On 14/02/06, Alex Efros <[EMAIL PROTECTED]> wrote:

<snip>

> 2) Disallow ELF text relocations
>         AFAIK with this option a lot of software will not work... :(

Right - for desktop machines this not a sensible option. I'd say that
for many server setups it's probably OK.  Probably worth pointing out
here that recent versions of portage should flag up any ebuilds that
end up building executables with text relocations. One can also run
"scanelf -lpqt" to check the system for any existing executables that
are weak in this regard.

> So, here config details for my home and my servers (2.6.14-hardened-r5):

<large snip>

Looks great to me :)

Cheers,

--Kerin

-- 
[email protected] mailing list

Reply via email to