Bug 344861

Summary:	[TRACKER] Restructuring of the Hardened Gentoo Profiles
Product:	Gentoo Linux	Reporter:	Anthony Basile <blueness>
Component:	Hardened	Assignee:	The Gentoo Linux Hardened Team <hardened>
Status:	RESOLVED FIXED
Severity:	normal	CC:	ago, andrey, bugs+gentoo, hardened-kernel+disabled, kfm, toffanin.mauro
Priority:	High	Keywords:	Tracker
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Anthony Basile gentoo-dev

2010-11-09 23:11:16 UTC

This bug will be used to track the progress of the restructuring of the hardened/linux profiles.

The current proposed updated profiles are at

git://git.overlays.gentoo.org/proj/hardened-dev.git in branch profiles

The gitweb can be found at

http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-dev.git;a=shortlog;h=refs/heads/profiles

Comment 1 Anthony Basile gentoo-dev

2010-11-13 12:53:01 UTC

ia64 done.  Please test.

Updated hardened/linux/ia64 profiles, bug #344861
# Please enter the ChangeLog message for your changes. Lines starting
# with '#' will be ignored, and an empty message aborts the ChangeLog.
#
# Changes:
# new file:     hardened/linux/ia64/10.0/server/deprecated
# deleted:      hardened/linux/ia64/2008.0/desktop/make.defaults
# new file:     hardened/linux/ia64/10.0/deprecated
# deleted:      hardened/linux/ia64/2008.0/desktop/parent
# deleted:      hardened/linux/ia64/2008.0/server/parent
# new file:     hardened/linux/ia64/make.defaults
# modified:     hardened/linux/ia64/10.0/desktop/parent
# new file:     hardened/linux/ia64/server/parent
# new file:     hardened/linux/ia64/10.0/developer/deprecated
# new file:     hardened/linux/ia64/desktop/parent
# deleted:      hardened/linux/ia64/2008.0/make.defaults
# deleted:      hardened/linux/ia64/2008.0/parent
# modified:     hardened/linux/ia64/10.0/developer/parent
# deleted:      hardened/linux/ia64/2008.0/deprecated
# new file:     hardened/linux/ia64/10.0/desktop/deprecated
# deleted:      hardened/linux/ia64/2008.0/desktop/deprecated
# new file:     hardened/linux/ia64/developer/parent
# deleted:      hardened/linux/ia64/2008.0/developer/parent
# deleted:      hardened/linux/ia64/2008.0/server/deprecated
# modified:     hardened/linux/ia64/parent
# modified:     hardened/linux/ia64/10.0/server/parent
# modified:     hardened/ia64/deprecated
# modified:     hardened/linux/ia64/10.0/parent
# deleted:      hardened/linux/ia64/2008.0/developer/deprecated

Comment 2 Anthony Basile gentoo-dev

2010-11-13 15:54:59 UTC

Forgot to take care of profiles.desc.  Also cleaned up redundant make.defaults

  13 Nov 2010; Anthony G. Basile <blueness@gentoo.org>
  -hardened/linux/ia64/10.0/make.defaults, profiles.desc:
  Updated profile description for hardened/linux/ia64, bug #344861

Comment 3 Anthony Basile gentoo-dev

2010-11-14 15:47:31 UTC

The three powerpc profiles done.  Please test.

  hardened/linux/powerpc/ppc32 
  hardened/linux/powerpc/ppc64/32bit-userland
  hardened/linux/powerpc/ppc64/64bit-userland

Files added/remove/modified:

  +hardened/linux/powerpc/ppc32/10.0/deprecated,
  +hardened/linux/powerpc/ppc32/10.0/desktop/deprecated,
  hardened/linux/powerpc/ppc32/10.0/desktop/parent,
  +hardened/linux/powerpc/ppc32/10.0/developer/deprecated,
  hardened/linux/powerpc/ppc32/10.0/developer/parent,
  -hardened/linux/powerpc/ppc32/10.0/make.defaults,
  hardened/linux/powerpc/ppc32/10.0/parent,
  +hardened/linux/powerpc/ppc32/10.0/server/deprecated,
  hardened/linux/powerpc/ppc32/10.0/server/parent,
  -hardened/linux/powerpc/ppc32/2008.0/deprecated,
  -hardened/linux/powerpc/ppc32/2008.0/desktop/deprecated,
  -hardened/linux/powerpc/ppc32/2008.0/desktop/make.defaults,
  -hardened/linux/powerpc/ppc32/2008.0/desktop/parent,
  -hardened/linux/powerpc/ppc32/2008.0/developer/deprecated,
  -hardened/linux/powerpc/ppc32/2008.0/developer/parent,
  -hardened/linux/powerpc/ppc32/2008.0/make.defaults,
  -hardened/linux/powerpc/ppc32/2008.0/parent,
  -hardened/linux/powerpc/ppc32/2008.0/server/deprecated,
  -hardened/linux/powerpc/ppc32/2008.0/server/parent,
  +hardened/linux/powerpc/ppc32/desktop/parent,
  +hardened/linux/powerpc/ppc32/developer/parent,
  +hardened/linux/powerpc/ppc32/make.defaults,
  hardened/linux/powerpc/ppc32/parent,
  +hardened/linux/powerpc/ppc32/server/parent,
  +hardened/linux/powerpc/ppc64/10.0/32bit-userland/deprecated,
  +hardened/linux/powerpc/ppc64/10.0/32bit-userland/desktop/deprecated,
  hardened/linux/powerpc/ppc64/10.0/32bit-userland/desktop/parent,
  +hardened/linux/powerpc/ppc64/10.0/32bit-userland/developer/deprecated,
  hardened/linux/powerpc/ppc64/10.0/32bit-userland/developer/parent,
  -hardened/linux/powerpc/ppc64/10.0/32bit-userland/make.defaults,
  hardened/linux/powerpc/ppc64/10.0/32bit-userland/parent,
  +hardened/linux/powerpc/ppc64/10.0/32bit-userland/server/deprecated,
  hardened/linux/powerpc/ppc64/10.0/32bit-userland/server/parent,
  -hardened/linux/powerpc/ppc64/10.0/32bit-userland/use.mask,
  +hardened/linux/powerpc/ppc64/10.0/64bit-userland/deprecated,
  +hardened/linux/powerpc/ppc64/10.0/64bit-userland/desktop/deprecated,
  hardened/linux/powerpc/ppc64/10.0/64bit-userland/desktop/parent,
  +hardened/linux/powerpc/ppc64/10.0/64bit-userland/developer/deprecated,
  hardened/linux/powerpc/ppc64/10.0/64bit-userland/developer/parent,
  hardened/linux/powerpc/ppc64/10.0/64bit-userland/parent,
  +hardened/linux/powerpc/ppc64/10.0/64bit-userland/server/deprecated,
  hardened/linux/powerpc/ppc64/10.0/64bit-userland/server/parent,
  -hardened/linux/powerpc/ppc64/10.0/64bit-userland/use.mask,
  -hardened/linux/powerpc/ppc64/10.0/64bit-userland/virtuals,
  +hardened/linux/powerpc/ppc64/10.0/deprecated,
  +hardened/linux/powerpc/ppc64/10.0/desktop/deprecated,
  hardened/linux/powerpc/ppc64/10.0/desktop/parent,
  +hardened/linux/powerpc/ppc64/10.0/developer/deprecated,
  hardened/linux/powerpc/ppc64/10.0/developer/parent,
  -hardened/linux/powerpc/ppc64/10.0/make.defaults,
  hardened/linux/powerpc/ppc64/10.0/parent,
  +hardened/linux/powerpc/ppc64/10.0/server/deprecated,
  hardened/linux/powerpc/ppc64/10.0/server/parent,
