Re: [gentoo-user] Choosing between system profiles: hardened and desktop for desktop installation.

2017-07-05 Thread james
On 07/04/17 23:16, Walter Dnes wrote: > On Tue, Jul 04, 2017 at 01:37:38PM -0400, james wrote > >> W. Dnes is the king of minimalist here, so when he gives advise >> realize it has decades of experimentation to get to where he is on >> minimization. > > Not exactly "decades". I first started l

Re: [gentoo-user] Choosing between system profiles: hardened and desktop for desktop installation.

2017-07-04 Thread R0b0t1
On Tue, Jul 4, 2017 at 4:12 AM, Peter Humphrey wrote: > On Tuesday 04 Jul 2017 05:20:41 Ian Bloss wrote: >> You should use the hardened profile with the harden sources. On terms with >> security you could compile a hardened kernel but you sacrifice ease of >> use by having to manage pax and if you

Re: [gentoo-user] Choosing between system profiles: hardened and desktop for desktop installation.

2017-07-04 Thread Walter Dnes
On Tue, Jul 04, 2017 at 01:37:38PM -0400, james wrote > W. Dnes is the king of minimalist here, so when he gives advise > realize it has decades of experimentation to get to where he is on > minimization. Not exactly "decades". I first started linux in late 1999 or early 2000. The minimalist

Re: [gentoo-user] Choosing between system profiles: hardened and desktop for desktop installation.

2017-07-04 Thread Toralf Förster
On 07/04/2017 07:12 AM, Ста Деюс wrote: > So, I would like to use the > hardened profile and then add the desktop packages, namely openbox w/o I do run a hardened profile at my desktop (KDE) since about 3 years - almost w/o any trouble. Recently I switched just from hardened kernel to vanilla ker

Re: [gentoo-user] Choosing between system profiles: hardened and desktop for desktop installation.

2017-07-04 Thread james
On 07/04/17 01:12, Ста Деюс wrote: > Hi. > > I'm new to Gentoo, and before new installation on my PC, keep trying to > choose between system profiles. I want to use the PC as desktop, but am > concerned on security and minimalism. So, I would like to use the > hardened profile and then add the des

Re: [gentoo-user] Choosing between system profiles: hardened and desktop for desktop installation.

2017-07-04 Thread Peter Humphrey
On Tuesday 04 Jul 2017 05:20:41 Ian Bloss wrote: > You should use the hardened profile with the harden sources. On terms with > security you could compile a hardened kernel but you sacrifice ease of > use by having to manage pax and if you choose an RBAC system like SElinux > or grsecuritys adds mo

Re: [gentoo-user] Choosing between system profiles: hardened and desktop for desktop installation.

2017-07-03 Thread R0b0t1
On Tue, Jul 4, 2017 at 12:12 AM, Ста Деюс wrote: > Hi. > > I'm new to Gentoo, and before new installation on my PC, keep trying to > choose between system profiles. I want to use the PC as desktop, but am > concerned on security and minimalism. So, I would like to use the > hardened profile and th

Re: [gentoo-user] Choosing between system profiles: hardened and desktop for desktop installation.

2017-07-03 Thread Ian Bloss
If you want to go with the hardened sources, there's a great wiki article on it. On Mon, Jul 3, 2017, 10:20 PM Ian Bloss wrote: > You should use the hardened profile with the harden sources. On terms with > security you could compile a hardened kernel but you sacrifice ease of use > by having to

Re: [gentoo-user] Choosing between system profiles: hardened and desktop for desktop installation.

2017-07-03 Thread Ian Bloss
You should use the hardened profile with the harden sources. On terms with security you could compile a hardened kernel but you sacrifice ease of use by having to manage pax and if you choose an RBAC system like SElinux or grsecuritys adds more burden. Security isn't a product, so I would recommen

[gentoo-user] Choosing between system profiles: hardened and desktop for desktop installation.

2017-07-03 Thread Ста Деюс
Hi. I'm new to Gentoo, and before new installation on my PC, keep trying to choose between system profiles. I want to use the PC as desktop, but am concerned on security and minimalism. So, I would like to use the hardened profile and then add the desktop packages, namely openbox w/o any X-session