From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org)
	by finch.gentoo.org with esmtp (Exim 4.60)
	(envelope-from <gentoo-hardened+bounces-2322-garchives=archives.gentoo.org@lists.gentoo.org>)
	id 1LFGgu-00049d-Fb
	for garchives@archives.gentoo.org; Tue, 23 Dec 2008 23:29:32 +0000
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
	by pigeon.gentoo.org (Postfix) with SMTP id C7CFBE0501;
	Tue, 23 Dec 2008 23:29:30 +0000 (UTC)
Received: from rn-out-0910.google.com (rn-out-0910.google.com [64.233.170.188])
	by pigeon.gentoo.org (Postfix) with ESMTP id 9C99AE0501
	for <gentoo-hardened@lists.gentoo.org>; Tue, 23 Dec 2008 23:29:30 +0000 (UTC)
Received: by rn-out-0910.google.com with SMTP id 45so1991773rnw.14
        for <gentoo-hardened@lists.gentoo.org>; Tue, 23 Dec 2008 15:29:30 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=domainkey-signature:received:received:message-id:date:from:to
         :subject:in-reply-to:mime-version:content-type
         :content-transfer-encoding:content-disposition:references;
        bh=9km58ene2ASBUNIDDeZAZsU2PgLIutcp80eWwb6EDDY=;
        b=rjI/i/QKbh2KuK3aR6TBoU0vMd2AhhCMdQWA108rO+yrijuVL5BPi2ODMQHB6E+JK7
         H8/oT/kjZWRcx/t8lE1C2HhA/oiHQBq/deeQwr5VFmuLL4TbNoSJDRxiVg1sqwUZIUex
         5vu/7drAPjXC5rzV5ARL0YueYRtZ54ylxB3Rs=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:to:subject:in-reply-to:mime-version
         :content-type:content-transfer-encoding:content-disposition
         :references;
        b=Rql7XiQDAW2FTMJcKogSO2SzsAcPYdF9uSmVeA1VoxWfJjD/ctgytrU1p1NsoeTKfu
         wsNtTIk7gGM/ZMp1TAdSkjeb3jHTxX/RquNG4PBQNkOpAG6dDdc3wK+6qY7CD0AWKklf
         dDlnMF86ONEoYmI8I9SjaPOdFtiesJAW0d61w=
Received: by 10.90.102.8 with SMTP id z8mr4198966agb.56.1230074970284;
        Tue, 23 Dec 2008 15:29:30 -0800 (PST)
Received: by 10.90.99.16 with HTTP; Tue, 23 Dec 2008 15:29:30 -0800 (PST)
Message-ID: <dd79b93d0812231529t6ce6c32fp9731cead1eff5a58@mail.gmail.com>
Date: Wed, 24 Dec 2008 00:29:30 +0100
From: "Cyprien Nicolas" <c.nicolas@gmail.com>
To: gentoo-hardened@lists.gentoo.org
Subject: Re: [gentoo-hardened] Profile switch: hardened to non-hardened?
In-Reply-To: <495162F0.204@vladmiller.info>
Precedence: bulk
List-Post: <mailto:gentoo-hardened@lists.gentoo.org>
List-Help: <mailto:gentoo-hardened+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-hardened+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-hardened+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-hardened.gentoo.org>
X-BeenThere: gentoo-hardened@lists.gentoo.org
Reply-to: gentoo-hardened@lists.gentoo.org
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <49bf44f10812231323t7b5371eaj6a082f56f17b01e0@mail.gmail.com>
	 <49515B9F.4030006@moremagic.com>
	 <49bf44f10812231356y2f9974dfu994adbf03f8dc67d@mail.gmail.com>
	 <495162F0.204@vladmiller.info>
X-Archives-Salt: 9f5d0dbb-f897-4a4e-ab27-0f904cb024f9
X-Archives-Hash: 1be4bd9bafc649aeb94e95fdf1cedb90

>> I'd love to keep it hardened but I want to install programs like
>> skype, miro, and mplayer that don't seem to compile under a hardened
>> profile.
>
> Vanilla GCC profile and paxctl are your friends.


For mplayer that's not true, I did it using selinux x86 hardened profile

I bought a shuttle to use it as a multimedia server, and I wasn't able
to compile mplayer with the default gcc profile, which is
i686-pc-linux-gnu-3.4.6.

I changed it with gcc-config to
i686-pc-linux-gnu-3.4.6-hardenednopiessp and mplayer compiles fine
(that was just a couple of hours ago).

Now mplayer looks well on my TV, and sounds good on my Hi-Fi.

For skype and miro, I didn't try.

--
Cyprien