disable xcb backend by default for cairo-1.10. Its not
+# really prime time ready prior to cairo-1.10
+<x11-libs/cairo-1.10 -xcb
+
+# Diego Elio Pettenò <flameeyes@g.o> (11 Apr 2011)
+# Disable ldap support by default in sudo, as it seem to lack
+# developers maintaining that particular support and is, thus, vastly
+# untested.
+app-admin/sudo -ldap

diff --git a/profiles/base/package.use.force b/profiles/base/package.use.force
new file mode 100644
index 0000000..e08b7cd
--- /dev/null
+++ b/profiles/base/package.use.force
@@ -0,0 +1,46 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/base/package.use.force,v 1.20 2011/10/20 17:39:00 graaff Exp $
+
+# Zac Medico <zmedico@g.o> (20 Oct 2010)
+# Force ipc USE flag since it should remain enabled unless
+# it is found to be incompatible with a specific profile
+# or environment. When enabled, it fixes bug #278895,
+# bug #315615, and makes subshell die support more robust
+# (so that repoman's ebuild.nesteddie check is irrelevant).
+sys-apps/portage ipc
+
+# Arfrever Frehtes Taifersar Arahesis <arfrever@g.o>
+# Python should use wide Unicode implementation by default.
+# Switching of "wide-unicode" USE flag changes ABI of Python
+# and requires reinstallation of many Python modules.
+dev-lang/python wide-unicode
+
+# Peter Alfredsen <loki_val@g.o> (11 Apr 2009)
+# Forcing w.r.t. bug 265336. When unicode use-flag is
+# turned off, ABI is broken without a .so bump.
+dev-libs/libpcre unicode
+
+# Diego E. Pettenò <flameeyes@g.o> (14 Jan 2010)
+# List of packages working on a single (non-default) Ruby
+# implementation that cannot, thus, be turned off.
+dev-ruby/bitescript ruby_targets_jruby
+dev-ruby/duby ruby_targets_jruby
+dev-ruby/jruby-debug-base ruby_targets_jruby
+dev-ruby/jruby-openssl ruby_targets_jruby
+=dev-ruby/test-unit-1* ruby_targets_ruby19
+
+# Diego E. Pettenò <flameeyes@g.o> (14 Jan 2010)
+# Multi-version Ruby virtuals for sanity
+~virtual/ruby-ssl-0 ruby_targets_ruby18
+~virtual/ruby-ssl-1 ruby_targets_ruby19
+~virtual/ruby-ssl-2 ruby_targets_jruby
+~virtual/ruby-ssl-3 ruby_targets_ree18
+~virtual/ruby-rdoc-0 ruby_targets_ruby18
+~virtual/ruby-rdoc-1 ruby_targets_ruby19
+~virtual/ruby-rdoc-2 ruby_targets_jruby
+~virtual/ruby-rdoc-3 ruby_targets_ree18
+~virtual/rubygems-1 ruby_targets_ruby18
+~virtual/rubygems-2 ruby_targets_jruby
+~virtual/rubygems-3 ruby_targets_ree18
+~virtual/rubygems-4 ruby_targets_ruby19

