From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from <gentoo-hardened+bounces-2322-garchives=archives.gentoo.org@lists.gentoo.org>) id 1LFGgu-00049d-Fb for garchives@archives.gentoo.org; Tue, 23 Dec 2008 23:29:32 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id C7CFBE0501; Tue, 23 Dec 2008 23:29:30 +0000 (UTC) Received: from rn-out-0910.google.com (rn-out-0910.google.com [64.233.170.188]) by pigeon.gentoo.org (Postfix) with ESMTP id 9C99AE0501 for <gentoo-hardened@lists.gentoo.org>; Tue, 23 Dec 2008 23:29:30 +0000 (UTC) Received: by rn-out-0910.google.com with SMTP id 45so1991773rnw.14 for <gentoo-hardened@lists.gentoo.org>; Tue, 23 Dec 2008 15:29:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:in-reply-to:mime-version:content-type :content-transfer-encoding:content-disposition:references; bh=9km58ene2ASBUNIDDeZAZsU2PgLIutcp80eWwb6EDDY=; b=rjI/i/QKbh2KuK3aR6TBoU0vMd2AhhCMdQWA108rO+yrijuVL5BPi2ODMQHB6E+JK7 H8/oT/kjZWRcx/t8lE1C2HhA/oiHQBq/deeQwr5VFmuLL4TbNoSJDRxiVg1sqwUZIUex 5vu/7drAPjXC5rzV5ARL0YueYRtZ54ylxB3Rs= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:in-reply-to:mime-version :content-type:content-transfer-encoding:content-disposition :references; b=Rql7XiQDAW2FTMJcKogSO2SzsAcPYdF9uSmVeA1VoxWfJjD/ctgytrU1p1NsoeTKfu wsNtTIk7gGM/ZMp1TAdSkjeb3jHTxX/RquNG4PBQNkOpAG6dDdc3wK+6qY7CD0AWKklf dDlnMF86ONEoYmI8I9SjaPOdFtiesJAW0d61w= Received: by 10.90.102.8 with SMTP id z8mr4198966agb.56.1230074970284; Tue, 23 Dec 2008 15:29:30 -0800 (PST) Received: by 10.90.99.16 with HTTP; Tue, 23 Dec 2008 15:29:30 -0800 (PST) Message-ID: <dd79b93d0812231529t6ce6c32fp9731cead1eff5a58@mail.gmail.com> Date: Wed, 24 Dec 2008 00:29:30 +0100 From: "Cyprien Nicolas" <c.nicolas@gmail.com> To: gentoo-hardened@lists.gentoo.org Subject: Re: [gentoo-hardened] Profile switch: hardened to non-hardened? In-Reply-To: <495162F0.204@vladmiller.info> Precedence: bulk List-Post: <mailto:gentoo-hardened@lists.gentoo.org> List-Help: <mailto:gentoo-hardened+help@lists.gentoo.org> List-Unsubscribe: <mailto:gentoo-hardened+unsubscribe@lists.gentoo.org> List-Subscribe: <mailto:gentoo-hardened+subscribe@lists.gentoo.org> List-Id: Gentoo Linux mail <gentoo-hardened.gentoo.org> X-BeenThere: gentoo-hardened@lists.gentoo.org Reply-to: gentoo-hardened@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <49bf44f10812231323t7b5371eaj6a082f56f17b01e0@mail.gmail.com> <49515B9F.4030006@moremagic.com> <49bf44f10812231356y2f9974dfu994adbf03f8dc67d@mail.gmail.com> <495162F0.204@vladmiller.info> X-Archives-Salt: 9f5d0dbb-f897-4a4e-ab27-0f904cb024f9 X-Archives-Hash: 1be4bd9bafc649aeb94e95fdf1cedb90 >> I'd love to keep it hardened but I want to install programs like >> skype, miro, and mplayer that don't seem to compile under a hardened >> profile. > > Vanilla GCC profile and paxctl are your friends. For mplayer that's not true, I did it using selinux x86 hardened profile I bought a shuttle to use it as a multimedia server, and I wasn't able to compile mplayer with the default gcc profile, which is i686-pc-linux-gnu-3.4.6. I changed it with gcc-config to i686-pc-linux-gnu-3.4.6-hardenednopiessp and mplayer compiles fine (that was just a couple of hours ago). Now mplayer looks well on my TV, and sounds good on my Hi-Fi. For skype and miro, I didn't try. -- Cyprien