profiles/hardened/linux/package.mask


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41

# Copyright 2007 Gentoo Foundation.
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/profiles/hardened/linux/package.mask,v 1.9 2009/02/13 19:01:14 gengor Exp $

# >=acml-3.6 depends on gcc-4*
>=sci-libs/acml-3.6

# The following packages need =gcc-4*
=net-im/skype-1.4.0*

# Hardened versions of gcc-4.0 through gcc-4.2* are not available
=sys-devel/gcc-4.0*
=sys-devel/gcc-4.1*
=sys-devel/gcc-4.2*

# Mask non-hardened+non-testing gcc-4.3.x releases
=sys-devel/gcc-4.3.0*
=sys-devel/gcc-4.3.1*
=sys-devel/gcc-4.3.2
=sys-devel/gcc-4.3.3*

# No hardened >=sys-devel/gcc-4.4 available
>=sys-devel/gcc-4.4

# Mask off glibc-2.4 until the approach for SSP compatibilty is
# resolved in a way that doesn't break running systems, and we
# have a sensible upgrade path.  Advise having a static busybox
# around if you try it in a live system.
# 2006-03-13 kevquinn
=sys-libs/glibc-2.4*

# sys-libs/glibc-2.8 is about to go stable and stable hardened may not be ready for it.
# 2009-02-11 gengor
>=sys-libs/glibc-2.7

# These packages do more harm than good w/ hardened.
# users must now the opensource xorg nv driver with nvidia cards.
# By placing Driver "nv" in xorg.conf
# 2006-06-29 solar
x11-drivers/nvidia-drivers
media-video/nvidia-settings