From: Kacper Kowalik <xarthisius@gentoo.org>
To: gentoo-dev@lists.gentoo.org
Subject: Re: [gentoo-dev] Moving more hardening features to default?
Date: Tue, 25 Oct 2011 16:18:48 +0200 [thread overview]
Message-ID: <4EA6C548.3070206@gentoo.org> (raw)
In-Reply-To: <4E9FE012.5080703@gentoo.org>
[-- Attachment #1: Type: text/plain, Size: 780 bytes --]
W dniu 20.10.2011 10:47, "Paweł Hajdan, Jr." pisze:
> I've noticed
> <http://wiki.debian.org/ReleaseGoals/SecurityHardeningBuildFlags>, i.e.
> Debian is starting to make more and more hardening features default, at
> least for most packages.
>
> Should we start doing that too? What are possible problems with that? It
> seems like it's mostly about USE=hardened, right?
Hi,
just a bunch of quick questions from a hardened newbie:
1) Is there are reason to do it beside "Debian is going to do it"?
2) What's wrong with current approach i.e. having seperate hardened profile?
3) What are the benefits for an average desktop user or high-performance
cluster?
While answering that, please skip things obvious like having "more
secure box".
Cheers,
Kacper
[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 900 bytes --]
next prev parent reply other threads:[~2011-10-25 14:19 UTC|newest]
Thread overview: 25+ messages / expand[flat|nested] mbox.gz Atom feed top
2011-10-20 8:47 [gentoo-dev] Moving more hardening features to default? "Paweł Hajdan, Jr."
2011-10-20 10:40 ` Anthony G. Basile
2011-10-20 10:46 ` Tomáš Chvátal
2011-10-20 12:41 ` Rich Freeman
2011-10-20 12:57 ` Mike Frysinger
2011-10-20 14:36 ` Anthony G. Basile
2011-10-20 16:47 ` Rich Freeman
2011-10-20 17:17 ` Mike Frysinger
2011-10-20 20:51 ` Magnus Granberg
2011-10-23 3:56 ` [gentoo-dev] " Steven J Long
2011-10-25 10:10 ` "Paweł Hajdan, Jr."
2011-10-25 16:12 ` Francisco Blas Izquierdo Riera (klondike)
2011-10-27 1:13 ` [gentoo-dev] " Steven J Long
2011-10-20 11:46 ` [gentoo-dev] " Diego Elio Pettenò
2011-10-20 12:49 ` Mike Frysinger
2011-10-21 5:39 ` Ryan Hill
2011-10-20 12:55 ` [gentoo-dev] " Mike Frysinger
2011-10-21 3:20 ` [gentoo-dev] " Duncan
2011-10-21 12:13 ` Mike Frysinger
2011-10-21 15:25 ` Duncan
2011-10-21 16:37 ` Magnus Granberg
2011-10-25 14:18 ` Kacper Kowalik [this message]
2011-10-25 14:46 ` [gentoo-dev] " Patrick Lauer
2011-10-25 15:11 ` Rich Freeman
2011-10-25 15:38 ` "Paweł Hajdan, Jr."
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4EA6C548.3070206@gentoo.org \
--to=xarthisius@gentoo.org \
--cc=gentoo-dev@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox