Bugzilla Bug 157356

As the summary tells, could you guys please look into hardened-sources-2.6.18
and see if it works for your arch and mark it stable afterwards ?

(amd64 - aka kingtaco already acked on it)
(ppc - at least nixnut used it sucessfully)

Adding remaining arches ..

Could someone step up using this piece of software on x86 and tell us if it is
ok?

Been running it here for about a week, nothing obviously wrong.

Portage 2.1.2_rc2-r3 (hardened/x86/2.6, gcc-4.1.1/hardened, glibc-2.4-r4,
2.6.18-hardened i686)
=================================================================
System uname: 2.6.18-hardened i686 Mobile Intel(R) Pentium(R) III CPU - M 
1200MHz
Gentoo Base System version 1.12.6
Last Sync: Unknown
distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632)
[disabled]
ccache version 2.4 [disabled]
app-admin/eselect-compiler: 2.0.0_rc2-r1
dev-java/java-config: 1.3.7, 2.0.30
dev-lang/python:     2.3.5-r2, 2.4.3-r4
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache:     2.4-r1
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.60
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2
sys-devel/binutils:  2.15.92.0.2-r9, 2.15.92.0.2-r10, 2.16-r1, 2.16.1-r3
sys-devel/gcc-config: 2.0.0_rc1
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.17-r1
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-ggdb2 -O2 -march=pentium3 -pipe -Wall -Wstack-protector -Wtrampolines"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config
/usr/kde/3.5/shutdown /usr/lib/fax /usr/lib/mozilla/defaults/pref
/usr/share/X11/xkb /usr/share/config /var/spool/fax/etc"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/eselect /etc/gconf
/etc/java-config/vms/ /etc/revdep-rebuild /etc/terminfo"
CXXFLAGS="-ggdb2 -O2 -march=pentium3 -pipe -Wall -Wstack-protector
-Wtrampolines"
DISTDIR="/data/g2/distfiles"
FEATURES="autoaddcvs autoconfig collision-protect cvs distlocks fixpackages
installsources metadata-transfer pax sandbox sfperms sign splitdebug strict
stricter test userpriv"
GENTOO_MIRRORS="http://linux.rz.ruhr-uni-bochum.de/download/gentoo-mirror/
http://ftp.linux.ee/pub/gentoo/distfiles/ http://ftp.easynet.nl/mirror/gentoo/
http://ftp.heanet.ie/pub/gentoo/ http://gentoo.osuosl.org/"
LC_ALL="en_GB.utf8"
LDFLAGS="-Wl,-O1"
LINGUAS="en_GB en it de es fr"
MAKEOPTS="-j1"
PKGDIR="/data/g2/pkgdir"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress
--force --whole-file --delete --delete-after --stats --timeout=180
--exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/data/g2/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/data/g2/dev-overlays/kevquinn/hardened/toolchain
/data/g2/dev-overlays/kevquinn/hardened/xorg /var/portage"
SYNC="cvs://kevquinn@cvs.gentoo.org:/var/cvsroot"
USE="X a52 aac acl acpi alsa apache2 arts berkdb bluetooth boundschecking bzip2
caps cdr crypt cups dbus dlloader dri dts dv dvd dvdr dvdread elibc_glibc
encode faad fbcon ffmpeg fortran gcj gif gnokii gtk gtk2 hal hardened
hardenedphp ieee1394 imagemagick input_devices_keyboard input_devices_mouse
ipv6 java javascript jikes jpeg jpeg2k kde kdeenablefinal kerberos kernel_linux
ldap libcaca linguas_de linguas_en linguas_en_GB linguas_es linguas_fr
linguas_it mad madwifi mailwrapper mbox mmx mozilla mp3 mp4 mpeg mysql nas nls
nptl nsplugin odbc ogg openexr opengl oss pam pda pdf perl pic png postgres
python qt qt3 qt4 quicktime readline samba scanner sdl slp sndfile spell sse
ssl svg tcl tcltk tcpd test theora threads tidy tiff timidity tk truetype
unicode usb userland_GNU userlocales v4l video_cards_radeon video_cards_vesa
video_cards_vga vorbis wifi wma x264 x86 xinerama xml xml2 xorg xprint xv xvid
zlib"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG,
PORTAGE_RSYNC_EXTRA_OPTS

2.6.18 in use for 12 days, 2.6.18-r1 in use for 8 days on 15 x86 servers and no
problems were encountered

