Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
[Solved] Using a hardened profile with binary packages?
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
gtdm
n00b
n00b


Joined: 14 Oct 2024
Posts: 1

PostPosted: Mon Oct 14, 2024 11:08 pm    Post subject: [Solved] Using a hardened profile with binary packages? Reply with quote

Hey,

I'm slowly starting to set up a Raspberry Pi 5 as a small server for personal projects. I've now switched to the arm64/hardened profile, rebuild the toolchain right after that and am now wondering whether there are any security implications when using binary packages with that profile?

Considering that switching to a hardened profile involves a complete toolchain rebuild and setting the hardened USE flag for gcc, I'm thinking that I should avoid binaries and compile everything locally on the Pi... right? Or doesn't it matter?

Thank you for your help!


Last edited by gtdm on Tue Oct 15, 2024 5:25 am; edited 1 time in total
Back to top
View user's profile Send private message
eschwartz
Developer
Developer


Joined: 29 Oct 2023
Posts: 240

PostPosted: Mon Oct 14, 2024 11:48 pm    Post subject: Reply with quote

Binpackages are not compiled using the hardened profile settings for the compiler, so you should avoid them.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum