Gentoo Archives: gentoo-hardened

From: Gordon Malm <gengor@g.o>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Profile switch: hardened to non-hardened?
Date: Thu, 25 Dec 2008 00:21:16
Message-Id: 200812241621.13188.gengor@gentoo.org
In Reply to: Re: [gentoo-hardened] Profile switch: hardened to non-hardened? by Grant
1 Hardened profiles: Yes there's a difference, no you should not switch to
2 hardened/linux/${ARCH} at this time.
3
4 You can get skype working by downloading or building gcc 4.1.x and pointing
5 LD_LIBRARY_PATH at the shared object directory when starting skype. skype
6 won't be using hardened toolchain but since its closed source and you're
7 willing to switch the whole machine to non-hardened I figure you probably
8 don't mind. ;)
9
10 Example:
11 1. Download
12 http://tinderbox.dev.gentoo.org/default-linux/x86/sys-devel/gcc-4.1.2.tbz2
13 2. unpack the archive to ${HOME}/tinderbox-pkgs/sys-devel/gcc/
14 3. Run it:
15 LD_LIBRARY_PATH="${HOME}/tinderbox-pkgs/sys-devel/gcc/usr/lib/gcc/i686-pc-linux-gnu/4.1.2/"
16 skype
17
18 If you only require VoIP capability and not skype specifically you might be
19 interested net-im/ekiga.
20
21 Gordon Malm (gengor)
22
23 On Wednesday, December 24, 2008 09:03:21 Grant wrote:
24 > > I've been able to do so; basically I switched over to the standard
25 > > profile, disabled selinux in the kernel, and re-emerged system for new
26 > > use flags. There were some other details but overall the process was
27 > > pretty painless, anyone ambitious enough to configure a hardened system
28 > > can probably handle the switch without much problem. Not that I'm
29 > > encouraging you to drop hardened (especially on a laptop that could be
30 > > exposed to random wifi networks ;-)
31 >
32 > Is there any difference between 1 and 8 here? Should I switch to 8?
33 >
34 > # eselect profile list
35 > Available profile symlink targets:
36 > [1] hardened/x86/2.6 *
37 > [2] selinux/2007.0/x86
38 > [3] selinux/2007.0/x86/hardened
39 > [4] default/linux/x86/2008.0
40 > [5] default/linux/x86/2008.0/desktop
41 > [6] default/linux/x86/2008.0/developer
42 > [7] default/linux/x86/2008.0/server
43 > [8] hardened/linux/x86
44 >
45 > - Grant
46 >
47 > >> Can I switch my laptop's profile from a hardened one to a non-hardened
48 > >> one? I thought this was impossible without a complete reinstall but
49 > >> folks on the gentoo-user list seem to think it's not a problem.
50 > >>
51 > >> - Grant

Replies

Subject Author
Re: [gentoo-hardened] Profile switch: hardened to non-hardened? Grant <emailgrant@×××××.com>