[gentoo-commits] proj/hardened-dev:XT_PAX commit in: /

[Matt Thode]

commit:     a95fcafba0cf0871356b89d6704ea440b54a3f8d
Author:     Matthew Thode (prometheanfire) <prometheanfire <AT> gentoo <DOT> org>
AuthorDate: Wed Nov 23 21:09:30 2011 +0000
Commit:     Matt Thode <prometheanfire <AT> gentoo <DOT> org>
CommitDate: Wed Nov 23 21:09:30 2011 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-dev.git;a=commit;h=a95fcafb

notes I found while following the guide added

---
 XT_PAX-howto.txt |    8 +++++++-
 1 files changed, 7 insertions(+), 1 deletions(-)

diff --git a/XT_PAX-howto.txt b/XT_PAX-howto.txt
index 3a956be..5d1a2a9 100644
--- a/XT_PAX-howto.txt
+++ b/XT_PAX-howto.txt
@@ -12,7 +12,7 @@ is much appreciated and will help to make this approach to PaX robust.
 
 --------------------------------------------------------------------------------
 
-*Step 0. Get yourself a gentoo system.  Switch to an appropriate hardened profile
+*Step 0. Get yourself a gentoo system.  Then switch to an appropriate hardened profile
 using
 
 	eselect profile set hardened/linux/x86
@@ -70,6 +70,10 @@ If you see a PT_PAX header, or possibly one called LOOS+5041580 at the end of th
 
 	emerge --keep-going -eq world
 
+#packages that were not remerged
+	nano - manual remerge fixes it
+	grub - manual remerge fails it (still paxmarked)
+
 6. And finally, let's do any post-world rebuild cleanup:
 
 	etc-update
@@ -138,6 +142,8 @@ you want to use.  I also recommend xattr support on tmpfs:
 
 3. Compile the kernel and boot.
 
+# I had to reinstall grub to /dev/sda before I could boot
+
 --------------------------------------------------------------------------------
 
 *Step 3. The new system should be now be a pure XT_PAX system.  Let's test that