Re: [gentoo-dev] Secure Gentoo - What do you think?

[Jano Lukac]

Joachim Blaabjerg said:
> Hi people,

> Recently, I asked mr. Robbins if I could use Portage in SuxOS, and we
> concluded with that a collaborative effort would be for the best. I've
> decided that I would really like to make a Portage "system profile" for
> SuxOS, as mr. Robbins suggested, and work with the Gentoo distribution
> (mainly Portage) as a base for SuxOS, effectively creating a security
> centralized version of Gentoo.

When you write about creating a secure profile, what exactly do you have in
mind?  e.g. package mask all insecure setups, or different pam
configuration files, changing default init-scripts or preventing wrong
programs from running, maybe kernel level options, etc etc.  ??