Mailing List Archive by Gossamer Threads http://www.gossamer-threads.com/lists/gentoo/hardened/ en-us (c) Gossamer Threads Inc. All rights reserved. 13 Feb 2012 03:58:04 -0800 120 75 23 http://www.gossamer-threads.com/lists/gentoo/hardened/ http://www.gossamer-threads.com/images/lists/rss_logo.jpg > > > Looks like 'arch/amd64/no-multilib' profile inclusion is kept in > > > sync with 'features/64bit-native' one: [1]. Exception is > > > 'hardened/ 12 Feb 2012 10:15:53 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247720 > > Looks like 'arch/amd64/no-multilib' profile inclusion is kept in > > sync with 'features/64bit-native' one: [1]. Exception is > > 'hardened/linux/ 11 Feb 2012 11:41:36 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247695 [. CCed gentoo-hardened@lists.gentoo.org to warn against possible breakage. Touching profiles make me nervous. TS: http://archives.gentoo.org/ge 11 Feb 2012 10:48:48 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247694 Hi! On Sat, Jan 28, 2012 at 03:33:51PM +0200, Alex Efros wrote: > $ dumpcap > dumpcap: Can't get list of interfaces: Can't open netlink socket 93:Pr 09 Feb 2012 23:07:14 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247636 El 06/02/12 08:59, Joseph C. Lininger escribió: > /var/tmp/portage/sys-devel/gcc-4.5.3-r1/work/gcc-4.5.3/gcc/config/i386/i386.md: > In function 'inte 06 Feb 2012 04:54:50 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247477 On 02/06/2012 06:13 AM, Joseph C. Lininger wrote: > I looked for that and couldn't find anything about it. Thank you. Any > idea when this might be in 06 Feb 2012 03:46:31 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247471 On 02/06/2012 02:59 AM, Joseph C. Lininger wrote: > As promised, here's the point in the build log where things fail. > > -I/var/tmp/portage/sys-deve 06 Feb 2012 03:44:44 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247470 On 02/05/2012 10:28 PM, Joseph C. Lininger wrote: > Howdy folks, > I recently tried to recompile some packages and I discovered that GCC > 4.5.3, the 06 Feb 2012 03:41:03 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247469 I looked for that and couldn't find anything about it. Thank you. Any idea when this might be in stable x86? Stable still uses 4.5.3-r1. -- "All mod 06 Feb 2012 03:13:58 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247468 Ð' Mon, 06 Feb 2012 00:59:55 -0700 "Joseph C. Lininger" <jbahm@pcdesk.net> пишет: > As promised, here's the point in the build log where things 06 Feb 2012 01:31:15 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247465 As promised, here's the point in the build log where things fail. /var/tmp/portage/sys-devel/gcc-4.5.3-r1/work/build/./prev-gcc/xgcc -B/var/tmp/port 05 Feb 2012 23:59:55 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247464 Sure. I'll generate it again (I cleaned the build dir) and send it on. Give me a little bit. -- "All models are wrong, but some are useful." George 05 Feb 2012 23:35:29 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247463 I'll double-check it on my systems. The relevant snippet of the build log would be nice. -- dr Tóth Attila, Radiológus, 06-20-825-8057 Attila Toth 05 Feb 2012 22:54:09 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247462 You're right, less and less people do. But I still am required to offer an x86 image for a custom build we use. I can post a build log or something 05 Feb 2012 22:42:55 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247461 Less and less people uses x86 nowdays. On my Pentium M and Athlon MP system it builds OK. Please let us know how the build dies. -- dr Tóth Attila, 05 Feb 2012 22:33:17 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247460 Howdy folks, I recently tried to recompile some packages and I discovered that GCC 4.5.3, the current default version in the hardened profile will no 05 Feb 2012 19:28:48 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247454 On 03/02/12 13:37, Tom Hendrikx wrote: > On 03/02/12 03:50, Brian Kroth wrote: >> Tom Hendrikx <tom@whyscream.net> 2012-02-02 21:42: >>> On 27/01/12 1 03 Feb 2012 06:11:36 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247342 On 03/02/12 03:50, Brian Kroth wrote: > Tom Hendrikx <tom@whyscream.net> 2012-02-02 21:42: >> On 27/01/12 14:37, Anthony G. Basile wrote: >>> Hi every 03 Feb 2012 04:37:44 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247341 Tom Hendrikx <tom@whyscream.net> 2012-02-02 21:42: > On 27/01/12 14:37, Anthony G. Basile wrote: >> Hi everyone, >> >> I just added hardened-sources 2 02 Feb 2012 18:50:41 