Project:Hardened

From Gentoo Wiki
Revision as of 07:38, 30 August 2013 by SwifT (Talk | contribs)

Jump to: navigation, search
Gentoo Hardened
Description Hardened Gentoo is a project which oversees the research, implementation, and maintenance of security oriented projects for Gentoo Linux.
Email hardened@gentoo.org
IRC Channel #gentoo-hardened
Lead(s)
Members
Parent Project Gentoo Linux
Subprojects
Tags
Project listing

Project Goals

Hardened Gentoo's purpose is to make Gentoo viable for highly secure, high stability production server environments. This project is not a standalone project separated from the rest of Gentoo. Instead, it is intended to be a team of Gentoo developers who are focused on delivering solutions to Gentoo that provide strong security and stability. These solutions will be available in Gentoo once they've been tested for security and stability by the Hardened team.

Contributors and Hall of Fame

The following people are or have been actively contributing to the project.

Contributor Nickname Role Still active?
Chris Richards gizmo Policy development, support (SELinux) no
Chris PeBenito pebenito Previous SELinux project lead, policy development and SELinux support no

Resources

The Gentoo Hardened project offers many resources.

Concepts
Introduction to Hardened Gentoo Overview of the various technologies researched and supported through the Gentoo Hardened project
Introduction to PIC Introduction to Position Independent Code
User Guides
Hardened Gentoo Frequently Asked Questions Frequently Asked Questions for the Gentoo Hardened project
PaX Quickstart Guide How to use PaX
PaX Flag migration from PT_PAX to XATTR_PAX How to migrate the ELF based PaX flags to the extended attribute based flags
Grsecurity2 Quickstart Guide What are the grsecurity features and how to enable them on a Gentoo Linux system
Grsecurity TPE Guide Grsecurity Trusted Path Execution guide
Expert documentation
Hardened Debugging Debugging applications build with PIC/PIE
Hardened Toolchain Technical description of the Hardened Toolchain
GNU Stack Quickstart Introduction to GNU stack handling
HOWTO find and fix TEXTRELs How to find and fix text relocations
Reference material
PaX Utilities Overview of the PaX utilities
Capabilities Listing List of POSIX capabilities
PIC Internals Position Independent Code Internals

Herds

The hardened project maintains the following herds:

Herd Members Description
hardened blueness, chainsaw, gengor, klondike, lejonet, nixnut, prometheanfire, solar, swift, zorry Hardened Gentoo project packages and policy
selinux blueness, prometheanfire, swift Gentoo's Security-Enhanced Linux (SELinux) packages

I Want to Participate

To participate in the Hardened Gentoo project first join the mailing list at gentoo-hardened@lists.gentoo.org. Next, ask if there are plans to support something that you are interested in, propose a new subproject that you are interested in, choose one of the planned subprojects to work on or simply ask if you can help with something. You can also talk to the developers and users in the IRC channel #gentoo-hardened on irc.freenode.net for more information or just to chat about the project or any subprojects.

If you think you don't have the knowledge or abilities to help, then try reading the current documents (there are always sections that can be improved or typos which we miss) and when you feel brave enough then try writing those documents you missed. Usually this only requires some internet research on your side and after some documents you'll most probably be able to help with other things you thought you weren't able to help with before.

Also, if you don't have time to actively help by contributing work we will always need testers to maintain the security and stability of the overall product. All development, testing, and productive comments and feedback will be greatly appreciated.