From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org)
	by finch.gentoo.org with esmtp (Exim 4.60)
	(envelope-from <gentoo-hardened+bounces-3037-garchives=archives.gentoo.org@lists.gentoo.org>)
	id 1OwNTH-0005iE-Dl
	for garchives@archives.gentoo.org; Thu, 16 Sep 2010 23:02:27 +0000
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
	by pigeon.gentoo.org (Postfix) with SMTP id 07022E0952
	for <garchives@archives.gentoo.org>; Thu, 16 Sep 2010 23:02:26 +0000 (UTC)
Received: from mail-vw0-f53.google.com (mail-vw0-f53.google.com [209.85.212.53])
	by pigeon.gentoo.org (Postfix) with ESMTP id A07FFE0798
	for <gentoo-hardened@lists.gentoo.org>; Thu, 16 Sep 2010 22:49:11 +0000 (UTC)
Received: by vws15 with SMTP id 15so1641274vws.40
        for <gentoo-hardened@lists.gentoo.org>; Thu, 16 Sep 2010 15:49:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=domainkey-signature:received:received:message-id:date:from:to
         :subject:references:in-reply-to;
        bh=pObgQG77r2gHV16Nb1NBmvmyKPZx8DlnTkgCGuxQxEM=;
        b=pfm2Vjdtfigz44/6RZjWIy5erINjNMf5DOcU0SrBV2jTmHderWBXxTbupIwDRXE6hH
         /odVUhtFd74wau+ltPHNDhJHmFRH5TeHzuMMicxqbttCpBKogkAEp2nV/aF6yORYFxVN
         0BqI6c80pFbpRBr8xyvA/U1jpnteygeE+32QU=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:to:subject:references:in-reply-to;
        b=sq3YC8tUY1UyRWqPWshZRt5OQHnRdnxwwwpdPxvn84IYSrrt75nJwGmzXtBtTpH/LR
         LE+5sWhqcvaamMqRzboCR/RfRZwBSWBJNXQll4DgQs1aQGe3A01GjWhZpoPcYXvUr1cA
         kfGmXOjSBl7677BH7uJNN/Gakmon91XpR51Pk=
Received: by 10.220.63.7 with SMTP id z7mr2055010vch.207.1284677351055;
        Thu, 16 Sep 2010 15:49:11 -0700 (PDT)
Received: from [127.0.0.1] (tor-exit-proxy2-readme.formlessnetworking.net [208.53.142.38])
        by mx.google.com with ESMTPS id r35sm2170846vbw.17.2010.09.16.15.49.06
        (version=SSLv3 cipher=RC4-MD5);
        Thu, 16 Sep 2010 15:49:10 -0700 (PDT)
Message-ID: <4C929E8E.2030309@gmail.com>
Date: Thu, 16 Sep 2010 18:47:42 -0400
From: 7v5w7go9ub0o <7v5w7go9ub0o@gmail.com>
To: for hard list <gentoo-hardened@lists.gentoo.org>
Subject: [gentoo-hardened] Re: Security notice regarding hardened-sources
References: <4C9288E2.5010709@gentoo.org>
In-Reply-To: <4C9288E2.5010709@gentoo.org>
Precedence: bulk
List-Post: <mailto:gentoo-hardened@lists.gentoo.org>
List-Help: <mailto:gentoo-hardened+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-hardened+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-hardened+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-hardened.gentoo.org>
X-BeenThere: gentoo-hardened@lists.gentoo.org
Reply-to: gentoo-hardened@lists.gentoo.org
X-Archives-Salt: cfcec274-c7d0-4f55-9dc1-631601d7e8fa
X-Archives-Hash: 2e67a7d31e561ff0c5e330164f77afa1

On 09/16/10 17:15, Anthony G. Basile wrote:
[]

>
>
> As a result, certain configurations of hardened-sources are also
> vulnerable.  As a work around until I get the fix into the tree and
> fast track stabilization, keep the following in mind:

[]

Thank you for this note, Anthony!

1. Will hardened-sources be distributed via the tree, or via an overlay?
(IIRC, I got 2.6.34-r5 via the overlay, then it disappeared)

2. Same question about gcc; will hardened gcc come to us via an overlay?
(I see an update to 4.4.4-r2; IIRC I got 4.4.4-r1 via overlay).

TIA