Re: [gentoo-dev] Secure Gentoo - What do you think?

[Grant Goodyear]

> I was planning to use Gentoo as a base, kind of, and make "secure" Portage
> packages (with safe defaults etc., plus a few packages that aren't made for
> Gentoo yes (AFAIK), like LIDS and libsafe, plus the patched kernel).

Very cool. Those additions would be extremely welcome.

> My only "problem" right now is to figure out where to start... ;) I guess I'll
> have to, more or less, modify each and every one of the .ebuild files.

Gads, I hope not!  If you do need to modify all of the ebuilds, then we
haven't done our jobs very well.  As for where to start, I assume you've
installed Gentoo once or twice to get a good feel for how it works? 
Then I would start on building a minimal SuxOS system.  You'll
presumably need to modify the bootstrap.sh script to compile glibc
with formatguard, create a SuxOS kernel ebuild that includes all of the
necessary patches, and make a /usr/portage/profiles/SuxOS/packages file
tailored to SuxOS needs.  Come play on #gentoo on irc.openprojects.net;
we'll be happy to help!

-g2boojum-
-- 
___________________________________________________________________
|     Grant Goodyear                  |  The Secrets of Physics:   |
|     Dept. of Chemistry - Clemson U  |1. Add zero.                |
|     Clemson, SC  29634              |2. Multiply by one.         |
|-------------------------------------|3. Expand in a Taylor series|
|e-mail: goodyea@×××××××.edu          |4. Integrate by parts.      |
|www:g2.ces.clemson.edu/~grant        |5. Fourier transform.       |
|                                     |6. Add auxiliary variables  |
|_____________________________________|____________________________|