Re: [gentoo-hardened] Cleaning up the hardened profiles

[czernitko]

Hi, I'm using just hardened/linux/amd64.

Regards,
Peter


2013/1/27 Alexander Tsoy <alexander@××××.me>

> On вс 27 янв 2013 18:32:19 MSK, Anthony G. Basile <
> basile@××××××××××××××.edu> wrote:
>
> > Hi everyone,
> >
> > The number of profiles in gentoo is growing *again* with the addition of
> > release 13.0 profiles.   Because of the way stacking works, adding these
> > to hardened means a repetition of code in a way that is not good.   I'll
> > decide how to proceed in a week or so, let everyone know and then
> > implement something.   Right now I'm leaning towards "test" profiles for
> > amd64 and x86 and after some good period of testing (6 months?) just
> > switch all of hardened from 10.0 to 13.0.
> >
> > While I'm at the business of rethinking the profiles, I've been
> > wondering, does anyone use the /desktop, /developer, /server sub
> > profiles?   I've officially only listed the following
> >
> >       [18]   hardened/linux/amd64 *
> >       [19]   hardened/linux/amd64/selinux
> >       [20]   hardened/linux/amd64/no-multilib
> >       [21]   hardened/linux/amd64/no-multilib/selinux
> >
> > for amd64, and similarly for other arches.   But there also exist
> > profiles like:
> >
> >           hardened/linux/amd64/desktop
> >           hardened/linux/amd64/developer
> >           hardened/linux/amd64/server
> >
> > for ia64, ppc, ppc64 and x86.   I didn't even bother to add these for
> > mips or arm.   These are not listed in profiles.desc, so you can't
> > eselect them, but a user could manually create those links.
> >
> > If no one is using them, I'll mark them deprecated, and dump them in a
> > month or two.
> >
> > Comments?
>
> I've never used these subprofiles.
>
> --
> Alexander Tsoy
>
>