From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1QJYJy-0006nD-0s for garchives@archives.gentoo.org; Mon, 09 May 2011 21:48:54 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 9DA501C00F; Mon, 9 May 2011 21:48:36 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id 29E701C00F for ; Mon, 9 May 2011 21:48:35 +0000 (UTC) Received: from pelican.gentoo.org (unknown [66.219.59.40]) (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 4A7191B4079 for ; Mon, 9 May 2011 21:48:35 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by pelican.gentoo.org (Postfix) with ESMTP id BCDD980504 for ; Mon, 9 May 2011 21:48:34 +0000 (UTC) From: "Francisco Blas Izquierdo Riera" To: gentoo-commits@lists.gentoo.org Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Francisco Blas Izquierdo Riera" Message-ID: <31c13071d8a178e5dbb835cdc1fe911bdd3e91a0.klondike@gentoo> Subject: [gentoo-commits] proj/hardened-docs:master commit in: html/, html/rsbac/, html/docs/, html/selinux/ X-VCS-Repository: proj/hardened-docs X-VCS-Files: html/capabilities.html html/docs/devel-chroots-intro.html html/docs/glossary.html html/docs/pax-howto.html html/etdyn.html html/gnu-stack.html html/grsecurity.html html/hardened-toolchain.html html/hardenedfaq.html html/hardenedxorg.html html/index.html html/index2.html html/pax-quickstart.html html/pax-utils.html html/pic-fix-guide.html html/pic-guide.html html/pic-internals.html html/pie-ssp.html html/prelude-ids.html html/primer.html html/roadmap.html html/rsbac/intro.html html/rsbac/overview.html html/rsbac/quickstart.html html/rsbac/transition.html html/selinux/index.html html/toolchain-upgrade-guide.html X-VCS-Directories: html/ html/rsbac/ html/docs/ html/selinux/ X-VCS-Committer: klondike X-VCS-Committer-Name: Francisco Blas Izquierdo Riera X-VCS-Revision: 31c13071d8a178e5dbb835cdc1fe911bdd3e91a0 Date: Mon, 9 May 2011 21:48:34 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: quoted-printable X-Archives-Salt: X-Archives-Hash: a5eca841aac06181b09354ac55f81013 commit: 31c13071d8a178e5dbb835cdc1fe911bdd3e91a0 Author: klondike xiscosoft es> AuthorDate: Mon May 9 21:48:55 2011 +0000 Commit: Francisco Blas Izquierdo Riera xiscosoft = es> CommitDate: Mon May 9 21:48:55 2011 +0000 URL: http://git.overlays.gentoo.org/gitweb/?p=3Dproj/hardened-docs= .git;a=3Dcommit;h=3D31c13071 Updating previews --- html/capabilities.html | 2 +- html/docs/devel-chroots-intro.html | 2 +- html/docs/glossary.html | 2 +- html/docs/pax-howto.html | 2 +- html/etdyn.html | 6 +++--- html/gnu-stack.html | 2 +- html/grsecurity.html | 4 ++++ html/hardened-toolchain.html | 2 +- html/hardenedfaq.html | 4 ++-- html/hardenedxorg.html | 6 +++--- html/index.html | 31 +++++++++++++++++-------------= - html/index2.html | 31 +++++++++++++++++-------------= - html/pax-quickstart.html | 2 +- html/pax-utils.html | 6 +++--- html/pic-fix-guide.html | 2 +- html/pic-guide.html | 2 +- html/pic-internals.html | 2 +- html/pie-ssp.html | 4 ++-- html/prelude-ids.html | 2 +- html/primer.html | 4 ++-- html/roadmap.html | 8 ++++---- html/rsbac/intro.html | 2 +- html/rsbac/overview.html | 2 +- html/rsbac/quickstart.html | 2 +- html/rsbac/transition.html | 2 +- html/selinux/index.html | 10 +++++----- html/toolchain-upgrade-guide.html | 2 +- 27 files changed, 78 insertions(+), 68 deletions(-) diff --git a/html/capabilities.html b/html/capabilities.html index 796046d..6e8fa7a 100644 --- a/html/capabilities.html +++ b/html/capabilities.html @@ -409,7 +409,7 @@ set of distinct privileges

solar
Author

- Adam Mondl= + Adam Mondl
Contributor

Donate to support our development efforts. diff --git a/html/docs/devel-chroots-intro.html b/html/docs/devel-chroots= -intro.html index 130c11d..f7606e5 100644 --- a/html/docs/devel-chroots-intro.html +++ b/html/docs/devel-chroots-intro.html @@ -446,7 +446,7 @@ This guide covers the installation, configuration and= set up of chroots using a tool developed for the Gentoo dev machines.

