On Sun, Oct 23, 2011 at 3:03 PM, Anthony G. Basile <bluen...@gentoo.org> wrote: > Where would the hardened profiles fit in this? This requires some > thought. Right now "hardened" means three choices: 1) hardened > toolchain, 2) hardened-sources kernel, 3) hardened profile. Some > packages are masked or added to the profile for the toolchain, some for > the kernel. We'd have to disentangle those. I'm not sure how the > details would play out.
My impression was that for the hardened kernels case, specific USE flags such as "pax_kernel" are supposed to be used instead of the generic "hardened". -Alexandre