Re: [gentoo-hardened] My first hardened install

[Michael]

I don't think you need to recompile your userland/toolchain. How many
package do you think use the kernel config when compiling? Or use output
generated by the kernel that would differ when using compat-vdso or
whatever? Whether it's needed or not, yo're better off by first trying
kernel only, but I'm about 99% sure you don't need to recompile your
userland. Since you're using a hardened stage compiler flags should all
be set correctly too, and that's what really matters...
Regards,

Michael

Op zondag 20-05-2007 om 04:32 uur [tijdzone -0600], schreef Matt
Poletiek:
> Im guessing this might require a toolchain/userland rebuild if
> COMPAT_VDSO is the culprit since a recompile-reboot didnt change the
> output of paxtest. Can anyone validate this?
>
> On 5/20/07, Matt Poletiek <chill550@×××××.com> wrote:
> > Yup, I sure do have that enabled. I am pretty sure I didnt check it so
> > as far as I know its enabled by default in the
> > hardened-gentoo-2.6.21-r1 package.
> >
> > Compiling the new kernel now. Again, anyone expect ill have to rebuild
> > any of the toolchain/userland?
> >
> > Thanks for all the help so far guys!
> >
> > On 5/20/07, pageexec@××××××××.hu <pageexec@××××××××.hu> wrote:
> > > On 20 May 2007 at 2:19, Matt Poletiek wrote:
> > >
> > > > PaX --->
> > > >     Non-executable pages  --->
> > > >          [*] Enforce non-executable pages
> > > >
> > > > is the only option I see. I hope im blind :S
> > >
> > > you probably enabled COMPAT_VDSO, chances are you you don't really
> > > need that on gentoo ;-).
> > >
> > > --
> > > gentoo-hardened@g.o mailing list
> > >
> > >
> >
> >
> > --
> > Matthew Poletiek
> > www.chill-fu.net
> >
>
>
> --
> Matthew Poletiek
> www.chill-fu.net

-- 
gentoo-hardened@g.o mailing list