- Alexander Gab= ert + Alexander= Gabert
Author

Donate to support our development efforts. diff --git a/html/docs/glossary.html b/html/docs/glossary.html index 5e60a81..018e6f5 100644 --- a/html/docs/glossary.html +++ b/html/docs/glossary.html @@ -147,7 +147,7 @@ This document introduces the Gentoo Hardened project = and covers each of its subprojects in simple terms.

- Brandon Hale<= /b> + Bran= don Hale
Author

Donate to support our development efforts. diff --git a/html/docs/pax-howto.html b/html/docs/pax-howto.html index e2009d8..a515906 100644 --- a/html/docs/pax-howto.html +++ b/html/docs/pax-howto.html @@ -252,7 +252,7 @@ to run. A quickstart covering PaX and Hardened Gentoo.

- Brandon Hale<= /b> + Bran= don Hale
Author

Blackace
Editor

diff --git a/html/etdyn.html b/html/etdyn.html index ca94085..c452472 100644 --- a/html/etdyn.html +++ b/html/etdyn.html @@ -190,11 +190,11 @@ These guidelines are required to achieve full Addre= ss Space Layout Randomization
Author

solar
Contributor

- Alexander Gabe= rt + Alexander = Gabert
Contributor

- John Davis<= /a> + John Davis
Editor

- Zack Gilbu= rd + Zack Gilburd
Editor

Donate to support our development efforts. diff --git a/html/gnu-stack.html b/html/gnu-stack.html index d784de3..8894753 100644 --- a/html/gnu-stack.html +++ b/html/gnu-stack.html @@ -406,7 +406,7 @@ If no one can seem to answer your question, give me a= poke either on irc
Author

The PaX te= am
Contributor

- Kevin F. Qu= inn + Kevin F. Quinn<= /b>
Contributor

Donate to support our development efforts. diff --git a/html/grsecurity.html b/html/grsecurity.html index 005424b..cea9933 100644 --- a/html/grsecurity.html +++ b/html/grsecurity.html @@ -406,6 +406,10 @@ let gradm pr= ocess them and propose roles und # gradm -F -L /etc/grsec/learning.log -O /etc= /grsec/learning.roles +

Note: = +You will need to disable the RBAC learning mode before doing this. You c= an use +gradm -D for this. +

Audit the /etc/grsec/learning.roles and save it as /etc/grsec/policy (mode 0600) wh= en you are finished. diff --git a/html/hardened-toolchain.html b/html/hardened-toolchain.html index 7fefc3c..4c6c57d 100644 --- a/html/hardened-toolchain.html +++ b/html/hardened-toolchain.html @@ -334,7 +334,7 @@ The following packages have issues with BIND_NOW at t= he time of writing, and it Technical description of, and rationale for, the Gentoo Hardened Toolcha= in modifications.

-Kevin F. Qui= nn +Kevin F. Quinn
Author

Ned Ludd
Contributor

diff --git a/html/hardenedfaq.html b/html/hardenedfaq.html index 5658af4..e205b49 100644 --- a/html/hardenedfaq.html +++ b/html/hardenedfaq.html @@ -543,11 +543,11 @@ Frequently Asked Questions that arise on the #gento= o-hardened IRC channel and the gentoo-hardened mailing list.

- Adam Mond= l + Adam Mondl
Author

solar
Contributor

- Guillaume Dest= uynder + Guillaume Des= tuynder
Contributor

The PaX T= eam
Contributor

diff --git a/html/hardenedxorg.html b/html/hardenedxorg.html index 3480e67..d88a199 100644 --- a/html/hardenedxorg.html +++ b/html/hardenedxorg.html @@ -123,13 +123,13 @@ The PaX flags -P (PAGEEXEC), -S (SEGMEXEC), -M (MPR= OTECT) as well as -R (RANDMMA How to install and use Xorg on Hardened Gentoo

