Re: [gentoo-hardened] Some teething problems with 2004.1 and cascaded profiles

[Chris PeBenito]

On Tue, 2004-04-27 at 16:05, Ed Wildgoose wrote:
> Chris PeBenito wrote:
> >>Hi I'm having some teething problems with the 2004.1 cascaded profile.
> >I need to know what version of portage you are using.
>
> I'm using 2.0.50-r6 - which should be the latest unmasked build in portage?
>
> I couldn't bootstrap at all with the cascaded profiles,
> bootstrap-cascade.sh would only pickup about 4-5 of the packages, and

It's come to my attention this afternoon that theres some portage
breakage with the stacked profiles.  I plan on building the 2004.1
stages as soon as this is fixed up.

> So what I had to do to bootstrap was use the selinux-1.4, and then
> switch back to 2004.1 profile before doing the emerge system.

The best idea would be to do a regular (default) install, and then
convert your system with the quickstart guide.

> OK, I am confusing selinux with hardened, but what I meant to write was
> that I want a hardened + selinux machine.
[cut]
> It's really not clear what needs to be done to get a "hardened" system
> right now?  For example, do we need any other flags adding to
> make.conf...?

Actually things are in a bit of flux.  Hardened-gcc is deprecated, and
the replacement (gcc-3.3.3-r[23] with USE=hardened) is still in
testing.  The term 'hardened' sometimes gets thrown around a little too
much.  The hardened stages are more precisely pie-ssp stages.  You can
have SELinux with pie-ssp; it just takes a little work.  This is a
common request, so I'll probably be making selinux-pie-ssp stages
eventually to make this easier.

-- 
Chris PeBenito
<pebenito@g.o>
Developer,
Hardened Gentoo Linux
Embedded Gentoo Linux
 
Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
Key fingerprint = B0E6 877A 883F A57A 8E6A  CB00 BC8E E42D E6AF 9243