| 1 |
Grant (24.12.2008 03:56): |
| 2 |
>> I've been able to do so; basically I switched over to the standard profile, |
| 3 |
>> disabled selinux in the kernel, and re-emerged system for new use flags. |
| 4 |
>> There were some other details but overall the process was pretty painless, |
| 5 |
>> anyone ambitious enough to configure a hardened system can probably handle |
| 6 |
>> the switch without much problem. Not that I'm encouraging you to drop |
| 7 |
>> hardened (especially on a laptop that could be exposed to random wifi |
| 8 |
>> networks ;-) |
| 9 |
> |
| 10 |
> I'd love to keep it hardened but I want to install programs like |
| 11 |
> skype, miro, and mplayer that don't seem to compile under a hardened |
| 12 |
> profile. |
| 13 |
|
| 14 |
Vanilla GCC profile and paxctl are your friends. |
| 15 |
|
| 16 |
> - Grant |
| 17 |
> |
| 18 |
>>> Can I switch my laptop's profile from a hardened one to a non-hardened |
| 19 |
>>> one? I thought this was impossible without a complete reinstall but |
| 20 |
>>> folks on the gentoo-user list seem to think it's not a problem. |
| 21 |
>>> |
| 22 |
>>> - Grant |
| 23 |
> |
| 24 |
> |
| 25 |
> |
| 26 |
|
| 27 |
|
| 28 |
-- |
| 29 |
SATtva | security & privacy consulting |
| 30 |
www.vladmiller.info | www.pgpru.com |
Archives