- Adam Mond= l + Adam Mondl
Author

- Kevin Quin= n + Kevin Quinn
Contributor

Ned Ludd<= /a>
Contributor

- Christian He= im + = Christian Heim
Contributor

Z= aid A.
Contributor

diff --git a/html/index.html b/html/index.html index 9f5561b..c1091f4 100644 --- a/html/index.html +++ b/html/index.html @@ -56,42 +56,42 @@ Gentoo once they've been tested for security and stab= ility by the Hardened team. Role - + Tony Vroon chainsaw Member ( Hardened sources ) - + Bryan Stine battousai Member ( Bastille Lead ) - + Anthony G. Basile blueness Member ( PaX/Grsecurity, Hardened so= urces ) - + Gordon Malm gengor Member ( PaX/Grsecurity, Hardened so= urces ) - + Gysbert Wassenaar nixnut Member ( PPC arch team liaison ) - + Chris PeBenito pebenito Member ( SELinux ) - + Matthew Summers quantumsummers Member ( Hardened sources, Doc ) - + Magnus Granberg zorry Project Lead ( Hardened Toolchain, D= oc ) @@ -142,12 +142,12 @@ project: SELinux - pebenito + Chris PeBenito SELinux is a system of mandatory acc= ess controls. SELinux can enforce the security policy over all processes = and objects in the system. PaX/Grsecurity - blueness + Anthony G. Basile Grsecurity is a complete security solution providing such features as a = MAC or RBAC system, chroot restrictions, address space modification protection = (via @@ -157,7 +157,7 @@ file race conditions, ipc protections and much more. Hardened Toolchain - Zorry + Magnus Granberg Transparent implementation of PaX address spac= e @@ -167,7 +167,7 @@ executables. Hardened Kernel Sources - blueness + Anthony G. Basile A kernel which provides patches for hardened subprojects, and stability/= security oriented patches. Includes Grsecurity and SELinux. @@ -175,7 +175,7 @@ oriented patches. Includes Grsecurity and SELinux. Bastille - battousai + Bryan Stine Bastille is an interactive application which gives the user suggestions = on securing their machine. It will be customized to make suggestions about = other @@ -271,6 +271,9 @@ GNU Stack Quickstart
  • Gentoo SELinux= Handbook
    • +
  • + Gentoo SELinux FAQ +
    • @@ -287,7 +290,7 @@ GNU Stack Quickstart hardened - battousai, blueness, chainsaw, drago= nheart, gengor, nixnut, pebenito, solar, zorry + battousai, blueness, chainsaw, drago= nheart, gengor, klondike, nixnut, pebenito, solar, zorry Hardened Gentoo project packages and= policy diff --git a/html/index2.html b/html/index2.html index 883f517..467744f 100644 --- a/html/index2.html +++ b/html/index2.html @@ -55,37 +55,37 @@ Gentoo once they've been tested for security and stab= ility by the Hardened team. Role - + Tony Vroon chainsaw Member ( Hardened sources ) - + Bryan Stine battousai Member ( Bastille Lead ) - + Anthony G. Basile blueness Member ( PaX/Grsecurity, Hardened so= urces ) - + Gordon Malm gengor Member ( PaX/Grsecurity, Hardened so= urces ) - + Gysbert Wassenaar nixnut Member ( PPC arch team liaison ) - + Matthew Summers quantumsummers Member ( Hardened sources, Doc ) - + Magnus Granberg zorry Project Lead ( Hardened Toolchain, D= oc ) @@ -102,7 +102,7 @@ Gentoo once they've been tested for security and stab= ility by the Hardened team. Policy development, Proxy (non devel= oper contributors) - + Chris PeBenito pebenito Lead ( Policy, x86, AMD64 ) @@ -125,12 +125,12 @@ Gentoo once they've been tested for security and st= ability by the Hardened team. SELinux - pebenito + Chris PeBenito SELinux is a system of mandatory acc= ess controls. SELinux can enforce the security policy over all processes = and objects in the system. PaX/Grsecurity - blueness + Anthony G. Basile Grsecurity is a complete security solution providing such features as a = MAC or RBAC system, Chroot restrictions, address space modification protection = (via @@ -140,7 +140,7 @@ file race conditions, ipc protections and much more. Hardened Toolchain - Zorry + Magnus Granberg Transparent implementation of PaX address spac= e @@ -150,7 +150,7 @@ executables. Hardened-Sources - blueness + Anthony G. Basile A kernel which provides patches for hardened subprojects, and stability/= security oriented patches. Includes Grsecurity and SELinux. @@ -158,7 +158,7 @@ oriented patches. Includes Grsecurity and SELinux. Bastille - battousai + Bryan Stine Bastille is an interactive application which gives the user suggestions = on securing their machine. It will be customized to make suggestions about = other @@ -240,6 +240,9 @@ GNU Stack Quickstart
  • Gentoo SELinux= Handbook
    • +
  • + Gentoo SELinux FAQ +
    • @@ -256,7 +259,7 @@ GNU Stack Quickstart hardened - battousai, blueness, chainsaw, drago= nheart, gengor, nixnut, pebenito, solar, zorry + battousai, blueness, chainsaw, drago= nheart, gengor, klondike, nixnut, pebenito, solar, zorry Hardened Gentoo project packages and= policy diff --git a/html/pax-quickstart.html b/html/pax-quickstart.html index ad3fc1b..3cef2d4 100644 --- a/html/pax-quickstart.html +++ b/html/pax-quickstart.html @@ -257,7 +257,7 @@ to run. Often we find that we need the -m -sp combos. A quickstart covering PaX and Hardened Gentoo.

