summaryrefslogtreecommitdiff
blob: 6d17a3c3ee7d0ea93d7e324c0fd1d66a0ff1e91c (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
# ChangeLog for Gentoo/AMD64 profile directory
# Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2
# $Header: /var/cvsroot/gentoo-x86/profiles/hardened/ChangeLog,v 1.77 2015/01/30 22:04:37 blueness Exp $

  30 Jan 2015; Anthony G. Basile <blueness@gentoo.org>
  linux/musl/amd64/make.defaults, linux/musl/x86/make.defaults:
  musl: unhide the CPU_FLAGS_X86 USE_EXPANDs, mirror change from
  arch/{amd64,x86}/make.defaults.

  28 Jan 2015; Michał Górny <mgorny@gentoo.org> linux/musl/amd64/use.mask,
  linux/musl/x86/use.mask:
  Unmask CPU_FLAGS_X86 in musl profiles.

  30 Dec 2014; Anthony G. Basile <blueness@gentoo.org> linux/musl/package.mask:
  Unmask >sys-apps/file-5.17 for musl, bug #525816

  18 Nov 2014; Anthony G. Basile <blueness@gentoo.org>
  linux/musl/ppc/make.defaults:
  linux/musl/ppc/make.defaults: add mutlib ABI, thanks Felix Janda

  23 Oct 2014; Anthony G. Basile <blueness@gentoo.org>
  +linux/musl/package.use.mask:
  Mask USE=sanitize on musl profiles, bug #504200

  20 Oct 2014; Anthony G. Basile <blueness@gentoo.org> linux/musl/package.mask:
  Mask >app-misc/pax-utils-0.7 on musl for bug #526048

  18 Oct 2014; Anthony G. Basile <blueness@gentoo.org> linux/musl/package.mask:
  Mask >sys-apps/file-5.17 on musl for bug #525816

  12 Oct 2014; Magnus Granberg <zorry@gentoo.org> linux/amd64/package.use:
  Add pic for media-libs/libpostpros needed for the x86 part #523736

  14 Oct 2014; Anthony G. Basile <blueness@gentoo.org>
  linux/musl/make.defaults:
  BOOTSTRAP_USE=-nls to avoid a clash between musl and gettext in stage2

  11 Oct 2014; Tim Harder <radhermit@gentoo.org> linux/package.use.mask:
  Mask skype use flag for net-im/bitlbee since skype doesn't work under
  hardened.

  22 Sep 2014; Anthony G. Basile <blueness@gentoo.org> linux/make.defaults,
  linux/package.use.force:
  Default USE=xattr on for all hardened profiles, and force on for tar,
  coreutils and portage

  21 Aug 2014; Anthony G. Basile <blueness@gentoo.org>
  +linux/musl/mips/package.mask:
  Mask some packages for musl/mipsel

  16 Aug 2014; Anthony G. Basile <blueness@gentoo.org>
  -linux/uclibc/amd64/make.defaults, -linux/uclibc/amd64/package.mask,
  linux/uclibc/amd64/parent, -linux/uclibc/amd64/use.force,
  -linux/uclibc/amd64/use.mask, -linux/uclibc/arm/armv6j/make.defaults,
  linux/uclibc/arm/armv6j/parent, -linux/uclibc/arm/armv7a/make.defaults,
  linux/uclibc/arm/armv7a/parent, -linux/uclibc/arm/make.defaults,
  -linux/uclibc/arm/parent, -linux/uclibc/arm/use.force,
  -linux/uclibc/arm/use.mask, linux/uclibc/make.defaults,
  -linux/uclibc/mips/make.defaults, -linux/uclibc/mips/mipsel/make.defaults,
  linux/uclibc/mips/mipsel/parent, -linux/uclibc/mips/package.mask,
  linux/uclibc/mips/parent, -linux/uclibc/mips/use.force,
  -linux/uclibc/mips/use.mask, -linux/uclibc/package.mask,
  -linux/uclibc/packages, -linux/uclibc/packages.build, -linux/uclibc/parent,
  -linux/uclibc/ppc/make.defaults, -linux/uclibc/ppc/package.mask,
  -linux/uclibc/ppc/package.use.mask, linux/uclibc/ppc/parent,
  -linux/uclibc/ppc/use.force, -linux/uclibc/ppc/use.mask,
  -linux/uclibc/use.force, linux/uclibc/use.mask,
  -linux/uclibc/x86/make.defaults, linux/uclibc/x86/parent,
  -linux/uclibc/x86/use.force, -linux/uclibc/x86/use.mask:
  Inherit hardened/linux/uclibc from default/linux/uclibc

