Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] new user - some questions on installing/security/grsecurity

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: "Jeffrey 'jf' Lim" <jfs.world AT gmail.com>
  • To: "Andraž 'ruskie' Levstik" <ruskie AT mages.ath.cx>
  • Cc: sm-discuss AT lists.ibiblio.org
  • Subject: Re: [SM-Discuss] new user - some questions on installing/security/grsecurity
  • Date: Sun, 8 Apr 2007 00:05:46 +0800

On 4/7/07, "Andraž 'ruskie' Levstik" <ruskie AT mages.ath.cx> wrote:
>

Our www is outdated use the wiki. wiki.sourcemage.org


thanks. Looking through it now.



I think most of the mirrors are outdated. The latest iso is 0.9.6.3 for x86
and there's an alpha version of an x86_64 iso I think.


thanks. (but btw, http://wiki.sourcemage.org/Download_Source_Mage
still says 0.9.6.1). So anyway, if most of the mirrors are outdated, i
suppose i can at least take a look at the official mirror at
ibiblio.org?

So i suppose for the x86_64, i should be looking at the isos in
http://distro.ibiblio.org/pub/linux/distributions/sourcemage/iso/x86_64/0.9.4/test/?
And if so, which one? And how about the "silver-thistle" isos in
http://distro.ibiblio.org/pub/linux/distributions/sourcemage/iso/x86_64/
- what are those for?


> Lastly (and most importantly), could u guys tell me about the support
> for grsecurity as mentioned in the comparison against gentoo? How good
> (or complete) is the support for grsec? Do u have a hardened toolchain
> (with SSP and PIE) as well?
>

We only provide what's by default upstream... There are feature patches
that are applied optionaly but nothing on such a grand scale... Also spp is
built in with gcc 4.1 with a -fstack-protector and -fstack-protector-all
CFLAGS you can add to your custom CFLAGS list...


thanks. Although i think for complete protection, patches are needed
for binutils, and glibc as well.


That's about as much as I've looked into this.



thanks.

-jf

--
"It's so hard to write a graphics driver that open-sourcing it would not
help."
-- Andrew Fear, Software Product Manager, NVIDIA Corporation

http://kerneltrap.org/node/7228




Archive powered by MHonArc 2.6.24.

Top of Page