Hello walt, I've running hardened (hardened profile + kernel (including pax and grsec)) for at least 5 years on all my boxes except one (my gaming only box). It's been quite a while that I had an issue caused by the hardened profile that wasn't due to my fiddeling around with stuff like SELinux and the like. Even these problems were all relatively easy to solve. Truth be told: I guess that you won't even notice the hardened profile unless you also run a hardened kernel (while still having increased security).
On Sun, Sep 06, 2015 at 01:15:17PM -0700, walt wrote: > https://wiki.gentoo.org/wiki/Hardened_Gentoo > > That wiki page is very seductive. It makes me want to drop everything > and select a hardened profile and re-emerge everything from scratch. > > But I have a feeling I'd soon be in big trouble if I did. Is this > something that only gentoo devs should be messing with, or is this > a project that a typical gentoo end-user might hope to accomplish > without frequent suicidal thoughts?