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247330 El 02/02/12 21:42, Tom Hendrikx escribió: > However, I adopted the last working kernel (2.6.39-r8). After reading > the above, am I right to assume th 02 Feb 2012 12:47:58 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247313 On 27/01/12 14:37, Anthony G. Basile wrote: > Hi everyone, > > I just added hardened-sources 2.6.32-r88 and 3.2.2 to the tree. They > address CVE-20 02 Feb 2012 12:42:05 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247312 On Tuesday 31 January 2012 16:19:53 Javier Juan Martínez Cabezón wrote: > Systems compiled with -D_Fortify_source=2 are not vulnerable. If I'm not > 31 Jan 2012 09:29:05 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247212 Systems compiled with -D_Fortify_source=2 are not vulnerable. If I'm not wrong it's a format string vulnerability. 2012/1/31 RB <aoz.syn@gmail.com> 31 Jan 2012 07:19:53 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247210 Not sure how much testing anyone else has done (and it warrants more testing), but I just tested this on a rather out-of-date machine running hardened 31 Jan 2012 07:12:06 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247209 On 01/29/12 05:38, Alex Efros wrote: > Hi! > > On Sat, Jan 28, 2012 at 03:16:28PM -0500, 7v5w7go9ub0o wrote: >> gcc. (I'm using vanilla because I'm al 29 Jan 2012 09:33:11 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247054 Hi guys, A small update to the SELinux policies in our favorite distribution. This one pulls in the following changes: bug #399113: Be able to di 29 Jan 2012 09:10:36 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247053 On Sun, Jan 29, 2012 at 02:38:12PM +0100, RadosÅ‚aw Smogura wrote: > I've just made sync, and I got following errors during calulacting updates: > * 29 Jan 2012 06:12:10 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247038 Hello, I've just made sync, and I got following errors during calulacting updates: * /usr/portage/sec-policy/selinux-base-policy/selinux-base-policy 29 Jan 2012 05:38:12 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247037 Hi! On Sat, Jan 28, 2012 at 03:16:28PM -0500, 7v5w7go9ub0o wrote: > gcc. (I'm using vanilla because I'm also using nvidia drivers, which > apparently 29 Jan 2012 02:38:23 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247033 On 01/28/12 15:16, 7v5w7go9ub0o wrote: > So I'm recompiling with [5] x86_64-pc-linux-gnu-4.4.6-vanilla * and > will see if that helps. Well, that d 28 Jan 2012 12:46:51 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247013 On Saturday 28 January 2012 00:41:08 Anthony G. Basile wrote: > On 01/27/2012 12:38 PM, radegand wrote: > > Dnia 27 stycznia 2012 17:06 "Tóth Attila" 28 Jan 2012 12:41:43 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247012 On 01/28/12 13:26, pageexec-Y8qEzhMunLyT9ig0jae3mg@public.gmane.org wrote: > On 28 Jan 2012 at 20:24, 7v5w7go9ub0o wrote: > >> No joy. hardened-source 28 Jan 2012 12:16:28 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247000 On Fri, 27 Jan 2012 22:34:42 +0200 wrote: > > > Core2Duo > > > > I don't know the details but according to OpenBSDs Theo, the Core2Duo > > had some 28 Jan 2012 11:56:25 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246999 On 01/28/12 00:41, Anthony G. Basile wrote: > > I believe pipacs has fixed this. Please everyone, retest > > hardened-sources-2.6.32-r89.ebuild > har 28 Jan 2012 11:21:57 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246996 On 28 Jan 2012 at 15:23, Alex Efros wrote: > On Sat, Jan 28, 2012 at 02:12:19PM +0200, pageexec@freemail.hu wrote: > > > $ dumpcap > > > dumpcap: Can 28 Jan 2012 10:28:24 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246998 On 28 Jan 2012 at 20:24, 7v5w7go9ub0o wrote: > No joy. hardened-sources-3.2.2-r1.ebuild still fails for me. what's dmesg say? and what's 'readelf 28 Jan 2012 10:26:49 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246997 Hi! On Sat, Jan 28, 2012 at 03:23:58PM +0200, Alex Efros wrote: > > i think it's GRKERNSEC_SYSFS_RESTRICT that could cause this, do you have it enabl 28 Jan 2012 05:33:51 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246973 Hi! On Sat, Jan 28, 2012 at 02:12:19PM +0200, pageexec@freemail.hu wrote: > > $ dumpcap > > dumpcap: Can't get list of interfaces: Can't open /sys/c 28 Jan 2012 05:23:58 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246972 On 28 Jan 2012 at 4:10, Alex Efros wrote: > $ dumpcap > dumpcap: Can't get list of interfaces: Can't open /sys/class/net: Permission denied i think 28 Jan 2012 04:12:19 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246971 On 