  13 Aug 2014; Anthony G. Basile <blueness@gentoo.org> linux/musl/package.mask,
  linux/uclibc/package.mask:
  Use eudev on uclibc and musl.

  04 Aug 2014; Robin H. Johnson <robbat2@gentoo.org> linux/package.mask:
  hmaccalc depends in prelink.

  23 Jul 2014; Anthony G. Basile <blueness@gentoo.org> linux/musl/package.mask:
  Remove unmasking of sys-libs/musl on musl profiles

  22 Jul 2014; Christoph Junghans <ottxor@gentoo.org>
  linux/amd64/no-multilib/package.mask:
  masked games-fps/enemy-territory-omnibot on no-multilib

  17 Jul 2014; Magnus Granberg <zorry@gentoo.org>
  linux/amd64/no-multilib/make.defaults,
  +linux/amd64/no-multilib/package.use:
  Set -pic as we don't need it as we don't use x86

  15 Jul 2014; Anthony G. Basile <blueness@gentoo.org>
  +linux/uclibc/ppc/package.mask:
  Mask openssh on hardened/linux/uclibc/ppc, bug #517160

  12 Jul 2014; Anthony G. Basile <blueness@gentoo.org>
  linux/uclibc/package.mask:
  Mask >sys-fs/e2fsprogs-1.42.7 because of bug #516988

  08 Jul 2014; Magnus Granberg <zorry@gentoo.org>
  linux/amd64/package.use:
  Add pic to package that need it when use of the new multilib

  02 Jul 2014; Michał Górny <mgorny@gentoo.org>
  linux/musl/mips/mipsel/make.defaults, linux/uclibc/mips/mipsel/make.defaults:
  Fix wrongly inherited CHOST_o32 in {musl,uclibc/mips/mipsel profiles.

  01 Jul 2014; Anthony G. Basile <blueness@gentoo.org>
  linux/musl/amd64/make.defaults, linux/musl/amd64/use.force,
  linux/musl/amd64/use.mask, linux/musl/mips/make.defaults,
  linux/musl/mips/use.force, linux/musl/mips/use.mask,
  linux/musl/x86/make.defaults, linux/musl/x86/use.force,
  linux/musl/x86/use.mask:
  Make linux/musl multilib aware, bug #515130

  01 Jul 2014; Anthony G. Basile <blueness@gentoo.org>
  linux/uclibc/amd64/make.defaults, linux/uclibc/amd64/use.force,
  linux/uclibc/amd64/use.mask, linux/uclibc/mips/make.defaults,
  linux/uclibc/mips/use.force, linux/uclibc/mips/use.mask,
  linux/uclibc/ppc/make.defaults, linux/uclibc/ppc/use.force,
  +linux/uclibc/ppc/use.mask, linux/uclibc/x86/make.defaults,
  linux/uclibc/x86/use.force, linux/uclibc/x86/use.mask:
  Make linux/uclibc multilib aware, bug #515130

  13 Jun 2014; Anthony G. Basile <blueness@gentoo.org>
  linux/musl/mips/mipsel/make.defaults:
  Disable sandbox on mipsel-musl because its currently broken

