Gentoo Packages

Search

Global Description

activate default security enhancements for toolchain (gcc, glibc, binutils)

Local and Metadata Descriptions

Metadata Descriptions (metadata.xml)

• app-admin/kos: Harden output binary for security
• app-backup/urbackup-server: Enables GCC runtime fortification
• app-emulation/virtualbox-kvm: Enable hardening and install binaries SUID
• app-misc/yafetch: Harden the package
• dev-libs/mimalloc: Enable exploit mitigations
• sci-libs/libqalculate: Disable unsafe functions like 'command' and variables like 'uptime'.
• sys-kernel/cachyos-kernel: Enable hardened kernel patches for enhanced security
• sys-kernel/cachyos-kernel-bin: Hardened kernel with BORE scheduler and security patches
• sys-kernel/cachyos-sources: Enable hardened kernel patches for enhanced security
• sys-kernel/femkvm-kernel: Use selection of hardening options recommended by Kernel Self Protection Project
• sys-kernel/gentoo-kernel: Use selection of hardening options recommended by Kernel Self Protection Project
• sys-kernel/xanmod-rt: Use selection of hardening options recommended by Kernel Self Protection Project
• virtual/cachyos-sources: Require CachyOS kernel sources with hardened patches

Local Descriptions (use.local.desc)

• app-emulation/virtualbox-kvm: Enable hardening and install binaries SUID
• dev-libs/mimalloc: Enable exploit mitigations
• net-dns/ddclient: Use iproute2 instead of ifconfig to grab an IP address
• sci-libs/libqalculate: Disable unsafe functions like 'command' and variables like 'uptime'.
• sys-kernel/gentoo-kernel: Use selection of hardening options recommended by Kernel Self Protection Project

Packages Using This Flag