[gentoo-commits] repo/gentoo:master commit in: profiles/features/hardened/

[gentoo-commits] repo/gentoo:master commit in: profiles/features/hardened/

[Magnus Granberg]

commit:     558ee3831cd1874b43d77b51600813842621993f
Author:     Magnus Granberg <zorry <AT> gentoo <DOT> org>
AuthorDate: Thu Dec  7 00:57:21 2017 +0000
Commit:     Magnus Granberg <zorry <AT> gentoo <DOT> org>
CommitDate: Thu Dec  7 00:57:21 2017 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=558ee383

profiles: set -ptpax in the hardened new 17.0 profile

 profiles/features/hardened/make.defaults | 1 +
 1 file changed, 1 insertion(+)

diff --git a/profiles/features/hardened/make.defaults b/profiles/features/hardened/make.defaults
index 1f5030f9a41..f6389585334 100644
--- a/profiles/features/hardened/make.defaults
+++ b/profiles/features/hardened/make.defaults
@@ -16,6 +16,7 @@ PROFILE_IS_HARDENED=1
 
 # We set the default markings to XATTR_PAX
 PAX_MARKINGS="XT"
+USE="${USE} -ptpax"
 
 # Default starting set of USE flags for all default/linux profiles.
 # We unset them so we get a clean use flag profile.

[gentoo-commits] repo/gentoo:master commit in: profiles/features/hardened/

[Magnus Granberg]

commit:     f9c3cb32e2cf0f3f0564ad5d7fcf37f02b719699
Author:     Magnus Granberg <zorry <AT> gentoo <DOT> org>
AuthorDate: Tue Jan 30 00:45:08 2018 +0000
Commit:     Magnus Granberg <zorry <AT> gentoo <DOT> org>
CommitDate: Tue Jan 30 00:45:08 2018 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f9c3cb32

profiles: on hardened add use gdbm to python

 profiles/features/hardened/package.use | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/profiles/features/hardened/package.use b/profiles/features/hardened/package.use
new file mode 100644
index 00000000000..97fd35ef32a
--- /dev/null
+++ b/profiles/features/hardened/package.use
@@ -0,0 +1,5 @@
+# Copyright 1999-2017 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+dev-lang/python gdbm
+

[gentoo-commits] repo/gentoo:master commit in: profiles/features/hardened/

[Magnus Granberg]

commit:     c861336cd6f31c220f0a60a271d6cd579cad3492
Author:     Magnus Granberg <zorry <AT> gentoo <DOT> org>
AuthorDate: Tue Jan 30 02:00:30 2018 +0000
Commit:     Magnus Granberg <zorry <AT> gentoo <DOT> org>
CommitDate: Tue Jan 30 02:00:30 2018 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c861336c

profiles: on hardened add use berkdb to gdbm

 profiles/features/hardened/package.use | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/profiles/features/hardened/package.use b/profiles/features/hardened/package.use
index 7068f81e305..13317366951 100644
--- a/profiles/features/hardened/package.use
+++ b/profiles/features/hardened/package.use
@@ -2,4 +2,4 @@
 # Distributed under the terms of the GNU General Public License v2
 
 dev-lang/python gdbm
-
+sys-libs/gdbm berkdb

[gentoo-commits] repo/gentoo:master commit in: profiles/features/hardened/

[Thomas Deutschmann]

commit:     2d9d9de8d3772455a5f872429070d5cb0a933259
Author:     Thomas Deutschmann <whissi <AT> gentoo <DOT> org>
AuthorDate: Sun Feb 10 15:42:35 2019 +0000
Commit:     Thomas Deutschmann <whissi <AT> gentoo <DOT> org>
CommitDate: Sun Feb 10 21:49:59 2019 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2d9d9de8

profile: hardened: remove "profile" use.mask

Acked-by: Magnus Granberg <zorry <AT> gentoo.org>
Bug: https://bugs.gentoo.org/676988

Signed-off-by: Thomas Deutschmann <whissi <AT> gentoo.org>

 profiles/features/hardened/use.mask | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/profiles/features/hardened/use.mask b/profiles/features/hardened/use.mask
index e3999ad4870..1b90677af3d 100644
--- a/profiles/features/hardened/use.mask
+++ b/profiles/features/hardened/use.mask
@@ -1,4 +1,4 @@
-# Copyright 1999-2017 Gentoo Foundation
+# Copyright 1999-2019 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 -hardened
@@ -8,6 +8,3 @@ pch
 
