Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 652222 - Missing hardened/selinux 17.0 profile for x86
Summary: Missing hardened/selinux 17.0 profile for x86
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Profiles (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: SE Linux Bugs
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-04-02 15:08 UTC by Scall
Modified: 2018-04-12 07:39 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Scall 2018-04-02 15:08:27 UTC
There is currently no "default/linux/x86/17.0/hardened/selinux" profile available, so who is using "hardened/linux/x86/selinux" can't switch to an equivalent (hardened + selinux) 17.0 profile:

> eselect profile list | grep hardened
  [12]  default/linux/x86/17.0/hardened (stable)
  [20]  hardened/linux/x86 (stable)
  [21]  hardened/linux/x86/selinux (stable) *
  [23]  hardened/linux/musl/x86 (exp)
  [27]  hardened/linux/uclibc/x86 (exp)

Also, the libreoffice package can't be updated with "hardened/linux/x86/selinux", since dev-libs/icu-60.2 is masked for older profiles, so adding the missing profile will fix that as well:

> emerge -uD @world
Calculating dependencies... done!
[ebuild     U  ] dev-util/boost-build-1.65.0 [1.63.0]
[ebuild  r  U  ] dev-libs/boost-1.65.0 [1.63.0]
[ebuild     U  ] app-office/libreoffice-l10n-5.4.5.1 [5.4.2.2]
[ebuild  rR    ] dev-util/mdds-1.3.1
[ebuild  rR    ] dev-libs/libixion-0.12.2
[ebuild  rR    ] dev-libs/liborcus-0.12.1
[ebuild  rR    ] dev-cpp/libcmis-0.5.2_pre20160820-r1
[ebuild     U #] dev-libs/icu-60.2 [58.2-r1]
[ebuild  r  U #] app-office/libreoffice-bin-5.4.5.1 [5.4.2.2-r1]

!!! Multiple package instances within a single package slot have been pulled
!!! into the dependency graph, resulting in a slot conflict:

dev-libs/icu:0

  (dev-libs/icu-58.2-r1:0/58.2::gentoo, installed) pulled in by
    dev-libs/icu:0/58.2= required by (media-libs/libzmf-0.0.2:0/0::gentoo, installed)
                ^^^^^^^^
    (and 8 more with the same problem)

  (dev-libs/icu-60.2:0/60.2::gentoo, ebuild scheduled for merge) pulled in by
    dev-libs/icu:0/60.2 required by (app-office/libreoffice-bin-5.4.5.1:0/0::gentoo, ebuild scheduled for merge)
                ^^^^^^^

[...]

The following mask changes are necessary to proceed:
 (see "package.unmask" in the portage(5) man page for more details)
# required by @__auto_slot_operator_replace_installed__ (argument)
# /usr/portage/profiles/releases/13.0/package.mask:
# Andreas K. Hüttel <dilfridge@gentoo.org> (29 Jan 2018)
# Requires >=icu-60, which is not available in 13.0 based profiles.
# Please migrate to one of the 17.0 release profiles.
=app-office/libreoffice-bin-5.4.5.1
# required by app-office/libreoffice-bin-5.4.5.1::gentoo
# required by @selected
# required by @world (argument)
# /usr/portage/profiles/releases/13.0/package.mask:
# Andreas K. Hüttel <dilfridge@gentoo.org> (27 May 2017)
# This release and later require C++11 or C++14
# So we mask it here, and unmask in 17.0 release profiles
=dev-libs/icu-60.2

[...]
Comment 1 Larry the Git Cow gentoo-dev 2018-04-12 07:39:26 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=38a5c987ac9c396969fd5b6edfba91131db8acac

commit 38a5c987ac9c396969fd5b6edfba91131db8acac
Author:     Jason Zaman <perfinion@gentoo.org>
AuthorDate: 2018-04-12 07:36:14 +0000
Commit:     Jason Zaman <perfinion@gentoo.org>
CommitDate: 2018-04-12 07:37:36 +0000

    profiles: add default/linux/x86/17.0/hardened/selinux
    
    Closes: https://bugs.gentoo.org/652222

 profiles/default/linux/x86/17.0/hardened/selinux/eapi   | 1 +
 profiles/default/linux/x86/17.0/hardened/selinux/parent | 2 ++
 profiles/profiles.desc                                  | 1 +
 3 files changed, 4 insertions(+)