Re: [gentoo-hardened] Security Level: high/server/workstation/virtualization

[Matthew Thode]

On Fri, 27 Jan 2012 22:19:42 +0200
Alex Efros <powerman@××××××××.name> wrote:

> Hi!
>
> Two small notes related to security level defaults:
>
> 1)  On my system vmware reboot host OS when starting guest OS if any
> one (or both) of these are enabled:
>
>     CONFIG_PAX_KERNEXEC (enabled by default on workstation security
> level) CONFIG_PAX_MEMORY_UDEREF
>
> 2)  When wireshark started by non-root user this option kill all my
>     processes (https://bugs.gentoo.org/show_bug.cgi?id=379369):
>
>     CONFIG_GRKERNSEC_BRUTE (enabled by default on all security levels)
>

You should be using the virt profile.

-- 
Matthew Thode (prometheanfire)