Re: [gentoo-dev] Secure Gentoo - What do you think?

[Joachim Blaabjerg <styx@SuxOS.org>]

Mikael Hallendal <hallski@gentoo.org> wrote:

> Will this work be done on Gentoo or are you planning to use portage
> SuxOS?

I was planning to use Gentoo as a base, kind of, and make "secure" Portage
packages (with safe defaults etc., plus a few packages that aren't made for
Gentoo yes (AFAIK), like LIDS and libsafe, plus the patched kernel).

> An interesting thought here would be to have some variable set in
> make.conf that if set only lets you install packages from a list of
> trusted apps/version. This would be a very flexible solution. Since it
> lets you have the exact same operating system on your workstation/server
> while having a really secure setup on your server.

Hmm... Sounds interesting!

> Let us know if you have any problems.

I will...

My only "problem" right now is to figure out where to start... ;) I guess I'll
have to, more or less, modify each and every one of the .ebuild files.

> Otherwise the only thing I have to say, welcome to the Gentoo community!

Thanks a lot! :)

-- 
Joachim Blaabjerg
styx@SuxOS.org
www.SuxOS.org