AW: Status of HLFS project

Robert Baker bobb at netslyder.net
Wed Sep 27 15:21:25 PDT 2006


Fortunately you can at least get it to compile/run if you use 
-fno-stack-protector. But now that the current gcc versions include the 
stack smashing protector maybe we will see some changes upstream.

Utill this is fixed exim may be the MTA of choice.

Michael Labuschke wrote:

>Yes i'd like to know how you patched postfix so "local" wouldn't segault
>when compiled with a hardened GCC.
>
>michael 
>
>-----Ursprüngliche Nachricht-----
>Von: hlfs-dev-bounces at linuxfromscratch.org
>[mailto:hlfs-dev-bounces at linuxfromscratch.org] Im Auftrag von Sebastian
>Faulborn
>Gesendet: Mittwoch, 27. September 2006 18:19
>An: hlfs-dev at linuxfromscratch.org
>Betreff: Re: Status of HLFS project
>
>I have already developed a pretty stable HLFS (ie. I have not found a bug
>yet...).
>
>Have a look at http://www.secure-slinux.org.
>
>Basically it is based on HLFS SVN-20060717 with kernel updated to
>2.6.17.8 and grsecurity
>updated to 2.1.9-2.6.17.8.
>
>There are a few bugs fixed in the book. It would be a matter of a few hours
>to list them here in the mailing list.
>
>It has a lot of features added and lots of packages from BLFS run on it with
>no problem at all, including XOrg, XFCE, Firefox, postfix, fcron, etc. Of
>course for a base HLFS we don't need those packages.
>
>A slightly older version (however with little change) has been running for
>over half a year on a production server. No problems either.
>
>If there is any interest, I could post those changes!
>
>Sebastian Faulborn
>
>
>
>  
>
>>Betreff:
>>Re: Status of HLFS project
>>Von:
>>Robert Connolly <robert at linuxfromscratch.org>
>>Datum:
>>Wed, 20 Sep 2006 21:25:24 -0400
>>An:
>>Hardened LFS Development List <hlfs-dev at linuxfromscratch.org>
>>
>>
>>Great :-) I can't wait to see.
>>
>>robert
>>
>>On Tuesday 19 September 2006 17:37, Robert Baker wrote:
>> 
>>
>>    
>>
>>>	Well I have about the same schedule as you Robert, but I am willing 
>>>to throw my hat in the ring to help maintain HLFS-Stable. I have a big 
>>>interest in seeing that we can work out a hardened system capable of 
>>>being used for stable server environments. I think that starting 
>>>another branch for Stable is exactly what needs to happen. I am more 
>>>than willing to sink a good 10-20 hrs a week into maintaining, and I 
>>>have allready begun working on a branch of the SVN-20060717 build of 
>>>HLFS. I am taking your suggestions at face value, and making the 
>>>required adaptations to work from a more stable package set. I will 
>>>have my edited HLFS-Book ready for review sometime this weekend time
>>>      
>>>
>permitting.
>  
>
>>>Hopefully we can get the ball rolling here, and I would love to help 
>>>out with what time I have to do so.
>>>
>>>Robert Baker
>>>   
>>>
>>>
>>>      
>>>
>
>--
>http://linuxfromscratch.org/mailman/listinfo/hlfs-dev
>FAQ: http://www.linuxfromscratch.org/faq/
>Unsubscribe: See the above information page
>
>  
>
---
[This E-mail scanned for viruses courtesy of Netslyder, Inc.(http://www.netslyder.net)]




More information about the hlfs-dev mailing list