Gentoo Packages

Search

Manage

• Information: euse -i hardened
• Enable: euse -E hardened
• Disable: euse -D hardened

Global Description

Activate default security enhancements for toolchain (gcc, glibc, binutils)

Local and Metadata Descriptions

Metadata Descriptions (metadata.xml)

• app-admin/kos: Harden output binary for security
• app-backup/urbackup-server: Enables GCC runtime fortification
• app-emulation/virtualbox-kvm: Enable hardening and install binaries SUID
• app-misc/yafetch: Harden the package
• dev-libs/mimalloc: Enable exploit mitigations
• sci-libs/libqalculate: Disable unsafe functions like 'command' and variables like 'uptime'.
• sys-kernel/bentoo-kernel: Use selection of hardening options recommended by Kernel Self Protection Project. With USE=lto (clang) the GCC-only hardening plugins are unavailable, and kCFI (CONFIG_CFI) is enabled instead.
• sys-kernel/cachyos-kernel-bin: Hardened kernel variant
• sys-kernel/gentoo-kernel: Use selection of hardening options recommended by Kernel Self Protection Project
• sys-kernel/mnt-reform-kernel: Use selection of hardening options recommended by Kernel Self Protection Project

Local Descriptions (use.local.desc)

• app-emulation/virtualbox-kvm: Enable hardening and install binaries SUID
• net-dns/ddclient: Use iproute2 instead of ifconfig to grab an IP address
• sci-libs/libqalculate: Disable unsafe functions like 'command' and variables like 'uptime'.
• sys-kernel/gentoo-kernel: Use selection of hardening options recommended by Kernel Self Protection Project

Packages Using This Flag