diff --git a/profiles/base/package.use.mask b/profiles/base/package.use.mask
new file mode 100644
index 0000000..dea4bfa
--- /dev/null
+++ b/profiles/base/package.use.mask
@@ -0,0 +1,342 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/base/package.use.mask,v 1.295 2011/12/06 22:00:09 vapier Exp $
+
+# This file requires >=portage-2.1.1
+# New entries go on top.
+
+# Mike Frysinger <vapier@g.o> (06 Dec 2011)
+# No one should be mucking with libssp unless they really know what they're
+# doing.  Force extra work on the smart peeps to protect the not-so-smart.
+sys-devel/gcc libssp
+
+# Samuli Suominen <ssuominen@g.o> (06 Dec 2011)
+# NuppelVideo is available on x86 only
+media-video/transcode nuv pic
+
+# Andreas K. Huettel <dilfridge@g.o> (01 Dec 2011)
+# The phonon xine backend is unmaintained and makes trouble
+media-libs/phonon xine
+kde-base/phonon-kde xine
+
+# Davide Pesavento <pesa@g.o> (30 Nov 2011)
+# JavaScriptCore JIT is supported only on amd64/arm/x86, so
+# mask USE="jit" here and unmask it in the relevant arch profiles
+>=x11-libs/qt-webkit-4.7 jit
+
+# Samuli Suominen <ssuominen@g.o> (25 Nov 2011)
+# Expose USE="suid" for USE="svga" only for x86 users,
+# see arch/x86/package.use.mask
+www-client/links suid
+
+# Kacper Kowalik <xarthisius@g.o> (09 Nov 2011)
+# pathdb works only as a SIGSEGV generator, mask until upstream
+# fixes it bug #385683
+dev-lang/path64 debugger
+
+# Alexandre Rostovtsev <tetromino@g.o> (31 Oct 2011)
+# Let's not suddenly enable clutter on stable evolution versions
+<mail-client/evolution-3 clutter
+
+# Samuli Suominen <ssuominen@g.o> (16 Oct 2011)
+# Mask libbluray support here, and enable it per arch instead
+gnome-base/gvfs bluray
+
+# Alex Legler <a3li@g.o> (13 Oct 2011)
+# The Ubuntu ALSA patch for tvtime is still somewhat unstable
+# c.f. bug 384215
+media-tv/tvtime alsa
+
+# Pawel Hajdan jr <phajdan.jr@g.o> (12 Oct 2011)
+# Upstream support not yet ready:
+# http://code.google.com/p/chromium/issues/detail?id=32757
+# Feel free to file a Gentoo bug to unmask the flag
+# when above upstream bug is closed.
+www-client/chromium pulseaudio
+
+# Nirbheek Chauhan <nirbheek@g.o> (17 Sep 2011)
+# Systemtap is not keyworded on anything except amd64/x86
+# Temporarily mask instead of dropping keywords, bug 384647
+dev-libs/glib systemtap
+
+# Markos Chandras <hwoarang@g.o> (19 Aug 2011)
+# Masking rbd spice from qemu-kvm per bug #364889
+app-emulation/qemu-kvm rbd
+
+# Nirbheek Chauhan <nirbheek@g.o> (16 Aug 2011)
+# Mask introspection on ebuilds that went stable before it was unmasked.
+# As these ebuilds are cleaned from the tree, the masks can be removed.
+<dev-libs/glib-2.30.0 introspection
+<dev-libs/atk-1.32.0-r1 introspection
+<app-cdr/brasero-2.32.1-r1 introspection
+<app-crypt/seahorse-2.32.0-r1 introspection
+<app-text/evince-2.32.0-r4 introspection
+<dev-libs/libgdata-0.8.1-r1 introspection
+<dev-libs/libunique-1.1.6-r1 introspection
+<dev-libs/totem-pl-parser-2.32.5-r1 introspection
+<dev-python/pygobject-2.28 introspection
+<dev-util/anjuta-2.32.1.1-r1 introspection
+<gnome-base/dconf-0.5.1-r3 introspection
+<gnome-base/gconf-2.32.4 introspection
+<gnome-base/gnome-menus-2.30.5-r1 introspection
+<gnome-base/gnome-panel-2.32.1-r3 introspection
+<gnome-base/nautilus-2.32.2.1-r2 introspection
+<gnome-extra/gucharmap-2.32.1-r1 introspection
+<media-libs/babl-0.1.4-r1 introspection
+<media-libs/clutter-1.6 introspection
+<media-libs/clutter-gtk-1 introspection
+<media-libs/gstreamer-0.10.33 introspection
+<media-libs/gst-plugins-base-0.10.33 introspection
+<media-libs/libchamplain-0.9 introspection
+<net-libs/gssdp-0.8 introspection
+<net-libs/gupnp-0.15 introspection
+<net-libs/libsoup-2.34 introspection
+<net-libs/libsoup-gnome-2.34 introspection
+<net-wireless/gnome-bluetooth-2.32.0-r1 introspection
+<www-client/epiphany-3 introspection
+<x11-libs/libwnck-2.30.6-r1 introspection
+<x11-libs/pango-1.28.4 introspection
+
+# Anthony G. Basile <blueness@g.o> (22 Jul 2011)
+# nat-pmp and upnp are only stable on amd64/x86 for this package
+>=net-misc/tor-0.2.3 nat-pmp upnp
+
+# Robin H. Johnson <robbat2@g.o> (10 Jul 2011)
+# PPS should work on all arches, but only keyworded on amd64/x86
+>=net-misc/ntp-4.2.6_p3-r1 parse-clocks
