Re: [gentoo-hardened] Assessing the Tux Strength: Part 2 - Into the Kernel

["\"Tóth Attila\"" <atoth@atoth.sote.hu>]

You 'll have to make a compromise. I run hardened gentoo on my laptop.
Everyday use requires loosening the security settings here-and-there.

-- 
dr Tóth Attila, Radiológus, 06-20-825-8057, 06-30-5962-962
Attila Toth MD, Radiologist, +36-20-825-8057, +36-30-5962-962

2010.Szeptember 17.(P) 01:35 időpontban Dale Pontius ezt írta:
> On 09/02/10 18:43, Radoslaw Madej wrote:
>> Hi Guys,
>>
>> For anyone interested, I'd like to announce that the second part of my
>> comparison between different Linux distros and their security features
>> (which
>> includes Gentoo Hardened of course! ;) ) can be found here:
>> http://labs.mwrinfosecurity.com/notices/assessing_the_tux_strength_part_2_into_the_kernel/
>>
>> As always - all feedback is appreciated. Also please note that the
>> previous
>> feedback is not to be forgotten and I shall address these
>> ((-fstack-protector
>> vs. -fstack-protector-all, cookie strength and prelink) in my fourth
>> post :)
>>
>> Also - congrats to Zorry for becoming the new Gentoo Hardened lead and
>> thanks
>> for all your support! :)
>>
> I read this today, too.  Quite interesting, but it leaves me asking a
> simple question...
>
> I've been running my servers for years on hardened Gentoo, but I always
> figured it would be too problematic for my deskside and laptop machines.
>
> Is this true?  Have things gotten better, and is it perfectly reasonable
> to run hardened Gentoo for general purpose use?
>
> Two problem factors...  My family likes YouTube and the like, and for my
> job I have to run proprietary binary-only software.  (Silicon CAD tools)
>
> Thanks,
> Dale Pontius
>