Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] new user - some questions on installing/security/grsecurity

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: "Andraž 'ruskie' Levstik" <ruskie AT mages.ath.cx>
  • To: <sm-discuss AT lists.ibiblio.org>
  • Subject: Re: [SM-Discuss] new user - some questions on installing/security/grsecurity
  • Date: Sat, 07 Apr 2007 16:52:47 +0200

On 11:45:37 2007-04-07 "Jeffrey 'jf' Lim" <jfs.world AT gmail.com> wrote:
> can tell from http://www.sourcemage.org/Gentoo) for grsecurity.
Try:
http://wiki.sourcemage.org/FAQ/Gentoo/Philosophical

As that's as up to date as possible..
> I am looking to install this on an AMD64, and have some questions:
>
> first of all, the docs on the site seem to be, well... pretty
> outdated. Even the 'AMD 64 Status' doc is dated 2005-07-15! A lot of
> the other docs are as well, dated around that same date (which is so
> sad). So i'm hoping to get a little bit of an update from the list -
> is AMD64 now supported? http://www.sourcemage.org/Gentoo mentions
> "archspecs" (which i dunno what they are) for AMD64, but the
> http://www.sourcemage.org/node/1315 report makes me uncertain.
>

Our www is outdated use the wiki. wiki.sourcemage.org

> In the meantime, I have also taken a look at the mirrors, and are
> confused as well. Some mirrors have only the x86(i486).iso.bz2, while
> others (like the Lunar Linux mirror) have an 'x86_64' directory under
> the 'iso' directory as well, containing a few isos (which one should I
> use, if any??), and a chroot as well. Then
> http://www.sourcemage.org/node/1315 mentions a 0.9.4 test iso as well.
> Where is that? Another thing is filenames and directory structures are
> inconsistent across mirrors - how can i be sure that i've gotten the
> correct iso?
>

I think most of the mirrors are outdated. The latest iso is 0.9.6.3 for x86
and there's an alpha version of an x86_64 iso I think.

> Lastly (and most importantly), could u guys tell me about the support
> for grsecurity as mentioned in the comparison against gentoo? How good
> (or complete) is the support for grsec? Do u have a hardened toolchain
> (with SSP and PIE) as well?
>

We only provide what's by default upstream... There are feature patches
that are applied optionaly but nothing on such a grand scale... Also spp is
built in with gcc 4.1 with a -fstack-protector and -fstack-protector-all
CFLAGS you can add to your custom CFLAGS list...

That's about as much as I've looked into this.



--
Andraž "ruskie" Levstik
Source Mage GNU/Linux Games grimoire guru
Geek/Hacker/Tinker

Hacker FAQ: http://www.plethora.net/%7eseebs/faqs/hacker.html
Be sure brain is in gear before engaging mouth.

Key id = F4C1F89C
Key fingerprint = 6FF2 8F20 4C9D DB36 B5B6 F134 884D 72CC F4C1 F89C





Archive powered by MHonArc 2.6.24.

Top of Page