+
+# Bernard Cafarelli <voyageur@g.o> (6 Jun 2011)
+# libobjc2/clang only works on some arches
+gnustep-base/gnustep-make libobjc2
+
+# Andrey Grozin <grozin@g.o> (29 Mar 2011)
+# dev-lang/swig-2.0.2 with -octave generated .cpp files
+# incompatible with >=sci-mathematics/octave-3.4.0
+sci-libs/mathgl octave
+
+# Samuli Suominen <ssuominen@g.o> (29 Mar 2011)
+# This would need x11-libs/gtk+:3 stable.
+x11-libs/libnotify test
+
+# Luca Barbato <lu_zero@g.o> (28 Mar 2011)
+# Mask mplayer2 arch specific flags
+media-video/mplayer2 vdpau bluray
+
+# Diego E. Pettenò <flameeyes@g.o> (27 Mar 2011)
+#
+# Mask pdnsd's Linux-specific USE flags.
+net-dns/pdnsd isdn urandom
+
+# Gilles Dartiguelongue <eva@g.o> (26 Mar 2011)
+# Mask due to unsatisfied dependencies
+# applet is required for the search panel applet
+>=app-misc/tracker-0.10 applet
+
+# Ultrabug <ultrabug@g.o> (20 Mar 2011)
+# Mask clustering support until new sys-cluster/cman is pushed.
+sys-fs/lvm2 clvm cman
+
+# Gilles Dartiguelongue <eva@g.o> (23 Feb 2011)
+# libgnome[esd] ABI broken, bug #348644 and bug #352260.
+>=gnome-base/libgnome-2.32 esd
+app-text/stardict pronounce
+
+# Raúl Porcel <armin76@g.o> (13 Feb 2011)
+# Masked until devs know how to use repoman
+<media-video/mplayer-9999 bluray
+
+# Diego Elio Pettenò <flameeyes@g.o> (02 Dec 2010)
+# Unmask as soon as bio2jack is back into stable (0.9-r1 or later).
+media-plugins/audacious-plugins jack
+
+# Robin H. Johnson <robbat2@g.o> (28 Nov 2010)
+# bug 344885: USE=debug causes compile to fail presently.
+=dev-db/mysql-5.1.51* debug
+=dev-db/mysql-5.1.52* debug
+=dev-db/mysql-5.1.53* debug
+
+# Chí-Thanh Christopher Nguyễn <chithanh@g.o> (28 Nov 2010)
+# sys-devel/llvm is not keyworded on many arches, bug #320221
+media-libs/mesa llvm
+
+# Justin Lecher <jlec@g.o> (17 Nov 2010)
+# Upstream didn't release patches for aria yet
+>=sci-chemistry/cns-1.3 aria
+
+# Patrick Lauer <patrick@g.o> (15 Sep 2010)
+# Feature broken in dovecot-1, see #337014
+<net-mail/dovecot-2 bzip2
+
+# Tomáš Chvátal <scarabeus@g.o> (8 Sep 2010)
+# drm don't even build here so mask everywhere expect live.
+# openvg require openvg-1.1 implemenatation so mask until there is some
+<x11-libs/cairo-9999 drm openvg
+
+# Alex Legler <a3li@g.o> (1 Sep 2010)
+# This feature is marked as experimental by upstream.
+dev-lang/ruby-enterprise fastthreading
+
+# Chí-Thanh Christopher Nguyễn <chithanh@g.o> (12 Jul 2010)
+# lirc support is broken in the snapshot
+>=www-plugins/gnash-0.8.7_p20100706 lirc
+
+# Nirbheek Chauhan <nirbheek@g.o> (29 Jun 2010)
+# Mask clutter till clutter games are usable
+=gnome-extra/gnome-games-2.3* clutter
+
+# Nirbheek Chauhan <nirbheek@g.o> (26 Jun 2010)
+# Inter-process communication doesn't work on anything except x86/amd64/arm
+# due to lack of atomic ops, bug 325185
+net-libs/xulrunner ipc
+www-client/firefox ipc
+www-client/icecat ipc
+
+# Tomas Touceda <chiiph@g.o> (13 Apr 2010)
+# Masked because libsvm module is broken with this release on every arch.
+dev-lisp/clisp svm
+
+# Tomáš Chvátal <scarabeus@g.o> (4 Apr 2010)
+# Masked because tools pulled in are not supported on most archs.
+sys-power/pm-utils video_cards_intel video_cards_radeon
+
+# Diego E. Pettenò <flameeyes@×××××.com> (18 Jan 2010)
+# Don't use system-wide mode unless you *really* know what you're doing.
+# Keep it masked here so that I don't need to manage two versions every time.
+media-sound/pulseaudio system-wide
+
+# Jeremy Olexa <darkside@g.o> (10 Jan 2010)
+# Upsteam doesn't support ioctl backend and neither does Gentoo. ioctl USE flag
+# will eventually be removed unless the backend is re-written by upstream. bug
+# 299674
+>net-misc/wicd-1.6.2.2 ioctl
+
+# Andrey Grozin <grozin@g.o> (7 Jan 2010)
+# gcl is, unfortunately, masked
+# I have problems with cmucl, masked for investigation
+sci-mathematics/fricas gcl cmucl
+
+# Tomáš Chvátal <scarabeus@g.o> (6 Jan 2010)
+# Still not really functional, upstream requires not building it.
+x11-libs/cairo gallium
+
+# Alexey Shvetsov <alexxy@g.o> (3 Dec 2009)
+# Mask very experimental mpi use flag dfor gamess
+sci-chemistry/gamess mpi
+
+# Mounir Lamouri <volkmar@g.o> (07 Nov 2009)
+# Mask cuda for k3d. Works only on amd64/x86. Bug 267264
