Gentoo Archives: gentoo-hardened

From: "Claes Gyllenswärd" <letharion@×××××.com>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Help testing new hardened profiles structure
Date: Mon, 08 Nov 2010 08:02:27
Message-Id: AANLkTi=CT3Fk1UpBpBzRCQTYiFS2FU+_BXU_Wb5jH9-+@mail.gmail.com
In Reply to: Re: [gentoo-hardened] Help testing new hardened profiles structure by "Anthony G. Basile"
1 2010/11/8 Anthony G. Basile <basile@××××××××××××××.edu>:
2 > On 11/07/2010 01:47 PM, Claes Gyllenswärd wrote:
3 >> 2010/11/6 Anthony G. Basile <blueness@g.o>:
4 >>>
5 >>> Hi hardened users,
6 >>>
7 >>> You may have heard by now that hardened is thinking of changing its
8 >>> profile structure.  The current structure is crazy complex and there is
9 >>> no need for it.  Basically we're going to be removing the versioning in
10 >>> our profiles so that instead of
11 >>>
12 >>>  [8]   hardened/linux/amd64/10.0 *
13 >>>  [9]   hardened/linux/amd64/10.0/no-multilib
14 >>>
15 >>> you will simply get
16 >>>
17 >>>  [8]   hardened/linux/amd64/10.0 *
18 >>>  [9]   hardened/linux/amd64/10.0/no-multilib
19 >>>
20 >>> to profile-config list. (It'll be similar on the other arches).  Behind
21 >>> the scenes, we are also deprecating the various "sub-profiles" which
22 >>> aren't even included in the profiles.desc list, like amd64/10.0/desktop,
23 >>> /server, /developer etc.
24 >>>
25 >>> This isn't happening soon, so don't panic!  You will get a portage news
26 >>> item when we're about to do the switch and we will proceed slowly.
27 >>>
28 >>> I'm emailing the list to sollicit help in testing, espeically on the
29 >>> minor arches which are slatted to go first.  If you'd like to help out,
30 >>> here's how:
31 >>>
32 >>>        1. Record your current list from emerge -ep system and emerge -ep world
33 >>>
34 >>>        2. git clone git://git.overlays.gentoo.org/proj/hardened-dev.git
35 >>>
36 >>>        3. cd hardened-dev
37 >>>
38 >>>        4. git branch profiles origin/profiles
39 >>>
40 >>>        5. git checkout profiles
41 >>>
42 >>>        6. mount --bind profiles/ /usr/portage/profiles
43 >>>
44 >>>        7. Record your emerge -ep system and emerge -ep world, and compare to
45 >>> before.
46 >>>
47 >>> There should be no or only minor changes.
48 >>>
49 >>> Thanks.
50 >>>
51 >>> --
52 >>> Anthony G. Basile, Ph.D.
53 >>> Gentoo Developer
54 >>>
55 >>>
56 >>
57 >> This made no difference at all on stable amd64, but I never actually
58 >> switched profile, since the instructions don't mention that.
59 >> Should I?
60 >
61 > Yeah I probably should have mentioned that you need to do profile-config
62 > list, notice whatever number corresponds to your profile and then
63 > profile-config set <num>
64 >
65 > --
66 > Anthony G. Basile, Ph. D.
67 > Chair of Information Technology
68 > D'Youville College
69 > Buffalo, NY 14201
70 > (716) 829-8197
71 >
72 >
73
74 Done that too. No difference in the package lists at all.
75 vimdiff pointed out a single dot in portages output, but I assume
76 that's of no concern.

Replies

Subject Author
Re: [gentoo-hardened] Help testing new hardened profiles structure "Anthony G. Basile" <basile@××××××××××××××.edu>