  09 Jun 2014; Anthony G. Basile <blueness@gentoo.org>
  linux/musl/amd64/make.defaults, linux/musl/make.defaults,
  linux/musl/x86/make.defaults:
  Remove redundant INSTALL_MASK in amd64 and x86

  08 Jun 2014; Anthony G. Basile <blueness@gentoo.org>
  linux/musl/make.defaults:
  Set INSTALL_MASK=charset.alias on musl profiles

  05 Jun 2014; Anthony G. Basile <blueness@gentoo.org>
  linux/musl/packages.build:
  Make sure sandbox is part of stage1 for musl profiles

  04 Jun 2014; Anthony G. Basile <blueness@gentoo.org> linux/musl/packages:
  Make sure sandbox is pulled in on all musl profiles

  01 Jun 2014; Anthony G. Basile <blueness@gentoo.org>
  profiles/hardened/linux/musl: Enable sandbox on musl profiles

  01 Jun 2014; Magnus Granberg <zorry@gentoo.org>
  linux/amd64/package.use:
  We need the pic use flag for the multilib abi_x86_32 part for
  media-libs/x264 bug # 490276

  28 May 2014; Sven Vermeulen <swift@gentoo.org>
  linux/amd64/no-multilib/package.mask:
  Remove huludesktop from package.mask (package has been removed)

  30 Mar 2014; Michał Górny <mgorny@gentoo.org>
  linux/amd64/package.use.stable.mask:
  Move abi_x86_32 package stable-mask to arch profile since it is EAPI=5 now.

  30 Mar 2014; Chí-Thanh Christopher Nguyễn <chithanh@gentoo.org>
  linux/amd64/package.use.stable.mask:
  Mask abi_x86_32 for libxshmfence, bug #506056.

  27 Mar 2014; Andreas K. Huettel <dilfridge@gentoo.org> +eapi,
  +linux/amd64/no-multilib/eapi, +linux/amd64/no-multilib/selinux/eapi,
  +linux/amd64/selinux/eapi, +linux/amd64/x32/eapi, +linux/eapi,
  +linux/musl/eapi, +linux/musl/mips/mipsel/eapi, +linux/uclibc/eapi,
  +linux/uclibc/mips/mipsel/eapi, +linux/x86/selinux/eapi:
  Increase EAPI to 5

  26 Mar 2014; Chí-Thanh Christopher Nguyễn <chithanh@gentoo.org>
  linux/amd64/package.use.stable.mask:
  Mask multilib for wayland/weston, so they can go stable in bug #500368.

  16 Mar 2014; Tom Wijsman <TomWij@gentoo.org>
  linux/amd64/package.use.stable.mask, linux/x86/package.use.stable.mask:
  Mask unstable USE flags on media-video/vlc, see security bug #499806.

  09 Mar 2014; Anthony G. Basile <blueness@gentoo.org>
  linux/uclibc/amd64/use.force, linux/uclibc/amd64/use.mask,
  linux/uclibc/x86/use.force, linux/uclibc/x86/use.mask,
  linux/musl/amd64/use.force, linux/musl/amd64/use.mask,
  linux/musl/x86/use.force, linux/musl/x86/use.mask:
  hardened/linux/{uclibc,musl}/{amd64,x86}: force default abi flags

  28 Feb 2014; Anthony G. Basile <blueness@gentoo.org> +linux/musl/mips/eapi,
  +linux/musl/mips/make.defaults, +linux/musl/mips/mipsel/make.defaults,
  +linux/musl/mips/mipsel/parent, +linux/musl/mips/parent,
  +linux/musl/mips/use.force, +linux/musl/mips/use.mask:
  Add hardened/linux/musl/mips and hardened/linux/musl/mips/mipsel