+media-gfx/k3d cuda
+
+# Gilles Dartiguelongue <eva@g.o> (01 Nov 2009)
+# Broken on so many setups it is just insane.
+# 0.7 is API/ABI incompatible but is the way to go.
+# Masking to lower maintainance headache, bug #291501.
+media-video/totem tracker
+
+# Tomáš Chvátal <scarabeus@g.o> (27 Oct 2009)
+# Broken on so many setups it is just insane.
+# Unmask if you really know what you are doing.
+<sys-apps/groff-1.20.1-r2 linguas_ja
+
+# Samuli Suominen <ssuominen@g.o) (14 Oct 2009)
+# Conflict with dev-libs/libffi in ld.so.conf.
+sys-devel/gcc libffi
+
+# Samuli Suominen <ssuominen@g.o> (09 Oct 2009)
+# log4cxx has known memory leaking issues wrt bug #287697,
+# unmask when log4cxx is fixed and stable.
+app-misc/strigi log
+
+# Jean-Noël Rivasseau <elvanor@g.o> (23 Sep 2009)
+# X use flag only for amd64/x86, bug 285951.
+media-gfx/iscan X
+
+# Alex Legler <a3li@g.o> (16 Sep 2009)
+# Maintainer of the kolab patch is not available (wrobel).
+# Bump is needed for security bug 285052.
+>=www-apps/horde-webmail-1.2.4 kolab
+
+# Tomáš Chvátal <scarabeus@g.o> (10 Sep 2009)
+# quakeforge has video_cards_tdfx enabled only for x86
+games-fps/quakeforge video_cards_tdfx
+
+# Marijn Schouten <hkBst@g.o> (03 Aug 2009)
+# gcl is an old piece of crap that has a lot of problems
+# Andrey Grozin <grozin@g.o> (24 Dec 2009)
+# openmcl (aka clozurecl) is only available on x86 and amd64
+sci-mathematics/maxima gcl openmcl clozurecl
+
+# Tomas Chvatal <scarabeus@g.o> (31 Jan 2009)
+# mask cuda for boinc. Works only on amd64 and x86
+sci-misc/boinc cuda
+
+# Robert Buchholz <rbu@g.o> (16 Aug 2008)
+# TLS needs dev-libs/cryptlib, which is x86 only
+dev-python/kaa-base tls
+
+# Serkan Kaba <serkan@g.o> (20 Jul 2008)
+# Java is not supported in most of the arches enchant is keyworded
+app-text/enchant zemberek
+
+# Peter Alfredsen <loki_val@g.o> (25 Jun 2008)
+# Php module fails to build due to newer autotools.
+>=media-libs/ming-0.4.0_beta5 php
+
+dev-java/sun-jdk nsplugin
+dev-java/sun-jre-bin nsplugin
+dev-java/ibm-jdk-bin nsplugin
+dev-java/ibm-jre-bin nsplugin
+
+# These are for BSD only
+net-proxy/squid ipf-transparent pf-transparent
+app-admin/sshguard ipfilter
+
+# Linking against libnfsidmap requires libs in /usr #149472
+sys-apps/acl nfs
+
+# Christian Faulhammer <opfer@g.o> (14 Jan 2008)
+# only works on x86, where this will be unmasked
+dev-java/ibm-jdk-bin alsa
+dev-java/ibm-jre-bin alsa
+
+# Raúl Porcel <armin76@g.o> (09 Nov 2008)
+# CPU opts: This needs amd64, x86 and ppc on some of them
+# dvdnav: hard masked dependency
+# vdpau: availble on x86, amd64 only
+media-video/mplayer cpudetection custom-cpuopts bindist vdpau
+
+# Steve Dibb <beandog@g.o> (26 Feb 2009)
+# Unmask internal real player codec support on newer mplayer
+>=media-video/mplayer-1.0_rc2_p20090226 -real
+
+# Arun Raghavan <ford_prefect@g.o> (19 Nov 2010)
+# Mart Raudsepp <leio@g.o> (27 Dec 2010)
+# Arun Raghavan <ford_prefect@g.o> (30 Jan 2011)
+# Mart Raudsepp <leio@g.o> (20 Mar 2011)
+# Mart Raudsepp <leio@g.o> (12 Apr 2011)
+# Arun Raghavan <ford_prefect@g.o> (27 Sep 2011)
+# Orc isn't yet ready to be used on anything other than x86/amd64/arm
+>=media-libs/gst-plugins-base-0.10.30 orc
+>=media-plugins/gst-plugins-a52dec-0.10.16 orc
+>=media-plugins/gst-plugins-ffmpeg-0.10.11 orc
+>=media-libs/gst-plugins-good-0.10.28 orc
+>=media-libs/gst-plugins-bad-0.10.21 orc
+>=media-sound/pulseaudio-1.0 orc
+
+# Alexis Ballier <aballier@g.o> <16 Feb 2011>
+# Win32 specific useflags for vlc. Can be used for cross-compiling.
+media-video/vlc direct2d directx dshow dxva2 waveout wingdi
+# Mac OSX / iPhone OS specific useflags
+media-video/vlc audioqueue ios-vout macosx macosx-audio macosx-dialog-provider macosx-eyetv macosx-quartztext macosx-qtcapture macosx-qtkit macosx-vout
+# media-library does not build
+media-video/vlc media-library
+
+# Alexis Ballier <aballier@g.o> <28 Apr 2011>
+# Requires masked libcelt
+# Leave it unmasked for live ebuild, people should know what they do if they use
+# it anyway
+<media-video/ffmpeg-9999 celt
+
+# Alexis Ballier <aballier@g.o> <5 Oct 2011>
+# harfbuzz support does not build for now, leave the useflag be and unmask it later
+media-libs/libass harfbuzz

