Re: [gentoo-hardened] Re: Tin Hat 20090119 released

[basile <basile@opensource.dyc.edu>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hi everyone,

Let me respond to all in one email:


7v5w7go9ub0o wrote:
> THANK YOU for taking the time to post this valuable information!
> Thanks also for sharing your infectious energy with this mailing
> list; it reinforces the importance of keeping hardened Gentoo
> vital!!

Hardened Gentoo is *very* important and I think the team would appreciate
knowing where their work ends up: Besides being the basis of Tin Hat,
it is
also the basis of another project of ours (tor-ramdisk) which uses a
uclibc
(not glibc) based hardened gentoo environment to securely house a tor
relay.
Three of our production servers at D'Youville College are hardened gentoo
(virtual.dyc.edu, moodle.dyc.edu and project.dyc.edu) as are a couple of
internal servers.  I use hardened gentoo when I teach my security course
to demonstrate various hardening techniques.

Clearly, we are heavily invested users.  Yes, keep hardened Gentoo vital!


Gordon Malm wrote:
> I think Tin Hat is a cool project and they are more than welcome to
>
keep us
> abreast of new releases, along with some short release notes.  In
fact, I am
> glad they do.  It is hardly spam.  Thanks Tin Hat peeps and keep up
>
the good
> work!
>
> Gordon Malm (gengor)

Thanks Gordon.  On another note, I am wondering if you and the other
team members
have any thoughts about PaX/Grsecurity possibly being dropped
upstream.  I hate
to see harndened gentoo without it, but there may be no choice.


RijilV wrote:
>
> On a side note, I think a stripped down version of tin hat linux
would be
> really cool - something around 300-400megs (so it could run very
nice on a
> system with a gig of ram).

We were already discussing this for the reasons you mention.


Anthony Basile, Ph.D.
Chair of Information Technology
D'Youville College
Buffalo, NY 14201
USA


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkl5Dz0ACgkQl5yvQNBFVTVm9gCeM8/Zn32Lxb+LgTMQfJoJaOdj
pRwAnRHIFB9JSFhsnV/oPNS15AdRLKFZ
=jYHx
-----END PGP SIGNATURE-----