[Eug-lug] Gentoo hardened

[Jacob Meuser]

On Thu, Aug 05, 2004 at 02:09:30PM -0700, Rob Hudson wrote:
> Anyone using the hardened stuff in Gentoo?  I'm going to be building a
> web and mail server that will be thrown out into the internet.  Just
> curious if the "SE" or hardened stuff is worthwhile.  I haven't really
> looked into it much yet.

If it doesn't break the apps you want to use, it would prbably be
useful.  Note the last line of the Project Goals, "These solutions
will be available in Gentoo once they've been tested for security
and stability by the Hardened team."

In OpenBSD, these things are there by default.  They are tested and
they work.  They are part of the default install, and if there are
problems, they are fixed.  I wonder how much support you'd get if
say, you install mozilla, or kde, and it doesn't work on hardened
gentoo, but it does work without the hardened stuff.

-- 
<jakemsr at jakemsr.com>