  -hardened/linux/powerpc/ppc64/2008.0/32bit-userland/deprecated,
  -hardened/linux/powerpc/ppc64/2008.0/32bit-userland/desktop/deprecated,
  -hardened/linux/powerpc/ppc64/2008.0/32bit-userland/desktop/make.defaults,
  -hardened/linux/powerpc/ppc64/2008.0/32bit-userland/desktop/parent,
  -hardened/linux/powerpc/ppc64/2008.0/32bit-userland/developer/deprecated,
  -hardened/linux/powerpc/ppc64/2008.0/32bit-userland/developer/parent,
  -hardened/linux/powerpc/ppc64/2008.0/32bit-userland/make.defaults,
  -hardened/linux/powerpc/ppc64/2008.0/32bit-userland/parent,
  -hardened/linux/powerpc/ppc64/2008.0/32bit-userland/server/deprecated,
  -hardened/linux/powerpc/ppc64/2008.0/32bit-userland/server/parent,
  -hardened/linux/powerpc/ppc64/2008.0/32bit-userland/use.mask,
  -hardened/linux/powerpc/ppc64/2008.0/64bit-userland/deprecated,
  -hardened/linux/powerpc/ppc64/2008.0/64bit-userland/desktop/deprecated,
  -hardened/linux/powerpc/ppc64/2008.0/64bit-userland/desktop/make.defaults,
  -hardened/linux/powerpc/ppc64/2008.0/64bit-userland/desktop/parent,
  -hardened/linux/powerpc/ppc64/2008.0/64bit-userland/developer/deprecated,
  -hardened/linux/powerpc/ppc64/2008.0/64bit-userland/developer/parent,
  -hardened/linux/powerpc/ppc64/2008.0/64bit-userland/parent,
  -hardened/linux/powerpc/ppc64/2008.0/64bit-userland/server/deprecated,
  -hardened/linux/powerpc/ppc64/2008.0/64bit-userland/server/parent,
  -hardened/linux/powerpc/ppc64/2008.0/64bit-userland/use.mask,
  -hardened/linux/powerpc/ppc64/2008.0/64bit-userland/virtuals,
  -hardened/linux/powerpc/ppc64/2008.0/deprecated,
  -hardened/linux/powerpc/ppc64/2008.0/desktop/deprecated,
  -hardened/linux/powerpc/ppc64/2008.0/desktop/make.defaults,
  -hardened/linux/powerpc/ppc64/2008.0/desktop/parent,
  -hardened/linux/powerpc/ppc64/2008.0/developer/deprecated,
  -hardened/linux/powerpc/ppc64/2008.0/developer/parent,
  -hardened/linux/powerpc/ppc64/2008.0/make.defaults,
  -hardened/linux/powerpc/ppc64/2008.0/parent,
  -hardened/linux/powerpc/ppc64/2008.0/server/deprecated,
  -hardened/linux/powerpc/ppc64/2008.0/server/parent,
  +hardened/linux/powerpc/ppc64/32bit-userland/desktop/parent,
  +hardened/linux/powerpc/ppc64/32bit-userland/developer/parent,
  +hardened/linux/powerpc/ppc64/32bit-userland/make.defaults,
  +hardened/linux/powerpc/ppc64/32bit-userland/parent,
  +hardened/linux/powerpc/ppc64/32bit-userland/server/parent,
  +hardened/linux/powerpc/ppc64/32bit-userland/use.mask,
  +hardened/linux/powerpc/ppc64/64bit-userland/desktop/parent,
  +hardened/linux/powerpc/ppc64/64bit-userland/developer/parent,
  +hardened/linux/powerpc/ppc64/64bit-userland/parent,
  +hardened/linux/powerpc/ppc64/64bit-userland/server/parent,
  +hardened/linux/powerpc/ppc64/64bit-userland/use.mask,
  +hardened/linux/powerpc/ppc64/64bit-userland/virtuals,
  +hardened/linux/powerpc/ppc64/desktop/parent,
  +hardened/linux/powerpc/ppc64/developer/parent,
  +hardened/linux/powerpc/ppc64/make.defaults,
  hardened/linux/powerpc/ppc64/parent,
  +hardened/linux/powerpc/ppc64/server/parent, hardened/ppc/deprecated,
  hardened/ppc64/deprecated, profiles.desc

