Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Question about hardened profiles
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Installing Gentoo
View previous topic :: View next topic  
Author Message
leonchik1976
Apprentice
Apprentice


Joined: 24 Jan 2010
Posts: 169

PostPosted: Sat Dec 30, 2017 3:55 pm    Post subject: Question about hardened profiles Reply with quote

Is it make sense to use any of hardened profiles, if hardened-sources is masked?
Back to top
View user's profile Send private message
fedeliallalinea
Bodhisattva
Bodhisattva


Joined: 08 Mar 2003
Posts: 21779
Location: here

PostPosted: Sat Dec 30, 2017 4:12 pm    Post subject: Reply with quote

Hardened profile is not only a set of patches for kernel.
https://wiki.gentoo.org/wiki/Hardened/Introduction_to_Hardened_Gentoo
_________________
Questions are guaranteed in life; Answers aren't.
Back to top
View user's profile Send private message
Spargeltarzan
Apprentice
Apprentice


Joined: 23 Jul 2017
Posts: 293

PostPosted: Sat Dec 30, 2017 6:56 pm    Post subject: Reply with quote

I opened a similar support request on hardened profiles, if someone knows what is the current state of hardened and how it will develop in future (for the question if a migration to a hardened profile makes sense - because PIE already is in the normal profile, maybe everything will be moved) I would be very grateful
_________________
___________________
Regards

Spargeltarzan

Notebook: Lenovo YOGA 900-13ISK: Gentoo stable amd64, GNOME systemd, KVM/QEMU
Desktop-PC: Intel Core i7-4770K, 8GB Ram, AMD Radeon R9 280X, ZFS Storage, GNOME openrc, Dantrell, Xen
Back to top
View user's profile Send private message
depontius
Advocate
Advocate


Joined: 05 May 2004
Posts: 3383

PostPosted: Sat Dec 30, 2017 11:36 pm    Post subject: Reply with quote

Isn't PaX part of the GRSecurity patch set? In that case, is it gone along with GRSecurity?

Doesn't profile 17.0 at at least PIE? I'm not sure about SSP, but I thought there'd been some other updates upstream that take care of some of that.

Even on my regular desktops I've been picking up Kees Cook's hardening tips for the mainline kernel.
_________________
.sigs waste space and bandwidth
Back to top
View user's profile Send private message
The Doctor
Moderator
Moderator


Joined: 27 Jul 2010
Posts: 2574

PostPosted: Sun Dec 31, 2017 3:10 am    Post subject: Reply with quote

depontius wrote:
Isn't PaX part of the GRSecurity patch set? In that case, is it gone along with GRSecurity?
Yes, unfortunately.
_________________
First things first, but not necessarily in that order.

Apologies if I take a while to respond. I'm currently working on the dematerialization circuit for my blue box.
Back to top
View user's profile Send private message
toralf
Developer
Developer


Joined: 01 Feb 2004
Posts: 3686
Location: Hamburg

PostPosted: Sun Dec 31, 2017 10:48 am    Post subject: Reply with quote

Spargeltarzan wrote:
I opened a similar support request on hardened profiles, if someone knows what is the current state of hardened and how it will develop in future (for the question if a migration to a hardened profile makes sense - because PIE already is in the normal profile, maybe everything will be moved) I would be very grateful
hardened has still few more GCC compiler flags on per default, as I learned in the last days at the hard way, eg.: -fstack-check=yes
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Installing Gentoo All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum