Re: [gentoo-user] Anyone running a hardened profile?

2015-09-07 Thread wabenbau
Michael Orlitzky wrote: > On 09/06/2015 04:15 PM, walt wrote: > > https://wiki.gentoo.org/wiki/Hardened_Gentoo > > > > That wiki page is very seductive. It makes me want to drop > > everything and select a hardened profile and re-emerge everything > > from scratch. > > > >

Re: [gentoo-user] Anyone running a hardened profile?

2015-09-07 Thread wabenbau
walt wrote: > https://wiki.gentoo.org/wiki/Hardened_Gentoo > > That wiki page is very seductive. It makes me want to drop everything > and select a hardened profile and re-emerge everything from scratch. > > But I have a feeling I'd soon be in big trouble if I did. Is this

Re: [gentoo-user] Anyone running a hardened profile?

2015-09-07 Thread wabenbau
Fernando Rodriguez wrote: > On Sunday, September 06, 2015 1:15:17 PM walt wrote: > > https://wiki.gentoo.org/wiki/Hardened_Gentoo > > > > That wiki page is very seductive. It makes me want to drop > > everything and select a hardened profile and re-emerge

Re: [gentoo-user] Anyone running a hardened profile?

2015-09-07 Thread Fernando Rodriguez
On Monday, September 07, 2015 7:02:45 PM waben...@gmail.com wrote: > Fernando Rodriguez wrote: > > > On Sunday, September 06, 2015 1:15:17 PM walt wrote: > > > https://wiki.gentoo.org/wiki/Hardened_Gentoo > > > > > > That wiki page is very seductive. It makes

Re: [gentoo-user] Anyone running a hardened profile?

2015-09-07 Thread Michael Orlitzky
On 09/07/2015 01:10 PM, waben...@gmail.com wrote: > Michael Orlitzky wrote: > > I don't think so (but maybe I'm wrong). You have to compile your entire > system with a hardened toolchain to get full hardened support (SSP and > maybe some other things). I think, to go back to a

[gentoo-user] Anyone running a hardened profile?

2015-09-06 Thread walt
https://wiki.gentoo.org/wiki/Hardened_Gentoo That wiki page is very seductive. It makes me want to drop everything and select a hardened profile and re-emerge everything from scratch. But I have a feeling I'd soon be in big trouble if I did. Is this something that only gentoo devs should be

Re: [gentoo-user] Anyone running a hardened profile?

2015-09-06 Thread Fernando Rodriguez
On Sunday, September 06, 2015 1:15:17 PM walt wrote: > https://wiki.gentoo.org/wiki/Hardened_Gentoo > > That wiki page is very seductive. It makes me want to drop everything > and select a hardened profile and re-emerge everything from scratch. > > But I have a feeling I'd soon be in big

Re: [gentoo-user] Anyone running a hardened profile?

2015-09-06 Thread Michael Orlitzky
On 09/06/2015 04:15 PM, walt wrote: > https://wiki.gentoo.org/wiki/Hardened_Gentoo > > That wiki page is very seductive. It makes me want to drop everything > and select a hardened profile and re-emerge everything from scratch. > > But I have a feeling I'd soon be in big trouble if I did. Is

Re: [gentoo-user] Anyone running a hardened profile?

2015-09-06 Thread Andreas K. Huettel
> But I have a feeling I'd soon be in big trouble if I did. Is this > something that only gentoo devs should be messing with, or is this > a project that a typical gentoo end-user might hope to accomplish > without frequent suicidal thoughts? In most cases hardened just works. You may/will

Re: [gentoo-user] Anyone running a hardened profile?

2015-09-06 Thread Hinnerk van Bruinehsen
Hello walt, I've running hardened (hardened profile + kernel (including pax and grsec)) for at least 5 years on all my boxes except one (my gaming only box). It's been quite a while that I had an issue caused by the hardened profile that wasn't due to my fiddeling around with stuff like SELinux