Gentoo Archives: gentoo-hardened

From: Albretch Mueller <lbrtchx@×××××.com>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Web app stack on top of hardened gentoo anyone?
Date: Thu, 22 Nov 2007 14:32:54
Message-Id: 9ef66fac0711220630p81da94w210006e558cc10d6@mail.gmail.com
In Reply to: Re: [gentoo-hardened] Web app stack on top of hardened gentoo anyone? by euronymous
1 > Primarily because what you're asking would require a lot of juggling to get right (database storage, for one thing)
2 ~
3 > anyway..i cannot understand why you need a live cd with a db and an ap... well..let's us know :)
4 ~
5 Of course, the DB itself could be burned on to a CD/DVD media, but it
6 would need some randomly writable disk(s) or disk arrays and other
7 programs like web servers need append-only disks for their logs, etc
8 ...
9 ~
10 Doing that for, say, a J2EE application stack is not a big deal at
11 all. You can just use environment variables which, for flexibility's
12 sake, you can set with a bash shell before running the program
13 ~
14 Doing that using knoppix is straightforward but with a hardened
15 gentoo baseline would be more challenging, since, e.g., I don't even
16 know if you could set environment variables in SELinux and many other
17 etc's I will certainly find as I do
18 ~
19 Well, I think I will give it a try and I will thoroughly document it,
20 but before I start I would like to read a bit more about "the gentoo
21 way" and how such thing could be done
22 ~
23 Any docs or ideas you would share with me?
24 ~
25 lbrtchx
26 --
27 gentoo-hardened@g.o mailing list

Replies

Subject Author
Re: [gentoo-hardened] Web app stack on top of hardened gentoo anyone? Natanael Copa <natanael.copa@×××××.com>