Ernesto Rodriguez Ortiz wrote:
Hello here, I have some problems compiled glibc, I am trying to install a
server with PaX and SELinux, I have an decompressing stage3 hardened and
portage, change the profile for selinux/2007.0/x86/hardened and set the
make.conf as a show down .Any idea how I can fix the problem with glibc?
When you switch from a non-hardened to a hardened profile, you need to
rebuild the entire toolchain in the correct order, then preferrably
rebuild everything else. This should also pick up any changes needed to
support SELinux in your userland, plus pull in the userland tools and
policy files.
From the PaX Quickstart, the steps should be:
eselect profile set <hardened #>
emerge -1 binutils gcc glibc
emerge -e world
I can tell you from experience that jumping directly from a vanilla
profile to an SELinux + hardened profile can be tricky, and I've ended
up starting over a few times. I would strongly suggest that you do them
separately:
vanilla -> hardened -> selinux/hardened
This means you might end up recompiling a few packages multiple times,
but it's more likely to succeed. Follow the steps in the two
installation guides:
http://www.gentoo.org/proj/en/hardened/pax-quickstart.xml
http://www.gentoo.org/proj/en/hardened/selinux/selinux-handbook.xml?part=2
If you want to try to get the whole thing in one step, in theory you
should be able to do so by setting FEATURES="-selinux" in your
make.conf, emerge everything, then remove that line and relabel
everything, as described in the SELinux handbook.
