Re: [gentoo-hardened] Unofficial hardened-sources ebuilds?

2017-08-15 Thread Alex Efros
Hi!

On Tue, Aug 15, 2017 at 10:39:30PM +0200, philipp.amm...@posteo.de wrote:
> You don't really need an ebuild. What I do is manually install 
> sys-devel/bc and then:
...
> Whenever there is a new release simply run 'git pull'.

Ebuild is anyway useful - if it's not - then it let me control which
version (tag) will be installed at all my servers using standard
portage-way (/etc/portage/package.*). With git I'll have to do manual `git
checkout TAG` on every server to get same (tested) version everywhere.

-- 
WBR, Alex.



Re: [gentoo-hardened] Unofficial hardened-sources ebuilds?

2017-08-15 Thread philipp . ammann

Am 15.08.2017 21:13 schrieb Alex Efros:

[...]


[3] https://github.com/minipli/linux-unofficial_grsec
[4] https://github.com/copperhead/linux-hardened


Sounds cool, but is anyone is going to provide ebuilds for these 
kernels?

Not official, but having these in some overlay is better than nothing.


You don't really need an ebuild. What I do is manually install 
sys-devel/bc and then:


cd /usr/src
git clone --single-branch --branch=linux-4.9.x-unofficial_grsec  
git://github.com/minipli/linux-unofficial_grsec.git grsec

ln -s grsec linux

(You 'need' the linux symlink for ebuilds to be able to check .config 
options)


Whenever there is a new release simply run 'git pull'.

Cheers
Philipp