Portage 2.1.1-r2 (selinux/2005.1/x86/hardened, gcc-3.4.6, glibc-2.3.6-r5,
2.6.18-hardened-r1-a038 i686)
=================================================================
System uname: 2.6.18-hardened-r1-a038 i686 Intel(R) Xeon(TM) CPU 3.00GHz
Gentoo Base System version 1.12.6
Last Sync: Tue, 05 Dec 2006 06:50:01 +0000
app-admin/eselect-compiler: [Not Present]
dev-java/java-config: 1.3.7, 2.0.30
dev-lang/python:     2.4.3-r4
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache:     [Not Present]
dev-util/confcache:  [Not Present]
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.60
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2
sys-devel/binutils:  2.16.1-r3
sys-devel/gcc-config: 1.3.13-r4
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.17-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /var/bind /var/qmail/alias /var/qmail/control
/var/service"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf
/etc/java-config/vms/ /etc/revdep-rebuild /etc/terminfo"
CXXFLAGS="-O2 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig collision-protect distlocks metadata-transfer sandbox
selinux sesandbox sfperms strict usersandbox"
GENTOO_MIRRORS="ftp://ftp.roedu.net/pub/mirrors/gentoo.org
ftp://ftp.lug.ro/gentoo http://gentoo.oregonstate.edu
http://www.ibiblio.org/pub/Linux/distributions/gentoo"
MAKEOPTS="-j1"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress
--force --whole-file --delete --delete-after --stats --timeout=180
--exclude='/distfiles' --exclude='/local' --exclude='/packages'"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/portage_2"
SYNC="rsync://mirrors.bu.avira.com/gentoo-portage"
USE="apache2 crypt curl dlloader elibc_glibc gd gdbm hardened hardenedphp
innodb input_devices_keyboard input_devices_mouse jpeg kernel_linux mysql
ncurses nptl pam pg-vacuumdelay pic png postgres python readline selinux spell
ssl truetype userland_GNU x86 xml xml2 zlib"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS,
LINGUAS, PORTAGE_RSYNC_EXTRA_OPTS

Works here as well.

Portage 2.1.2_rc2-r3 (default-linux/x86/2006.0, gcc-4.1.1, glibc-2.4-r4,
2.6.18-hardened i686)
=================================================================
System uname: 2.6.18-hardened i686 Celeron (Coppermine)
Gentoo Base System version 1.12.6
Last Sync: Thu, 07 Dec 2006 03:50:01 +0000
distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632)
[disabled]
ccache version 2.3 [enabled]
dev-lang/python:     2.4.3-r4
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache:     2.3
dev-util/confcache:  0.4.2-r1
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.60
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2
sys-devel/binutils:  2.16.1-r3
sys-devel/gcc-config: 1.3.13-r4
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.17-r1
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=pentium3 -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc"
CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/revdep-rebuild /etc/terminfo"
CXXFLAGS="-O2 -march=pentium3 -pipe"
DISTDIR="/usr/gentoo/distfiles"
FEATURES="autoconfig ccache confcache distlocks metadata-transfer
parallel-fetch sandbox sfperms sign strict"
GENTOO_MIRRORS="http://mirror.gentoo.sk/pub
ftp://ftp.sh.cvut.cz/MIRRORS/gentoo/gentoo http://ftp.easynet.nl/mirror/gentoo"
MAKEOPTS="-j2"
PKGDIR="/usr/gentoo/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress
--force --whole-file --delete --delete-after --stats --timeout=180
--exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp/portage"
PORTDIR="/usr/gentoo/portage"
PORTDIR_OVERLAY="/usr/gentoo/overlay"
SYNC="rsync://mirror.gentoo.sk/gentoo-portage"
USE="x86 alsa_cards_via82xx apache2 apm arts bash-completion berkdb
bitmap-fonts bzip2 cli cracklib crypt curl dlloader dri eds elibc_glibc emboss
encode esd foomaticdb fortran gdbm gif gstreamer hardened iconv imlib
input_devices_evdev input_devices_keyboard input_devices_mouse ipv6 isdnlog
kernel_linux libg++ libwww logrotate motif mp3 mpeg ncurses nls nptl nptlonly
ogg opengl oss pam pcre perl pppd python qt3 qt4 quicktime readline reflection
sasl session spell spl sse ssl tcpd truetype truetype-fonts type1-fonts udev
unicode userland_GNU video_cards_apm video_cards_ark video_cards_ati
video_cards_chips video_cards_cirrus video_cards_cyrix video_cards_dummy
video_cards_fbdev video_cards_glint video_cards_i128 video_cards_i740
video_cards_i810 video_cards_imstt video_cards_mga video_cards_neomagic
video_cards_nsc video_cards_nv video_cards_rendition video_cards_s3
video_cards_s3virge video_cards_savage video_cards_siliconmotion
video_cards_sis video_cards_sisusb video_cards_tdfx video_cards_tga
video_cards_trident video_cards_tseng video_cards_v4l video_cards_vesa
video_cards_vga video_cards_via video_cards_vmware video_cards_voodoo vorbis
xml xml2 xorg xv zlib"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS,
LINGUAS, PORTAGE_RSYNC_EXTRA_OPTS

Done on x86

Stable on ppc. Closing as fixed since we're the last arch to stable.