Re: [gentoo-hardened] Cleaning up the hardened profiles

[Ron Adee]

I was not aware of these profiles and don't need them.



On Sun, Jan 27, 2013 at 2:32 PM, Anthony G. Basile <
basile@××××××××××××××.edu> wrote:

> Hi everyone,
>
> The number of profiles in gentoo is growing *again* with the addition of
> release 13.0 profiles.  Because of the way stacking works, adding these to
> hardened means a repetition of code in a way that is not good.  I'll decide
> how to proceed in a week or so, let everyone know and then implement
> something.  Right now I'm leaning towards "test" profiles for amd64 and x86
> and after some good period of testing (6 months?) just switch all of
> hardened from 10.0 to 13.0.
>
> While I'm at the business of rethinking the profiles, I've been wondering,
> does anyone use the /desktop, /developer, /server sub profiles?  I've
> officially only listed the following
>
>   [18]  hardened/linux/amd64 *
>   [19]  hardened/linux/amd64/selinux
>   [20]  hardened/linux/amd64/no-**multilib
>   [21]  hardened/linux/amd64/no-**multilib/selinux
>
> for amd64, and similarly for other arches.  But there also exist profiles
> like:
>
>     hardened/linux/amd64/desktop
>     hardened/linux/amd64/developer
>     hardened/linux/amd64/server
>
> for ia64, ppc, ppc64 and x86.  I didn't even bother to add these for mips
> or arm.  These are not listed in profiles.desc, so you can't eselect them,
> but a user could manually create those links.
>
> If no one is using them, I'll mark them deprecated, and dump them in a
> month or two.
>
> Comments?
>
>
> --
> Anthony G. Basile, Ph. D.
> Chair of Information Technology
> D'Youville College
> Buffalo, NY 14201
> [phone]
>
>