Re: [gentoo-dev] Secure Gentoo

[Karl Trygve Kalleberg <karltk@prosalg.no>]

I just have to throw in my "me too" post here. I think this is an
excellent idea.

It would be very nice if as you point out, one could merge a "secure"
profile that is reasonably bugfree and secure, where it was easy to
customize which services you want to run, with what kind of privilege,
etc.

Would a "sandboxing"/"playpen"/"virtual machine" feature where you could
put users into groups where users inside one group can see each other (w,
ps, who, id..) but not outside the group be possible ? I've noticed they
have something akin to that on login.sf.net and that grsecurity tries to
solve some of these problems.



Kind regards,

Karl T