  21 Feb 2014; Anthony G. Basile <blueness@gentoo.org>
  +linux/musl/arm/armv7a/eapi, +linux/musl/arm/armv7a/make.defaults,
  +linux/musl/arm/armv7a/parent, +linux/musl/arm/eapi,
  +linux/musl/arm/make.defaults, +linux/musl/arm/parent,
  +linux/musl/arm/use.force, +linux/musl/arm/use.mask:
  Add hardened/linux/musl/arm/armv7a

  17 Feb 2014; Anthony G. Basile <blueness@gentoo.org>
  linux/musl/amd64/make.defaults, linux/musl/x86/make.defaults:
  Sandbox from hardened-dev::musl overlay works

  11 Feb 2014; Anthony G. Basile <blueness@gentoo.org> linux/make.defaults:
  Add xtpax to BOOTSTRAP_USE/USE in base hardened make.default, for
  sys-apps/elfix

  03 Feb 2014; Anthony G. Basile <blueness@gentoo.org>
  linux/uclibc/package.mask:
  Remove -sys-libs/uclibc from hardened/linux/uclibc/package.mask, bug #500202

  27 Jan 2014; Anthony G. Basile <blueness@gentoo.org> linux/musl/use.mask:
  hardened/linux/musl: provide nls support with gettext

  26 Jan 2014; Anthony G. Basile <blueness@gentoo.org>
  linux/musl/packages.build:
  hardened/linux/musl: switch to dev-util/pkgconf which does better in musl

  24 Jan 2014; Anthony G. Basile <blueness@gentoo.org>
  linux/musl/amd64/make.defaults, linux/musl/x86/make.defaults:
  Move musl's linker path to gcc's specs file

  24 Jan 2014; Anthony G. Basile <blueness@gentoo.org>
  linux/musl/amd64/make.defaults, linux/musl/make.defaults,
  linux/musl/packages, linux/musl/packages.build, linux/musl/x86/make.defaults:
  linux/musl: fix linker path and remove libiconv

  23 Jan 2014; Mikle Kolyada <zlogene@gentoo.org>
  linux/amd64/package.use.stable.mask:
  Fix qt packages category.

  21 Jan 2014; Samuli Suominen <ssuominen@gentoo.org>
  linux/amd64/package.use.stable.mask:
  Missing abi_x86_32 mask for dev-libs/libcdio-paranoia wrt #497246 by Pacho
  Ramos

  31 Dec 2013; Anthony G. Basile <blueness@gentoo.org>
  +linux/arm/use.stable.mask:
  Disable stable-mask for python3.3 flags on arm

  30 Dec 2013; Anthony G. Basile <blueness@gentoo.org>
  linux/uclibc/package.mask:
  Bug #490008 is fixed, unmask >sys-kernel/linux-headers-3.9

  25 Dec 2013; Anthony G. Basile <blueness@gentoo.org>
  linux/uclibc/amd64/package.mask:
  Unmask >sys-libs/uclibc-0.9.33.2-r4 since bug #495256 is fixed

  24 Dec 2013; Anthony G. Basile <blueness@gentoo.org>
  linux/uclibc/amd64/package.mask:
  Mask >sys-libs/uclibc-0.9.33.2-r4 until bug #495256 is fixed

