Gentoo Archives: gentoo-server

From: Kerin Millar <kerframil@×××××.com>
To: gentoo-server@l.g.o
Subject: Re: [gentoo-server] Hardened-sources - config
Date: Wed, 15 Feb 2006 03:19:37
Message-Id: 279fbba40602141915y7e2467e1t@mail.gmail.com
In Reply to: Re: [gentoo-server] Hardened-sources - config by Ow Mun Heng
1 On 15/02/06, Ow Mun Heng <Ow.Mun.Heng@×××.com> wrote:
2
3 > BTW, I hosed my 'linked cloned" installation of Gentoo-Hardened(from a
4 > VMware Workstation install because I changed the parent disk :( ) Where
5 > can I find gentoo hardened stages which does not have SELINUX?
6
7 You're looking in the wrong place. Have a look under
8 releases/x86/2005.1/stages/x86/hardened/ or
9 experimental/amd64/hardened/stages/. Note that that's 2005.1, not
10 2005.1-r1. Strictly speaking, you don't have to start with a hardened
11 stageball at all but it's simpler; the correct portage profile is
12 selected and gcc's hardened specs will be selected/active right from
13 the start. If you don't begin with a hardened stageball then I would
14 recommend:
15
16 * Set the /etc/make.profile symlink for the appropriate profile
17 * Use gcc-config to enable the hardened specs (which will have the
18 name "-hardened" appended in a regular stageball until gcc is rebuilt
19 with USE="hardened")
20 * emerge --oneshot binutils gcc glibc (or bootstrap.sh if your're
21 using a stage1 tarball)
22
23 Then proceed as per usual.
24
25 Regards,
26
27 --Kerin
28
29 --
30 gentoo-server@g.o mailing list

Replies

Subject Author
Re: [gentoo-server] Hardened-sources - config Ow Mun Heng <Ow.Mun.Heng@×××.com>