From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1LWwpD-0004k8-Kv for garchives@archives.gentoo.org; Tue, 10 Feb 2009 17:55:11 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 906E5E0278; Tue, 10 Feb 2009 17:55:10 +0000 (UTC) Received: from fg-out-1718.google.com (fg-out-1718.google.com [72.14.220.155]) by pigeon.gentoo.org (Postfix) with ESMTP id 50FEAE0278 for ; Tue, 10 Feb 2009 17:55:10 +0000 (UTC) Received: by fg-out-1718.google.com with SMTP id e12so9835fga.14 for ; Tue, 10 Feb 2009 09:55:09 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=I71ki4Ega3K4pZSA7HSple9uOMVQiCUsfV9srHoY+VQ=; b=lB3htZgCwysDTser0DjrsIWZYx1YU5RCQVSYnO8EW9sz2K1u09Q/0zsAE3InvddFR6 IgR8g7iUah+iEQBXSUQtZA02l8hGCEhqceKKiGP9XKb2d7nW8ajkOuVkeSftv1b/uIuu jGM8wWedbZY5302iPFiDrJPQWLuFEzsZqbkyw= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; b=vOkQvuf7wrVMj6Clhcue0EH8nx2MX32JbfflOYTFxtRcnkjzalX3E9DW6zNmJNy831 FwbaDHWCJt6CGiM7Yq8FNDD3u1kBeHpujs0jFqE9KJ6WsNojNVx2Ysfp7zadQfLe1aeK 8zpcXQujUa3MkgczVceOvKurY5il259mrKsQA= Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-hardened@lists.gentoo.org Reply-to: gentoo-hardened@lists.gentoo.org MIME-Version: 1.0 Received: by 10.86.29.8 with SMTP id c8mr7414fgc.19.1234288509658; Tue, 10 Feb 2009 09:55:09 -0800 (PST) In-Reply-To: References: <1234258730.28777.12.camel@caguiar-linux.madeiratecnopolo.pt> <49915125.8000703@whyscream.net> Date: Tue, 10 Feb 2009 18:55:09 +0100 Message-ID: Subject: Re: [gentoo-hardened] Which profile? From: Cyprien Nicolas To: gentoo-hardened@lists.gentoo.org Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Archives-Salt: b15cd649-5d74-479e-a71e-511d4b5bf037 X-Archives-Hash: b775e801db0564b66f05406c535dc98e 2009/2/10 Matthew Summers : > On Tue, Feb 10, 2009 at 4:04 AM, Tom Hendrikx wrote: >> >> Clemente Aguiar schreef: >> > I understand that the profiles where updated recently (last year?). >> > >> > Available profile symlink targets: >> > [1] hardened/amd64 * >> > [2] hardened/amd64/multilib >> > [3] selinux/2007.0/amd64 >> > [4] selinux/2007.0/amd64/hardened >> > [5] default/linux/amd64/2008.0 >> > [6] default/linux/amd64/2008.0/desktop >> > [7] default/linux/amd64/2008.0/developer >> > [8] default/linux/amd64/2008.0/no-multilib >> > [9] default/linux/amd64/2008.0/server >> > [10] hardened/linux/amd64 >> > >> > Available profile symlink targets: >> > [1] hardened/x86/2.6 * >> > [2] selinux/2007.0/x86 >> > [3] selinux/2007.0/x86/hardened >> > [4] default/linux/x86/2008.0 >> > [5] default/linux/x86/2008.0/desktop >> > [6] default/linux/x86/2008.0/developer >> > [7] default/linux/x86/2008.0/server >> > [8] hardened/linux/x86 >> > >> > >> > I would like to know what hardened profile I should use when I build new >> > machines? (AMD64 as well as x86) >> > >> > Thanks. >> > >> > >> > >> >> A few days ago I switched an x86 machine from "default/linux/x86/2008.0" >> to "hardened/linux/x86/2008.0/server" after some arbitrary rummaging in >> the profiles directory. This gave me no problems other than the expected >> gcc-4 -> gcc-3 downgrade. >> >> I'm not sure why this profile isn't listed in the eselect profile >> listing above. It doesn't give me a big fat "unsupported profile" >> warning though... >> >> Regards, >> Tom >> > > > This is a confusing situation. I am currently using > /usr/portage/profiles/hardened/linux/amd64/2008.0. > > This is not explicitly listed in the output of 'eselect profile list'. > > Perhaps we could sort this out on the list & then I will write a quick doc > to place in the hardened web space to assist other users. > > -- > M. Summers > > "...there are no rules here -- we're trying to accomplish something." > - Thomas A. Edison > On #gentooo-hardened, I got this answer : Feb 04 20:10:51 Anyone can say, which profile of the 2 hardened ones are supported here? Feb 04 20:12:01 Tommy[D]: use hardened/${ARCH}/2.6 But it was not listed by Clemente for amd64 -- Cyprien