From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id CEA9F1396D9 for ; Tue, 10 Oct 2017 19:16:44 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id C88782BC026; Tue, 10 Oct 2017 19:16:39 +0000 (UTC) Received: from mo6-p05-ob.smtp.rzone.de (mo6-p05-ob.smtp.rzone.de [IPv6:2a01:238:20a:202:5305::8]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 586992BC004 for ; Tue, 10 Oct 2017 19:16:38 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1507662997; s=domk; d=akhuettel.de; h=Content-Type:MIME-Version:References:In-Reply-To:Date:Subject:Cc:To: From; bh=cmJHwVSz2qKueEhjRhDJa4A3N+QdJO2HU2eN0coXZBM=; b=RSd0PS6ChwMHIoF+kNcNfg2DPhanfxidJXyqI2jlnQBQ5KCBFv2jqe/aDmrTRaqlaw ecm1Uhdw5vwYioA+MLFeUvl2r6+myMi0L10J5YfQxEZ6VH5A/b7s7jYdwxvmbvpcEAvz LkgvSAeQL4q6C1ilcgILhXRTGQq54v2GNH4rc= X-RZG-AUTH: :OWINOFLlffDapcDBqFE7Zrd96KgtvCbCLT6AOrgenbpvKdiafvhmpwZI4ljQhTB4yGxmeDe1cGTk3Q== X-RZG-CLASS-ID: mo05 Received: from pinacolada.localnet ([88.133.184.181]) by smtp.strato.de (RZmta 42.4 AUTH) with ESMTPSA id L0897bt9AJGY48K (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (curve secp521r1 with 521 ECDH bits, eq. 15360 bits RSA)) (Client did not present a certificate); Tue, 10 Oct 2017 21:16:34 +0200 (CEST) From: "Andreas K. Huettel" To: gentoo-dev@lists.gentoo.org Cc: PR Gentoo Subject: [gentoo-dev] RFC v2: news item for the 17.0 profiles Date: Tue, 10 Oct 2017 21:16:33 +0200 Message-ID: <1537421.UsZouyEjHW@pinacolada> Organization: Gentoo Linux In-Reply-To: <1528131.eIYCIZq90I@pinacolada> References: <1528131.eIYCIZq90I@pinacolada> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart4501044.7ihPg4vghd"; micalg="pgp-sha512"; protocol="application/pgp-signature" X-Archives-Salt: 775df673-d518-482f-a6c8-4191a770bc35 X-Archives-Hash: 23fbf1d897d89f972d877ea51c39614e --nextPart4501044.7ihPg4vghd Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="iso-8859-1" =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Title: New 17.0 profiles in the Gentoo repository Author: Andreas K. H=FCttel Posted: xxxxxxx Revision: 1 News-Item-Format: 2.0 Display-If-Installed: >=3Dsys-devel/gcc-6.4.0 We have just added a new set of profiles with release version 17.0 to the Gentoo repository. These bring three changes: 1) The default C++ language version for applications is now C++14. This change is mostly relevant to Gentoo developers. It also means, however, that compilers earlier than GCC 6 are masked and not supported for use as a system compiler anymore. Feel free to unmask them if you need them for specific applications. 2) Where supported, GCC will now build position-independent executables (PIE) by default. This improves the overall security fingerprint. The switch from non-PIE to PIE binaries, however, requires some steps by users, as detailed below. 3) Up to now, hardened profiles were separate from the default profile tree. Now they are moving into the 17.0 profile as a feature there, similar to "no-multilib" and "systemd". Please consider switching from your current 13.0 profile to the corresponding 17.0 profile soon after GCC 6.4.0 has been stabilized on your architecture. The 13.0 profiles will be deprecated and removed in the near future. Switching involves the following steps: If not already done, * Use gcc-config to select gcc-6.4.0 (or later) as system compiler * Re-source /etc/profile: . /etc/profile * Re-emerge libtool Then, * Select the new profile with eselect * Re-emerge, in this sequence, the selected gcc, binutils, and glibc emerge -1 sys-devel/gcc:6.4.0 emerge -1 sys-devel/binutils emerge -1 sys-libs/glibc * Rebuild your entire system emerge -e world Switching the profile modifies the use-flags of GCC 6 to generate PIE executables by default; thus, you need to do the rebuilds even if you already used GCC 6 beforehand. If you do not follow these steps you may get spurious build failures when the linker tries unsuccessfully to combine non-PIE and PIE code. =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =2D-=20 Andreas K. H=FCttel dilfridge@gentoo.org Gentoo Linux developer (council, perl, libreoffice) --nextPart4501044.7ihPg4vghd Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQKTBAABCgB9FiEEwo/LD3vtE3qssC2JpEzzc+fumeQFAlndHJFfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEMy OEZDQjBGN0JFRDEzN0FBQ0IwMkQ4OUE0NENGMzczRTdFRTk5RTQACgkQpEzzc+fu meQfDQ//bOV1A78q14pTuQUgjnnqp5H5Rqbe0xmJYCVNwQNBPR5VpJejzO/hSrDE bRc8GnsYlHVBlA175f6Do/vZNeNWl9qCg/7b7sWzDm4m/s4V7Cdj1phUPeARWmES IvxGKI8ondDAa2/1YTEczrHoqkN6IFntHZJR7Kd+W4G24sDyQyU7apKQCb2rEGqq KaioABCAwuKCpSt5PmZptuRRdsVBHRQESHqhxRz0W3yfZ+FeaWh6lhdg7tw24Lue RJwl8rNITFqkh1sbPdKqw3M4cD4Rnu4ppy9tb0waCB5nIQzdNG4rtVj4QiwK5xLc zfRJHNumjX0dm2KnWnIfAfZYiW4T3kF7422LGJypL4J3gIhG1Inl5wld4CaM4IME uQ1F9Bu6xdGWJ3xnljCqhGldxxHH4o65YBkzK1mU6f/Q1nR9Ls3QwGNdvjwl4K4M l6Fwi6Jfl7CxuHWFwZ0Vnp+zc9M0tb5Awjn2H4aADjyFMwRiOQIIZB954Sgk6pWl lD/ljf/zKwdB/OxD8ASaPpCJcGS4JTObXB7O+1P25cM3PRq3PVJ+MvLi7NPieTND +/NBK2MANWEK9XKxUMxddBOSb+PxUSpm8IVedLsKIKkItGn6tlRyXZL5hfWJZ+Kl w7R0DNx2sTRZnp0lXKu+X48RPRCTsfFw9V4LxrrgjZS1UInHoWc= =yx/q -----END PGP SIGNATURE----- --nextPart4501044.7ihPg4vghd--