I've been running a server in an amd64 hardened+selinux+multilib
configuration for quite a while now. Initially I used a selinux profile
and just added USE="hardened pic pie ssp", etc to my make.conf.
However, when the issues related to gcc-4 appeared I decided I really
needed to switch to a true hardened profile since I didn't want to
emerge glibc-2.4 and gcc-4 by accident.
I went looking for an appropriate amd64 profile, but I didn't find one.
I went ahead and created one by merging the selinux amd64 profile with
the hardened/multilib profile into my overlay in /usr/local/portage.
While this setup succeeds in masking off the undesired versions of gcc
and glibc, it forces me to manually keep the profile in sync with the
main portage tree.
Is there some reason that this profile combination doesn't exist in
/usr/portage? Am I using an unsupported configuration and have just
been lucky for well over a year? Is this arch combination missing a
maintainer?
Thanks,
Mike Carns
--
[email protected] mailing list
