You should use the hardened profile with the harden sources. On terms with security you could compile a hardened kernel but you sacrifice ease of use by having to manage pax and if you choose an RBAC system like SElinux or grsecuritys adds more burden.
Security isn't a product, so I would recommend sticking with regular profile with stable packages, and be mindful of what you have opened up to the internet. I would also recommend just reading up on linux security in general to understand what you're trying to make yourself more secure to. On Mon, Jul 3, 2017, 10:13 PM Ста Деюс <sthu.d...@openmailbox.org> wrote: > Hi. > > I'm new to Gentoo, and before new installation on my PC, keep trying to > choose between system profiles. I want to use the PC as desktop, but am > concerned on security and minimalism. So, I would like to use the > hardened profile and then add the desktop packages, namely openbox w/o > any X-session managers -- just logging in w/ text console and then > startx. > > So, is my setup wise, or i miss something because do not know something > on the distro. regarding this points of installation? > > Thank you for your time, > Sthu. > >
