From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 12539 invoked from network); 19 Sep 2004 05:41:47 +0000 Received: from smtp.gentoo.org (156.56.111.197) by lists.gentoo.org with AES256-SHA encrypted SMTP; 19 Sep 2004 05:41:47 +0000 Received: from lists.gentoo.org ([156.56.111.196] helo=parrot.gentoo.org) by smtp.gentoo.org with esmtp (Exim 4.41) id 1C8uSO-0000aU-0e for arch-gentoo-dev@lists.gentoo.org; Sun, 19 Sep 2004 05:41:52 +0000 Received: (qmail 6366 invoked by uid 89); 19 Sep 2004 05:41:45 +0000 Mailing-List: contact gentoo-dev-help@gentoo.org; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@gentoo.org Received: (qmail 14956 invoked from network); 19 Sep 2004 05:41:45 +0000 From: Ned Ludd Reply-To: solar@gentoo.org To: Allen Parker Cc: gentoo-dev@lists.gentoo.org In-Reply-To: <9f279016040918221659d98b1f@mail.gmail.com> References: <1095487827.11248.284.camel@simple> <414C5A1E.4030808@gentoo.org> <1095532070.6077.1193.camel@simple> <20040919020622.GA6080@darklands> <9f279016040918221659d98b1f@mail.gmail.com> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-bSCqm7gV6vB/OsuaaIPj" Organization: Gentoo (hardened,security,infrastructure,embedded,toolchain) Developer Message-Id: <1095572460.26130.2187.camel@simple> Mime-Version: 1.0 X-Mailer: Ximian Evolution 1.4.6 Date: Sun, 19 Sep 2004 01:41:00 -0400 Subject: Re: [gentoo-dev] Considering dropping the hardened toolchain (A Quantitive Approach) X-Archives-Salt: 54b80b7a-22b8-4679-aeba-9edcf25bd988 X-Archives-Hash: 121c7ccb868ca43e7bcd632fe035af5a --=-bSCqm7gV6vB/OsuaaIPj Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Sun, 2004-09-19 at 01:16, Allen Parker wrote: > Hey Ned, solar, hardened folks... >=20 > I've got a couple of pennies to throw into this mix: > Even though my own participation (due to work schedules - 3 jobs > doesn't leave a whole lot of time for other stuff) has waned, I > believe that your hardened toolchain is top-notch. Yes, it's bleeding > edge, it's not mature, etc... that doesn't mean we should have a > partial-birth abortion. Hardened has been around for a while, yes, but > if you spend 10 minutes in #gentoo you'll see, a LOT of our users > aren't prepared for something as in-depth as hardened. >=20 > Gentoo currently LEADS linux distributions in configurability in > regards to hardened/selinux/security. Bar NONE! For the experienced, > hardened *can't* be replaced by anything out there. If I had the skill > level to assist in any way, I'd be the first guy in line to help. > Unfortunately, my experience is more limited to finding > non-programming solutions to get the job, whatever that job may be, > done. Perhaps this thread will catch someone's eye, someone that CAN > help, at least drum up some user support. >=20 > Solar, before reading your email, I had no idea that you were feeling > like that. Maybe we can get someone with a *little* more experience > than me, perhaps a trusted user/non-dev that can be a bug-filter? >=20 > To the hardened community: If you can afford the time, check > bugs.gentoo.org for hardened bugs... if there are bugs that you know > of that are FUD, email a list of bug #'s to your favorite hardened > dev, after replying with a solution to the particular user, whether or > not it's a PEBKAC issue or not. >=20 > that's all for me, gotta head back to work *sigh* Don't panic yet..=20 So far I have been getting good feedback from some users and atleast one potential developer in some mails off list. I plan to put a detailed mail together in as few days and mail the interested parties and hopefully assemble a larger more professional team so we can fully continue to offer these types of technologies and continue to push fwd together. >=20 > Allen Parker > infowolfe@irc.freenode.net (when i'm online) #/tmp #gentoo-hardened #gent= oo-dev. >=20 > -- > gentoo-dev@gentoo.org mailing list --=20 Ned Ludd Gentoo (hardened,security,infrastructure,embedded,toolchain) Developer --=-bSCqm7gV6vB/OsuaaIPj Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQBBTRvs94CCfB4KcwwRAnTHAJkBZbokEnuBpk7VfCGZI+a3YhrVyQCgk944 6j0ISyXJd8c9y/Mr0o3BEVU= =1oOY -----END PGP SIGNATURE----- --=-bSCqm7gV6vB/OsuaaIPj--