diff --git a/profiles/base/packages b/profiles/base/packages
new file mode 100644
index 0000000..78b2feb
--- /dev/null
+++ b/profiles/base/packages
@@ -0,0 +1,74 @@
+# Copyright 1999-2011 Gentoo Foundation.
+# Distributed under the terms of the GNU General Public License, v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/base/packages,v 1.58 2011/12/06 16:05:56 vapier Exp $
+
+# Gentoo Base Profile
+
+# NOTE: THIS IS THE BASE PROFILE FOR *ANY* GENTOO BASED OPERATING SYSTEM.
+# NO MODIFICATIONS MAY BE MADE TO THIS FILE WITHOUT PRIOR DISCUSSION.  IF
+# YOU ARE CREATING A NEW PROFILE, YOU SIMPLY NEED TO INHERIT THIS BASE
+# PROFILE IN YOUR PROFILE DIRECTORY'S "parent" FILE.
+
+
+# OK, you're staring at this file and you have no idea what these stars are
+# for.  Here's the scoop.  An initial "*" marks a package that is part of
+# the official BASE system profile.  If there is a "*" then `emerge system`
+# will use the line in its calculations of what should be installed for the
+# base profile.  Lines without a "*" prefix will be ignored for profile
+# system calculations.
+
+# Please note that this file is rarely used as a package inclusion mask
+# file, because it affects EVERY SINGLE gentoo profile.   As can be seen,
+# we've limited the inclusion mask to a version of portage which supports
+# cascaded profiles, but apart from that, there should be no version
+# specific information in here. This file serves as a high level description
+# of the minimum set of packages needed for any Gentoo based system.
+
+*sys-apps/baselayout
+*app-arch/bzip2
+*app-arch/gzip
+*app-arch/tar
+*app-arch/xz-utils
+*app-shells/bash
+#*dev-lang/perl
+#*dev-lang/python
+*net-misc/iputils
+*net-misc/rsync
+*net-misc/wget
+*sys-apps/coreutils
+#*sys-apps/debianutils
+*sys-apps/diffutils
+*sys-apps/file
+*sys-apps/findutils
+*sys-apps/gawk
+*sys-apps/grep
+*sys-apps/kbd
+*sys-apps/module-init-tools
+#*>=sys-apps/portage-2.0.51.22
+*sys-process/procps
+*sys-process/psmisc
+*sys-apps/sed
+# eutils.eclass relies on options from newer shadow #367633
+*>=sys-apps/shadow-4.1
+*sys-apps/texinfo
+*sys-apps/which
+#*sys-devel/autoconf
+#*sys-devel/automake
+*sys-devel/binutils
+#*sys-devel/bison
+#*sys-devel/flex
+*sys-devel/gcc
+*sys-devel/gnuconfig
+#*sys-devel/libtool
+#*sys-devel/m4
+*sys-devel/make
+*sys-devel/patch
+*sys-fs/e2fsprogs
+*virtual/dev-manager
+*virtual/editor
+*virtual/libc
+*virtual/man
+*virtual/os-headers
+*virtual/package-manager
+*virtual/pager
+*virtual/ssh

diff --git a/profiles/base/profile.bashrc b/profiles/base/profile.bashrc
new file mode 100644
index 0000000..6cc7c18
--- /dev/null
+++ b/profiles/base/profile.bashrc
@@ -0,0 +1,9 @@
+# Copyright 2006-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/base/profile.bashrc,v 1.7 2011/06/12 10:10:10 ferringb Exp $
+
+if ! declare -F elog >/dev/null ; then
+	elog() {
+		einfo "$@"
+	}
+fi

diff --git a/profiles/base/use.force b/profiles/base/use.force
new file mode 100644
index 0000000..df19ac4
--- /dev/null
+++ b/profiles/base/use.force
@@ -0,0 +1,9 @@
+# Copyright 1999-2009 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/base/use.force,v 1.3 2009/07/31 16:42:56 ssuominen Exp $
+
+# Force the GNU/Linux ELIBC, KERNEL, and USERLAND
+# flags that apply to the majority of profiles.
+elibc_glibc
+kernel_linux
+userland_GNU

diff --git a/profiles/base/use.mask b/profiles/base/use.mask
new file mode 100644
index 0000000..b3ac9e2
--- /dev/null
+++ b/profiles/base/use.mask
@@ -0,0 +1,274 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/base/use.mask,v 1.129 2011/12/18 09:04:46 grobian Exp $
+
+# nvidia-cuda-toolkit is amd64/x86 only
+opencl
+
+# Infiniband stuff should generaly work on all arches but keyworded only on amd64/x86
+infiniband
+
+# These ABIs are in constant change and currently only available for SVN snapshots
+php_targets_php5-2
+#php_targets_php5-4
+
+# Its deps are not mature enough yet
+ayatana
+
+# Only available on x86
+fdftk
+
+# These need libieee1284 which is amd64/x86 only.
+sane_backends_canon_pp
+sane_backends_hpsj5s
+sane_backends_mustek_pp
+sane_backends_qcam
+
+# Gluon still don't have release.
+gluon
+
+# KDE4 specific enablefinal flag
+# Uses huge amounts of ram, and those ricers would be spamming bugzilla.
+# By huge i mean around 8Gigs at least.
+# Most applications also fail with this approach now
+kdeenablefinal
+
+# profile specific USE flags
+# Don't put hardened in here.
+selinux
+uclibc
+multilib
+
+# amd64/x86 arch specific USE flags
+kqemu
+3dnow
+3dnowext
+lilo
+mmx
+mmxext
+sse
+sse2
+sse3
+sse4
+sse4a
+sse5
+ssse3
+svga
+win32codecs
+real
+nvram
+
+# ppc arch specific USE flags
+altivec
+pbbuttonsd
+ppcsha1
+
+# mips arch specific USE flags
+n32
+n64
+fixed-point
+
+# ppc64 arch specific USE flags
+ibm
+ps3
+
+# sparc arch specific USE flags
+vis
+ultra1
+
+# arm arch specific USE flags
+iwmmxt
+neon
+
+# nVidia XvMC requires nvidia-drivers/nvidia-legacy-drivers
+nvidia
+
+# dev-db/oracle-instantclient-basic is only available on x86
+oci8-instant-client
+
+# net-libs/osptoolkit is only available on x86 (used by asterisk, bug 115798)
+osp
+
+# yellownet is only avaible as a binary blob (bug 149970)
+yellownet
+
+# not keyworded on non-x86 systems
+video_cards_geode
+video_cards_xgi
+video_cards_voodoo
+
+# not needed on non-sparc systems
+video_cards_sunbw2
+video_cards_suncg14
+video_cards_suncg3
+video_cards_suncg6
+video_cards_sunffb
+video_cards_sunleo
+video_cards_suntcx
+
+# not needed on non-mips systems
+video_cards_newport
+video_cards_impact
+
+# not needed on non-x86, non-amd64 systems
+input_devices_virtualbox
+input_devices_vmmouse
+video_cards_nvidia
+video_cards_fglrx
+video_cards_via
+video_cards_vmware
+video_cards_virtualbox
+
+# not needed on non-arm systems
+video_cards_omapfb
+
+# linux-only drivers
+video_cards_qxl
+
+# not needed on non-x86, non-amd64, non-ppc systems
+input_devices_synaptics
+input_devices_wacom
+
+# psyco only works on x86
+psyco
+
+# Mask ELIBC, KERNEL, and USERLAND flags that apply to specific profiles.
+userland_BSD
+
+elibc_AIX
+elibc_Darwin
+elibc_DragonFly
+elibc_FreeBSD
+elibc_HPUX
+elibc_Interix
+elibc_mintlib
+elibc_NetBSD
+elibc_OpenBSD
+elibc_SunOS
+elibc_uclibc
+
+kernel_AIX
+kernel_Darwin
+kernel_FreeBSD
+kernel_freemint
+kernel_HPUX
+kernel_Interix
+kernel_NetBSD
+kernel_OpenBSD
+kernel_SunOS
+
+# Diego Pettenò <flameeyes@g.o> (6 Dec 2006)
+# Mask specific Apple drivers
+alsa_cards_aoa
+alsa_cards_aoa-fabric-layout
+alsa_cards_aoa-onyx
+alsa_cards_aoa-soundbus
+alsa_cards_aoa-soundbus-i2s
+alsa_cards_aoa-tas
+alsa_cards_aoa-toonie
+alsa_cards_powermac
+# Mask specific Sun drivers
+alsa_cards_sun-amd7930
+alsa_cards_sun-cs4231
+alsa_cards_sun-dbri
+# Mask specific ARM drivers
+alsa_cards_pxa2xx-i2sound
+alsa_cards_pxa2xx-soc
+alsa_cards_pxa2xx-soc-corgi
+alsa_cards_pxa2xx-soc-poodle
+alsa_cards_pxa2xx-soc-spitz
+alsa_cards_pxa2xx-soc-tosa
+alsa_cards_sa11xx-uda1341ts
+alsa_cards_armaaci
+alsa_cards_at91-soc
+alsa_cards_at91-soc-eti-b1-wm8731
+# Mask specific HPPA drivers
+alsa_cards_harmony
+# Mask specific MIPS drivers
+alsa_cards_au1x00
+
+# Diego Pettenò <flameeyes@g.o> (29 Dec 2006)
+# Adobe FDF toolkit is x86 only.
+fdftk
+
+# Diego Pettenò <flameeyes@g.o> (30 Dec 2006)
+# These are specific of Mac OS X
+aqua
+coreaudio
+
+# Diego Pettenò <flameeyes@g.o> (4 Jan 2007)
+# Mask the flags for PHP that are available only on x86
+sybase-ct
+ingres
+birdstep
+adabas
+filepro
+pfpro
+informix
+empress
+empress-bcs
+sybase
+frontbase
+dbmaker
+esoob
+solid
+# Shared with amd64
+oci8
+oracle7
+firebird
+db2
+
+# Robert Buchholz <rbu@g.o> (03 Jun 2007)
+# Only works on x86 or amd64
+lcd_devices_svga
+lcd_devices_luise
+
+# Joseph Jezak <josejx@g.o> (11 Mar 2007)
+# Only for x86 and amd64 (in pbbuttonsd)
+macbook
+
+# George Shapovalov <george@g.o> (8 Apr 2007)
+# Ada is supported only on x86, amd64 and ppc at present
+ada
+
+# lvm2 clustered use flags (moved from default-linux)
+gulm
+
+# tcc is x86 only
+tcc
+
+# Diego Pettenò <flameeyes@g.o> (15 Nov 2007)
+# pam_console was masked for removal for security issue.
+# mask the flag too.
+pam_console
+
+# Jeremy Olexa <darkside@g.o>
+# The prefix USE flag should never be used on non prefix profiles
+prefix
+
+# Alexey Shvetsov <alexxy@g.o>
+# Mask kdeprefix since its broken by now
+kdeprefix
+
+# Diego E. Pettenò <flameeyes@g.o> (6 Dec 2009)
+#  on behalf of QA Team
+# Removal of pvm is scheduled for Februrary 4.
+pvm
+
+# Alex Legler <a3li@g.o> (7 Dec 2009)
+# Ruby 1.9 is hardmasked
+# JRuby, REE18, and Rubinius are whitelisted on supported arches
+ruby_targets_ruby19
+ruby_targets_jruby
+ruby_targets_ree18
+ruby_targets_rbx
+
+# Diego E. Pettenò <flameeyes@g.o> (19 Oct 2010)
+# masking flags that only apply to FreeBSD
+kqueue
+
+# Samuli Suominen <ssuominen@g.o> (03 Oct 2011)
+# RealMagic Hollywood+/Creative DXR3 support
+# Still using obsolete V4L1 wrt bug 350211
+# If fixed, should be unmasked in amd64/x86/ppc32 use.mask
+dxr3

