Initial commit of desktop-amd64-uclibc-hardened.

12 files changed, 127 insertions, 0 deletions

diff --git a/core/etc/portage/env/dev-vcs_git_0 b/core/etc/portage/env/dev-vcs_git_0
new file mode 100644
index 0000000..50fcbfb
--- /dev/null
+++ b/core/etc/portage/env/dev-vcs_git_0
@@ -0,0 +1 @@
+LDFLAGS="-liconv"
diff --git a/core/etc/portage/make.conf.CYCLE.1 b/core/etc/portage/make.conf.CYCLE.1
new file mode 100644
index 0000000..312fd6d
--- /dev/null
+++ b/core/etc/portage/make.conf.CYCLE.1
@@ -0,0 +1,7 @@
+CFLAGS="-O2 -pipe"
+CXXFLAGS="${CFLAGS}"
+CHOST="x86_64-gentoo-linux-uclibc"
+MAKEOPTS="-j17"
+PAX_MARKINGS="XT"
+
+USE="-gpg"
diff --git a/core/etc/portage/make.conf.CYCLE.2 b/core/etc/portage/make.conf.CYCLE.2
new file mode 100644
index 0000000..33f743b
--- /dev/null
+++ b/core/etc/portage/make.conf.CYCLE.2
@@ -0,0 +1,10 @@
+CFLAGS="-O2 -pipe"
+CXXFLAGS="${CFLAGS}"
+CHOST="x86_64-gentoo-linux-uclibc"
+MAKEOPTS="-j17"
+PAX_MARKINGS="XT"
+
+USE="-cups -tk"
+USE_ORDER="env:conf:pkg:defaults:pkginternal:repo:env.d"
+
+source '/var/lib/layman/make.conf'
diff --git a/core/etc/portage/make.conf.CYCLE.3 b/core/etc/portage/make.conf.CYCLE.3
new file mode 100644
index 0000000..c1e1fbc
--- /dev/null
+++ b/core/etc/portage/make.conf.CYCLE.3
@@ -0,0 +1,7 @@
+CFLAGS="-O2 -pipe"
+CXXFLAGS="${CFLAGS}"
+CHOST="x86_64-gentoo-linux-uclibc"
+MAKEOPTS="-j17"
+PAX_MARKINGS="XT"
+
+source '/var/lib/layman/make.conf'
diff --git a/core/etc/portage/make.profile b/core/etc/portage/make.profile
new file mode 120000
index 0000000..e40252c
--- /dev/null
+++ b/core/etc/portage/make.profile
@@ -0,0 +1 @@
+../../usr/portage/profiles/hardened/linux/uclibc/amd64
\ No newline at end of file
diff --git a/core/etc/portage/package.accept_keywords/app-portage_grs_0 b/core/etc/portage/package.accept_keywords/app-portage_grs_0
new file mode 100644
index 0000000..1fba46a
--- /dev/null
+++ b/core/etc/portage/package.accept_keywords/app-portage_grs_0
@@ -0,0 +1 @@
+=app-portage/grs-9999 **
diff --git a/core/etc/portage/package.accept_keywords/sys-libs_uclibc_0 b/core/etc/portage/package.accept_keywords/sys-libs_uclibc_0
new file mode 100644
index 0000000..4425c84
--- /dev/null
+++ b/core/etc/portage/package.accept_keywords/sys-libs_uclibc_0
@@ -0,0 +1 @@
+=sys-libs/uclibc-0.9.33.9999 **
diff --git a/core/etc/portage/package.env b/core/etc/portage/package.env
new file mode 100644
index 0000000..2ae36b3
--- /dev/null
+++ b/core/etc/portage/package.env
@@ -0,0 +1 @@
+dev-vcs/git:0 dev-vcs_git_0
diff --git a/core/etc/portage/package.use/sys-libs_uclibc_0 b/core/etc/portage/package.use/sys-libs_uclibc_0
new file mode 100644
index 0000000..0715d0b
--- /dev/null
+++ b/core/etc/portage/package.use/sys-libs_uclibc_0
@@ -0,0 +1 @@
+sys-libs/uclibc -* savedconfig
diff --git a/core/etc/portage/patches/sys-libs/uclibc/98-ldso-libdl-libdl.c-do-not-unmap-libraries.patch b/core/etc/portage/patches/sys-libs/uclibc/98-ldso-libdl-libdl.c-do-not-unmap-libraries.patch
new file mode 100644
index 0000000..5f68c99
--- /dev/null
+++ b/core/etc/portage/patches/sys-libs/uclibc/98-ldso-libdl-libdl.c-do-not-unmap-libraries.patch
@@ -0,0 +1,25 @@
+From 579dcdbc8aab966b22f6324a16dbf8fd08a607c3 Mon Sep 17 00:00:00 2001
+From: "Anthony G. Basile" <blueness@gentoo.org>
+Date: Fri, 17 Apr 2015 16:51:43 -0400
+Subject: [PATCH] ldso/libdl/libdl.c: do not unmap libraries.
+
+---
+ ldso/libdl/libdl.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/ldso/libdl/libdl.c b/ldso/libdl/libdl.c
+index 49711a8..2c43c07 100644
+--- a/ldso/libdl/libdl.c
++++ b/ldso/libdl/libdl.c
+@@ -977,7 +977,7 @@ static int do_dlclose(void *vhandle, int need_fini)
+ 
+ 			end = (end + ADDR_ALIGN) & PAGE_ALIGN;
+ 			start = start & ~ADDR_ALIGN;
+-			DL_LIB_UNMAP (tpnt, end - start);
++			//DL_LIB_UNMAP (tpnt, end - start);
+ 			/* Free elements in RTLD_LOCAL scope list */
+ 			for (runp = tpnt->rtld_local; runp; runp = tmp) {
+ 				tmp = runp->next;
+-- 
+2.0.5
+
diff --git a/core/etc/portage/patches/sys-libs/uclibc/99-libc-add-isfdtype.patch b/core/etc/portage/patches/sys-libs/uclibc/99-libc-add-isfdtype.patch
new file mode 100644
index 0000000..007ec33
--- /dev/null
+++ b/core/etc/portage/patches/sys-libs/uclibc/99-libc-add-isfdtype.patch
@@ -0,0 +1,65 @@
+From f22cca4722fa66e424562e69f4afa2bca0af871d Mon Sep 17 00:00:00 2001
+From: "Anthony G. Basile" <blueness@gentoo.org>
+Date: Sun, 28 Jul 2013 09:08:34 -0400
+Subject: [PATCH] libc: add isfdtype()
+
+isfdtype(int fd, int fdtype) check whether a file descriptor fd is
+of type fdtype, where the types are defined in stat(2).  It is
+supported in glibc and BSD, and used by utilities such as acpid.
+
+Signed-off-by: Anthony G. Basile <blueness@gentoo.org>
+Signed-off-by: Bernhard Reutner-Fischer <rep.dot.nop@gmail.com>
+---
+ libc/misc/file/isfdtype.c | 40 ++++++++++++++++++++++++++++++++++++++++
+ 1 file changed, 40 insertions(+)
+ create mode 100644 libc/misc/file/isfdtype.c
+
+diff --git a/libc/misc/file/isfdtype.c b/libc/misc/file/isfdtype.c
+new file mode 100644
+index 0000000..4d9199b
+--- /dev/null
++++ libc/misc/file/isfdtype.c
+@@ -0,0 +1,40 @@
++/* Determine whether descriptor has given property.
++   Copyright (C) 1996-2013 Free Software Foundation, Inc.
++   This file is part of the GNU C Library.
++
++   The GNU C Library is free software; you can redistribute it and/or
++   modify it under the terms of the GNU Lesser General Public
++   License as published by the Free Software Foundation; either
++   version 2.1 of the License, or (at your option) any later version.
++
++   The GNU C Library is distributed in the hope that it will be useful,
++   but WITHOUT ANY WARRANTY; without even the implied warranty of
++   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
++   Lesser General Public License for more details.
++
++   You should have received a copy of the GNU Lesser General Public
++   License along with the GNU C Library; if not, see
++   <http://www.gnu.org/licenses/>.  */
++
++#include <errno.h>
++#include <sys/stat.h>
++#include <sys/socket.h>
++#include <sys/types.h>
++#ifdef __UCLIBC_HAS_LFS__
++# include <_lfs_64.h>
++#else
++# define stat64 stat
++# define fstat64 fstat
++#endif
++
++int
++isfdtype (int fildes, int fdtype)
++{
++  struct stat64 st;
++  int save_error = errno;
++  int result = fstat64 (fildes, &st);
++  __set_errno (save_error);
++  if (result)
++	  return result;
++  return (st.st_mode & S_IFMT) == (mode_t) fdtype;
++}
+-- 
+1.8.3.2.733.gf8abaeb
+
diff --git a/core/etc/portage/repos.conf/gentoo.conf b/core/etc/portage/repos.conf/gentoo.conf
new file mode 100644
index 0000000..8c657da
--- /dev/null
+++ b/core/etc/portage/repos.conf/gentoo.conf
@@ -0,0 +1,7 @@
+[DEFAULT]
+main-repo = gentoo
+
+[gentoo]
+location = /usr/portage
+sync-type = rsync
+sync-uri = rsync://rsync.gentoo.org/gentoo-portage