From mboxrd@z Thu Jan 1 00:00:00 1970
Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org)
by finch.gentoo.org with esmtp (Exim 4.60)
(envelope-from <gentoo-hardened+bounces-2452-garchives=archives.gentoo.org@lists.gentoo.org>)
id 1LWwpD-0004k8-Kv
for garchives@archives.gentoo.org; Tue, 10 Feb 2009 17:55:11 +0000
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
by pigeon.gentoo.org (Postfix) with SMTP id 906E5E0278;
Tue, 10 Feb 2009 17:55:10 +0000 (UTC)
Received: from fg-out-1718.google.com (fg-out-1718.google.com [72.14.220.155])
by pigeon.gentoo.org (Postfix) with ESMTP id 50FEAE0278
for <gentoo-hardened@lists.gentoo.org>; Tue, 10 Feb 2009 17:55:10 +0000 (UTC)
Received: by fg-out-1718.google.com with SMTP id e12so9835fga.14
for <gentoo-hardened@lists.gentoo.org>; Tue, 10 Feb 2009 09:55:09 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=domainkey-signature:mime-version:received:in-reply-to:references
:date:message-id:subject:from:to:content-type
:content-transfer-encoding;
bh=I71ki4Ega3K4pZSA7HSple9uOMVQiCUsfV9srHoY+VQ=;
b=lB3htZgCwysDTser0DjrsIWZYx1YU5RCQVSYnO8EW9sz2K1u09Q/0zsAE3InvddFR6
IgR8g7iUah+iEQBXSUQtZA02l8hGCEhqceKKiGP9XKb2d7nW8ajkOuVkeSftv1b/uIuu
jGM8wWedbZY5302iPFiDrJPQWLuFEzsZqbkyw=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h=mime-version:in-reply-to:references:date:message-id:subject:from:to
:content-type:content-transfer-encoding;
b=vOkQvuf7wrVMj6Clhcue0EH8nx2MX32JbfflOYTFxtRcnkjzalX3E9DW6zNmJNy831
FwbaDHWCJt6CGiM7Yq8FNDD3u1kBeHpujs0jFqE9KJ6WsNojNVx2Ysfp7zadQfLe1aeK
8zpcXQujUa3MkgczVceOvKurY5il259mrKsQA=
Precedence: bulk
List-Post: <mailto:gentoo-hardened@lists.gentoo.org>
List-Help: <mailto:gentoo-hardened+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-hardened+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-hardened+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-hardened.gentoo.org>
X-BeenThere: gentoo-hardened@lists.gentoo.org
Reply-to: gentoo-hardened@lists.gentoo.org
MIME-Version: 1.0
Received: by 10.86.29.8 with SMTP id c8mr7414fgc.19.1234288509658; Tue, 10 Feb
2009 09:55:09 -0800 (PST)
In-Reply-To: <c8b556060902100844h3d57e4f9xd9f69458f5f083ec@mail.gmail.com>
References: <1234258730.28777.12.camel@caguiar-linux.madeiratecnopolo.pt>
<49915125.8000703@whyscream.net>
<c8b556060902100844h3d57e4f9xd9f69458f5f083ec@mail.gmail.com>
Date: Tue, 10 Feb 2009 18:55:09 +0100
Message-ID: <dd79b93d0902100955j43e4c651gc1f32f27cf0343c@mail.gmail.com>
Subject: Re: [gentoo-hardened] Which profile?
From: Cyprien Nicolas <c.nicolas@gmail.com>
To: gentoo-hardened@lists.gentoo.org
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Archives-Salt: b15cd649-5d74-479e-a71e-511d4b5bf037
X-Archives-Hash: b775e801db0564b66f05406c535dc98e
2009/2/10 Matthew Summers <msummers42@gmail.com>:
> On Tue, Feb 10, 2009 at 4:04 AM, Tom Hendrikx <tom@whyscream.net> wrote:
>>
>> Clemente Aguiar schreef:
>> > I understand that the profiles where updated recently (last year?).
>> >
>> > Available profile symlink targets:
>> > [1] hardened/amd64 *
>> > [2] hardened/amd64/multilib
>> > [3] selinux/2007.0/amd64
>> > [4] selinux/2007.0/amd64/hardened
>> > [5] default/linux/amd64/2008.0
>> > [6] default/linux/amd64/2008.0/desktop
>> > [7] default/linux/amd64/2008.0/developer
>> > [8] default/linux/amd64/2008.0/no-multilib
>> > [9] default/linux/amd64/2008.0/server
>> > [10] hardened/linux/amd64
>> >
>> > Available profile symlink targets:
>> > [1] hardened/x86/2.6 *
>> > [2] selinux/2007.0/x86
>> > [3] selinux/2007.0/x86/hardened
>> > [4] default/linux/x86/2008.0
>> > [5] default/linux/x86/2008.0/desktop
>> > [6] default/linux/x86/2008.0/developer
>> > [7] default/linux/x86/2008.0/server
>> > [8] hardened/linux/x86
>> >
>> >
>> > I would like to know what hardened profile I should use when I build new
>> > machines? (AMD64 as well as x86)
>> >
>> > Thanks.
>> >
>> >
>> >
>>
>> A few days ago I switched an x86 machine from "default/linux/x86/2008.0"
>> to "hardened/linux/x86/2008.0/server" after some arbitrary rummaging in
>> the profiles directory. This gave me no problems other than the expected
>> gcc-4 -> gcc-3 downgrade.
>>
>> I'm not sure why this profile isn't listed in the eselect profile
>> listing above. It doesn't give me a big fat "unsupported profile"
>> warning though...
>>
>> Regards,
>> Tom
>>
>
>
> This is a confusing situation. I am currently using
> /usr/portage/profiles/hardened/linux/amd64/2008.0.
>
> This is not explicitly listed in the output of 'eselect profile list'.
>
> Perhaps we could sort this out on the list & then I will write a quick doc
> to place in the hardened web space to assist other users.
>
> --
> M. Summers
>
> "...there are no rules here -- we're trying to accomplish something."
> - Thomas A. Edison
>
On #gentooo-hardened, I got this answer :
Feb 04 20:10:51 <Tommy[D]> Anyone can say, which profile of the 2
hardened ones are supported here?
Feb 04 20:12:01 <gengor> Tommy[D]: use hardened/${ARCH}/2.6
But it was not listed by Clemente for amd64
--
Cyprien