profiles/hardened/package.mask


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

# Copyright 2007 Gentoo Foundation.
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/profiles/hardened/package.mask,v 1.45 2008/12/29 09:19:58 gengor Exp $

# supported only by gcc-4, unmask when it's stable wrt #217927
media-libs/libopenraw
media-gfx/raw-thumbnailer
media-gfx/gnome-raw-thumbnailer

# >=acml-3.6 depends on gcc-4*
>=sci-libs/acml-3.6

# The following packages need =gcc-4*
=net-im/skype-1.4.0*

# Hardened versions of gcc-4.0 through gcc-4.2* are not available
=sys-devel/gcc-4.0*
=sys-devel/gcc-4.1*
=sys-devel/gcc-4.2*

# No hardened >=sys-devel/gcc-4.4 available
>=sys-devel/gcc-4.4

# Mask off glibc-2.4 until the approach for SSP compatibilty is
# resolved in a way that doesn't break running systems, and we
# have a sensible upgrade path.  Advise having a static busybox
# around if you try it in a live system.
# 2006-03-13 kevquinn
=sys-libs/glibc-2.4*

# needs =sys-libs/glibc-2.4*
>=sys-cluster/gfs-kernel-2.02.00

# These packages do more harm than good w/ hardened.
# users must now the opensource xorg nv driver with nvidia cards.
# By placing Driver "nv" in xorg.conf
# 2006-06-29 solar
x11-drivers/nvidia-drivers
x11-drivers/nvidia-legacy-drivers
media-video/nvidia-settings