    - Brandon Hale<= /b> + Bran= don Hale
    Author

    Blackace
    Editor

    diff --git a/html/pax-utils.html b/html/pax-utils.html index 2fda7fd..a62c2d4 100644 --- a/html/pax-utils.html +++ b/html/pax-utils.html @@ -670,11 +670,11 @@ This guide provides instruction on securing your sy= stem by using the pax-utils package to find and identify problematic binaries.

    - swift + Sven = Vermeulen
    Author

    - solar + Ned Ludd<= /a>
    Editor

    -     nightmor= ph + Joshua S= addler
    Editor

    Donate to support our development efforts. diff --git a/html/pic-fix-guide.html b/html/pic-fix-guide.html index c27137d..eef91a5 100644 --- a/html/pic-fix-guide.html +++ b/html/pic-fix-guide.html @@ -858,7 +858,7 @@ mmx32_rgb888_mask dd 00ffffffh,00ffffffh
    Author

    The PaX te= am
    Contributor

    - Kevin F. Qu= inn + Kevin F. Quinn<= /b>
    Contributor

    Donate to support our development efforts. diff --git a/html/pic-guide.html b/html/pic-guide.html index 00b2ff7..fce32be 100644 --- a/html/pic-guide.html +++ b/html/pic-guide.html @@ -156,7 +156,7 @@ References:

    solar
    Author

    - Alexander Gabe= rt + Alexander = Gabert
    Editor

    Donate to support our development efforts. diff --git a/html/pic-internals.html b/html/pic-internals.html index aeded3e..b7c9ef3 100644 --- a/html/pic-internals.html +++ b/html/pic-internals.html @@ -226,7 +226,7 @@ These executables simply do not need the PIC addressi= ng mode for their functions

    Updated F= ebruary 14, 2004

    Summary:= Understanding the impact of text relocations and explaining the use = of PIC in shared libraries

    - Alexander Gabe= rt + Alexander = Gabert
    Author

    solar
    Contributor

    diff --git a/html/pie-ssp.html b/html/pie-ssp.html index 4009ff2..f9d7069 100644 --- a/html/pie-ssp.html +++ b/html/pie-ssp.html @@ -216,7 +216,7 @@ glibc-based SSP setup for userland in GNU/Linux for G= entoo-Linux at all!

    = 6. Using distcc with hgcc

    -Lisa Marie Seelye says you need t= he same hgcc and gcc versions on all distcc host volunteer machines. +Lisa Marie Seelye says you need the same hgcc and gcc versions on all di= stcc host volunteer machines.

    = 7. Credits and Reference

    @@ -237,7 +237,7 @@ glibc-based SSP setup for userland in GNU/Linux for G= entoo-Linux at all!

    Updated N= ovember 27, 2010

    Summary:= (This DOC is badly outdated and mostly obsolete) This introductionar= y guide explains the basic behaviour of the hardened toolchain.

    <= /tr>

    - Alexand= er Gabert + Ale= xander Gabert
    Author

    solar
    Contributor

    diff --git a/html/prelude-ids.html b/html/prelude-ids.html index 65bd9ba..e1f0acc 100644 --- a/html/prelude-ids.html +++ b/html/prelude-ids.html @@ -603,7 +603,7 @@ $conf{'dbpasswd'}=3D'dbpass';

    Zack Gilburd
    Author

    - Michael Boma= n + Michae= l Boman
    Contributors

    <= b>Krzysztof Zaraska
    Contributors

    diff --git a/html/primer.html b/html/primer.html index 3d48453..598463b 100644 --- a/html/primer.html +++ b/html/primer.html @@ -251,9 +251,9 @@

    Updated F= ebruary 7, 2007

    Summary:= A Primer on Hardened Gentoo.

