Re: [gentoo-hardened] Adding ipv6 USE flag by default

2011-02-20 Thread Aaron W. Swenson
ions of the source code to disable it. (e.g., PostgreSQL, Apache and Firefox) Optional support of IPv6 is rapidly disappearing from the tree as it is anyway. We might as well expect it to come regardless of our wishes for a different time frame. Indeed, it is here already in some of the more importa

Re: [gentoo-hardened] SELinux base policy 2.20101213-r9 in overlay

2011-03-02 Thread Aaron W. Swenson
SQL soon, once Mr. Chvatal (scarabeus) or Mr. Lauer (bonsaikitten) get the time to test and commit. The configuration files will be in /etc/postgresql-${SLOT}/. And src_test() works on it now with its socket created in ${T} and executables and miscellaneous files in ${S}/src/test/regress/. All of that

Re: [gentoo-hardened] keyword: amd64 or ~amd64?

2012-04-09 Thread Aaron W. Swenson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 04/09/2012 06:36 PM, Alain Toussaint wrote: > Hello everyone, > > I’m building from scratch a Samba file server which I may use > samba4 git version (i.e. not a package from Gentoo) but the rest > will be stock Gentoo and for the moment, I’m run

Re: [gentoo-hardened] hardened profile for desktops?

2012-06-08 Thread Aaron W. Swenson
nd not desktops. >> I thought I'd check with you guys on this. Is that the case? > > I'm using hardened on desktop in last ~6-7 years. And I know at > least two people who also use hardened on desktop. > You now know three. - -- Mr. Aaron W. Swenson Gentoo Linux De

Re: [gentoo-hardened] ipv6 on by default for hardened profile

2012-06-27 Thread Aaron W. Swenson
rovide minimum recommended configuration for IPv6 >> routing/firewall? I think enabling IPv6 by default should begins >> from writing such docs. > # ip6tables -A INPUT -j DROP # ip6tables -A OUTPUT -j DROP # > ip6tables -A FORWARD -j DROP There you are safe now. > This

Re: [gentoo-hardened] ipv6 on by default for hardened profile

2012-06-27 Thread Aaron W. Swenson
read IPv6 RFCs, but understood all security implications of > IPv6-specific features. Last time I tried to google for such docs > was few years ago, but I found nothing at all. > Those who have IPv6 enabled in the kernel unintentionally probably aren't very security minded and probably

Re: [gentoo-hardened] The state of grsecurity in gentoo

2015-09-02 Thread Aaron W. Swenson
On 2015-09-02 12:13, Anthony G. Basile wrote: > Hi everyone, > > So by now most people have heard the news that the Grsecurity/PaX team > are no longer going to be making their stable patches available. The > reason is that they are in dispute with a certain embedded systems > vendor and those

Re: [gentoo-hardened] Official project position on grsecurity change in release policy?

2017-05-12 Thread Aaron W. Swenson
On 2017-05-11 09:31, Max R.D. Parmer wrote: > Howdy, > > Perhaps I missed it, but I've been so far unable to find a position/plan > for the future of hardened-sources from the Gentoo Hardened project > members. I've searched the site and mailing list archives. Has any such > statement been made? >