  20 Dec 2013; Anthony G. Basile <blueness@gentoo.org>
  -linux/amd64/desktop/deprecated, -linux/amd64/desktop/parent,
  -linux/amd64/developer/deprecated, -linux/amd64/developer/parent,
  -linux/amd64/server/deprecated, -linux/amd64/server/parent,
  -linux/ia64/desktop/deprecated, -linux/ia64/desktop/parent,
  -linux/ia64/developer/deprecated, -linux/ia64/developer/parent,
  -linux/ia64/server/deprecated, -linux/ia64/server/parent,
  -linux/powerpc/ppc32/desktop/deprecated, -linux/powerpc/ppc32/desktop/parent,
  -linux/powerpc/ppc32/developer/deprecated,
  -linux/powerpc/ppc32/developer/parent,
  -linux/powerpc/ppc32/server/deprecated, -linux/powerpc/ppc32/server/parent,
  -linux/powerpc/ppc64/32bit-userland/desktop/deprecated,
  -linux/powerpc/ppc64/32bit-userland/desktop/parent,
  -linux/powerpc/ppc64/32bit-userland/developer/deprecated,
  -linux/powerpc/ppc64/32bit-userland/developer/parent,
  -linux/powerpc/ppc64/32bit-userland/server/deprecated,
  -linux/powerpc/ppc64/32bit-userland/server/parent,
  -linux/powerpc/ppc64/64bit-userland/desktop/deprecated,
  -linux/powerpc/ppc64/64bit-userland/desktop/parent,
  -linux/powerpc/ppc64/64bit-userland/developer/deprecated,
  -linux/powerpc/ppc64/64bit-userland/developer/parent,
  -linux/powerpc/ppc64/64bit-userland/server/deprecated,
  -linux/powerpc/ppc64/64bit-userland/server/parent,
  -linux/powerpc/ppc64/desktop/deprecated, -linux/powerpc/ppc64/desktop/parent,
  -linux/powerpc/ppc64/developer/deprecated,
  -linux/powerpc/ppc64/developer/parent,
  -linux/powerpc/ppc64/server/deprecated, -linux/powerpc/ppc64/server/parent,
  -linux/x86/desktop/deprecated, -linux/x86/desktop/parent,
  -linux/x86/developer/deprecated, -linux/x86/developer/parent,
  -linux/x86/minimal/deprecated, -linux/x86/minimal/make.defaults,
  -linux/x86/minimal/parent, -linux/x86/server/deprecated,
  -linux/x86/server/parent:
  Remove all deprecated /desktop /developer /server profiles

  01 Dec 2013; Mike Gilbert <floppym@gentoo.org> +linux/amd64/use.stable.mask:
  Disable stable-mask for python3.3 flags, bug 474128.

  31 Oct 2013; Anthony G. Basile <blueness@gentoo.org>
  linux/uclibc/package.mask:
  Mask >sys-kernel/linux-headers-3.9 on uclibc, bug #490008

  26 Oct 2013; Anthony G. Basile <blueness@gentoo.org>
  linux/uclibc/mips/package.mask:
  Unmask latest perl on uclibc/mips

  22 Oct 2013; Anthony G. Basile <blueness@gentoo.org> +linux/musl/amd64/eapi,
  +linux/musl/x86/eapi:
  Update all hardened musl arches to eapi 5

  22 Oct 2013; Anthony G. Basile <blueness@gentoo.org>
  +linux/uclibc/amd64/eapi, +linux/uclibc/arm/armv6j/eapi,
  +linux/uclibc/arm/armv7a/eapi, +linux/uclibc/arm/eapi,
  +linux/uclibc/mips/eapi, +linux/uclibc/ppc/eapi, +linux/uclibc/x86/eapi:
  Update all hardened uclibc arches to eapi 5

  22 Oct 2013; Anthony G. Basile <blueness@gentoo.org> +linux/ia64/eapi:
  Update ia64 to eapi 5

  21 Oct 2013; Anthony G. Basile <blueness@gentoo.org> +linux/powerpc/eapi,
  +linux/powerpc/ppc32/eapi, +linux/powerpc/ppc64/32bit-userland/eapi,
  +linux/powerpc/ppc64/64bit-userland/eapi, +linux/powerpc/ppc64/eapi:
  Update powerpc to eapi 5

  21 Oct 2013; Anthony G. Basile <blueness@gentoo.org> +linux/mips/eapi,
  +linux/mips/mipsel/eapi, +linux/mips/mipsel/multilib/eapi,
  +linux/mips/mipsel/multilib/n32/eapi, +linux/mips/mipsel/multilib/n64/eapi,
  +linux/mips/mipsel/n32/eapi, +linux/mips/mipsel/n64/eapi,
  +linux/mips/multilib/eapi, +linux/mips/multilib/n32/eapi,
  +linux/mips/multilib/n64/eapi, +linux/mips/n32/eapi, +linux/mips/n64/eapi:
  Update mips to eapi 5

