On 04/21/2012 07:05 AM, Anthony G. Basile wrote: > Hi everyone, > > I'd like to remove USE="-unicode" from make.defaults at the root level > of all hardened profiles. The request came from jmbsvicetto because he > required it for the hardened stages to build, but to be honest, I don't > know why we have it disabled in hardened and its probably leftover cruft > from days gone by. > > Any reason not to, else its gone. > >
A few of our servers have it enabled (http, mail), but others don't (vpn, firewall, nagios). I think the hardened profile should default to having stuff disabled, unless there's a reason to enable it. Every little bit increases your surface area. But I'm sure jmbsvicetto knows what he's doing, so that principle may not apply here. If it's required, turn it on.
