If you want to go with the hardened sources, there's a great wiki article on it.
On Mon, Jul 3, 2017, 10:20 PM Ian Bloss <ianlin...@gmail.com> wrote: > You should use the hardened profile with the harden sources. On terms with > security you could compile a hardened kernel but you sacrifice ease of use > by having to manage pax and if you choose an RBAC system like SElinux or > grsecuritys adds more burden. > > Security isn't a product, so I would recommend sticking with regular > profile with stable packages, and be mindful of what you have opened up to > the internet. I would also recommend just reading up on linux security in > general to understand what you're trying to make yourself more secure to. > > On Mon, Jul 3, 2017, 10:13 PM Ста Деюс <sthu.d...@openmailbox.org> wrote: > >> Hi. >> >> I'm new to Gentoo, and before new installation on my PC, keep trying to >> choose between system profiles. I want to use the PC as desktop, but am >> concerned on security and minimalism. So, I would like to use the >> hardened profile and then add the desktop packages, namely openbox w/o >> any X-session managers -- just logging in w/ text console and then >> startx. >> >> So, is my setup wise, or i miss something because do not know something >> on the distro. regarding this points of installation? >> >> Thank you for your time, >> Sthu. >> >>