From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org)
	by nuthatch.gentoo.org with esmtp (Exim 4.62)
	(envelope-from <gentoo-hardened+bounces-974-garchives=archives.gentoo.org@gentoo.org>)
	id 1H3erx-0001oU-Fu
	for garchives@archives.gentoo.org; Sun, 07 Jan 2007 20:43:53 +0000
Received: from robin.gentoo.org (localhost [127.0.0.1])
	by robin.gentoo.org (8.13.8/8.13.8) with SMTP id l07Kfqi2018336;
	Sun, 7 Jan 2007 20:41:52 GMT
Received: from py-out-1112.google.com (py-out-1112.google.com [64.233.166.177])
	by robin.gentoo.org (8.13.8/8.13.8) with ESMTP id l07Kfp5s011081
	for <gentoo-hardened@lists.gentoo.org>; Sun, 7 Jan 2007 20:41:51 GMT
Received: by py-out-1112.google.com with SMTP id a29so3998411pyi
        for <gentoo-hardened@lists.gentoo.org>; Sun, 07 Jan 2007 12:41:51 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references;
        b=sXlFJ3F8BHYXS4wYBI90eLe8L4nFAX4EYBJmLIi6PVdIAX/1IXR4HvF1lM3rjQw9r/jWeTkINDfbDvy0JJrOra/mfG9ilQRKXHQwjg6BzAoj80KKEniEpI1bwaa3X5MIvj4kb49ovpNZVdw5RwpWmZa15b/Z5ZHyyh2TsphGck0=
Received: by 10.35.81.1 with SMTP id i1mr47517042pyl.1168202511137;
        Sun, 07 Jan 2007 12:41:51 -0800 (PST)
Received: by 10.35.8.8 with HTTP; Sun, 7 Jan 2007 12:41:51 -0800 (PST)
Message-ID: <dd2c98000701071241o106616fah8cf9541de242d0b6@mail.gmail.com>
Date: Sun, 7 Jan 2007 15:41:51 -0500
From: "Nedim Cholich" <nedim.cholich@gmail.com>
To: gentoo-hardened@lists.gentoo.org
Subject: Re: [gentoo-hardened] Converting new install to hardened (glibc problem)?
In-Reply-To: <45A0D1D1.4040503@whyscream.net>
Precedence: bulk
List-Post: <mailto:gentoo-hardened@lists.gentoo.org>
List-Help: <mailto:gentoo-hardened+help@gentoo.org>
List-Unsubscribe: <mailto:gentoo-hardened+unsubscribe@gentoo.org>
List-Subscribe: <mailto:gentoo-hardened+subscribe@gentoo.org>
List-Id: Gentoo Linux mail <gentoo-hardened.gentoo.org>
X-BeenThere: gentoo-hardened@gentoo.org
Reply-to: gentoo-hardened@lists.gentoo.org
MIME-Version: 1.0
Content-Type: multipart/alternative; 
	boundary="----=_Part_25164_4572312.1168202511093"
References: <dd2c98000701061343h3c85cfa0t2469d2faf630c2ac@mail.gmail.com>
	 <45A0D1D1.4040503@whyscream.net>
X-Archives-Salt: 8ee08573-90da-4970-aad6-b6d17699ad03
X-Archives-Hash: e534feec6ea536ebb213030fdef3eb86

------=_Part_25164_4572312.1168202511093
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

On 1/7/07, Tom Hendrikx <tom@whyscream.net> wrote:
>
>
>
> Nedim Cholich wrote:
> > Hi,
> >
> > This is my first email to the list and my first attempt at installing
> > hardened Gentoo (I've been using Gentoo for 4 years now).
> <snip>
> >
> > I have a fresh install of Gentoo 2006.1 and I'm trying to convert it to
> > hardened. I have followed instructions and changed the profile, added
> > USE flags and when I try to recompile the toolchain it wants to
> > downgrade the glibc, which is, of course, not allowed.
>
> I ran into this problem also a while ago, and after some testing,
> solving this problem actually is quite easy, considering your 4 years of
> Gentoo experience and also considering it's a clean install.
>
> 1) Get yourself a nice 2006.0 install cd
> 2) Wipe your clean install, and start a new one using the 2006.0 cd.
> 3) Do a stage 1 install from this cd, setting your profile and flags
> right from the beginning.
>
> Since the initial 2006.0 environment contains an older glibc version
> (glibc-2.3.6-r4 says my emerge history), there is no need to downgrade.
> Just be sure not to remerge glibc before setting the hardened profile,
> so you don't upgrade by accident.
>
> Worked for me twice in last 3 months :)


Ok. I found stage3 of 2006.0. Is there a problem with using the latest
portage snapshot with this 2006.0 (and the hardened profile from it)?

Thanks.

------=_Part_25164_4572312.1168202511093
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

On 1/7/07, <b class="gmail_sendername">Tom Hendrikx</b> &lt;<a href="mailto:tom@whyscream.net">tom@whyscream.net</a>&gt; wrote:<div><span class="gmail_quote"></span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<br><br>Nedim Cholich wrote:<br>&gt; Hi,<br>&gt;<br>&gt; This is my first email to the list and my first attempt at installing<br>&gt; hardened Gentoo (I&#39;ve been using Gentoo for 4 years now).<br>&lt;snip&gt;<br>&gt;<br>
&gt; I have a fresh install of Gentoo 2006.1 and I&#39;m trying to convert it to<br>&gt; hardened. I have followed instructions and changed the profile, added<br>&gt; USE flags and when I try to recompile the toolchain it wants to
<br>&gt; downgrade the glibc, which is, of course, not allowed.<br><br>I ran into this problem also a while ago, and after some testing,<br>solving this problem actually is quite easy, considering your 4 years of<br>Gentoo experience and also considering it&#39;s a clean install.
<br><br>1) Get yourself a nice 2006.0 install cd<br>2) Wipe your clean install, and start a new one using the 2006.0 cd.<br>3) Do a stage 1 install from this cd, setting your profile and flags<br>right from the beginning.
<br><br>Since the initial 2006.0 environment contains an older glibc version<br>(glibc-2.3.6-r4 says my emerge history), there is no need to downgrade.<br>Just be sure not to remerge glibc before setting the hardened profile,
<br>so you don&#39;t upgrade by accident.<br><br>Worked for me twice in last 3 months :)</blockquote><div><br>Ok. I found stage3 of 2006.0. Is there a problem with using the latest portage snapshot with this 2006.0 (and the hardened profile from it)?
<br><br>Thanks.<br></div><br></div>

------=_Part_25164_4572312.1168202511093--
-- 
gentoo-hardened@gentoo.org mailing list