[gentoo-user] Re: Hardened and python 3

[James]

Dustin C. Hatch <admiralnemo <at> gmail.com> writes:


> > Last time I researched a gentoo hardened environment, it
> > called for the default of Python to still be series 2 of the
> > software. I was wondering if anyone had any experience with
> > a "Hardened Gentoo workstation" that was using python 3
> > exclusively?

> The SELinux libraries for Python only exist for Python 2. Without them,
> Portage will be unable to e.g. load policy and set file context. You can
> have Python 3 installed, and it can be the default interpreter if
> sys-apps/portage was built with USE=python2, but you cannot have *only*
> Python 3.


OK, this interesting. On one workstation, I have:


sys-apps/portage <snip> 
Installed versions:  2.2.8-r1(16:34:43 03/10/14)(ipc -build -doc -epydoc
-pypy2_0 -python2 -python3 -selinux -xattr LINGUAS="-ru"
PYTHON_TARGETS="python2_7 python3_3 -pypy2_0 -python2_6 -python3_2 -python3_4")


So you saying go into package.use and set python2 flag for portage
resulting in something like this:

[ebuild   R    ] sys-apps/portage-2.2.8-r1  USE="(ipc) python2* -build -doc
-epydoc (-pypy2_0) -python3 (-selinux) -xattr" LINGUAS="-ru"
PYTHON_TARGETS="python2_7 python3_3 (-pypy2_0) -python2_6 -python3_2
(-python3_4)" 0 kB



(note) I only use this as an example, I'm not upgrading this system
to Hardened, just using it for clarification.)

???


James