From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1NFTrg-0002uK-4h for garchives@archives.gentoo.org; Tue, 01 Dec 2009 14:38:04 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 27D4BE0B3A; Tue, 1 Dec 2009 14:37:18 +0000 (UTC) Received: from mail-fx0-f215.google.com (mail-fx0-f215.google.com [209.85.220.215]) by pigeon.gentoo.org (Postfix) with ESMTP id BD834E0B3A for ; Tue, 1 Dec 2009 14:37:17 +0000 (UTC) Received: by fxm7 with SMTP id 7so4327837fxm.29 for ; Tue, 01 Dec 2009 06:37:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :from:date:message-id:subject:to:content-type; bh=VGOLF6GRQi5Dj6jwu6BKhPvXcP9Wipt/Tx0dEk/m3cw=; b=sIJobGWXsg7/hSIomQWLc7t5r2X8FO5N76oT4aDSSoyzB7PxSapRBhHafmshZ//5iV H5djlYH1qMplmJNor0cdSJVMZMZBm/2v/mysv8yp0WwnZknlyt/+517k/9sOWEEBZTIi q+qzsoqn/hI38Grz2gbsm8iGhBOAfGVL6aQ2M= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :content-type; b=skSPZ/rGcJCrSob/kmg+hloiNRa5FYSZhPlCT3O8ms5DbDFirXwRDD+NU2AaaLCy9P wkK0RVq+vPzliSUFYTUNqnLKm8R2cDEVE0cWGlQivm9OLNzHLFrKVDT87NkyTj0ifCrb jD4+vdfAGQzoD/55c/SMxHeZprAwtI2VomEWQ= Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-hardened@lists.gentoo.org Reply-to: gentoo-hardened@lists.gentoo.org MIME-Version: 1.0 Received: by 10.223.15.11 with SMTP id i11mr852767faa.105.1259678237104; Tue, 01 Dec 2009 06:37:17 -0800 (PST) In-Reply-To: <44a1f4d20912010611x7b762921r4ca6fe1c7c8567f9@mail.gmail.com> References: <166af1cf0912010240n1e4ee221g9c4a1bfc7e05e833@mail.gmail.com> <44a1f4d20912010611x7b762921r4ca6fe1c7c8567f9@mail.gmail.com> From: Shinkan Date: Tue, 1 Dec 2009 15:36:57 +0100 Message-ID: <166af1cf0912010636w1f610934p9fc96a71b3d0662c@mail.gmail.com> Subject: Re: [gentoo-hardened] Hardened Targets To: gentoo-hardened@lists.gentoo.org Content-Type: multipart/alternative; boundary=0015174762a4da99410479abb1e0 X-Archives-Salt: 5244aa84-954a-4c62-8de4-c309f7cbd782 X-Archives-Hash: 788bfbf057f336bcc227913666321d6c --0015174762a4da99410479abb1e0 Content-Type: text/plain; charset=UTF-8 2009/12/1 Mansour Moufid > > You really shouldn't unmerge Portage, but if you want to, it should be > the last step -- coming *after* emerge -uUDN world && emerge > --depclean && revdep-rebuild. After which you can safely rm -drf > /usr/portage. > I get the way you would do the things, but that's quite the same thing that catalyst do behind the scene. But it uses a cache system that avoid re-emerging too often. That's chrooting a stage3, emerging fancy features, then removing others, all of this according to profiles. I thing that's not very maintainable and that's error prone (because you're not sure of what is unmerged, or what dependencies it could break). Anyway, thanks for your help that brings fresh meat to me. I'm interrested if there's a magic command to unmerge & clean every dev related things once system is built. ONE OFF-TOPIC MORE GENERAL QUESTION : Is there a gentoo hardened toolchain with SSP and PIE BEFORE gcc 4 ? -- Pierre. "Sometimes when I'm talking, my words can't keep up with my thoughts. I wonder why we think faster than we speak. Probably so we can think twice." - Bill Watterson --0015174762a4da99410479abb1e0 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

2009/12/1 Mansour Moufid <mansourmoufid@gmail.com>

You really shouldn't unmerge Portage, but if you want to, it should be<= br> the last step -- coming *after* emerge -uUDN world && emerge
--depclean && revdep-rebuild. After which you can safely rm -drf /usr/portage.

I get the way you would do the thing= s, but that's quite the same thing that catalyst do behind the scene.But it uses a cache system that avoid re-emerging too often.
That'= s chrooting a stage3, emerging fancy features, then removing others, all of= this according to profiles.
I thing that's not very maintainable and that's error prone (becaus= e you're not sure of what is unmerged, or what dependencies it could br= eak).
=C2=A0
Anyway, thanks for your help that brings fresh meat to= me.
I'm interrested if there's a magic command to unmerge & clean e= very dev related things once system is built.

ONE OFF-TOPIC MORE GEN= ERAL QUESTION :
Is there a gentoo hardened toolchain with SSP and PIE BE= FORE gcc 4 ?

--
Pierre.
"Sometimes when I'm talking, my words = can't keep up with my thoughts. I wonder why we think faster than we sp= eak. Probably so we can think twice." - Bill Watterson
--0015174762a4da99410479abb1e0--