diff --git a/profiles/default/linux/make.defaults b/profiles/default/linux/make.defaults
new file mode 100644
index 0000000..63c3233
--- /dev/null
+++ b/profiles/default/linux/make.defaults
@@ -0,0 +1,64 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/default/linux/make.defaults,v 1.15 2011/10/05 19:22:13 darkside Exp $
+#
+# System-wide defaults for the Portage system
+# See portage(5) manpage
+#
+# Please avoid enabling things by default in here if possible. Understand any 
+# implications with core packages.  For example, if "java" is in USE and db 
+# has a conditional dependency on java (which it does,) then a JDK will be 
+# pulled in during *emerge system*!
+
+
+# Default starting set of USE flags for all default/linux profiles.
+USE="berkdb crypt ipv6 ncurses nls pam readline ssl tcpd zlib"
+
+# make sure toolchain has sane defaults <tooclhain@g.o>
+USE="${USE} mudflap fortran openmp"
+
+# 2010/10/21 - Ole Markus With <olemarkus@g.o>
+# These USE flags were originally inserted here because of PHP
+# and were later removed by me. Reinserting the USE flags again because they are
+# global USE flags that may be expected to be set by other packages.
+USE="${USE} cli pcre session"
+
+# 2006/03/07 - Donnie Berkholz <dberkholz@g.o>
+# Modular X: Support direct rendering by default
+USE="${USE} dri"
+
+# 2006/03/29 - Stefan Schweizer <genstef@g.o>
+# isdn USE flag defaults
+USE="${USE} pppd"
+
+# 2006/04/21 - Donnie Berkholz <dberkholz@g.o>
+# Modular X: Build the Xorg X server by default
+USE="${USE} xorg"
+
+# 2006/10/28 - Luca Barbato <lu_zero@g.o>
+# on glibc system you cannot turn it off
+USE="${USE} iconv"
+
+# 2006/06/30 - Donnie Berkholz <dberkholz@g.o>
+# Sane defaults for input drivers
+INPUT_DEVICES="keyboard mouse evdev"
+
+# 2006/08/18 - Donnie Berkholz <dberkholz@g.o>
+# Lowest common denominator defaults for video drivers,
+# except hppa, which lacks v4l so removes it in the hppa profile
+VIDEO_CARDS="dummy fbdev v4l"
+
+# 2008/07/09 - Doug Goldstein <cardoe@g.o>
+# Adding LDFLAGS="-Wl,-O1 for all Linux profiles by default
+# after discussion on the gentoo-dev ML. As we bang out a clear
+# direction with how LDFLAGS will be set by default, this entry
+# may move.
+# 2010/07/12 - Samuli Suominen <ssuominen@g.o>
+# Note that adding LDFLAGS="-Wl,-O1 ${LDFLAGS}" breaks dev-util/boost-build
+# because of whitespace.
+LDFLAGS="-Wl,-O1 -Wl,--as-needed"
+
+# 2009/09/21 Robin H. Johnson <robbat2@g.o>
+# http://archives.gentoo.org/gentoo-dev/msg_dc705dc2c1a45e18a85aa62e8fb17009.xml
+# Build kernel modules from linux-mod by default:
+USE="${USE} modules"

diff --git a/profiles/default/linux/package.use b/profiles/default/linux/package.use
new file mode 100644
index 0000000..fd09979
--- /dev/null
+++ b/profiles/default/linux/package.use
@@ -0,0 +1,7 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/default/linux/package.use,v 1.1 2011/02/13 17:50:16 arfrever Exp $
+
+# Arfrever Frehtes Taifersar Arahesis <arfrever@g.o> (13 Feb 2011)
+# Disable deprecated bsddb module of Python 2 by default.
+=dev-lang/python-2* -berkdb

diff --git a/profiles/default/linux/package.use.mask b/profiles/default/linux/package.use.mask
new file mode 100644
index 0000000..77e3fd6
--- /dev/null
+++ b/profiles/default/linux/package.use.mask
@@ -0,0 +1,32 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/default/linux/package.use.mask,v 1.22 2011/08/07 21:09:31 hwoarang Exp $
+
+sys-devel/gcc hardened
+sys-libs/glibc hardened
+
+# Markos Chandras <hwoarang@g.o> (07 Aug 2011)
+# doc flag is not ready yet for media-video/mplayer2.
+# See bug #361075
+<media-video/mplayer2-9999 doc
+
+# Diego E. Pettenò <flameeyes@g.o> (20 Aug 2009)
+#
+# Mask oss USE flag for PulseAudio; it's present for compatibility
+# with FreeBSD and other operating systems that have no better
+# interfaces, but people would probably abuse it with Linux as well.
+#
+# Older versions also had an OSS compatibility wrapper on that USE so
+# they are excluded.
+>=media-sound/pulseaudio-0.9.16_rc5 oss
+
+# Diego E. Pettenò <flameeyes@g.o> (9 Mar 2011)
+#
+# Mask usb USE flag for newest PCSC-Lite, since on Linux we want to
+# use libudev instead.
+>=sys-apps/pcsc-lite-1.7.0 usb
+
+# Diego E. Pettenò <flameeyes@g.o> (27 Mar 2011)
+#
+# Unmask pdnsd's Linux-specific USE flags.
+net-dns/pdnsd -isdn -urandom

diff --git a/profiles/default/linux/packages b/profiles/default/linux/packages
new file mode 100644
index 0000000..5b35ef5
--- /dev/null
+++ b/profiles/default/linux/packages
@@ -0,0 +1,13 @@
+# Copyright 2004 Gentoo Foundation.
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/default/linux/packages,v 1.2 2011/11/14 17:12:55 vapier Exp $
+
+# This file extends the base packages file for the default profile that all
+# architectures will enjoy.  Please note that default is what most architectures
+# will have.  Some will have an selinux profile (see ${PORTDIR}/profiles/selinux).
+# The idea is to only create a new family of profiles when absolutely necessary.
+
+*sys-apps/busybox
+*sys-apps/man-pages
+*sys-apps/net-tools
+*sys-apps/util-linux

