From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id CB74F158041 for ; Sat, 23 Mar 2024 18:44:03 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 8E78CE2A5C; Sat, 23 Mar 2024 18:43:58 +0000 (UTC) Received: from slateblue.cherry.relay.mailchannels.net (slateblue.cherry.relay.mailchannels.net [23.83.223.168]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id B50D9E2A4A for ; Sat, 23 Mar 2024 18:43:57 +0000 (UTC) X-Sender-Id: thundermail|x-authsender|confabulate@kintzios.com Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id 878549015E8 for ; Sat, 23 Mar 2024 18:43:56 +0000 (UTC) ARC-Seal: i=1; s=arc-2022; d=mailchannels.net; t=1711219436; a=rsa-sha256; cv=none; b=lmDnKypud2L5g/LZ/Fj6ZdjWdT0kuIINZu88JGWqKNpQbfYuVwZLv8nHmJxXR7DaOdzAUD IU9cyWqv4Wd/6HtWqqs8JeuBFxvrdDwu/MlmX3eiDyJki0id5R1fqMax+h+7uGC0ivO9Vw vQtKdhhkiwIH/KUGASNw0HB28ebyCJk/WTq9/luwPTMM59pYYjWyXllpa8VnTP8HHR+QJv sIayV4/hQgaarm5LEfl7rUy0Q1SMklgGuyJWfD6cE3GRBkIZJGNky3WerwZwbwno5Ub8We CGcys/5GSM5xP0M7H368WKby0ZSQWLkYG0ZIzYks94Qet1QGFUzG1x2hMTIN8w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=mailchannels.net; s=arc-2022; t=1711219436; h=from:from:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references; bh=X0rh7ikU/TrPS8OV4gq/6YeTUn3O441FyyJUSAgMlEU=; b=vO/tTxNRmVFDCsjNBQJjXjKT7yKTa3xg+W5BDXiBMR7WB4Yz5+Sb7V3gcEnN7Ih9SjD31g R+VuF3e+lR+29yHD1IQfBKq9OusU/ChIWIjhco7X2xshCA01pfB3qk53r2cOuG2pNMAwiy oDPY34smcQysvJJTpHtuiDk0K57CLgZDT9ENugyXLk3fH2DhDEm+02QtFCBDgPrFLyB4je 4Yqsrnjfky/Dy5Z90Ph9tHf2mad0aOM9zLUl6XoY+r+XW9H+v5Fbsj2X156FkjAM3otHic FrKMUFimkhY7O3nr9MuX75sCM0t+yPu/UqcdH3gLsPIRjRWcQMmj9ASx5rKlNw== ARC-Authentication-Results: i=1; rspamd-6c65898bb7-rcglv; auth=pass smtp.auth=thundermail smtp.mailfrom=confabulate@kintzios.com X-Sender-Id: thundermail|x-authsender|confabulate@kintzios.com X-MC-Relay: Neutral X-MailChannels-SenderId: thundermail|x-authsender|confabulate@kintzios.com X-MailChannels-Auth-Id: thundermail X-Trade-Tart: 1032dc6a3d676752_1711219436349_2222703252 X-MC-Loop-Signature: 1711219436349:2799580137 X-MC-Ingress-Time: 1711219436349 Received: from mailclean11.thundermail.uk (mailclean11.thundermail.uk [149.255.60.66]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384) by 100.119.87.136 (trex/6.9.2); Sat, 23 Mar 2024 18:43:56 +0000 Received: from cloud238.thundercloud.uk (cloud238.thundercloud.uk [149.255.62.116]) by mailclean11.thundermail.uk (Postfix) with ESMTPS id 5E94F4023F for ; Sat, 23 Mar 2024 18:43:49 +0000 (GMT) Authentication-Results: cloud238.thundercloud.uk; spf=pass (sender IP is 217.169.3.230) smtp.mailfrom=confabulate@kintzios.com smtp.helo=rogueboard.localnet Received-SPF: pass (cloud238.thundercloud.uk: connection is authenticated) From: Michael To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] New profiles 23.0 Date: Sat, 23 Mar 2024 18:43:48 +0000 Message-ID: <23446771.6Emhk5qWAg@rogueboard> In-Reply-To: <9d6fa73d-01f0-40c2-a9f1-95f4ce07e78f@yahoo.com> References: <5768289.DvuYhMxLoT@cube> <1883801.tdWV9SEqCh@rogueboard> <9d6fa73d-01f0-40c2-a9f1-95f4ce07e78f@yahoo.com> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart2602100.Lt9SDvczpP"; micalg="pgp-sha256"; protocol="application/pgp-signature" X-PPP-Message-ID: <171121942870.248869.1811193845211654059@cloud238.thundercloud.uk> X-PPP-Vhost: kintzios.com X-Rspamd-Queue-Id: 5E94F4023F X-Rspamd-Server: mailclean11 