28 Jan 2012 at 4:28, Alex Efros wrote: > Hi! > > But... as far as I see, it was just _one_ attempt to access NULL pointer > because of very usual 28 Jan 2012 04:09:03 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246970 On 28 Jan 2012 at 4:35, Alex Efros wrote: > > $ dumpcap > > Segmentation fault > > $ ls -l core > > ls: cannot access core: No such file or director 28 Jan 2012 04:02:56 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246969 On 01/27/2012 12:38 PM, radegand wrote: > Dnia 27 stycznia 2012 17:06 "Tóth Attila"<atoth@atoth.sote.hu> napisaÅ‚(a): > >> And this one is from my l 27 Jan 2012 21:41:08 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246947 Hi! On Sat, Jan 28, 2012 at 01:02:40AM +0200, Alex Efros wrote: > > can you generate a coredump and see what the backtrace shows? > > Actually I can 27 Jan 2012 18:35:49 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246940 Hi! But… as far as I see, it was just _one_ attempt to access NULL pointer because of very usual bug. The questions is, why is that triggered CONFI 27 Jan 2012 18:28:20 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246939 Hi! On Sat, Jan 28, 2012 at 03:50:22AM +0200, Alex Efros wrote: > #0 0xb749f152 in __readdir64 (dirp=0x0) at ../sysdeps/unix/readdir.c:45 > 27 Jan 2012 18:10:16 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246938 Hi! On Sat, Jan 28, 2012 at 01:48:01AM +0200, pageexec@freemail.hu wrote: > gosh i knew i'd forgot something: btw, glibc with debug has merged :) 27 Jan 2012 17:50:22 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246937 Hi! On Sat, Jan 28, 2012 at 01:07:43AM +0200, pageexec@freemail.hu wrote: > > Program received signal SIGSEGV, Segmentation fault. > > 0xb75fd152 in 27 Jan 2012 16:11:29 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246927 On 28 Jan 2012 at 2:11, Alex Efros wrote: > Hi! > > On Sat, Jan 28, 2012 at 01:07:43AM +0200, pageexec@freemail.hu wrote: > > > Program received sig 27 Jan 2012 15:48:01 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246936 Hi! I've re-emerged libpcap and run this: $ gdb dumpcap --batch --quiet -ex 'run' -ex 'thread apply all bt full' -ex quit What's next? Recompile gl 27 Jan 2012 15:15:07 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246925 On 28 Jan 2012 at 1:15, Alex Efros wrote: > $ gdb dumpcap --batch --quiet -ex 'run' -ex 'thread apply all bt full' -ex quit > > What's next? Recompi 27 Jan 2012 15:07:43 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246926 Hi! On Sat, Jan 28, 2012 at 01:02:40AM +0200, Alex Efros wrote: > Is this enough, or I can do more? Ok, this one is better: # paxctl -mr /usr/bin/d 27 Jan 2012 15:07:40 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246924 Hi! On Fri, Jan 27, 2012 at 10:40:43PM +0200, pageexec@freemail.hu wrote: > > 2) When wireshark started by non-root user this option kill all my > > 27 Jan 2012 15:02:40 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246923 El 27/01/12 22:20, Alex Efros escribió: > Hi! > > On Fri, Jan 27, 2012 at 03:14:12PM -0600, Matthew Thode wrote: >> You should be using the virt profi 27 Jan 2012 13:28:26 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246915 Hi! On Fri, Jan 27, 2012 at 03:14:12PM -0600, Matthew Thode wrote: > You should be using the virt profile. Why? As far as I understand, virt profile 27 Jan 2012 13:20:16 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246914 On Fri, 27 Jan 2012 22:19:42 +0200 Alex Efros <powerman@powerman.name> wrote: > Hi! > > Two small notes related to security level defaults: > > 1) 27 Jan 2012 13:14:12 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246913 On 27 Jan 2012 at 22:19, Alex Efros wrote: > Hi! > > Two small notes related to security level defaults: > > 1) On my system vmware reboot host OS 27 Jan 2012 12:40:43 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246917 On 27 Jan 2012 at 16:25, Kevin Chadwick wrote: > Thanks for the info. In a discussion about malloc flags, it was > mentioned on the OpenBSD list that 27 Jan 2012 12:34:42 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246916 Hi! Two small notes related to security level defaults: 1) On my system vmware reboot host OS when starting guest OS if any one (or both) of th 27 Jan 2012 12:19:42 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246912 27.01.2012 21:26, Alex Efros wrote: > As for me, spending ~1% performance for ~all hardened is good trade off, > but spending 4% more for protection 27 Jan 2012 12:11:10 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246903 Errata: (except the "howto torture university students mechanisms