[gentoo-commits] repo/gentoo:master commit in: profiles/hardened/linux/

[gentoo-commits] repo/gentoo:master commit in: profiles/hardened/linux/

[Magnus Granberg]

commit:     f8dd3f3e0df8d9e45928db3cc455f677d622b2c3
Author:     Magnus Granberg <zorry <AT> gentoo <DOT> org>
AuthorDate: Thu Sep 17 18:20:37 2015 +0000
Commit:     Magnus Granberg <zorry <AT> gentoo <DOT> org>
CommitDate: Thu Sep 17 18:20:37 2015 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f8dd3f3e

profiles: hardened/linux

mask profile when it is incompatible with pie

 profiles/hardened/linux/use.mask | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/profiles/hardened/linux/use.mask b/profiles/hardened/linux/use.mask
index e54f87d..48ed0d6 100644
--- a/profiles/hardened/linux/use.mask
+++ b/profiles/hardened/linux/use.mask
@@ -12,3 +12,6 @@ pch
 
 # prelink is masked for hardened
 prelink
+
+# profile are incompatible when linking with pie
+profile

[gentoo-commits] repo/gentoo:master commit in: profiles/hardened/linux/

[Jason Zaman]

commit:     2c1f8922d90b1ec8486de0ce3a271e252d6bb6cf
Author:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
AuthorDate: Mon Oct 26 07:53:24 2015 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Mon Oct 26 07:54:31 2015 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2c1f8922

profiles/hardened: mask www-client/qutebrowser, bug 560666

 profiles/hardened/linux/package.mask | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/profiles/hardened/linux/package.mask b/profiles/hardened/linux/package.mask
index ba917fd..8d82d3a 100644
--- a/profiles/hardened/linux/package.mask
+++ b/profiles/hardened/linux/package.mask
@@ -31,3 +31,6 @@ app-crypt/hmaccalc
 # due to C99 struct init requirement by hardened kernels,
 # see bug 540196 comment 9.
 net-fs/openafs-kernel
+
+# Crashes immediately on start. bug 560666
+=www-client/qutebrowser-0.4.1

[gentoo-commits] repo/gentoo:master commit in: profiles/hardened/linux/

[Magnus Granberg]

commit:     11affae7c4ec69c9563ace1c8389401691089c81
Author:     Magnus Granberg <zorry <AT> gentoo <DOT> org>
AuthorDate: Thu Feb  9 22:48:20 2017 +0000
Commit:     Magnus Granberg <zorry <AT> gentoo <DOT> org>
CommitDate: Thu Feb  9 22:48:20 2017 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=11affae7

profile: mask glibc-2.24-r1 on hardened bug #608788

 profiles/hardened/linux/package.mask | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/profiles/hardened/linux/package.mask b/profiles/hardened/linux/package.mask
index 62c433df33..786caf9534 100644
--- a/profiles/hardened/linux/package.mask
+++ b/profiles/hardened/linux/package.mask
@@ -26,3 +26,7 @@ app-crypt/hmaccalc
 # due to C99 struct init requirement by hardened kernels,
 # see bug 540196 comment 9.
 net-fs/openafs-kernel
+
+# broken on hardened bug #608788
+# localedef segfaults when running locale-gen
+=sys-libs/glibc-2.24-r1

[gentoo-commits] repo/gentoo:master commit in: profiles/hardened/linux/

[Michael Palimaka]

commit:     99b480992dfb2ae7559f877a46fe64129e122ceb
Author:     Ilya Tumaykin <itumaykin <AT> gmail <DOT> com>
AuthorDate: Sun Jul 23 20:29:06 2017 +0000
Commit:     Michael Palimaka <kensington <AT> gentoo <DOT> org>
CommitDate: Thu Jul 27 14:38:00 2017 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=99b48099

profiles/hardened/linux/p.use: disable default gdbm USE for net-firewall/fwknop

Otherwise it enforces server USE to all users via REQUIRED_USE.

 profiles/hardened/linux/package.use | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/profiles/hardened/linux/package.use b/profiles/hardened/linux/package.use
new file mode 100644
index 00000000000..edd0e13e541
--- /dev/null
+++ b/profiles/hardened/linux/package.use
@@ -0,0 +1,7 @@
+# Copyright 2017 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+# Ilya Tumaykin <itumaykin+gentoo@gmail.com> (22 Jul 2017)
+# Override default +gdbm setting, which enables minor server-only
+# feature, but enforces server USE to all users via REQUIRED_USE.
+net-firewall/fwknop -gdbm

[gentoo-commits] repo/gentoo:master commit in: profiles/hardened/linux/

[Michał Górny]

commit:     a9ce0435c3315c58de61331c7d54abe485b09c76
Author:     Ilya Tumaykin <itumaykin <AT> gmail <DOT> com>
AuthorDate: Wed Aug 16 20:48:01 2017 +0000
Commit:     Michał Górny <mgorny <AT> gentoo <DOT> org>
CommitDate: Wed Sep  6 12:06:29 2017 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a9ce0435

profiles/hardened/linux/p.use: Revert "disable default gdbm USE for net-firewall/fwknop"

We will enable server USE by default and fix REQUIRED_USE instead.

Reverts: 99b480992dfb2ae7559f877a46fe64129e122ceb

 profiles/hardened/linux/package.use | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/profiles/hardened/linux/package.use b/profiles/hardened/linux/package.use
deleted file mode 100644
index edd0e13e541..00000000000
--- a/profiles/hardened/linux/package.use
+++ /dev/null
@@ -1,7 +0,0 @@
-# Copyright 2017 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-
-# Ilya Tumaykin <itumaykin+gentoo@gmail.com> (22 Jul 2017)
-# Override default +gdbm setting, which enables minor server-only
-# feature, but enforces server USE to all users via REQUIRED_USE.
-net-firewall/fwknop -gdbm

[gentoo-commits] repo/gentoo:master commit in: profiles/hardened/linux/

[Andreas Hüttel]

commit:     59a45ceb7c73d0a30775bc1500ce6dc5aae010ba
Author:     Andreas K. Huettel <dilfridge <AT> gentoo <DOT> org>
AuthorDate: Mon Jan 29 14:28:39 2018 +0000
Commit:     Andreas Hüttel <dilfridge <AT> gentoo <DOT> org>
CommitDate: Mon Jan 29 14:45:35 2018 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=59a45ceb

package.mask: mask new LO-bin for old hardened profiles

 profiles/hardened/linux/package.mask | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/profiles/hardened/linux/package.mask b/profiles/hardened/linux/package.mask
index 56f5b1470f8..e4c9930b052 100644
--- a/profiles/hardened/linux/package.mask
+++ b/profiles/hardened/linux/package.mask
@@ -1,6 +1,11 @@
 # Copyright 1999-2017 Gentoo Foundation.
 # Distributed under the terms of the GNU General Public License v2
 
+# Requires >=icu-60, which is not available in 13.0 based profiles.
+# Please migrate to one of the new hardened profiles.
+>=app-office/libreoffice-bin-5.4.4
+>=app-office/libreoffice-bin-debug-5.4.4
+
 # Hardened versions of gcc-4.0* through gcc-4.2* are not available.
 =sys-devel/gcc-4.0*
 =sys-devel/gcc-4.1*