X-Spamd-Result: default: False [-1.61 / 999.00]; SIGNED_PGP(-2.00)[]; MID_RHS_NOT_FQDN(0.50)[]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; ONCE_RECEIVED(0.10)[]; MX_GOOD(-0.01)[]; DMARC_POLICY_ALLOW(0.00)[kintzios.com,none]; RCVD_TLS_ALL(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; FUZZY_BLOCKED(0.00)[rspamd.com]; R_SPF_ALLOW(0.00)[+mx]; ARC_NA(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; MISSING_XM_UA(0.00)[]; RCVD_COUNT_ONE(0.00)[1]; ASN(0.00)[asn:34931, ipnet:149.255.60.0/22, country:GB]; TO_DN_NONE(0.00)[]; REPLYTO_ADDR_EQ_FROM(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; PREVIOUSLY_DELIVERED(0.00)[gentoo-user@lists.gentoo.org]; R_DKIM_NA(0.00)[]; NEURAL_HAM(-0.00)[-0.764]; RCVD_VIA_SMTP_AUTH(0.00)[]; HAS_REPLYTO(0.00)[confabulate@kintzios.com] X-Rspamd-Action: no action X-Archives-Salt: ba0474ad-50e8-42d6-a2ed-7db28774d4e8 X-Archives-Hash: 6956a5b482b0144f24c145d62a4b7362 --nextPart2602100.Lt9SDvczpP Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="UTF-8"; protected-headers="v1" From: Michael To: gentoo-user@lists.gentoo.org Reply-To: confabulate@kintzios.com Subject: Re: [gentoo-user] New profiles 23.0 Date: Sat, 23 Mar 2024 18:43:48 +0000 Message-ID: <23446771.6Emhk5qWAg@rogueboard> In-Reply-To: <9d6fa73d-01f0-40c2-a9f1-95f4ce07e78f@yahoo.com> MIME-Version: 1.0 On Saturday, 23 March 2024 18:29:58 GMT ralfconn wrote: > Il 23/03/24 18:42, Michael ha scritto: > > I suggest it would be best to take heed of the devs hard work and > > read the > > > instructions they have provided instead of winging it: > > > > https://wiki.gentoo.org/wiki/Project:Toolchain/23.0_update_instructions > > I'm currently running a local merged profile: > > # cat /var/db/repos/local/profiles/no-multilib-hardened-desktop/parent > gentoo:default/linux/amd64/17.1/no-multilib/hardened > gentoo:targets/desktop > > $ euse -a | grep usr > split-usr [+ D F ] > > I suppose that before step 3 of the wiki I'd need to create a new local > merged profile, e.g.: > > #cat > /var/db/repos/local/profiles/23.0-split-usr-no-multilib-hardened-desktop/par > ent gentoo:default/linux/amd64/23.0/split-usr/no-multilib/hardened > gentoo:targets/split-usr/desktop > > Does that make sense? > > thanks > > raf Update portage and check the profiles offered by 'eselect profile list'. For example, I can see: [51] default/linux/amd64/23.0/split-usr/no-multilib/hardened (stable) which should provide what you're after. --nextPart2602100.Lt9SDvczpP Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEXqhvaVh2ERicA8Ceseqq9sKVZxkFAmX/IuQACgkQseqq9sKV ZxnKXBAA4rfqU8r7vfIVglUstXmcRHe38bMKBF8AhtlSGG7sfDMcZo+pJB72Db4R 5qJ7jjCg1EBNiD81dZvtgpUOrqjvE8KtxRH+HMzJ87E6dH4ZSdxxHCb0jpvZK9te RVaRuY/AM17XHaXgX+tpAEngazZYkJ4ftK6hWN0ZoXesIqmt2WaoqBt+75qf2EMm 5KoMmNVXQRbW5tMNlEQ3W+O1pwYaBULelKXcVAzXyC15PbbdovhZkV8zoyPqM16j j7IjPpr3Ohl33hfWn0PpFvs9NdImBrfCl8cVxpIkrxXYaqg58KcfydHPcozXWPAT UFrlH6oteHbfhYPn61MmLIXyBnYoOytGdyZIFey3CfI1pvTkS229hQEVU4zDyCph vd1spnzKdteSyEukgXbKvqRDBmx8a0yTXJGFjMdxtr2TgfiYN1bj8g9ONQcUSHEl nmvjGio9uxJpcgMPUG9Bs/gvSfv3RqCXBoHsEEEn31mAS8aDWQCu5OhwLFnmfMKD 4xppHhtQFfdVAnYZlMov0wftYV2bKy5tG1b6sIj9w1goMlX3jWT2X8cQELFzisfq CbkICdvtDhft/rkQ4fGEe529TMEhY2PBhfWPk9LcRNIKNqFmkfc5wysubBhdLPcy Dpz3F5gEANvWPEn9+yrUFp72vFxOG+hzpekyaRvLJglcLrPBpBY= =PRQ3 -----END PGP SIGNATURE----- --nextPart2602100.Lt9SDvczpP--