Re: [gentoo-hardened] Which profile?

[Matthew Summers <msummers42@gmail.com>]

[-- Attachment #1: Type: text/plain, Size: 2074 bytes --]

On Thu, Feb 12, 2009 at 1:55 AM, Tom Hendrikx <tom@whyscream.net> wrote:

> Gordon Malm wrote:
> > On Wednesday, February 11, 2009 10:53:46 Tom Hendrikx wrote:
> >> Then I'll be the one to ask the annoying questions:)
> >>
> >> 1) Why are they there (could be related to some over-enthousiast
> >> non-hardened devs)?
> >>
> >> 2) Why do the profiles in the released hardened stages point to
> >> "../usr/portage/profiles/hardened/linux/x86/2008.0" by default? I
> >> checked this in stage1-x86-hardened-2008.0.tar.bz2 and
> >> stage3-i686-hardened-2008.0.tar.bz2
> >>
> >> 3) As these profiles seem to reflect the new "preferred layout", I
> >> understand that someone added them. But why aren't settings from
> >> supported hardened profiles ported to this new layout, to remove the
> >> ambiguity?
> >
> > To make a long story short one hand didn't know what the other was doing.
>  The
> > new profiles are the way I'd like to go, but they need some adjustment
> and
> > the old profiles should be used for now.  The situation is what it is
> today
> > because nobody (me) has gotten around to fixing+testing the new profiles
> and
> > dealing with the transition.  Not what you wanted to hear probably, but
> > there's much to do in hardened land and not many to do it.
> >
> > Gordon Malm (gengor)
> >
>
> My questions arose from curiosity, so thanks for clearing up. It's too
> bad that the situation is like it is, but I understand that there is
> more than enough work to be done, and not enough man power.
>
> Just know that testing stuff can be easily 'outsourced', just abuse the
> mailing list:)
>
> --
> Regards,
>         Tom
>
>
Gengor,

I had been running the profile in the stage3 with no issues for about a
month on a couple of servers without any issues.

Would it be possible to place a README in the dir with the new hardened
stages briefly explaining the situation so our users don't make this mistake
again?

Cheers & thanks for all the fish!

-- 
M. Summers

"...there are no rules here -- we're trying to accomplish something."
 - Thomas A. Edison

[-- Attachment #2: Type: text/html, Size: 2796 bytes --]