diff --git a/profiles/default/linux/packages.build b/profiles/default/linux/packages.build
new file mode 100644
index 0000000..874bd43
--- /dev/null
+++ b/profiles/default/linux/packages.build
@@ -0,0 +1,45 @@
+# Copyright 1999-2011 Gentoo Foundation.
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/default/linux/packages.build,v 1.6 2011/07/14 01:18:53 jmbsvicetto Exp $
+
+# This file describes the packages needed to build a stage1 based on this
+# profile.  Packages in this file are built in order.
+
+# While shadow could be in here, it breaks stage 1 and stage 2 building for the
+# releases.  PLEASE DO NOT ENABLE THIS UNLESS YOU HAVE THOROUGHLY TESTED IT!
+
+app-arch/bzip2
+app-arch/gzip
+app-arch/tar
+app-shells/bash
+net-misc/rsync
+net-misc/wget
+sys-devel/autoconf
+sys-devel/automake
+sys-devel/libtool
+sys-apps/baselayout
+sys-apps/makedev
+sys-apps/coreutils
+sys-apps/diffutils
+sys-apps/file
+sys-apps/findutils
+sys-apps/gawk
+sys-apps/grep
+sys-apps/less
+sys-apps/net-tools
+sys-apps/sed
+sys-apps/texinfo
+sys-devel/binutils
+sys-devel/bison
+sys-devel/flex
+sys-devel/gcc
+sys-devel/gettext
+sys-devel/gnuconfig
+sys-devel/make
+sys-devel/patch
+virtual/editor
+virtual/libc
+virtual/os-headers
+virtual/package-manager
+sys-fs/udev
+sys-apps/shadow

diff --git a/profiles/default/linux/use.mask b/profiles/default/linux/use.mask
new file mode 100644
index 0000000..70d743e
--- /dev/null
+++ b/profiles/default/linux/use.mask
@@ -0,0 +1,14 @@
+# Copyright 1999-2011 Gentoo Foundation.
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/default/linux/use.mask,v 1.3 2011/03/29 01:58:48 flameeyes Exp $
+
+# This file masks out USE flags that are simply NOT allowed in the default
+# profile for any architecture.  This works, for example, if a non-default
+# profile (such as the selinux profiles) have a USE flag associated with
+# them.
+
+# amd64 only:
+emul-linux-x86
+
+# ppc and x86/amd64
+x264

diff --git a/profiles/uclibc/make.defaults b/profiles/hardened/linux/uclibc/make.defaults
similarity index 100%
rename from profiles/uclibc/make.defaults
rename to profiles/hardened/linux/uclibc/make.defaults

diff --git a/profiles/uclibc/package.mask b/profiles/hardened/linux/uclibc/package.mask
similarity index 100%
rename from profiles/uclibc/package.mask
rename to profiles/hardened/linux/uclibc/package.mask

diff --git a/profiles/uclibc/packages b/profiles/hardened/linux/uclibc/packages
similarity index 100%
rename from profiles/uclibc/packages
rename to profiles/hardened/linux/uclibc/packages

diff --git a/profiles/uclibc/packages.build b/profiles/hardened/linux/uclibc/packages.build
similarity index 100%
rename from profiles/uclibc/packages.build
rename to profiles/hardened/linux/uclibc/packages.build

diff --git a/profiles/hardened/linux/uclibc/parent b/profiles/hardened/linux/uclibc/parent
new file mode 100644
index 0000000..c3ff51e
--- /dev/null
+++ b/profiles/hardened/linux/uclibc/parent
@@ -0,0 +1,2 @@
+../../../base/
+../../../default/linux

diff --git a/profiles/uclibc/use.force b/profiles/hardened/linux/uclibc/use.force
similarity index 100%
rename from profiles/uclibc/use.force
rename to profiles/hardened/linux/uclibc/use.force

diff --git a/profiles/uclibc/use.mask b/profiles/hardened/linux/uclibc/use.mask
similarity index 100%
rename from profiles/uclibc/use.mask
rename to profiles/hardened/linux/uclibc/use.mask

diff --git a/profiles/uclibc/x86/make.defaults b/profiles/hardened/linux/uclibc/x86/make.defaults
similarity index 100%
rename from profiles/uclibc/x86/make.defaults
rename to profiles/hardened/linux/uclibc/x86/make.defaults

diff --git a/profiles/uclibc/x86/package.use.mask b/profiles/hardened/linux/uclibc/x86/package.use.mask
similarity index 100%
rename from profiles/uclibc/x86/package.use.mask
rename to profiles/hardened/linux/uclibc/x86/package.use.mask

diff --git a/profiles/uclibc/x86/parent b/profiles/hardened/linux/uclibc/x86/parent
similarity index 100%
rename from profiles/uclibc/x86/parent
rename to profiles/hardened/linux/uclibc/x86/parent

diff --git a/profiles/uclibc/parent b/profiles/uclibc/parent
deleted file mode 100644
index 6f0b2fa..0000000
--- a/profiles/uclibc/parent
+++ /dev/null
@@ -1,2 +0,0 @@
-../base
-../default/linux