| 1 |
>>>> A dev is asking me to switch to a hardened profile in order to test a |
| 2 |
>>>> fix. I'm happy to go through the process, but is there a chance my |
| 3 |
>>>> laptop could be unusable after the switch? If that happens I'll be in |
| 4 |
>>>> real trouble. Will I be able to switch back to a non-hardened profile |
| 5 |
>>>> afterward? I plan to follow this guide: |
| 6 |
>>>> |
| 7 |
>>>> http://www.gentoo.org/proj/en/hardened/hardenedfaq.xml#hardenedprofile |
| 8 |
>>>> |
| 9 |
>>>> BTW, are emerge -e world and emerge -e system both necessary? I |
| 10 |
>>>> thought emerge -e world would rebuild everything. |
| 11 |
>>> |
| 12 |
>>> Switching to hardened is safe. The switch back should be, too, although |
| 13 |
>>> I haven't personally tried it. (Why would you switch back?) |
| 14 |
>> |
| 15 |
>> I originally had my laptop on a hardened profile (I think it was a |
| 16 |
>> couple laptops back) but there were so many problems I eventually gave |
| 17 |
>> up. I remember doing a lot of system reinstalling as I switched |
| 18 |
>> profiles around. I don't have time to reinstall my system right now |
| 19 |
>> so I'm trying to be sure I can switch to hardened (and from hardened |
| 20 |
>> if necessary) without reinstalling. |
| 21 |
> |
| 22 |
> If you don't run a hardened kernel, "sudo gcc-config 5" (assuming 5 is |
| 23 |
> the vanilla gcc on your machine...) will switch you back to the vanilla |
| 24 |
> gcc. No need to switch profiles or recompile anything. |
| 25 |
|
| 26 |
I do run a hardened kernel, but you're saying if I switch to gcc-5 I |
| 27 |
should be able to test for a crash that was previously exhibited under |
| 28 |
a hardened profile? |
| 29 |
|
| 30 |
>>> You emerge system first, and then world so that your world is built by a |
| 31 |
>>> hardened toolchain. When you compile gcc/glibc with USE=hardened, it |
| 32 |
>>> gives them super powers. |
| 33 |
>> |
| 34 |
>> Would 'emerge gcc glibc && emerge -e world' have the same affect? |
| 35 |
> |
| 36 |
> There are a couple of other packages you're supposed to re-emerge along |
| 37 |
> with gcc and glibc. Binutils was one, but I don't remember the whole |
| 38 |
> list. Just suck it up and spend the extra hour to re-emerge system; that |
| 39 |
> way, you're sure you haven't missed anything. |
| 40 |
|
| 41 |
OK I'll emerge system first if it comes to that. |
| 42 |
|
| 43 |
- Grant |
Archives