8 files changed, 43 insertions, 20 deletions
diff --git a/profiles/Manifest.gz b/profiles/Manifest.gz
index 996d4a22ac2a..637e3bac9751 100644
--- a/profiles/Manifest.gz
+++ b/profiles/Manifest.gz
diff --git a/profiles/base/package.use.mask b/profiles/base/package.use.mask
index fcf5de55ca73..398d7729ddcf 100644
--- a/profiles/base/package.use.mask
+++ b/profiles/base/package.use.mask
@@ -30,10 +30,6 @@ dev-qt/qtdemo:4 webkit
 dev-python/PyQt4 webkit
 dev-python/pyside:0 webkit
 
-# Mike Gilbert <floppym@gentoo.org> (10 Oct 2017)
-# Depends on old ffmpeg-2, which no longer exists in the repo.
-<=media-tv/tvheadend-4.0.9 ffmpeg
-
 # Pawel Hajdan jr <phajdan.jr@gentoo.org> (18 Sep 2017)
 # Ian Stakenvicius <axs@gentoo.org> (27 Sep 2017)
 # Depends on >=icu-59, still masked.
diff --git a/profiles/default/linux/amd64/17.0/hardened/selinux/eapi b/profiles/default/linux/amd64/17.0/hardened/selinux/eapi
new file mode 100644
index 000000000000..7ed6ff82de6b
--- /dev/null
+++ b/profiles/default/linux/amd64/17.0/hardened/selinux/eapi
@@ -0,0 +1 @@
+5
diff --git a/profiles/default/linux/amd64/17.0/hardened/selinux/parent b/profiles/default/linux/amd64/17.0/hardened/selinux/parent
new file mode 100644
index 000000000000..2190e9797eaa
--- /dev/null
+++ b/profiles/default/linux/amd64/17.0/hardened/selinux/parent
@@ -0,0 +1,2 @@
+..
+../../../../../../features/selinux
diff --git a/profiles/package.mask b/profiles/package.mask
index f015ed7c839e..76ffd31ed64f 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -29,6 +29,35 @@
 
 #--- END OF EXAMPLES ---
 
+# Bernard Cafarelli <voyageur@gentoo.org> (05 Dec 2017)
+# Dead Window Maker dockapps, dead upstreams and download links
+# (no release for more than 10 years)
+# Masked for removal in 30 days. Bug #639914
+x11-plugins/monto
+x11-plugins/wmbluecpu
+x11-plugins/wmcpu
+x11-plugins/wmdate
+x11-plugins/wmdf
+x11-plugins/wmdl
+x11-plugins/wmjsql
+x11-plugins/wmlpq
+x11-plugins/wmmemfree
+x11-plugins/wmmemmon
+x11-plugins/wmmldonkey
+x11-plugins/wmmsg
+x11-plugins/wmnetselect
+x11-plugins/wmpiki
+x11-plugins/wmsound
+x11-plugins/wmsvencd
+x11-plugins/wmupmon
+x11-plugins/wmwave
+<=x11-plugins/wmsysmon-0.7.7
+
+# Ian Whyman <thev00d00@gentoo.org> (04 Dec 2017)
+# Declared dead upstream. Masked for removal in 30 days
+# Please see net-misc/gerbera for a replacement.
+net-misc/mediatomb
+
 # Andreas Sturmlechner <asturm@gentoo.org> (03 Dec 2017)
 # Dead upstreams, depending on dead qt3support/qt4.
 # Masked for removal in 30 days. Bug #631788
@@ -425,11 +454,6 @@ sys-devel/automake:1.6
 sys-devel/automake:1.7
 sys-devel/automake:1.8
 
-# Jonas Stein <jstein@gentoo.org> (17 Oct 2017)
-# dev-tex/texmfind was superseded by app-portage/pfl 
-# See also bug #634494. Masked for removal on 2017-11-30
-dev-tex/texmfind
-
 # Lars Wendler <polynomial-c@gentoo.org> (12 Oct 2017)
 # Dead upstream. No qt5 release. Use app-admin/keepassxc as drop-in
 # replacement which has very active upstream and regular releases.
@@ -447,11 +471,6 @@ app-admin/keepassx
 # See bug #634040
 <perl-core/Unicode-Collate-1.190.0-r99
 
