Hardened Gentoo

Hardened Gentoo is a version of Gentoo Linux that has been enhanced with security addons. Current versions are Gentoo Linux plus:

SELinux
- A system of mandatory access controls. SELinux can enforce the security policy over all processes and objects in the system.
RSBAC
- A mandatory access control security system based on the Role Compatibility model. It can enforce access rules on your operating system.
PaX/Grsecurity
- Grsecurity is a complete security solution providing such features as a MAC or RBAC system, Chroot restrictions, address space modification protection (via PaX), auditing features, randomization features, linking restrictions to prevent file race conditions, ipc protections and much more.
Hardened Toolchain
- Transparent implementation of PaX address space layout randomizations and stack smashing protections using ELF shared objects as executables.
Hardened-Sources
- A kernel which provides patches for hardened subprojects, and stability/security oriented patches. Includes Grsecurity or SELinux depending on USE flags.
Bastille Linux
- Bastille Linux is an interactive application which gives the user suggestions on securing their machine. It will be customized to make suggestions about other Hardened Gentoo subprojects.