Re: [gentoo-hardened] kernel no longer in hardened-development overlay?

[Ed W <lists@wildgooses.com>]

On 19/04/2010 17:53, Joseph C. Lininger wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> Hey folks,
> Has anyone else noticed that the entire hardened-sources package has
> vanished from the hardened-development overlay? I know it's a
> development overlay and all, but I figured I should mention it because
> it's just gone. All versions. It struck me as a bit odd. Any reason for
> this?
>    


I guess others will disagree, but I have never been a huge fan of the 
kernel ebuilds.  I'm just not clear what they buy you over downloading 
and compiling your own?  I think there are a few extra patches in the 
case of gentoo-sources, but that seems to be about it?


If you don't yet have an alternative in place then my choice is for the 
vserver+grsec patches that you can grab from the linux-vserver.org site 
and this gives you a very easy way to setup chroot style jails with 
lightweight virtualisation, plus all the grsec patches.  If you just 
want Pax then it's a fast moving target and you are best to grab and 
patch your own kernel anyway, and don't forget to keep an archive of pax 
patches used since they don't archive them on the site (annoying if you 
are trying to diff the diff or whatever)


I realise everyone has different needs, but perhaps try pulling your own 
kernel down and applying your own patches - I think it's about easier to 
maintain in most cases?

Good luck

Ed W