From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1LQDIe-0008K3-NQ for garchives@archives.gentoo.org; Fri, 23 Jan 2009 04:05:45 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id DBC9DE0780; Fri, 23 Jan 2009 04:05:41 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id 8020EE0780 for ; Fri, 23 Jan 2009 04:05:41 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by smtp.gentoo.org (Postfix) with ESMTP id 13C40648E0 for ; Fri, 23 Jan 2009 04:05:41 +0000 (UTC) X-Virus-Scanned: amavisd-new at gentoo.org X-Spam-Score: -4.599 X-Spam-Level: X-Spam-Status: No, score=-4.599 required=5.5 tests=[AWL=-2.000, BAYES_00=-2.599] Received: from smtp.gentoo.org ([127.0.0.1]) by localhost (smtp.gentoo.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JCaQ5h57SDHB for ; Fri, 23 Jan 2009 04:05:34 +0000 (UTC) Received: from mail-ew0-f17.google.com (mail-ew0-f17.google.com [209.85.219.17]) by smtp.gentoo.org (Postfix) with ESMTP id 45F62648F2 for ; Fri, 23 Jan 2009 04:05:34 +0000 (UTC) Received: by ewy10 with SMTP id 10so3679796ewy.0 for ; Thu, 22 Jan 2009 20:05:33 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from :user-agent:mime-version:to:subject:content-type :content-transfer-encoding; bh=oRDXOtS5KD2wwgHAwvM/EQxlL9AEa0MS3tqQ2pYei5Q=; b=yHGU5TbUczHN6YqGtgsu+9YZww/G5VY5WY6h48qNYoz5ADT6Edzgeb9/ZBqN6Pe3UP 3awR8gzKH3U6wg2OifZX3zvDiSK39ue21y2eMBT8rxTuE5DlsYXh21JY4/IPkNISfY8h 8mBoUjX4wmWYdiH90TExYk9lO2KkpVHs+uvCk= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:subject :content-type:content-transfer-encoding; b=AObghzz7HzX+eKF5Tj6UwNhFIHRmzEYal9Fou+V7qLzfYjxDS8XiNd5H143fKhRVDl 1NeXFtNXphQjxy5StSpngy19oi8syt9isg/O2GeluqVOtANfMSzzUHyeB5X5+VLqDvgR +HSg78qXe8MbtfDLLQbSUDdbn7RK5hNfGrf8g= Received: by 10.210.109.10 with SMTP id h10mr1953688ebc.154.1232683533255; Thu, 22 Jan 2009 20:05:33 -0800 (PST) Received: from ?127.0.0.1? ([89.248.169.108]) by mx.google.com with ESMTPS id 6sm28250452nfv.55.2009.01.22.20.05.22 (version=SSLv3 cipher=RC4-MD5); Thu, 22 Jan 2009 20:05:32 -0800 (PST) Message-ID: <497941F5.60205@gmail.com> Date: Thu, 22 Jan 2009 23:05:09 -0500 From: 7v5w7go9ub0o <7v5w7go9ub0o@gmail.com> User-Agent: Thunderbird 2.0.0.19 (X11/20081209) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-hardened@lists.gentoo.org Reply-to: gentoo-hardened@lists.gentoo.org MIME-Version: 1.0 To: gentoo-hardened@lists.gentoo.org Subject: [gentoo-hardened] hardened profile/kernel on intel I7? Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Archives-Salt: b3d0a45c-1c75-4571-ac71-724cb566e155 X-Archives-Hash: 61e2da21c7673823b85ff2287ab22876 I expect to assemble a small I7 in a week or so. My initial thought is to use a 64 bit OS: 1. Does anyone have an I7 running a hardened profile/kernel? If so, any tips, please. 2. Will the current gcc 3.4.6-r2 still function well, or should I forgo propolice/ssp and go to 4.3.2-r2 'til the new hardened profile updates the compiler? 3. I'd ....... guess ........ that I'd need a recent kernel e.g. 2.6.27-r4 for grsecurity!? 4. IIUC, some folks are working on a hardened 4.3.2(?) profile; is that ready for prime time/ or ready for beta? TIA