From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.60) (envelope-from <gentoo-user+bounces-50833-garchives=archives.gentoo.org@gentoo.org>) id 1GNHjo-0004iI-AZ for garchives@archives.gentoo.org; Tue, 12 Sep 2006 23:32:20 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.8/8.13.6) with SMTP id k8CNVbnQ030946; Tue, 12 Sep 2006 23:31:37 GMT Received: from nz-out-0102.google.com (nz-out-0102.google.com [64.233.162.194]) by robin.gentoo.org (8.13.8/8.13.6) with ESMTP id k8CNRQTs004878 for <gentoo-user@lists.gentoo.org>; Tue, 12 Sep 2006 23:27:27 GMT Received: by nz-out-0102.google.com with SMTP id n1so850058nzf for <gentoo-user@lists.gentoo.org>; Tue, 12 Sep 2006 16:27:26 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:user-agent:mime-version:to:subject:references:in-reply-to:content-type:content-transfer-encoding; b=N8AXLf67qzoZBgPYTQ8Nhxs+ZQgYDAoE1zu8XipexP4gXlhz+OMJg6eOqHGJXV4kGvs6f1weF5LAIMpV7uRNnt2v4fuCYH9XobDrv286jjIao6Vu79OmaxImv2JlZNtqT5MhVhJT3Es3uWNLUna2ssrkc7i0y6jhpQomrx479SU= Received: by 10.65.251.1 with SMTP id d1mr7393605qbs; Tue, 12 Sep 2006 16:27:25 -0700 (PDT) Received: from ?192.168.0.2? ( [216.86.98.175]) by mx.gmail.com with ESMTP id f15sm1131584qba.2006.09.12.16.27.24; Tue, 12 Sep 2006 16:27:25 -0700 (PDT) Message-ID: <45074266.7050301@gmail.com> Date: Tue, 12 Sep 2006 16:27:34 -0700 From: Ryan Tandy <tarpman@gmail.com> User-Agent: Thunderbird 1.5.0.5 (Windows/20060719) Precedence: bulk List-Post: <mailto:gentoo-user@lists.gentoo.org> List-Help: <mailto:gentoo-user+help@gentoo.org> List-Unsubscribe: <mailto:gentoo-user+unsubscribe@gentoo.org> List-Subscribe: <mailto:gentoo-user+subscribe@gentoo.org> List-Id: Gentoo Linux mail <gentoo-user.gentoo.org> X-BeenThere: gentoo-user@gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Simplified apache2 References: <loom.20060912T142340-527@post.gmane.org> <558b73fb0609120808k799baf30j41560442b9c38d12@mail.gmail.com> In-Reply-To: <558b73fb0609120808k799baf30j41560442b9c38d12@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Archives-Salt: d35bb6e6-9f3e-43f0-b75f-1c6778802995 X-Archives-Hash: 41cf3a58713bcbbab24eea642211d0f6 Michael Crute wrote: > USE="-* hardened pic ncurses ssl crypt berkdb tcpd pam perl python > readline" Even this is a bit more bloated than it needs to be. I have never used 'tcpd' or 'berkdb' on any system I run, and 'perl' and 'python' are *much* more useful (IMO) as local flags (in package.use) than as global ones. Even 'ssl' doesn't *have* to be there, especially in the global scope - 'www-client/links ssl' in package.use should be more than sufficient. One flag missing from that line that I like to have is 'bzip2' - tar just isn't quite the same without bz2 support. ;) Also, be careful using the hardened flag without running the hardened profile. The hardened profile masks out a couple of packages and flags that don't work so well on a hardened system. BTW, the flags with underscores in them (kernel_linux, userland_GNU, elibc_glibc, video_cards_radeon and such) are known as USE_EXPAND or expanded USE flags. VIDEO_CARDS and ALSA_CARDS are a couple you may be familiar with - when they're set in make.conf, emerge expands them automatically, so e.g. VIDEO_CARDS="radeon" gets expanded to USE="video_cards_radeon". KERNEL, USERLAND, and ELIBC are there for the use of packages that work differently on different systems - Gentoo/FreeBSD, Gentoo/OSX, and such - and should *only* be set by your profile. Hope I've helped. :) Ryan -- gentoo-user@gentoo.org mailing list