teaching them microkernel based OS" :P). is "howto torture university students teac 27 Jan 2012 10:39:57 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246902 On 01/27/12 08:37, Anthony G. Basile wrote: > Hi everyone, > > I just added hardened-sources 2.6.32-r88 and 3.2.2 to the tree. They > address CVE-201 27 Jan 2012 10:18:37 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246901 Everything that is interesting for the boss is interesting for us (except the "howto torture university students mechanisms teaching them microkernel 27 Jan 2012 10:04:18 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246891 Dnia 27 stycznia 2012 17:06 "Tóth Attila" <atoth@atoth.sote.hu> napisaÅ‚(a): > And this one is from my laptop: > vmalloc: allocation failure: 0 byte 27 Jan 2012 09:38:07 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246890 On Fri, 27 Jan 2012 15:26:26 +0200 Alex Efros wrote: Thanks for the info. In a discussion about malloc flags, it was mentioned on the OpenBSD list th 27 Jan 2012 08:25:19 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246889 And this one is from my laptop: vmalloc: allocation failure: 0 bytes modprobe: page allocation failure: order:0, mode:0x80d2 Pid: 3157, comm: modprobe 27 Jan 2012 08:06:40 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246879 I've just had this one while booting hardened-3.2.1: Jan 27 16:40:29 atoth kernel: vmalloc: allocation failure: 0 bytes Jan 27 16:40:29 atoth kernel: 27 Jan 2012 08:02:21 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246878 Hi everyone, I just added hardened-sources 2.6.32-r88 and 3.2.2 to the tree. They address CVE-2012-0056. I've tested and they do indeed resist the 27 Jan 2012 05:37:58 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246864 Hi! If you ever wonder how exactly differs predefined security levels, you'll find this information here. :) I've compared them, plus I did some benc 27 Jan 2012 05:26:26 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246863 I was lucky to hit this one: https://bugs.gentoo.org/show_bug.cgi?id=400613 Regards: Dw. -- dr Tóth Attila, Radiológus, 06-20-825-8057 Attila Toth 26 Jan 2012 04:29:56 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246791 On Thu, 12 Jan 2012 18:55:02 -0500 "Anthony G. Basile" wrote: > Oh dear god, Minix! While I respect what Tanenbaum is up to with Minix > and I hope 26 Jan 2012 03:28:24 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246786 On Tue, 24 Jan 2012 23:05:12 +0000 Kevin Chadwick wrote: > I know a bug on bugzilla has been incorrectly closed ages ago so I've > tried a mail to th 26 Jan 2012 03:20:08 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246785 I'm sorry for being offtopic, but this is the list I can rely on. I've just upgraded openrc from 0.9.4 to 0.9.8.2 and my server went offline. After st 25 Jan 2012 17:15:32 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246771 On Mon, 23 Jan 2012 22:19:59 +0000 Radek Madej wrote: > I've removed all the paxmarking from ebuild and added sth like: > > if use pax_kernel; then 24 Jan 2012 15:05:12 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246743 1.) If you happen to use grsecurity, you have two kernel options for controlling ptrace: GRKERNSEC_AUDIT_PTRACE "Ptrace logging" If you say 24 Jan 2012 08:45:30 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246736 El 24/01/12 12:52, Kevin Chadwick escribió: > On Tue, 24 Jan 2012 09:33:36 +0100 > "Tóth Attila" wrote: > >> My only concern against bruteforce protec 24 Jan 2012 06:24:12 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246734 On Tue, 24 Jan 2012 09:33:36 +0100 "Tóth Attila" wrote: > My only concern against bruteforce protection is the possiblity of a DoS. > But it's always 24 Jan 2012 03:52:17 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246729 2012.Január 24.(K) 08:26 idÅ'pontban pageexec@freemail.hu ezt írta: > On 24 Jan 2012 at 2:35, Francesco R.(vivo) wrote: > >> BTW this in "vanilla" g 24 Jan 2012 00:33:36 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246727 2012.Január 24.(K) 02:35 idÅ'pontban Francesco R.(vivo) ezt írta: > On Tuesday 24 January 2012 00:49:19 Tóth Attila wrote: >> Please take a look at 23 Jan 2012 23:37:34 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246725 On 24 Jan 2012 at 2:35, Francesco R.