Sandbox from hardened-dev::musl overlay works
vanilla-3.13.2 + genpatches-3.13-6 + grsecurity-3.0-3.13.3-201402152204

(Portage version: 2.2.7/cvs/Linux x86_64, signed Manifest commit with key 0xF52D4BBA)
drop 2.0.5; fix deps, tex4ht[java] bug #486182, graphicsmagick[png] bug #314223; drop USE=xetex,luatex

(Portage version: 2.2.8/cvs/Linux x86_64, signed Manifest commit with key 0xAABEFD55)
updating for a dep of a dep of a dep for a cve...

(Portage version: 2.2.7/cvs/Linux x86_64, signed Manifest commit with key 0x2471eb3e40ac5ac3)
Version bump - bug #501478.  No automagic dependency on compression libraries - bug #497240

(Portage version: 2.2.8-r1/cvs/Linux x86_64, signed Manifest commit with key 0x77F1F175586A3B1F)
Remove vulnerable versions - bug #492494

(Portage version: 2.2.8-r1/cvs/Linux x86_64, signed Manifest commit with key 0x77F1F175586A3B1F)
Version bump

(Portage version: 2.2.8-r1/cvs/Linux i686, signed Manifest commit with key 3C33C650B576E4E3)
Security mask - bug #492494 net-mail/dovecot-2.{0,1}
fixing some py32 problems and adding py32 support

(Portage version: 2.2.7/cvs/Linux x86_64, signed Manifest commit with key 0x2471eb3e40ac5ac3)
Version bump. Thanks to Arferver for maintaining the patchset.

(Portage version: 2.2.8-r1/cvs/Linux x86_64, signed Manifest commit with key 0BBEEA1FEA4843A4)
Mask dev-lang/python:3.4.
Add python3_4.
Mask python_single_target_python3_4.
Add app-misc/mediacrush-cli

(Portage version: 2.2.8-r1/cvs/Linux x86_64, signed Manifest commit with key F8DBDADE)
Add app-misc/mediacrush-cli

(Portage version: 2.2.8-r1/cvs/Linux x86_64, signed Manifest commit with key F8DBDADE)
sci-geosciences/qlandkartegt: Backport patch for OSM useragent restrictions, drop old

(Portage version: 2.2.8-r1/cvs/Linux x86_64, signed Manifest commit with key B9D4F231BD1558AB!)
fix for a dep of a cve

(Portage version: 2.2.7/cvs/Linux x86_64, signed Manifest commit with key 0x2471eb3e40ac5ac3)
fix for CVE-2013-6396 (still needs to be backported to pre 2 (for grizzly support)

(Portage version: 2.2.7/cvs/Linux x86_64, signed Manifest commit with key 0x2471eb3e40ac5ac3)
fix for bug 467860

(Portage version: 2.2.7/cvs/Linux x86_64, signed Manifest commit with key 0x2471eb3e40ac5ac3)
Version bump. Thanks to Daniel Heule. Bug #500208

(Portage version: 2.2.8-r1/cvs/Linux x86_64, signed Manifest commit with key C2BA7F3C!)