Mailing List Archive by Gossamer Threads http://www.gossamer-threads.com/lists/gentoo/hardened/ en-us (c) Gossamer Threads Inc. All rights reserved. 13 Feb 2012 03:51:20 -0800 120 75 23 http://www.gossamer-threads.com/lists/gentoo/hardened/ http://www.gossamer-threads.com/images/lists/rss_logo.jpg [. CCed gentoo-hardened@lists.gentoo.org to warn against possible breakage. Touching profiles make me nervous. TS: http://archives.gentoo.org/ge 11 Feb 2012 10:48:48 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247694 Howdy folks, I recently tried to recompile some packages and I discovered that GCC 4.5.3, the current default version in the hardened profile will no 05 Feb 2012 19:28:48 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247454 Not sure how much testing anyone else has done (and it warrants more testing), but I just tested this on a rather out-of-date machine running hardened 31 Jan 2012 07:12:06 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247209 Hi guys, A small update to the SELinux policies in our favorite distribution. This one pulls in the following changes: bug #399113: Be able to di 29 Jan 2012 09:10:36 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247053 Hello, I've just made sync, and I got following errors during calulacting updates: * /usr/portage/sec-policy/selinux-base-policy/selinux-base-policy 29 Jan 2012 05:38:12 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/247037 Dnia 27 stycznia 2012 17:06 "Tóth Attila" <atoth@atoth.sote.hu> napisał(a): > And this one is from my laptop: > vmalloc: allocation failure: 0 byte 27 Jan 2012 09:38:07 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246890 Hi everyone, I just added hardened-sources 2.6.32-r88 and 3.2.2 to the tree. They address CVE-2012-0056. I've tested and they do indeed resist the 27 Jan 2012 05:37:58 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246864 Hi! If you ever wonder how exactly differs predefined security levels, you'll find this information here. :) I've compared them, plus I did some benc 27 Jan 2012 05:26:26 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246863 I'm sorry for being offtopic, but this is the list I can rely on. I've just upgraded openrc from 0.9.4 to 0.9.8.2 and my server went offline. After st 25 Jan 2012 17:15:32 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246771 Please take a look at on this exploit: http://blog.zx2c4.com/749 It is interesting to think about /proc/pid/mem protection and about building su with 23 Jan 2012 15:49:19 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246715 Hi Log from the meeting /Magnus (Zorry) 23 Jan 2012 12:11:24 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246701 I have two hardened gentoo systems I'm running for many years now. I've installed the personal server in 2004. The laptop started in 2005. Now the tim 14 Jan 2012 12:22:45 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246177 Hi guys, I haven't merged hardened-development overlay with the main tree yet because I had to make sure that the changes in the policycoreutils woul 10 Jan 2012 11:53:37 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/246018 Hi everyone, A long time ago, Gentoo used to provide RSBAC sources. For those of you unfamiliar with RSBAC = rules set based access control, it prov 07 Jan 2012 13:08:56 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/245898 I've just installed a new glibc, since the latest dev-lang/R now doesn't have any requirements about it. On two systems I got the following messages 04 Jan 2012 14:12:23 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/245623 Hi: I try to make my system selinux enabled and followed the steps from http://www.gentoo.org/proj/en/hardened/selinux/selinux-handbook.xml?part=2&ch 04 Jan 2012 08:09:11 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/245572 On 3 Jan 2012 at 18:34, Andrea Zuccherelli wrote: > hfsnotify.c:208:2: error: assignment of read-only member 'br_hfsn_ops' > > I found this to be ca 03 Jan 2012 10:02:59 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/245503 Hi, I know some people were interested in this, so here it is. I've built two stage4 tarballs (stage3 + other stuff for a full development env). The 03 Jan 2012 07:53:19 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/245452 Hi guys, Assuming you don't kill me for not using hexadecimal notations, rev 10 is now out right after rev 9. Revision 10 of selinux-base-policy come 30 Dec 2011 12:02:45 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/245102 Positive feedback: New tp_smapi ebuild (0.41) based on the forked Debian source compiles fine with hardened-sources-3.1.5 and hardened-sources-3.1.6, 29 Dec 2011 15:09:18 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/245060 Hi guys, In the hardened-dev overlay you can now find the SELinux policy revision 9 (and its affiliated modules). The included changes are: - <bug # 27 Dec 2011 10:05:48 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/244974 Hi everyone, For a while now, we've been supporting three predefined grsec profiles in the hardened-sources kernel. Upstream provides four. These a 26 Dec 2011 10:57:07 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/244942 Hi Here is the meeting log. /Magnus (Zorry) 18 Dec 2011 14:48:10 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/244612 So I am building in a chroot an x86 system: CFLAGS="-march=k6-2 -Os -pipe -fomit-frame-pointer" CXXFLAGS="${CFLAGS}" LDFLAGS="-Wl,-z,relro" CHOST="i 12 Dec 2011 16:08:51 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/244289 huh? ________________________________ From: "simon.cruddas@othermedia.com" <simon@othermedia.com> To: gentoo-hardened@lists.gentoo.org Sent: Monda 12 Dec 2011 12:26:43 -0800 http://www.gossamer-threads.com/lists/gentoo/hardened/244272