Hi Ihor, myself I use only hardened profiles without SELinux on my machines, and AFAICT it mostly boils down *this* way to some default toolchain flags for C/C++ and a nearly-default kernel (sys-kernel/gentoo-soures package)[a].
I dropped a note about your question on the IRC channel #gentoo-hardened on
freenode[b] and got mostly instant responses from people telling they run
SELinux fine on Gentoo (so it seems you're right and only our docs are a
bit dusty) -- you might want to ask there for details ;-)
I'm top-posting here and Cc'ing one of the gentoo devs maintaing SELinux,
so he get's your original question aswell (he hasn't subscribed to this
list).
hope this helps and from my side also a warm welcome to Gentoo!
[a] side note: it's similar to archs default kernel mostly vanilla upstream
only with security or bugfix patches and optional patches for
convenience, e.g. -march=native or systemd vs openrc.
[b] https://webchat.freenode.net/
Am Dienstag, 7. April 2020, 06:40:30 CEST schrieb Ihor Antonov:
> Hi everyone,
>
> I am very new to Gentoo and I am currently migrating from Arch.
> Gentoo attracts me with a freedom of system configuration and with
> multiple supported architectures.
>
> I was attracted by Hardened profile described at [1][2][3]
> But reading [1] I also got confused because it looks like it is no longer
> maintained.
>
> So the question is it just outdated wiki page? Is anyone using Hardened
> profile? Is it maintained? In Archlinux SELinux is not supported
> officially so this is why I am looking around.
>
> Thanks/
>
> [1] https://wiki.gentoo.org/wiki/Project:Hardened[1]
> [2] https://wiki.gentoo.org/wiki/Hardened/FAQ[2]
> [3] https://wiki.gentoo.org/wiki/Hardened_Gentoo[3]
--
PGP fingerprint: '00EF D31F 1B60 D5DB ADB8 31C1 C0EC E696 0E54 475B'
keybase.io/nfreydank
signature.asc
Description: This is a digitally signed message part.
