[Openvas-distro] Hardening OpenVAS

[Marco Bonetti]

On Wed, August 19, 2009 16:11, Tim Brown wrote:
> PS Anyone compiling for other platforms is welcome to join in this
> exercise... and in fact we should consider moving the hardening into the
> mainline build tree in due course?
The Slackware philosophy is to keep the number of "--enable-*"configure
arguments as low as possible, compatible with the features requested from
one package. Keep in mind that this is due mainly because the official
Slackware distribution has a limited number of packages when compared to
other major distros and everything extra, like OpenVAS, is distributed by
third parties.
I'm ok if you, the developers, will start pushing the use of extra
hardening options when compiling OpenVAS and I really like the idea: just
keep in mind that the slackbuilds published on SlackBuilds.org will have
those features turned off if the user has to enable them at compile time
but I will surely add an enviroment variable to turn them on. It's the
SlackBuilds.org way of enabling extra features which have some uncovered,
experimental or just unconventional, like this, dependencies.
When those features will be automatically enabled at compile time without
the need of a configure option I'll have no problems at building the
packages as they are :-)

Just my 2 cents,
ciao

-- 
Marco Bonetti
BT3 EeePC enhancing module: http://sid77.slackware.it/bt3/
Slackintosh Linux Project Developer: http://workaround.ch/
Linux-live for powerpc: http://workaround.ch/pub/rsync/mb/linux-live/

My GnuPG key id: 0x86A91047