 # prelink is masked for hardened
 prelink
-
-# profile are incompatible when linking with pie
-profile

[gentoo-commits] repo/gentoo:master commit in: profiles/features/hardened/

[Magnus Granberg]

commit:     b089a3662eb5ad528c1fddf9228f7ac8017287d8
Author:     Magnus Granberg <zorry <AT> gentoo <DOT> org>
AuthorDate: Sun Mar 10 12:27:57 2019 +0000
Commit:     Magnus Granberg <zorry <AT> gentoo <DOT> org>
CommitDate: Sun Mar 10 12:29:45 2019 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b089a366

profile: hardened: remove mask use senitize from gcc

Closes: https://bugs.gentoo.org/678956
Signed-off-by: Magnus Granberg <zorry <AT> gentoo.org>

 profiles/features/hardened/package.use.mask | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/profiles/features/hardened/package.use.mask b/profiles/features/hardened/package.use.mask
index cdab4d608d0..12eae87601c 100644
--- a/profiles/features/hardened/package.use.mask
+++ b/profiles/features/hardened/package.use.mask
@@ -1,9 +1,9 @@
-# Copyright 1999-2017 Gentoo Foundation
+# Copyright 1999-2019 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
 
 sys-apps/hwloc gl
 
-sys-devel/gcc -hardened sanitize
+sys-devel/gcc -hardened
 sys-libs/glibc -hardened
 
 # Ian Stakenvicius <axs@gentoo.org> (03 Dec 2014)

[gentoo-commits] repo/gentoo:master commit in: profiles/features/hardened/

[Magnus Granberg]

commit:     b6c9bcb1f1ce9146a3e52b53f6653c597b7743f4
Author:     Magnus Granberg <zorry <AT> gentoo <DOT> org>
AuthorDate: Tue Jun 11 00:07:03 2019 +0000
Commit:     Magnus Granberg <zorry <AT> gentoo <DOT> org>
CommitDate: Tue Jun 11 00:07:03 2019 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b6c9bcb1

profile: features/hardened set PAX_MARKINGS to none
We no longer pax mark packages as default.

Signed-off-by: Magnus Granberg <zorry <AT> gentoo.org>

 profiles/features/hardened/make.defaults | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/profiles/features/hardened/make.defaults b/profiles/features/hardened/make.defaults
index 88e165c4611..cd5eaf2d565 100644
--- a/profiles/features/hardened/make.defaults
+++ b/profiles/features/hardened/make.defaults
@@ -1,4 +1,4 @@
-# Copyright 1999-2017 Gentoo Foundation.
+# Copyright 1999-2019 Gentoo Foundation.
 # Distributed under the terms of the GNU General Public License v2
 
 # Jorge Manuel B. S. Vicetto <jmbsvicetto@gentoo.org> (16 Nov 2011)
@@ -14,8 +14,8 @@ USE="hardened pic xtpax -jit -orc"
 # of running hardened.
 PROFILE_IS_HARDENED=1
 
-# We set the default markings to XATTR_PAX
-PAX_MARKINGS="XT"
+# We set the default markings to none
+PAX_MARKINGS="none"
 USE="${USE} -ptpax"
 
 # Default starting set of USE flags for all default/linux profiles.

[gentoo-commits] repo/gentoo:master commit in: profiles/features/hardened/

[Sergei Trofimovich]

commit:     0525bd526b923a35631e507bff0dc0363bdf80a2
Author:     Sergei Trofimovich <slyfox <AT> gentoo <DOT> org>
AuthorDate: Wed May  6 06:58:03 2020 +0000
Commit:     Sergei Trofimovich <slyfox <AT> gentoo <DOT> org>
CommitDate: Wed May  6 07:01:27 2020 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=0525bd52

profiles/features/hardened: drop outdated sys-libs/glibc mask

Signed-off-by: Sergei Trofimovich <slyfox <AT> gentoo.org>

 profiles/features/hardened/package.mask | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/profiles/features/hardened/package.mask b/profiles/features/hardened/package.mask
index af6a869977f..c5d117e47c2 100644
--- a/profiles/features/hardened/package.mask
+++ b/profiles/features/hardened/package.mask
@@ -1,9 +1,6 @@
 # Copyright 1999-2017 Gentoo Foundation.
 # Distributed under the terms of the GNU General Public License v2
 
-# We need newer then glibc 2.24
-<sys-libs/glibc-2.25
-
 # broken on hardened, use sys-apps/elfix to fix gnustack
 sys-devel/prelink
 # depends on prelink

[gentoo-commits] repo/gentoo:master commit in: profiles/features/hardened/

[Andrew Savchenko]

commit:     c5bbabacc02e40aaf790fe8b78b3aa20a0a091dd
Author:     Andrew Savchenko <bircoph <AT> gentoo <DOT> org>
AuthorDate: Sun Nov 29 19:04:33 2020 +0000
Commit:     Andrew Savchenko <bircoph <AT> gentoo <DOT> org>
CommitDate: Sun Nov 29 19:14:16 2020 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c5bbabac

profiles/features/hardened/package.mask: drop last rited net-fs/openafs-kernel mask

