[rsbac] DAZ on Gentoo

Daniel Cegielka daniel.cegielka at gmail.com
Mon Nov 17 18:31:10 CET 2008


> 
> Anyway, this is a bit out of topic for this mailing-list. Best is that
> you use rsbac.org kernels (and probably, add up the pax patch). These
> ebuilds barely unpack and patch a kernel into /usr/src/xxxx, so
> unpacking your own there isnt a big difference anyway. Just remember to
> upgrade it and cleanup the directories when you switch to a new one ^^
> 
> The tools ebuild can be version bumped and re-emerged for updates, it
> should work flawlessly at the moment
> 
> kang

I downloaded rsbac-patch from rsbac.org and make from it gentoo-unipatch
version.
ebuild for 2.6.27 looks good with gentoo's "base" and "extras" patches
(for 2.6.27), but there is problem with PaX. There is no stable version
of pax for 2.6.27 on pax.grsecurity.org (or .net) and this pax-test
patch from cvs can't apply.

daniel


More information about the rsbac mailing list