(vivo) wrote: > BTW this in "vanilla" gentoo does not work because of the permission of the su > file: > ls -l / 23 Jan 2012 23:26:47 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246726 On Tuesday 24 January 2012 00:49:19 Tóth Attila wrote: > Please take a look at on this exploit: > http://blog.zx2c4.com/749 > It is interesting to th 23 Jan 2012 17:35:39 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246717 Please take a look at on this exploit: http://blog.zx2c4.com/749 It is interesting to think about /proc/pid/mem protection and about building su with 23 Jan 2012 15:49:19 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246715 On Tuesday 10 January 2012 13:32:26 Christian Apeltauer wrote: > > Hello hardened-list, > I would like to point out that I am still able to run icec 23 Jan 2012 14:19:59 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246714 Hi Log from the meeting /Magnus (Zorry) 23 Jan 2012 12:11:24 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246701 On Sat, 14 Jan 2012 21:22:45 +0100 "Tóth Attila" <atoth@atoth.sote.hu> wrote: > I have two hardened gentoo systems I'm running for many years now. > 14 Jan 2012 13:43:59 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246179 On Jan 14, 2012 9:24 PM, Tóth Attila <atoth@atoth.sote.hu> wrote: > > I have two hardened gentoo systems I'm running for many years now. I've > instal 14 Jan 2012 13:12:37 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246178 I have two hardened gentoo systems I'm running for many years now. I've installed the personal server in 2004. The laptop started in 2005. Now the tim 14 Jan 2012 12:22:45 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246177 On 01/12/2012 06:26 AM, Radek Madej wrote: > IMHO, it'd make more sense to invest into a microkernel system, say based on > Minix3, add PaX features 12 Jan 2012 15:55:02 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246126 Hi, On Saturday 31 December 2011 19:39:23 7v5w7go9ub0o wrote: > On 12/31/11 08:43, "Tóth Attila" wrote: > > Isn't it miserable to see, that as time i 12 Jan 2012 03:26:25 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246110 Hi guys, I haven't merged hardened-development overlay with the main tree yet because I had to make sure that the changes in the policycoreutils woul 10 Jan 2012 11:53:37 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246018 Am Sat, 31 Dec 2011 14:43:10 +0100 schrieb "Tóth Attila" <atoth@atoth.sote.hu>: > Isn't it miserable to see, that as time is passing by, more and mor 10 Jan 2012 04:32:26 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246006 El 07/01/12 22:08, Anthony G. Basile escribió: > Hi everyone, > > A long time ago, Gentoo used to provide RSBAC sources. For those of you > unfamilia 07 Jan 2012 13:19:13 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/245899 Hi everyone, A long time ago, Gentoo used to provide RSBAC sources. For those of you unfamiliar with RSBAC = rules set based access control, it prov 07 Jan 2012 13:08:56 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/245898 Thanks mike! It's definitely a sed bug, which needs new glibc and certain locales (hu_HU.UTF-8 in my case) to get triggered. Nasty. Dw. -- dr Tóth 06 Jan 2012 02:49:19 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/245795 On Wednesday 04 January 2012 17:12:23 Tóth Attila wrote: > I've just installed a new glibc, since the latest dev-lang/R now doesn't > have any requir 05 Jan 2012 15:53:49 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/245760 On 5 Jan 2012 at 19:13, Andrea Zuccherelli wrote: > zrouter aufs # cat kernel-aufs3-no-const-grsec.patch > --- /usr/src/linux/include/linux/fsnotify_ 05 Jan 2012 10:08:11 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/245718 On 5 Jan 2012 at 17:21, Andrea Zuccherelli wrote: > > now if some code needs writable ops structure variables it has 3 options under > > the plugin a 05 Jan 2012 08:36:43 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/245700 On 3 Jan 2012 at 22:10, Andrea Zuccherelli wrote: > The switch I was referring to is > '-fplugin-arg-constify_plugin-no-constify' gcc option. > This 05 Jan 2012 04:45:22 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/245677 Hi! On Wed, Jan 04, 2012 at 11:12:23PM +0100, "Tóth Attila" wrote: > On two systems I got the following messages while running revdep-rebuild. > What 04 Jan 2012 14:43:28 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/245632 I've just installed a new glibc, since the latest dev-lang/R now doesn't have any requirements about it. On two systems I got the following messages 04 Jan 2012 14:12:23 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/245623 On Wed, Jan 04, 2012 at 06:09:11PM +0200, Cor Legmaat wrote: > I try to make my system selinux enabled and followed the steps from > http://www.gentoo 04 Jan 2012 11:39:36 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/245609