Re: [gentoo-hardened] Re: Security notice regarding hardened-sources

["\"Tóth Attila\"" <atoth@atoth.sote.hu>]

Thanks for the feedback about the sources.
What about the toolchain? What are the gcc, binutils and glibc versions
supported? What versions of the toolchain components advised for the brave
folk?

Thx:
Dw.
-- 
dr Tóth Attila, Radiológus, 06-20-825-8057, 06-30-5962-962
Attila Toth MD, Radiologist, +36-20-825-8057, +36-30-5962-962

2010.Szeptember 17.(P) 02:21 időpontban Anthony G. Basile ezt írta:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 09/16/2010 06:47 PM, 7v5w7go9ub0o wrote:
>> On 09/16/10 17:15, Anthony G. Basile wrote:
>> []
>>
>>>
>>>
>>> As a result, certain configurations of hardened-sources are also
>>> vulnerable.  As a work around until I get the fix into the tree and
>>> fast track stabilization, keep the following in mind:
>>
>> []
>>
>> Thank you for this note, Anthony!
>>
>> 1. Will hardened-sources be distributed via the tree, or via an overlay?
>> (IIRC, I got 2.6.34-r5 via the overlay, then it disappeared)
>>
>> 2. Same question about gcc; will hardened gcc come to us via an overlay?
>> (I see an update to 4.4.4-r2; IIRC I got 4.4.4-r1 via overlay).
>>
>> TIA
>>
>
>
> The overlay should not be used for anything anymore.   Its around only
> for reference.  (Zorry and I may want to look back at stuff we did.)
>
> In about a day or so you should see hardened-sources-2.6.32-r18.ebuild
> and hardened-sources-2.6.34-r6.ebuild appear in portage.  Use one of
> those two.
>
>
> - --
> Anthony G. Basile, Ph.D.
> Gentoo Developer
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.16 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkyStJIACgkQl5yvQNBFVTUnnACgg1lYVsSGM2k5SG6VSBeJTPOI
> hhIAn0WTyGjbplsXD3JavTuBP6Xf2N5D
> =08GV
> -----END PGP SIGNATURE-----
>