summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMike Frysinger <vapier@gentoo.org>2015-10-16 00:07:31 -0400
committerMike Frysinger <vapier@gentoo.org>2015-10-16 00:10:36 -0400
commit824d0647e08da946ec357e436038d795ac589fd4 (patch)
treef1780c950d44ba2332de67957b0b2e3fbc2d278e /profiles/hardened
parentnet-firewall/nftables: Add proxy maintainer to metadata (diff)
downloadgentoo-824d0647e08da946ec357e436038d795ac589fd4.tar.gz
gentoo-824d0647e08da946ec357e436038d795ac589fd4.tar.bz2
gentoo-824d0647e08da946ec357e436038d795ac589fd4.zip
profiles: enable USE=xattr by default #506198 #556408
Extended attributes are needed to support filesystem caps, selinux, and the new PaX file markings (to move away from binutils ELF headers). We already assume it's enabled in our release media and documentation, so update the default profile to match.
Diffstat (limited to 'profiles/hardened')
-rw-r--r--profiles/hardened/linux/make.defaults2
-rw-r--r--profiles/hardened/linux/musl/make.defaults2
-rw-r--r--profiles/hardened/linux/musl/packages.build2
3 files changed, 2 insertions, 4 deletions
diff --git a/profiles/hardened/linux/make.defaults b/profiles/hardened/linux/make.defaults
index 0b68105a9df8..d17a41ee01ce 100644
--- a/profiles/hardened/linux/make.defaults
+++ b/profiles/hardened/linux/make.defaults
@@ -6,7 +6,7 @@
# Rename STAGE1_USE to BOOTSTRAP_USE and stack it to the parent value
BOOTSTRAP_USE="${BOOTSTRAP_USE} hardened pax_kernel pic xtpax -jit -orc"
-USE="hardened pax_kernel pic urandom xattr xtpax -fortran -jit -orc"
+USE="hardened pax_kernel pic urandom xtpax -fortran -jit -orc"
# Ian Stakenvicius, 2014-09-03
# Set a variable just to indicate that the current profile is a hardened one
diff --git a/profiles/hardened/linux/musl/make.defaults b/profiles/hardened/linux/musl/make.defaults
index 4c6b3d5ce197..24ce96fefe87 100644
--- a/profiles/hardened/linux/musl/make.defaults
+++ b/profiles/hardened/linux/musl/make.defaults
@@ -6,7 +6,7 @@ ELIBC="musl"
FEATURES="sandbox sfperms strict"
-USE="hardened nptl pax_kernel pic unicode xattr -berkdb -jit -orc"
+USE="hardened nptl pax_kernel pic unicode -berkdb -jit -orc"
BOOTSTRAP_USE="${BOOTSTRAP_USE} hardened nptl pax_kernel pic -berkdb -jit -nls -orc"
SYMLINK_LIB="no"
diff --git a/profiles/hardened/linux/musl/packages.build b/profiles/hardened/linux/musl/packages.build
index d62198d24693..5042e0489b29 100644
--- a/profiles/hardened/linux/musl/packages.build
+++ b/profiles/hardened/linux/musl/packages.build
@@ -6,6 +6,4 @@
# a stage 1 based on this profile.
dev-util/pkgconf
-sys-apps/attr
sys-apps/sandbox
-dev-python/pyxattr