profiles/hardened/linux/package.mask


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

# Copyright 1999-2009 Gentoo Foundation.
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/profiles/hardened/linux/package.mask,v 1.15 2009/04/23 16:49:38 gengor Exp $

# supported only by gcc-4, unmask when it's stable wrt #217927
media-libs/libopenraw
media-gfx/raw-thumbnailer
media-gfx/gnome-raw-thumbnailer

# >=acml-3.6 depends on gcc-4*
>=sci-libs/acml-3.6

# The following packages need =gcc-4*
=net-im/skype-1.4.0*

# Hardened versions of gcc-4.0 through gcc-4.2* are not available
=sys-devel/gcc-4.0*
=sys-devel/gcc-4.1*
=sys-devel/gcc-4.2*

# Mask non-hardened+non-testing gcc-4.3.x releases
=sys-devel/gcc-4.3.0*
=sys-devel/gcc-4.3.1*
=sys-devel/gcc-4.3.2*
=sys-devel/gcc-4.3.3

# No hardened >=sys-devel/gcc-4.4 available
>=sys-devel/gcc-4.4

# Mask off glibc-2.4 until the approach for SSP compatibilty is
# resolved in a way that doesn't break running systems, and we
# have a sensible upgrade path.  Advise having a static busybox
# around if you try it in a live system.
# 2006-03-13 kevquinn
=sys-libs/glibc-2.4*

# These packages do more harm than good w/ hardened.
# users must now the opensource xorg nv driver with nvidia cards.
# By placing Driver "nv" in xorg.conf
# 2006-06-29 solar
x11-drivers/nvidia-drivers
x11-drivers/nvidia-legacy-drivers
media-video/nvidia-settings