-# Patrice Clement <monsieurp@gentoo.org> (10 Oct 2017)
-# This plugin's functions now collide with most Vim 8.0 functions.
-# Masked for removal in 30 days. See bug 589194.
-app-vim/html5
-
 # Jonas Stein <jstein@gentoo.org> (10 Oct 2017)
 # Depends on the AIM service which will be discontinued on 2017-12-15.
 # See also bug #633914. Masked for removal on 2017-12-20
diff --git a/profiles/profiles.desc b/profiles/profiles.desc
index df08d53bc915..0a8b6baee11f 100644
--- a/profiles/profiles.desc
+++ b/profiles/profiles.desc
@@ -33,6 +33,7 @@ amd64           default/linux/amd64/13.0/x32                       dev
 amd64           default/linux/amd64/17.0                           stable
 amd64           default/linux/amd64/17.0/selinux                   dev
 amd64           default/linux/amd64/17.0/hardened                  dev
+amd64           default/linux/amd64/17.0/hardened/selinux          dev
 amd64           default/linux/amd64/17.0/desktop                   stable
 amd64           default/linux/amd64/17.0/desktop/gnome             stable
 amd64           default/linux/amd64/17.0/desktop/gnome/systemd     stable
diff --git a/profiles/targets/desktop/package.use b/profiles/targets/desktop/package.use
index 5d4dbf769ea9..19314fdf843c 100644
--- a/profiles/targets/desktop/package.use
+++ b/profiles/targets/desktop/package.use
@@ -4,6 +4,8 @@
 # Andreas Sturmlechner <asturm@gentoo.org> (03 Dec 2017)
 # Integration for Qt4-based applications
 kde-plasma/plasma-desktop qt4
+kde-plasma/breeze qt4
+kde-plasma/oxygen qt4
 
