Re: [gentoo-user] Is Hardened profile and SELinux support active?
Hi Ihor, myself I use only hardened profiles without SELinux on my machines, and AFAICT it mostly boils down *this* way to some default toolchain flags for C/C++ and a nearly-default kernel (sys-kernel/gentoo-soures package)[a]. I dropped a note about your question on the IRC channel #gentoo-hardened on freenode[b] and got mostly instant responses from people telling they run SELinux fine on Gentoo (so it seems you're right and only our docs are a bit dusty) -- you might want to ask there for details ;-) I'm top-posting here and Cc'ing one of the gentoo devs maintaing SELinux, so he get's your original question aswell (he hasn't subscribed to this list). hope this helps and from my side also a warm welcome to Gentoo! [a] side note: it's similar to archs default kernel mostly vanilla upstream only with security or bugfix patches and optional patches for convenience, e.g. -march=native or systemd vs openrc. [b] https://webchat.freenode.net/ Am Dienstag, 7. April 2020, 06:40:30 CEST schrieb Ihor Antonov: > Hi everyone, > > I am very new to Gentoo and I am currently migrating from Arch. > Gentoo attracts me with a freedom of system configuration and with > multiple supported architectures. > > I was attracted by Hardened profile described at [1][2][3] > But reading [1] I also got confused because it looks like it is no longer > maintained. > > So the question is it just outdated wiki page? Is anyone using Hardened > profile? Is it maintained? In Archlinux SELinux is not supported > officially so this is why I am looking around. > > Thanks/ > > [1] https://wiki.gentoo.org/wiki/Project:Hardened[1] > [2] https://wiki.gentoo.org/wiki/Hardened/FAQ[2] > [3] https://wiki.gentoo.org/wiki/Hardened_Gentoo[3] -- PGP fingerprint: '00EF D31F 1B60 D5DB ADB8 31C1 C0EC E696 0E54 475B' keybase.io/nfreydank signature.asc Description: This is a digitally signed message part.
RE: [gentoo-user] Is Hardened profile and SELinux support active?
>> Hi everyone, >> >> I am very new to Gentoo and I am currently migrating from Arch. >> Gentoo attracts me with a freedom of system configuration and with multiple >> supported architectures. >> >> I was attracted by Hardened profile described at [1][2][3] >> But reading [1] I also got confused because it looks like it is no longer >> maintained. >> >> So the question is it just outdated wiki page? Is anyone using Hardened >> profile? Is it maintained? In Archlinux SELinux is not supported officially >> so this is why I am looking around. >> >> Thanks/ >> >> [1] https://wiki.gentoo.org/wiki/Project:Hardened[1] >> [2] https://wiki.gentoo.org/wiki/Hardened/FAQ[2] >> [3] https://wiki.gentoo.org/wiki/Hardened_Gentoo[3] >I have never used a Hardened profile and have not followed up what happened >after the GRSecurity developer abandoned his code development.[1] >https://grsecurity.net/passing_the_baton >Someone else could comment on the future of Gentoo Hardened, but I am posting >this message having noticed your message may have not made it through to some >recipients (the dreaded DMARC caused a DKIM header failure again). I have fairly recently (in the last six months) converted my Gentoo systems to use SELinux. The process was relatively painless and the quality of the documentation was very good. Already in this short period of time I have updated all systems with a new SELinux policy. Portage (Gentoo's package manager) appears to handle policy updates quite well and the update took place without any major problems. The main dev responsible of SELinux on Gentoo is approachable and knowledgeable. I'd say that SELinux on Gentoo seems to be in rather good health! Tully.
Re: [gentoo-user] Is Hardened profile and SELinux support active?
Hi Ihor, welcome to Gentoo. :-) On Tuesday, 7 April 2020 05:40:30 BST Ihor Antonov wrote: > Hi everyone, > > I am very new to Gentoo and I am currently migrating from Arch. > Gentoo attracts me with a freedom of system configuration and with multiple > supported architectures. > > I was attracted by Hardened profile described at [1][2][3] > But reading [1] I also got confused because it looks like it is no longer > maintained. > > So the question is it just outdated wiki page? Is anyone using Hardened > profile? Is it maintained? In Archlinux SELinux is not supported officially > so this is why I am looking around. > > Thanks/ > > [1] https://wiki.gentoo.org/wiki/Project:Hardened[1] > [2] https://wiki.gentoo.org/wiki/Hardened/FAQ[2] > [3] https://wiki.gentoo.org/wiki/Hardened_Gentoo[3] I have never used a Hardened profile and have not followed up what happened after the GRSecurity developer abandoned his code development.[1] https://grsecurity.net/passing_the_baton Someone else could comment on the future of Gentoo Hardened, but I am posting this message having noticed your message may have not made it through to some recipients (the dreaded DMARC caused a DKIM header failure again). signature.asc Description: This is a digitally signed message part.
[gentoo-user] Is Hardened profile and SELinux support active?
Hi everyone, I am very new to Gentoo and I am currently migrating from Arch. Gentoo attracts me with a freedom of system configuration and with multiple supported architectures. I was attracted by Hardened profile described at [1][2][3] But reading [1] I also got confused because it looks like it is no longer maintained. So the question is it just outdated wiki page? Is anyone using Hardened profile? Is it maintained? In Archlinux SELinux is not supported officially so this is why I am looking around. Thanks/ [1] https://wiki.gentoo.org/wiki/Project:Hardened[1] [2] https://wiki.gentoo.org/wiki/Hardened/FAQ[2] [3] https://wiki.gentoo.org/wiki/Hardened_Gentoo[3] -- Ihor Antonov https://useplaintext.email [1] https://wiki.gentoo.org/wiki/Project:Hardened [2] https://wiki.gentoo.org/wiki/Hardened/FAQ [3] https://wiki.gentoo.org/wiki/Hardened_Gentoo
