Skype on Hardened Gentoo

Chaser Andrey · n00b Joined: 07 Nov 2010 Posts: 16

Skype is blocked from being installed on hardened profiles.

eccerr0r · Posted: Fri Sep 13, 2013 5:37 pm Post subject:

As a binary package, likely it contains some code that makes security hardened setups flag the software as insecure. It might well truly be insecure, but with a binary package, patching it is much more difficult.

I can see that even for pax hardened systems a binary hack is needed to run it (according to the ebuilds). So likely is the above...

You could try removing the mask and seeing if it works... I would assume it would dump out a lot of security violations.
_________________
Intel Core i7 2700K/Radeon R7 250/24GB DDR3/256GB SSD
What am I supposed watching?

Chaser Andrey · n00b Joined: 07 Nov 2010 Posts: 16

I always think that Skype is blackbox with backdoors inside, so I planned to run it in Grsecurity sandbox inside LXC-container. Is it good idea? Or better to run it in small virtual machine with X-forwarding?

Naib · Posted: Fri Sep 20, 2013 12:42 pm Post subject:

Skype itself is a security vulnerability and not only from the snooping.
_________________