Re: adding support for hardened toolchain

[Johannes Stezenbach <js at sig21 dot net>]

On Thu, Jan 06, 2011 at 09:55:38AM -0600, Heiko Zuerker wrote:
> Quoting Johannes Stezenbach <js@sig21.net>:
> >
> >I think the patches might need to be split, and there should
> >be a config option for each patch which spells out the upsides
> >and downsides in the help text so the user has all the information
> >to make the right choice.
> 
> This is not be a bad idea, just in case there are issues with
> specific architectures. But this would complicate the proposed
> patching directory structure even further.
> 
> I don't believe that there has been a lot of work done on hardening
> embedded systems, outside of proprietary solution.
> This is one of the reasons why I brought this up, instead of just
> adding these features to Devil-Linux.
> 
> I'm sure there are going to be a few issues which we have to iron
> out, but the benefits are a much more secure system.

Well, I don't expect you to work this out all by yourself,
but these were the questions I would search the answers
for if I had time to work on it.........


Cheers,
Johannes

--
For unsubscribe information see http://sourceware.org/lists.html#faq