From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org)
	by finch.gentoo.org with esmtp (Exim 4.60)
	(envelope-from <gentoo-hardened+bounces-2349-garchives=archives.gentoo.org@lists.gentoo.org>)
	id 1LMRph-0007I6-A9
	for garchives@archives.gentoo.org; Mon, 12 Jan 2009 18:48:19 +0000
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
	by pigeon.gentoo.org (Postfix) with SMTP id A7C80E0262;
	Mon, 12 Jan 2009 18:48:13 +0000 (UTC)
Received: from rv-out-0708.google.com (rv-out-0708.google.com [209.85.198.244])
	by pigeon.gentoo.org (Postfix) with ESMTP id 46867E0262
	for <gentoo-hardened@lists.gentoo.org>; Mon, 12 Jan 2009 18:48:13 +0000 (UTC)
Received: by rv-out-0708.google.com with SMTP id b17so11778307rvf.46
        for <gentoo-hardened@lists.gentoo.org>; Mon, 12 Jan 2009 10:48:12 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=domainkey-signature:received:received:message-id:date:from:to
         :subject:in-reply-to:mime-version:content-type
         :content-transfer-encoding:content-disposition:references;
        bh=0D/6X1N3KyrFHxUcdWEjqumJEwM/BWxyYzwmuUoZNgw=;
        b=CWtc95piJrdxjOv2WBvDr9vH0Khto6OHfc7QGv3K83ow79DPBCemzupCzR9GlpbB3l
         xpU3HydMxAX0FG+cMZLpYvE3ZABinO5t1Vkl0GjZgLUdh8MLl62NZbiuIXgLgxjwCRV0
         syF2sEfJDlddy0pi6dSf0Ogc6UPn8v/CJnLi4=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:to:subject:in-reply-to:mime-version
         :content-type:content-transfer-encoding:content-disposition
         :references;
        b=o3RRon4P8fBVxmFE96iMySplH/a+M4/4VpSvli1WbaMhUimyOVaczUjGeLCP+fQdRC
         YNW9u7zga8/NcV9xPB2Qng0jAQN5rlL5uWbH0whxOp0nlj9ExubGYAzWvRqOVWqhJxTz
         XqwIGg+OWN68Cm8LQL+ju3YOjq1i73MOs9MaQ=
Received: by 10.140.201.6 with SMTP id y6mr14800284rvf.298.1231786067293;
        Mon, 12 Jan 2009 10:47:47 -0800 (PST)
Received: by 10.140.49.12 with HTTP; Mon, 12 Jan 2009 10:47:47 -0800 (PST)
Message-ID: <4255c2570901121047q1901059eg814db60d676c1d1c@mail.gmail.com>
Date: Mon, 12 Jan 2009 11:47:47 -0700
From: RB <aoz.syn@gmail.com>
To: gentoo-hardened@lists.gentoo.org
Subject: Re: [gentoo-hardened] KVM & Gentoo Hardened
In-Reply-To: <4968C7B6.3080406@gentoo.org>
Precedence: bulk
List-Post: <mailto:gentoo-hardened@lists.gentoo.org>
List-Help: <mailto:gentoo-hardened+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-hardened+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-hardened+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-hardened.gentoo.org>
X-BeenThere: gentoo-hardened@lists.gentoo.org
Reply-to: gentoo-hardened@lists.gentoo.org
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <49481B57.4010801@gmail.com>
	 <4255c2570901092238r586741ebv2fbfdae3026b7662@mail.gmail.com>
	 <4968C7B6.3080406@gentoo.org>
X-Archives-Salt: 5e2602ac-bbb2-4b21-9448-38307878feeb
X-Archives-Hash: b2131a35b043aed36e2144b9badd9758

On Sat, Jan 10, 2009 at 09:07, Thomas Sachau <tommy@gentoo.org> wrote:
> RB schrieb:
> I have KVM + hardened toolchain + hardened-sources running without problems for a longer time now.
> Probably the main differences:
> -I am using the experimental hardened toolchain overlay from Zorry and xake.
> -I am using the in-kernel kvm-modules instead of those provided by kvm (compiled in, not as module).

The only real difference, then, is the toolchain - I'm running the
~amd64 (hardened) gcc-4.3.2-r2 from the main tree and the
hardened/linux/amd64/2008.0/server profile on the latest (2.6.27-r3)
hardened-sources.

Can anyone elucidate the difference between the Zorry/xake toolchain
and the one Solar was working on last month?


RB