Signed-off-by: Andrew Savchenko <bircoph <AT> gentoo.org>

 profiles/features/hardened/package.mask | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/profiles/features/hardened/package.mask b/profiles/features/hardened/package.mask
index c5d117e47c2..4f541debfd1 100644
--- a/profiles/features/hardened/package.mask
+++ b/profiles/features/hardened/package.mask
@@ -5,8 +5,3 @@
 sys-devel/prelink
 # depends on prelink
 app-crypt/hmaccalc
-
-# OpenAFS kernel module is not compatible with hardened kernels
-# due to C99 struct init requirement by hardened kernels,
-# see bug 540196 comment 9.
-net-fs/openafs-kernel

[gentoo-commits] repo/gentoo:master commit in: profiles/features/hardened/

[Jakov Smolić]

commit:     a3468b3dba9129811063b54ec1c087c570d8f507
Author:     Jakov Smolić <jsmolic <AT> gentoo <DOT> org>
AuthorDate: Wed Feb 23 09:27:20 2022 +0000
Commit:     Jakov Smolić <jsmolic <AT> gentoo <DOT> org>
CommitDate: Wed Feb 23 09:40:02 2022 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a3468b3d

profiles/features/hardened: Remove sys-devel/prelink masks

Signed-off-by: Jakov Smolić <jsmolic <AT> gentoo.org>

 profiles/features/hardened/package.mask | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/profiles/features/hardened/package.mask b/profiles/features/hardened/package.mask
deleted file mode 100644
index 9544faf8b3d7..000000000000
--- a/profiles/features/hardened/package.mask
+++ /dev/null
@@ -1,7 +0,0 @@
-# Copyright 1999-2020 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-# broken on hardened, use sys-apps/elfix to fix gnustack
-sys-devel/prelink
-# depends on prelink
-app-crypt/hmaccalc

[gentoo-commits] repo/gentoo:master commit in: profiles/features/hardened/

[Sam James]

commit:     5591d00f60e810160f78fa32a66fdbed591ddb7f
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Tue Sep 20 00:01:35 2022 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Tue Sep 20 00:02:10 2022 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5591d00f

profiles/features/hardened: drop odd USE defaults

This leads to poor UX and there's no reason for hardened
to deviate here -- none of these things make a system
more hardened, they just lead to confusion.

Closes: https://bugs.gentoo.org/871720
Bug: https://bugs.gentoo.org/831045
Signed-off-by: Sam James <sam <AT> gentoo.org>

 profiles/features/hardened/make.defaults | 9 +--------
 1 file changed, 1 insertion(+), 8 deletions(-)

diff --git a/profiles/features/hardened/make.defaults b/profiles/features/hardened/make.defaults
index 2ce5764c5271..8843d9bdb2c8 100644
--- a/profiles/features/hardened/make.defaults
+++ b/profiles/features/hardened/make.defaults
@@ -1,4 +1,4 @@
-# Copyright 1999-2021 Gentoo Authors
+# Copyright 1999-2022 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 # Jorge Manuel B. S. Vicetto <jmbsvicetto@gentoo.org> (2011-11-16)
@@ -17,10 +17,3 @@ PROFILE_IS_HARDENED=1
 # We set the default markings to none
 PAX_MARKINGS="none"
 USE="${USE} -ptpax"
-
-# Default starting set of USE flags for all default/linux profiles.
-# We unset them so we get a clean use flag profile.
-USE="${USE} -berkdb -gdbm"
-USE="${USE} -fortran"
-USE="${USE} -cli"
-USE="${USE} -dri"

[gentoo-commits] repo/gentoo:master commit in: profiles/features/hardened/

[Andreas K. Hüttel]

commit:     33d9c7e83e61997737299362fc5f9b6d3355c772
Author:     Andreas K. Hüttel <dilfridge <AT> gentoo <DOT> org>
AuthorDate: Mon Nov 28 23:11:18 2022 +0000
Commit:     Andreas K. Hüttel <dilfridge <AT> gentoo <DOT> org>
CommitDate: Tue Nov 29 00:00:05 2022 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=33d9c7e8

profiles, hardened: force new gcc useflags default-znow and default-stack-clash-protection

Signed-off-by: Andreas K. Hüttel <dilfridge <AT> gentoo.org>

 profiles/features/hardened/package.use.force | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/profiles/features/hardened/package.use.force b/profiles/features/hardened/package.use.force
index 28c4aed893e2..db6568d5cdd6 100644
--- a/profiles/features/hardened/package.use.force
+++ b/profiles/features/hardened/package.use.force
@@ -5,3 +5,7 @@
 app-arch/tar xattr
 sys-apps/coreutils xattr
 sys-apps/portage xattr
+
+# Andreas K. Hüttel <dilfridge@gentoo.org> (29/Nov/2022)
+# Needed for new mechanism in gcc-13
+>sys-devel/gcc-12.99 default-znow default-stack-clash-protection

[gentoo-commits] repo/gentoo:master commit in: profiles/features/hardened/

[Sam James]

commit:     09a9d57cd20f281bdb97005f9006af83779b15cf
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Wed Nov 30 02:10:48 2022 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Wed Nov 30 02:10:48 2022 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=09a9d57c

profiles/features/hardened: update copyright line & date format

Signed-off-by: Sam James <sam <AT> gentoo.org>

 profiles/features/hardened/package.use.force | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/profiles/features/hardened/package.use.force b/profiles/features/hardened/package.use.force
index db6568d5cdd6..af2aa42787f1 100644
--- a/profiles/features/hardened/package.use.force
+++ b/profiles/features/hardened/package.use.force
@@ -1,11 +1,11 @@
-# Copyright 1999-2019 Gentoo Authors
+# Copyright 1999-2022 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Andreas K. Hüttel <dilfridge@gentoo.org> (2022-11-29)
+# Needed for new mechanism in gcc-13
+>sys-devel/gcc-12.99 default-znow default-stack-clash-protection
+
 # Needed for XATTR_PAX flags
 app-arch/tar xattr
 sys-apps/coreutils xattr
 sys-apps/portage xattr
-
-# Andreas K. Hüttel <dilfridge@gentoo.org> (29/Nov/2022)
-# Needed for new mechanism in gcc-13
->sys-devel/gcc-12.99 default-znow default-stack-clash-protection

[gentoo-commits] repo/gentoo:master commit in: profiles/features/hardened/

[Andreas K. Hüttel]

commit:     72a7863f15a783d3c459bada8f69bb6dc32b2caf
Author:     Andreas K. Hüttel <dilfridge <AT> gentoo <DOT> org>
AuthorDate: Mon Dec  5 00:28:56 2022 +0000
Commit:     Andreas K. Hüttel <dilfridge <AT> gentoo <DOT> org>
CommitDate: Mon Dec  5 00:30:41 2022 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=72a7863f

profiles: update gcc version with new useflags in hardened profile

Signed-off-by: Andreas K. Hüttel <dilfridge <AT> gentoo.org>

 profiles/features/hardened/package.use.force | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/profiles/features/hardened/package.use.force b/profiles/features/hardened/package.use.force
index af2aa42787f1..0cf2ecd72743 100644
--- a/profiles/features/hardened/package.use.force
+++ b/profiles/features/hardened/package.use.force
@@ -2,8 +2,8 @@
 # Distributed under the terms of the GNU General Public License v2
 
 # Andreas K. Hüttel <dilfridge@gentoo.org> (2022-11-29)
-# Needed for new mechanism in gcc-13
->sys-devel/gcc-12.99 default-znow default-stack-clash-protection
+# Needed for new mechanism
+>=sys-devel/gcc-12.2 default-znow default-stack-clash-protection
 
 # Needed for XATTR_PAX flags
 app-arch/tar xattr

[gentoo-commits] repo/gentoo:master commit in: profiles/features/hardened/

[Sam James]

commit:     a1eb4cab8cd32749c2141710c594f9a024cd82af
Author:     Leonardo Hernández Hernández <leohdz172 <AT> proton <DOT> me>
AuthorDate: Tue Dec 12 01:00:19 2023 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Tue Dec 12 01:02:46 2023 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a1eb4cab

profiles/features/hardened: fix typo

Signed-off-by: Leonardo Hernández Hernández <leohdz172 <AT> proton.me>
Closes: https://github.com/gentoo/gentoo/pull/34245
Signed-off-by: Sam James <sam <AT> gentoo.org>

 profiles/features/hardened/use.force | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/profiles/features/hardened/use.force b/profiles/features/hardened/use.force
index 2f57880682b1..af1716a92f43 100644
--- a/profiles/features/hardened/use.force
+++ b/profiles/features/hardened/use.force
@@ -1,6 +1,6 @@
-# Copyright 1999-2017 Gentoo Foundation
+# Copyright 1999-2023 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
-# Make sure people don't accidentally turn of ssp/pie in important packages.
+# Make sure people don't accidentally turn off ssp/pie in important packages.
 pie
 ssp