    - Joshua Bri= ndle + Joshu= a Brindle
    Author

    - Adam Mo= ndl + Adam Mondl
    Contributor

    Ned Ludd
    Editor

    diff --git a/html/roadmap.html b/html/roadmap.html index e2d38b8..235b2ff 100644 --- a/html/roadmap.html +++ b/html/roadmap.html @@ -405,17 +405,17 @@ A roadmap that plots current needs and goals of the Hardened Gentoo project.

    - Adam Mond= l + Adam Mondl
    Author

    - Rob Holland<= /b> + Rob Holland
    Editor

    Ned Ludd<= /a>
    Contributor

    Chris PeBe= nito
    Contributor

    - Joshua Brind= le + Joshua = Brindle
    Contributor

    - Guillaume Dest= uynder + Guillaume Des= tuynder
    Contributor

    Alexander Gabert=
    Contributor

    diff --git a/html/rsbac/intro.html b/html/rsbac/intro.html index 8c6dc2b..b34e684 100644 --- a/html/rsbac/intro.html +++ b/html/rsbac/intro.html @@ -94,7 +94,7 @@ access control system.


    Author

    Michal Purzy= nski
    Editor

    - Guillaume Dest= uynder + Guillaume Des= tuynder
    Editor

    Donate to support our development efforts. diff --git a/html/rsbac/overview.html b/html/rsbac/overview.html index 3922ec8..01ec2f3 100644 --- a/html/rsbac/overview.html +++ b/html/rsbac/overview.html @@ -206,7 +206,7 @@ This document should give you an overview of RSBAC ac= cess control system.
    Author

    =20 Michal Purzy= nski
    Editor

    - Guillaume Dest= uynder + Guillaume Des= tuynder
    Editor

    Donate to support our development efforts. diff --git a/html/rsbac/quickstart.html b/html/rsbac/quickstart.html index 6045dcb..e9430ff 100644 --- a/html/rsbac/quickstart.html +++ b/html/rsbac/quickstart.html @@ -334,7 +334,7 @@ RSBAC on Gentoo Linux

    Michal Purzy= nski
    Author

    - Guillaume Dest= uynder + Guillaume Des= tuynder
    Editor

    Donate to support our development efforts. diff --git a/html/rsbac/transition.html b/html/rsbac/transition.html index 725616c..d05ac31 100644 --- a/html/rsbac/transition.html +++ b/html/rsbac/transition.html @@ -71,7 +71,7 @@ Transition from rsbac-sources to hardened-sources

    Summary:= This document will help you transioning from rsbac-sources to hardened-sources

    - Guillaume Dest= uynder + Guillaume Des= tuynder
    Author

    Donate to support our development efforts. diff --git a/html/selinux/index.html b/html/selinux/index.html index e1de71a..6876a9c 100644 --- a/html/selinux/index.html +++ b/html/selinux/index.html @@ -71,7 +71,7 @@ Role - + Chris PeBenito pebenito Lead ( Policy, x86, AMD64 ) @@ -121,7 +121,7 @@ project: Base Policy - pebenito + Chris PeBenito SELinux policy for the core system, including users, administrators, a= nd daemons in the system profile. @@ -129,21 +129,21 @@ project: Daemon Policy - pebenito + Chris PeBenito SELinux policies for common daemons. x86 - pebenito + Chris PeBenito Support for the x86 architecture. AMD64 - pebenito + Chris PeBenito Support for the AMD64 (x86-64) architecture. diff --git a/html/toolchain-upgrade-guide.html b/html/toolchain-upgrade-g= uide.html index 4229402..aac017e 100644 --- a/html/toolchain-upgrade-guide.html +++ b/html/toolchain-upgrade-guide.html @@ -261,7 +261,7 @@ Technical Description of the Gentoo Hardened Toolchai= n Guide for upgrading from hardened gcc-3/glibc-2.3/binutils-2.16 to gcc-4= /glibc-2.5/binutils-2.17.

    -Kevin F. Qui= nn +Kevin F. Quinn
    Author

    Donate to support our development efforts.