 # Andreas Sturmlechner <asturm@gentoo.org> (03 Dec 2017)
 # Required by kde-frameworks/kdelibs
diff --git a/profiles/use.local.desc b/profiles/use.local.desc
index c9bd4da9e88e..89f3c5cff76f 100644
--- a/profiles/use.local.desc
+++ b/profiles/use.local.desc
@@ -1269,7 +1269,6 @@ dev-ada/gnat_util:static - Build gnat_util static library
 dev-ada/gnat_util:static-pic - Build gnat_util static library with pic code
 dev-ada/gnatcoll:gnat_2016 - Compile with dev-lang/gnat-gpl-2016
 dev-ada/gnatcoll:gnat_2017 - Compile with dev-lang/gnat-gpl-2017
-dev-ada/gnatcoll:postgresql - Adds support for postgresql
 dev-ada/gnatcoll:projects - Adds support for projects
 dev-ada/gnatcoll:pygobject - Adds support for pygobject
 dev-ada/gnatcoll:shared - Build shared library
@@ -4221,15 +4220,11 @@ media-libs/mesa:dri3 - Enable DRI3 support.
 media-libs/mesa:egl - Enable EGL support.
 media-libs/mesa:gallium - Build drivers based on Gallium3D, the new architecture for 3D graphics drivers.
 media-libs/mesa:gbm - Enable the Graphics Buffer Manager for EGL on KMS.
-media-libs/mesa:gcrypt - Use dev-libs/libgcrypt for low level sha1 utility functions.
 media-libs/mesa:gles1 - Enable GLESv1 support.
 media-libs/mesa:gles2 - Enable GLESv2 support.
-media-libs/mesa:libressl - Use dev-libs/libressl for low level sha1 utility functions.
 media-libs/mesa:llvm - Enable LLVM backend for Gallium3D.
-media-libs/mesa:nettle - Use dev-libs/nettle for low level sha1 utility functions.
 media-libs/mesa:opencl - Enable the Clover Gallium OpenCL state tracker.
 media-libs/mesa:openmax - Enable OpenMAX video decode/encode acceleration for Gallium3D.
-media-libs/mesa:openssl - Use dev-libs/openssl for low level sha1 utility functions. May cause issues with games from Steam.
 media-libs/mesa:osmesa - Build the Mesa library for off-screen rendering.
 media-libs/mesa:pax_kernel - Enable if the user plans to run the package under a pax enabled hardened kernel
 media-libs/mesa:pic - disable optimized assembly code that is not PIC friendly
@@ -4793,13 +4788,18 @@ media-tv/tvbrowser:themes - Install extra theme packs
 media-tv/tvheadend:capmt - Enable support for capmt (dvbapi) protocol
 media-tv/tvheadend:constcw - Enable support for the constcw protocol
 media-tv/tvheadend:cwc - Enable support for the cwc (newcamd) protocol
-media-tv/tvheadend:dvbscan - Use media-tv/linuxtv-dvb-apps
+media-tv/tvheadend:dvbcsa - Enable decryption of the DVB Common Scrambling Algorithm
+media-tv/tvheadend:dvben50221 - Enable support for hardware CAM
 media-tv/tvheadend:hdhomerun - Enable support for the HDHomeRun device
 media-tv/tvheadend:imagecache - Enable support for image caching
 media-tv/tvheadend:iptv - Enable support for Internet Protocol TV
+media-tv/tvheadend:opus - Enable transcoding with the Opus audio codec
 media-tv/tvheadend:satip - Enable support for IP-based Satellite TV
 media-tv/tvheadend:timeshift - Enable TimeShift support
 media-tv/tvheadend:uriparser - Use dev-libs/uriparser
+media-tv/tvheadend:vpx - Enable transcoding with the VP8/VP9 video codecs
+media-tv/tvheadend:x264 - Enable transcoding with the H.264 video codec
+media-tv/tvheadend:x265 - Enable transcoding with the HEVC video codec
 media-tv/tvheadend:xmltv - Use media-tv/xmltv
 media-tv/v4l-dvb-saa716x:firmware - Install firmware
 media-tv/xmltv:ar - Argentina tv listing grabber
@@ -6260,6 +6260,7 @@ net-misc/bfgminer:zeusminer - Enable support for mining with ZeusMiner units
 net-misc/bfgminer:ztex - Enable support for mining with Ztex FPGAs
 net-misc/cfengine:html - Install HTML documentation
 net-misc/cfengine:libvirt - Enable support for virtual machine management through app-emulation/libvirt
+net-misc/cfengine:masterfiles - Install the Masterfiles Policy Framework
 net-misc/cfengine:qdbm - Use dev-db/qdbm as database backend
 net-misc/cfengine:tests - Install test files
 net-misc/cfengine:tokyocabinet - Use dev-db/tokyocabinet as database backend
@@ -8090,6 +8091,7 @@ sys-kernel/aufs-sources:experimental - Apply experimental patches; for more info
 sys-kernel/aufs-sources:module - Patch kernel to allow aufs being build as a module.
 sys-kernel/aufs-sources:vanilla - Use vanilla kernel sources without applying genpatches. WARNING: This flag will drop all support from the Gentoo Kernel Security team
 sys-kernel/ck-sources:deblob - Remove binary blobs from kernel sources to provide libre license compliance.
+sys-kernel/ck-sources:experimental - Apply experimental patches; for more information, see "https://wiki.gentoo.org/wiki/Project:Kernel/Experimental".
 sys-kernel/dracut:debug - Module installing additional tools like strace, file editor, ssh and more
 sys-kernel/genkernel:crypt - Obsolete USE flag. Use cryptsetup for LUKS support. (bug ##414523)
 sys-kernel/genkernel:cryptsetup - Enable support for Luks disk encryption using sys-fs/cryptsetup