[gentoo-commits] gentoo-x86 commit in profiles/hardened/linux: make.defaults package.use.force

[Anthony G. Basile (blueness)]

blueness14/09/22 16:35:51

  Modified: make.defaults package.use.force
  Log:
  Default USE=xattr on for all hardened profiles, and force on for tar, 
coreutils and portage

Revision  ChangesPath
1.20 profiles/hardened/linux/make.defaults

file : 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/hardened/linux/make.defaults?rev=1.20&view=markup
plain: 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/hardened/linux/make.defaults?rev=1.20&content-type=text/plain
diff : 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/hardened/linux/make.defaults?r1=1.19&r2=1.20

Index: make.defaults
===
RCS file: /var/cvsroot/gentoo-x86/profiles/hardened/linux/make.defaults,v
retrieving revision 1.19
retrieving revision 1.20
diff -u -r1.19 -r1.20
--- make.defaults   3 Sep 2014 18:48:15 -   1.19
+++ make.defaults   22 Sep 2014 16:35:51 -  1.20
@@ -1,12 +1,12 @@
 # Copyright 1999-2014 Gentoo Foundation.
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/profiles/hardened/linux/make.defaults,v 
1.19 2014/09/03 18:48:15 axs Exp $
+# $Header: /var/cvsroot/gentoo-x86/profiles/hardened/linux/make.defaults,v 
1.20 2014/09/22 16:35:51 blueness Exp $
 
 # Jorge Manuel B. S. Vicetto  (16 Nov 2011)
 # Rename STAGE1_USE to BOOTSTRAP_USE and stack it to the parent value
 BOOTSTRAP_USE="${BOOTSTRAP_USE} hardened pax_kernel pic xtpax -jit -orc"
 
-USE="hardened pax_kernel pic urandom xtpax -fortran -jit -orc"
+USE="hardened pax_kernel pic urandom xattr xtpax -fortran -jit -orc"
 
 # Ian Stakenvicius, 2014-09-03
 # Set a variable just to indicate that the current profile is a hardened one



1.3  profiles/hardened/linux/package.use.force

file : 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/hardened/linux/package.use.force?rev=1.3&view=markup
plain: 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/hardened/linux/package.use.force?rev=1.3&content-type=text/plain
diff : 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/hardened/linux/package.use.force?r1=1.2&r2=1.3

Index: package.use.force
===
RCS file: /var/cvsroot/gentoo-x86/profiles/hardened/linux/package.use.force,v
retrieving revision 1.2
retrieving revision 1.3
diff -u -r1.2 -r1.3
--- package.use.force   18 Mar 2013 03:18:19 -  1.2
+++ package.use.force   22 Sep 2014 16:35:51 -  1.3
@@ -1,11 +1,12 @@
-# Copyright 1999-2013 Gentoo Foundation
+# Copyright 1999-2014 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/profiles/hardened/linux/package.use.force,v 
1.2 2013/03/18 03:18:19 blueness Exp $
+# $Header: /var/cvsroot/gentoo-x86/profiles/hardened/linux/package.use.force,v 
1.3 2014/09/22 16:35:51 blueness Exp $
 
 # Kacper Kowalik  (24 Aug 2011)
 # Force hardened flag to make repoman happy
 app-emulation/wine hardened
 
-# Needed for XATTR_PAX flags (17 Mar 2013)
-# Thanks Arfrever
+# Needed for XATTR_PAX flags
+app-arch/tar xattr
+sys-apps/coreutils xattr
 sys-apps/portage xattr

[gentoo-commits] gentoo-x86 commit in profiles/hardened/linux: make.defaults

[Ian Stakenvicius (axs)]

axs 14/09/03 18:48:15

  Modified: make.defaults
  Log:
  add a var to hardened profiles to help ebuilds tell end-users about things 
that are bad to do on hardened, reviewed by Zero_Chaos and OKed by Zorry

Revision  ChangesPath
1.19 profiles/hardened/linux/make.defaults

file : 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/hardened/linux/make.defaults?rev=1.19&view=markup
plain: 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/hardened/linux/make.defaults?rev=1.19&content-type=text/plain
diff : 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/hardened/linux/make.defaults?r1=1.18&r2=1.19

Index: make.defaults
===
RCS file: /var/cvsroot/gentoo-x86/profiles/hardened/linux/make.defaults,v
retrieving revision 1.18
retrieving revision 1.19
diff -u -r1.18 -r1.19
--- make.defaults   11 Feb 2014 16:47:27 -  1.18
+++ make.defaults   3 Sep 2014 18:48:15 -   1.19
@@ -1,9 +1,16 @@
 # Copyright 1999-2014 Gentoo Foundation.
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/profiles/hardened/linux/make.defaults,v 
1.18 2014/02/11 16:47:27 blueness Exp $
+# $Header: /var/cvsroot/gentoo-x86/profiles/hardened/linux/make.defaults,v 
1.19 2014/09/03 18:48:15 axs Exp $
 
 # Jorge Manuel B. S. Vicetto  (16 Nov 2011)
 # Rename STAGE1_USE to BOOTSTRAP_USE and stack it to the parent value
 BOOTSTRAP_USE="${BOOTSTRAP_USE} hardened pax_kernel pic xtpax -jit -orc"
 
 USE="hardened pax_kernel pic urandom xtpax -fortran -jit -orc"
+
+# Ian Stakenvicius, 2014-09-03
+# Set a variable just to indicate that the current profile is a hardened one
+# This variable can be leveraged in ebuilds for pkg_postinst messages that
+# indicate said package is, say, configured in a way that defeats the purpose
+# of running hardened.
+PROFILE_IS_HARDENED=1