Comment 4 Anthony Basile gentoo-dev

2010-11-20 00:31:00 UTC

x86 done.  Files/added removed:

  +hardened/linux/x86/10.0/deprecated,
  +hardened/linux/x86/10.0/desktop/deprecated,
  hardened/linux/x86/10.0/desktop/parent,
  +hardened/linux/x86/10.0/developer/deprecated,
  hardened/linux/x86/10.0/developer/parent,
  +hardened/linux/x86/10.0/no-nptl/deprecated,
  hardened/linux/x86/10.0/no-nptl/parent, hardened/linux/x86/10.0/parent,
  +hardened/linux/x86/10.0/server/deprecated,
  hardened/linux/x86/10.0/server/parent,
  -hardened/linux/x86/2008.0/deprecated,
  -hardened/linux/x86/2008.0/desktop/deprecated,
  -hardened/linux/x86/2008.0/desktop/make.defaults,
  -hardened/linux/x86/2008.0/desktop/parent,
  -hardened/linux/x86/2008.0/developer/deprecated,
  -hardened/linux/x86/2008.0/developer/parent,
  -hardened/linux/x86/2008.0/make.defaults,
  -hardened/linux/x86/2008.0/no-nptl/deprecated,
  -hardened/linux/x86/2008.0/no-nptl/parent,
  -hardened/linux/x86/2008.0/parent,
  -hardened/linux/x86/2008.0/server/deprecated,
  -hardened/linux/x86/2008.0/server/parent,
  +hardened/linux/x86/desktop/parent, +hardened/linux/x86/developer/parent,
  hardened/linux/x86/make.defaults, +hardened/linux/x86/no-nptl/parent,
  hardened/linux/x86/parent, +hardened/linux/x86/server/parent,
  hardened/x86/2.6/deprecated, hardened/x86/deprecated,
  hardened/x86/minimal/deprecated, profiles.desc:

Comment 5 Navid Zamani 2010-11-20 01:49:49 UTC

Just wanted to say: Good idea. :)

Comment 6 Anthony Basile gentoo-dev

2010-11-25 13:23:57 UTC

amd64 done.  Files added/removed/modified:

  hardened/amd64/deprecated, hardened/amd64/multilib/deprecated,
  +hardened/linux/amd64/10.0/deprecated,
  +hardened/linux/amd64/10.0/desktop/deprecated,
  hardened/linux/amd64/10.0/desktop/parent,
  +hardened/linux/amd64/10.0/developer/deprecated,
  hardened/linux/amd64/10.0/developer/parent,
  -hardened/linux/amd64/10.0/make.defaults,
  +hardened/linux/amd64/10.0/no-multilib/deprecated,
  -hardened/linux/amd64/10.0/no-multilib/make.defaults,
  hardened/linux/amd64/10.0/no-multilib/parent,
  hardened/linux/amd64/10.0/parent,
  +hardened/linux/amd64/10.0/server/deprecated,
  hardened/linux/amd64/10.0/server/parent,
  -hardened/linux/amd64/2008.0/deprecated,
  -hardened/linux/amd64/2008.0/desktop/deprecated,
  -hardened/linux/amd64/2008.0/desktop/make.defaults,
  -hardened/linux/amd64/2008.0/desktop/parent,
  -hardened/linux/amd64/2008.0/developer/deprecated,
  -hardened/linux/amd64/2008.0/developer/parent,
  -hardened/linux/amd64/2008.0/make.defaults,
  -hardened/linux/amd64/2008.0/no-multilib/deprecated,
  -hardened/linux/amd64/2008.0/no-multilib/make.defaults,
  -hardened/linux/amd64/2008.0/no-multilib/parent,
  -hardened/linux/amd64/2008.0/parent,
  -hardened/linux/amd64/2008.0/server/deprecated,
  -hardened/linux/amd64/2008.0/server/parent,
  +hardened/linux/amd64/desktop/parent,
  +hardened/linux/amd64/developer/parent,
  hardened/linux/amd64/make.defaults,
  +hardened/linux/amd64/no-multilib/make.defaults,
  +hardened/linux/amd64/no-multilib/parent, hardened/linux/amd64/parent,
  +hardened/linux/amd64/server/parent, profiles.desc:

Comment 7 Anthony Basile gentoo-dev

2010-12-02 15:53:24 UTC

It has been one week since the last profile was updated and there are no screams of pain.  I'm going to close this tracker bug.  Please don't reopen it if you have profile problems, rather open a separate bug addressing the specific issue.