Re: [gentoo-hardened] Help required in creating a new profile

[John Eckhart]

Ashish,

    The preferred way to go about using hardened would be to link an
existing hardened profile: (i.e.
/usr/portage/profiles/selinux/2007.0/amd64/hardened)
to /etc/make.conf:

ln -sf /usr/portage/selinux/2007.0/amd64/hardened /etc/make.conf

If you have additional profile overrides (i.e. changes to the use masking),
you can put them in /etc/portage/profile (see the portage(5) manpage for
more information)

On Nov 27, 2007 3:18 PM, आशीष Ashish <wahjava.ml@×××××.com> wrote:

> Hi,
>
> I wanted to install *Hardened* Gentoo Linux 2007.0 on my AMD64
> architecture
> box with *SELinux* support and no *multilib* support. I'm in the initial
> stage of installation. I've just extracted the stage3 'hardened' tarball
> and
> portage snapshot.
>
> The 'hardened' stage3 tarball ships with a default hardened profile, to
> which
> I wanted to add *selinux* support. I've created a profile, which is not
> working as expected. Following is the my profile, which I saved
> in "/usr/local/portage/profiles/selinux-hardened-amd64" .
>
> - ----8<----8<----
> chatteau selinux-hardened-amd64 # file *
> make.defaults: symbolic link to
> `../../../../portage/profiles/selinux/2007.0/amd64/hardened/make.defaults'
> package.mask:  symbolic link to
> `../../../../portage/profiles/selinux/2007.0/amd64/hardened/package.mask'
> parent:        ASCII text
> use.mask:      symbolic link to
> `../../../../portage/profiles/selinux/2007.0/amd64/hardened/use.mask'
> chatteau selinux-hardened-amd64 # cat parent
> ../../../../portage/profiles/selinux/2007.0/amd64
> ../../../../portage/profiles/hardened/amd64
> selinux-hardened-amd64 # file /etc/make.profile
> /etc/make.profile: symbolic link to
> `/usr/local/portage/profiles/selinux-hardened-amd64'
> - ---->8---->8----
>
> Following is my "make.conf" :
>
> - ----8<----8<----
> CFLAGS="-O2 -pipe -ggdb -fforce-addr -mtune=nocona -march=nocona
> - -fstack-protector-all"
> CXXFLAGS="${CFLAGS}"
> CHOST="x86_64-pc-linux-gnu"
> FEATURES="ccache collision-protect buildpkg parallel-fetch splitdebug
> userfetch"
> - ---->8---->8----
>
> Following is the output of 'euse -a', on the basis of which I'm concluding
> its not working:
>
> - ----8<----8<----
> chatteau selinux-hardened-amd64 # euse -a
> berkdb              [+  D ]
> cli                 [+  D ]
> cracklib            [+    ]
> crypt               [+  D ]
> cups                [+  D ]
> dri                 [+  D ]
> fbdev               [+    ]
> fortran             [+  D ]
> gdbm                [+  D ]
> gpm                 [+  D ]
> hardened            [+  D ]
> iconv               [+  D ]
> ipv6                [+  D ]
> isdnlog             [+  D ]
> justify             [+    ]
> ladspa              [+    ]
> midi                [+    ]
> mudflap             [+  D ]
> ncurses             [+  D ]
> nls                 [+  D ]
> nptl                [+  D ]
> nptlonly            [+  D ]
> openmp              [+  D ]
> pam                 [+  D ]
> pcre                [+  D ]
> perl                [+  D ]
> pic                 [+  D ]
> pppd                [+  D ]
> python              [+  D ]
> readline            [+  D ]
> reflection          [+  D ]
> session             [+  D ]
> spl                 [+  D ]
> sse                 [+  D ]
> sse2                [+  D ]
> ssl                 [+  D ]
> tcpd                [+  D ]
> text                [+    ]
> tga                 [+    ]
> unicode             [+  D ]
> urandom             [+    ]
> v4l                 [+    ]
> vga                 [+    ]
> xorg                [+  D ]
> zlib                [+  D ]
> - ---->8---->8----
>
> I'm not expert in gentoo, so if I'm wrong somewhere please correct me.
>
> [I've also posted this message alt.os.linux.gentoo.]
>
> TIA
> --
> Ashish Shukla आशीष शुक्ल
> http://wahjava.wordpress.com/
> ·-- ·- ···· ·--- ·- ···- ·- ·--·-· --· -- ·- ·· ·-·· ·-·-·- -·-· --- --
>