profiles/hardened/linux/package.mask


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48

# Copyright 1999-2009 Gentoo Foundation.
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/profiles/hardened/linux/package.mask,v 1.18 2009/07/08 11:34:02 yngwin Exp $

# Requires glibc-2.10
=x11-libs/fltk-1.1.9-r1
=x11-libs/fltk-2.0_pre6786-r1

# Requires gcc-4*, unmask when stable. Bug #217927.
media-libs/libopenraw
media-gfx/raw-thumbnailer
media-gfx/gnome-raw-thumbnailer

# >=acml-3.6 depends on gcc-4*.
>=sci-libs/acml-3.6

# net-im/skype requires gcc-4* runtime.
net-im/skype

# Hardened versions of gcc-4.0* through gcc-4.2* are not available.
=sys-devel/gcc-4.0*
=sys-devel/gcc-4.1*
=sys-devel/gcc-4.2*

# Mask non-hardened+non-testing gcc-4.3.x releases.
=sys-devel/gcc-4.3.2*
=sys-devel/gcc-4.3.3

# No hardened >=sys-devel/gcc-4.4 available.
>=sys-devel/gcc-4.4

# Patch fails, mask for now. Bug #270274.
>=sys-libs/glibc-2.10

# Mask off glibc-2.4 until the approach for SSP compatibilty is
# resolved in a way that doesn't break running systems, and we
# have a sensible upgrade path.  Advise having a static busybox
# around if you try it in a live system.
# 2006-03-13 kevquinn
=sys-libs/glibc-2.4*

# These packages do more harm than good w/ hardened.
# Users must now the opensource xorg nv driver with nvidia cards
# by placing Driver "nv" in xorg.conf.
# 2006-06-29 solar
x11-drivers/nvidia-drivers
x11-drivers/nvidia-legacy-drivers
media-video/nvidia-settings