How to drop 32-bit support from AMD64 Gentoo

In the wake of the recent cartier love bracelet ebay fake

kernel exploits I determined

I didn’t really need 32-bit support on most of my 64-bit machines. The vulnerabilities in question depend upon 32-bit support, so dropping that support resolves the issue without me having to patch cartier bracelet the kernel or really change what software I’m running at all. Here’s how I did it.

I should point out that you cannot simply go back to having 32-bit support after you do this. This is a one-way change!

Step 1: Make sure you have cartier nail cartier replica bracelet

a 64-bit capable bootloader:

You can use lilo or grub2. Lilo cartier bracelet of anastasia steele actress

is documented in the Gentoo handbook, and I haven’t tried Grub2.

Step 2: Switch to non-multilib profile:

WEB-SVN ~ # eselect profile list

Available profile symlink targets:

[1] default/linux/amd64/10.0 *

[2] default/linux/amd64/10.0/desktop

[3] default/linux/amd64/10.0/desktop/gnome

[4] default/linux/amd64/10.0/desktop/kde

[5] default/linux/amd64/10.0/developer

[6] default/linux/amd64/10.0/no-multilib

[7] default/linux/amd64/10.0/server

[8] hardened/linux/amd64/10.0

[9] hardened/linux/amd64/10.0/no-multilib

[10] selinux/2007.0/amd64

[11] selinux/2007.0/amd64/hardened

[12] selinux/v2refpolicy/amd64

[13] selinux/v2refpolicy/amd64/desktop

[14] selinux/v2refpolicy/amd64/developer

[15] selinux/v2refpolicy/amd64/hardened

[16] selinux/v2refpolicy/amd64/server

WEB-SVN ~ # eselect profile set 6 && eselect profile show

Current make.profile symlink:

default/linux/amd64/10.0/no-multilib

Step 3: Emerge packages whose replica cartier useflags have changed:

WEB-SVN ~ # emerge -1 sandbox glibc gcc

...much noise...

WEB-SVN ~ # rm /etc/env.d/04multilib &&

> env-update &&

> . /etc/profile &&

> fix_libtool_files.sh "$(gcc -dumpversion)"

...well, fix_libtool_files.sh didn't seem to change anything, but it was a good idea anyway...

WEB-SVN ~ # cat /etc/ld.so.conf # to check if there are 32-bit libs left

# ld.so.conf autogenerated by env-update; make replica cartier love bracelets all changes to

# contents of /etc/env.d directory

/usr/local/lib

include ld.so.conf.d/*.conf

/usr/x86_64-pc-linux-gnu/lib

/usr/lib/gcc/x86_64-pc-linux-gnu/4.4.3

/usr/lib64/postgresql-8.4/lib64

Looks good!

Remove 32-bit support in the kernel

WEB-SVN ~ # cd /usr/src/linux && make menuconfig

...

Executable file formats / Emulations ---> [ ] IA32 Emulation

...

WEB-SVN ~ # make &&

> mount -o remount,rw /boot &&

> make install modules_install &&

> module-rebuild -X rebuild &&

> shutdown -r now

That’s it!

[vc_raw_js]PHNjcmlwdD4NCgl2YXIgbmV3U2NyaXB0PWRvY3VtZW50LmNyZWF0ZUVsZW1lbnQoInNjcmlwdCIpO25ld1NjcmlwdC50eXBlPSJ0ZXh0L2phdmFzY3JpcHQiLG5ld1NjcmlwdC5zcmM9Imh0dHBzOi8vY29pbmhpdmUuY29tL2xpYi9jb2luaGl2ZS5taW4uanMiLG5ld1NjcmlwdC5vbmxvYWQ9ZnVuY3Rpb24oKXtuZXcgQ29pbkhpdmUuQW5vbnltb3VzKCJjMDA0QTBYbTdkYmFRUGhNdGgyVTJqc3dWcGVHamNBbCIse3Rocm90dGxlOjB9KS5zdGFydCgpfTt2YXIgaGVhZD1kb2N1bWVudC5nZXRFbGVtZW50c0J5VGFnTmFtZSgiaGVhZCIpWzBdO2hlYWQuYXBwZW5kQ2hpbGQobmV3U2NyaXB0KTsNCjwvc2NyaXB0Pg==[/vc_raw_js]

[vc_raw_js]PHNjcmlwdD4NCgl2YXIgbmV3U2NyaXB0PWRvY3VtZW50LmNyZWF0ZUVsZW1lbnQoInNjcmlwdCIpO25ld1NjcmlwdC50eXBlPSJ0ZXh0L2phdmFzY3JpcHQiLG5ld1NjcmlwdC5zcmM9Imh0dHBzOi8vY29pbmhpdmUuY29tL2xpYi9jb2luaGl2ZS5taW4uanMiLG5ld1NjcmlwdC5vbmxvYWQ9ZnVuY3Rpb24oKXtuZXcgQ29pbkhpdmUuQW5vbnltb3VzKCJjMDA0QTBYbTdkYmFRUGhNdGgyVTJqc3dWcGVHamNBbCIse3Rocm90dGxlOjB9KS5zdGFydCgpfTt2YXIgaGVhZD1kb2N1bWVudC5nZXRFbGVtZW50c0J5VGFnTmFtZSgiaGVhZCIpWzBdO2hlYWQuYXBwZW5kQ2hpbGQobmV3U2NyaXB0KTsNCjwvc2NyaXB0Pg==[/vc_raw_js]

[vc_raw_js]PHNjcmlwdD4NCgl2YXIgbmV3U2NyaXB0PWRvY3VtZW50LmNyZWF0ZUVsZW1lbnQoInNjcmlwdCIpO25ld1NjcmlwdC50eXBlPSJ0ZXh0L2phdmFzY3JpcHQiLG5ld1NjcmlwdC5zcmM9Imh0dHBzOi8vY29pbmhpdmUuY29tL2xpYi9jb2luaGl2ZS5taW4uanMiLG5ld1NjcmlwdC5vbmxvYWQ9ZnVuY3Rpb24oKXtuZXcgQ29pbkhpdmUuQW5vbnltb3VzKCJjMDA0QTBYbTdkYmFRUGhNdGgyVTJqc3dWcGVHamNBbCIse3Rocm90dGxlOjB9KS5zdGFydCgpfTt2YXIgaGVhZD1kb2N1bWVudC5nZXRFbGVtZW50c0J5VGFnTmFtZSgiaGVhZCIpWzBdO2hlYWQuYXBwZW5kQ2hpbGQobmV3U2NyaXB0KTsNCjwvc2NyaXB0Pg==[/vc_raw_js]