From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1MSvpn-0005G7-Dr for garchives@archives.gentoo.org; Mon, 20 Jul 2009 16:35:28 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 597A6E034D; Mon, 20 Jul 2009 16:35:26 +0000 (UTC) Received: from mail-yx0-f191.google.com (mail-yx0-f191.google.com [209.85.210.191]) by pigeon.gentoo.org (Postfix) with ESMTP id 3E0E7E034D for ; Mon, 20 Jul 2009 16:35:26 +0000 (UTC) Received: by yxe29 with SMTP id 29so3661267yxe.32 for ; Mon, 20 Jul 2009 09:35:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:from:to:subject:date :user-agent:cc:references:in-reply-to:mime-version:content-type :content-transfer-encoding:content-disposition:message-id; bh=Bbxlas+Vocl9fl28rYMqg+20ExHPE1nFFAN4850+us4=; b=GMyieAfdMXNkUqf1k07FSolkmmY5gcO83bd7TjXgju+O/s/NybDxVqowhDvxQh1CE4 u6UdECWbCSmxpe7ORAWOd8GIAUdcjWCfuRZKU4PJAu9J3JLXUBwqY8aeJl+853AkRDwq BZoiDHU9O+Uko/l2CfkwjghJcsSRI1DCPAMmE= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=from:to:subject:date:user-agent:cc:references:in-reply-to :mime-version:content-type:content-transfer-encoding :content-disposition:message-id; b=ELim14Lgt5h7lB9T1O7x/dUOhGNz0VDQ8jl5m+Q5T2ft/8UvKFQjWbiNxLPHoq0nmi hDipRn2BIsIX3wlEut8f6XF4G1MBBjAOtq8kckr0kqgDEDqCnl840MuHmUNpO2HrVVJe rwyQcy1FKgLmGHDBpWLOieozqA3toNShpHQWc= Received: by 10.100.112.8 with SMTP id k8mr6368412anc.174.1248107725954; Mon, 20 Jul 2009 09:35:25 -0700 (PDT) Received: from nazgul.localnet ([196.210.202.145]) by mx.google.com with ESMTPS id d24sm582884and.6.2009.07.20.09.35.23 (version=SSLv3 cipher=RC4-MD5); Mon, 20 Jul 2009 09:35:24 -0700 (PDT) From: Alan McKinnon To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Gentoo server profile Date: Mon, 20 Jul 2009 18:33:58 +0200 User-Agent: KMail/1.11.4 (Linux/2.6.30-gentoo-r3; KDE/4.2.4; x86_64; ; ) Cc: Dirk Uys References: <79e3aefb0907200849k4919f66etde0e2fb5508e08e8@mail.gmail.com> In-Reply-To: <79e3aefb0907200849k4919f66etde0e2fb5508e08e8@mail.gmail.com> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: Text/Plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200907201833.58871.alan.mckinnon@gmail.com> X-Archives-Salt: ba2c3678-02d5-4524-a76d-67638cf2294b X-Archives-Hash: 80ab8d13da390460e68fee6d77afd7c9 On Monday 20 July 2009 17:49:00 Dirk Uys wrote: > Hi everyone > > I'm busy installing Gentoo on a local server. I'm using > "default/linux/amd64/2008.0/server" as the profile. I noticed that I > get a nice little warning every time I emerge a package saying that > the profile is untested. > > My main concern for using the current server profile is to get a > minimal install, not security. Should I be using a different profile > (like hardened) or is the one I'm using fine? > > Regards > Dirk Uys Set I_KNOW_WHAT_I_AM_DOING to anything other than "yes" in root's profile and the error will go away. I don't believe the warnings are in any way dangerous, to get a minimal install it will have removed USE flags and not installed any services (as opposed to adding stuff the make things minimal). Issues can be fixed by enabling the USE flags you do want. -- alan dot mckinnon at gmail dot com