| 1 |
On 04/27/2011 03:46 PM, Sven Vermeulen wrote: |
| 2 |
> Hi guys 'n gals, |
| 3 |
> |
| 4 |
> |
| 5 |
> When a good "features/selinux" profile is created, we can then create |
| 6 |
> hardened/linux/amd64/selinux |
| 7 |
> hardened/linux/amd64/no-multilib/selinux |
| 8 |
> hardened/linux/x86/selinux |
| 9 |
> ... |
| 10 |
> profiles in which only a single file exists, namely "parent", with the |
| 11 |
> contents of |
| 12 |
> ../ |
| 13 |
> ../../../../features/selinux |
| 14 |
> |
| 15 |
|
| 16 |
Hi Sven and all, |
| 17 |
|
| 18 |
I got this structure set up on the hardened-dev overlay in branch |
| 19 |
profiles-selinux. To use it, just mount --bind the overlay profile over |
| 20 |
$PORTDIR/profiles. |
| 21 |
|
| 22 |
Here's the stacking so far -- the reinheritance of base for amd64 is a |
| 23 |
problem which I'll fix. |
| 24 |
|
| 25 |
~ # eselect profile list |
| 26 |
Available profile symlink targets: |
| 27 |
[1] default/linux/amd64/10.0 |
| 28 |
[2] default/linux/amd64/10.0/desktop |
| 29 |
[3] default/linux/amd64/10.0/desktop/gnome |
| 30 |
[4] default/linux/amd64/10.0/desktop/kde |
| 31 |
[5] default/linux/amd64/10.0/developer |
| 32 |
[6] default/linux/amd64/10.0/no-multilib |
| 33 |
[7] default/linux/amd64/10.0/server |
| 34 |
[8] hardened/linux/amd64 |
| 35 |
[9] hardened/linux/amd64/selinux * |
| 36 |
[10] hardened/linux/amd64/no-multilib |
| 37 |
[11] hardened/linux/amd64/no-multilib/selinux |
| 38 |
|
| 39 |
~ # ./check_profiles_stack.py |
| 40 |
/usr/portage/profiles/base |
| 41 |
/usr/portage/profiles/default/linux |
| 42 |
/usr/portage/profiles/arch/base |
| 43 |
/usr/portage/profiles/features/multilib |
| 44 |
/usr/portage/profiles/features/multilib/lib32 |
| 45 |
/usr/portage/profiles/arch/amd64 |
| 46 |
/usr/portage/profiles/releases |
| 47 |
/usr/portage/profiles/releases/10.0 |
| 48 |
/usr/portage/profiles/hardened/linux |
| 49 |
/usr/portage/profiles/hardened/linux/amd64 |
| 50 |
/usr/portage/profiles/base |
| 51 |
/usr/portage/profiles/features/selinux |
| 52 |
/usr/portage/profiles/hardened/linux/amd64/selinux |
| 53 |
|
| 54 |
|
| 55 |
~ # eselect profile set hardened/linux/amd64/no-multilib/selinux |
| 56 |
~ # ./check_profiles_stack.py |
| 57 |
/usr/portage/profiles/base |
| 58 |
/usr/portage/profiles/default/linux |
| 59 |
/usr/portage/profiles/arch/base |
| 60 |
/usr/portage/profiles/features/multilib |
| 61 |
/usr/portage/profiles/features/multilib/lib32 |
| 62 |
/usr/portage/profiles/arch/amd64 |
| 63 |
/usr/portage/profiles/releases |
| 64 |
/usr/portage/profiles/releases/10.0 |
| 65 |
/usr/portage/profiles/hardened/linux |
| 66 |
/usr/portage/profiles/hardened/linux/amd64 |
| 67 |
/usr/portage/profiles/features/64bit-native |
| 68 |
/usr/portage/profiles/hardened/linux/amd64/no-multilib |
| 69 |
/usr/portage/profiles/base |
| 70 |
/usr/portage/profiles/features/selinux |
| 71 |
/usr/portage/profiles/hardened/linux/amd64/no-multilib/selinux |
| 72 |
|
| 73 |
|
| 74 |
yellowness ~ # ARCH="x86" eselect profile set hardened/linux/x86/selinux |
| 75 |
yellowness ~ # ./check_profiles_stack.py |
| 76 |
/usr/portage/profiles/base |
| 77 |
/usr/portage/profiles/default/linux |
| 78 |
/usr/portage/profiles/arch/base |
| 79 |
/usr/portage/profiles/arch/x86 |
| 80 |
/usr/portage/profiles/releases |
| 81 |
/usr/portage/profiles/releases/10.0 |
| 82 |
/usr/portage/profiles/hardened/linux |
| 83 |
/usr/portage/profiles/hardened/linux/x86 |
| 84 |
/usr/portage/profiles/features |
| 85 |
/usr/portage/profiles/hardened/linux/x86/selinux |
| 86 |
|
| 87 |
|
| 88 |
-- |
| 89 |
Anthony G. Basile, Ph.D. |
| 90 |
Gentoo Linux Developer [Hardened] |
| 91 |
E-Mail : blueness@g.o |
| 92 |
GnuPG FP : 8040 5A4D 8709 21B1 1A88 33CE 979C AF40 D045 5535 |
| 93 |
GnuPG ID : D0455535 |
Archives