[gentoo-hardened] ipv6 on by default for hardened profile

2012-06-25 Thread Anthony G. Basile
Hi everyone, We visited this issue during the first ipv6 global day and I asked the masses: do you want ipv6 on by default or not. There was lots of back and forth and since it was only a question of default, I left the status quo, which is off by default. But now the ipv6 pressures mount!

Re: [gentoo-hardened] ipv6 on by default for hardened profile

2012-06-25 Thread Matthew Thode
On 06/25/2012 06:08 AM, Anthony G. Basile wrote: > Hi everyone, > > We visited this issue during the first ipv6 global day and I asked the > masses: do you want ipv6 on by default or not. There was lots of back > and forth and since it was only a question of default, I left the status > quo, whic

Re: [gentoo-hardened] ipv6 on by default for hardened profile

2012-06-25 Thread Sven Vermeulen
On Mon, Jun 25, 2012 at 08:58:49AM -0500, Matthew Thode wrote: > I use ipv6 on all my servers (not that everyone does). We will have to > enable it eventually, sooner is probably better then later I think. It's a default, users can still opt-out, so I don't really mind, but we might want to keep

Re: [gentoo-hardened] ipv6 on by default for hardened profile

2012-06-25 Thread Matthew Thode
On 06/25/2012 09:37 AM, Sven Vermeulen wrote: > On Mon, Jun 25, 2012 at 08:58:49AM -0500, Matthew Thode wrote: >> I use ipv6 on all my servers (not that everyone does). We will have to >> enable it eventually, sooner is probably better then later I think. > > It's a default, users can still opt-o

[gentoo-hardened] Tin Hat 20120625 released.

2012-06-25 Thread Anthony G. Basile
Hi everyone, I'd like to announce that a new release of Tin Hat is out. Tin Hat is a fully featured Linux desktop based on Hardened Gentoo which runs purely in RAM. It aims to be very secure, stable, and fast. ChangeLog: Tin Hat is moving to a 6 month release schedule. This is the June re

Re: [gentoo-hardened] ipv6 on by default for hardened profile

2012-06-25 Thread Alex Efros
Hi! On Mon, Jun 25, 2012 at 08:58:49AM -0500, Matthew Thode wrote: > > I'm alerting users so that you can make whatever changes you like to > > ipv6 in your /etc/make.conf. In about 24 hours I will turn on by > > default ipv6 on all hardened profiles. > I use ipv6 on all my servers (not that ever

Re: [gentoo-hardened] ipv6 on by default for hardened profile

2012-06-25 Thread Matthew Thode
On 06/25/2012 10:03 PM, Alex Efros wrote: > Hi! > > On Mon, Jun 25, 2012 at 08:58:49AM -0500, Matthew Thode wrote: >>> I'm alerting users so that you can make whatever changes you like to >>> ipv6 in your /etc/make.conf. In about 24 hours I will turn on by >>> default ipv6 on all hardened profile

Re: [gentoo-hardened] ipv6 on by default for hardened profile

2012-06-25 Thread Michael Orlitzky
On 06/25/12 23:03, Alex Efros wrote: > > Correct me if I'm wrong, but enabling IPv6 mean needs in supporting two > different routing tables and two different firewalls. Also, I suppose > enabling IPv6 on any server/router with non-trivial IPv4 firewall rules > may (and probably will!) result in cr

Re: [gentoo-hardened] ipv6 on by default for hardened profile

2012-06-25 Thread Jonny Kent
On Jun 25, 2012, at 10:43 PM, Michael Orlitzky wrote: > On 06/25/12 23:03, Alex Efros wrote: >> >> Correct me if I'm wrong, but enabling IPv6 mean needs in supporting two >> different routing tables and two different firewalls. Also, I suppose >> enabling IPv6 on any server/router with non-tri