Switching from Gentoo-Sources to Hardened-Sources

Crimjob · Tux's lil' helper Joined: 04 Dec 2006 Posts: 111

Hi All,

Looking to build a new routing box right now as my old one is going to take a long time to fix.

I was initially having issues with kernel panics, but managed to work out all my problems with regular gentoo-sources. Since I'm using this as a router / server, I wanted it to be hardened.

I'm just curious to know, is there anything further that I have to do other than:

emerge hardened-sources
change symlink to hardened kernel
configure, build, and copy the kernel to boot
add a new grub line for the new kernel

I have a feeling there was something about the profile, but I'm not sure if you can change that after the system is built?
_________________
"Who are you to judge the life I live? I know I'm not perfect and I don't live to be, but before you start pointing fingers... make sure your hands are clean." ~Bob Marley

KayZee · Posted: Wed Nov 11, 2009 3:59 pm Post subject:

How do I switch to the hardened profile?
http://www.gentoo.org/proj/en/hardened/hardenedfaq.xml#hardenedprofile

You also should switch to the hardened tool chain. This is also addressed in the linked article.

Crimjob · Tux's lil' helper Joined: 04 Dec 2006 Posts: 111

Thanks KayZee, I actually found that document and followed it, received a kernel panic, and decided to completely re-do the system. Still receiving kernel panic. It appears to be an issue with the hardened kernel and nic drivers though...

https://forums.gentoo.org/viewtopic-t-801736-highlight-kernel+panic+syncing+fatal+exception+interrupt.html
https://forums.gentoo.org/viewtopic-t-800927-highlight-kernel+panic+syncing+fatal+exception+interrupt.html
_________________
"Who are you to judge the life I live? I know I'm not perfect and I don't live to be, but before you start pointing fingers... make sure your hands are clean." ~Bob Marley