Re: [gentoo-hardened] Virtualbox-OSE PIE/PIC support

[Ed W]

On 27/01/2010 06:58, Dariem Pérez Herrera wrote:
> Hello,
> I'm new in this list. Let me introduce myself: my name is Dariem, and
> I'm part of a team that is trying to create a distro based on project
> Gentoo Hardened. We want to collaborate  with you in everything we can.
> My first email will be about Virtualbox-OSE. I would like to know if
> there is any patch I can use to fix the problem with the inline asm
> using ebx register, but if it doesn't exist, I can try to create it
> myself and share it with you, I just don't want to duplicate efforts.
> Can you tell me what is the status of this issue?
>
>

Do also look into linux-vservers.  I use these in conjunction with 
hardened gcc-4.4 and it's a good fit for my needs.  Isolation is lower 
than virtualbox, but for many server installations the lower 
virtualisation overhead may be useful.  In my case I have both the host 
and most of the guests running hardened (on AMD64 host)

Creating your own profiles turns out to also be an excellent solution to 
server mainenance - definitely recommend it

Good luck

Ed W