  21 Oct 2013; Anthony G. Basile <blueness@gentoo.org> linux/arm/armv4/eapi,
  linux/arm/armv4t/eapi, linux/arm/armv5te/eapi, linux/arm/armv6j/eapi,
  linux/arm/armv7a/eapi, linux/arm/armv7a/selinux/eapi, linux/arm/eapi:
  Update arm to eapi 5

  03 Oct 2013; Matt Turner <mattst88@gentoo.org>
  linux/amd64/package.use.stable.mask:
  Drop unneeded libtxc_dxtn abi_x86_32 stable use mask.

  24 Sep 2013; Michał Górny <mgorny@gentoo.org>
  linux/amd64/package.use.stable.mask:
  Add missing abi_x86_32 masks as reported by Patrick Lauer.

  24 Sep 2013; Michał Górny <mgorny@gentoo.org> linux/amd64/package.use.mask,
  +linux/amd64/package.use.stable.mask:
  Move the abi_x86_32 mask to stable.mask, since the profile is EAPI=5 now.

  23 Sep 2013; Magnus Granberg <zorry@gentoo.org>
  +linux/amd64/eapi +/linux/x86/eapi
  update amd64 and x86 to eapi 5

  22 Sep 2013; Michał Górny <mgorny@gentoo.org> linux/amd64/package.use.mask:
  Mask abi_x86_32 on hardened as well, to make the way for stablereq.

  03 Aug 2013; Anthony G. Basile <blueness@gentoo.org>
  linux/uclibc/mips/make.defaults:
  linux/uclibc/mips/make.defaults: add abi and libdir info, bug #479656

  01 Aug 2013; Anthony G. Basile <blueness@gentoo.org>
  +linux/arm/armv7a/selinux/eapi, +linux/arm/armv7a/selinux/parent:
  linux/arm/armv7a/selinux: add hardened selinux for hardened armv7a

  22 Jun 2013; Anthony G. Basile <blueness@gentoo.org>
  +linux/musl/amd64/make.defaults, +linux/musl/amd64/package.mask,
  +linux/musl/amd64/parent, +linux/musl/amd64/use.force,
  +linux/musl/amd64/use.mask, +linux/musl/make.defaults,
  +linux/musl/package.mask, +linux/musl/packages, +linux/musl/packages.build,
  +linux/musl/parent, +linux/musl/use.force, +linux/musl/use.mask:
  Add very experimental hardened/linux/musl, only amd64 for now

  09 Jun 2013; Ulrich Müller <ulm@gentoo.org>
  linux/amd64/no-multilib/package.mask:
  Remove mask for media-libs/realcodecs and media-libs/win32codecs. Packages
  have been removed.

  30 May 2013; Justin Lecher <jlec@gentoo.org>
  linux/amd64/no-multilib/package.mask:
  Mask sci-chemistry/xdsgui due to missing support for
  sci-chemistry/xdsstat-bin

  30 May 2013; Justin Lecher <jlec@gentoo.org>
  linux/amd64/no-multilib/package.mask:
  Mask sci-chemistry/xdsstat-bin due to missing emul package

  17 May 2013; Magnus Granberg <zorry@gentoo.org> linux/amd64/no-multilib/package.mask:
  Readd some missings masks

  16 May 2013; Magnus Granberg <zorry@gentoo.org> linux/amd64/no-multilib/make.defaults,
  linux/amd64/no-multilib/package.mask, linux/amd64/no-multilib/package.use.force,
  linux/amd64/no-multilib/package.use.mask, linux/amd64/no-multilib/parent,
  linux/amd64/no-multilib/use.mask, ChangeLog:
  bug 470092 and 469254 qa on parent and missing arch/amd64/no-multilib(mirroring)