[Asterisk-Users] GRSecurity and ALSA on a Gentoo Server

[Ulexus]

Deon Rodden wrote:
> I've been working with Asterisk for about 2 months now and am doing 
> well. However I decided to switch platforms from Fedora Core 1, that my 
> predacessor was using, to Gentoo, for obvious reasons.  It just seems 
> faster and less "bloated" everything I need, nothing I don't.
> 
> Anyways, I've read what the Wiki had to say about it and I was only 
> confused on one thing, putting ALSA in my USE statement. It's a 1U 
> server with no Sound Card. I did not choose to put ALSA in my USE flags 
> as I don't have a sound card. But will Asterisk suffer in any way? I 
> know that Asterisk is fully capable of running on a machine with No 
> Sound card, my Fedora servers have no sound card, but by ommitting 
> "alsa" in my USE flags, will Asterisk be compiled in a way that would 
> make it less functional?

No.  There is no problem installing or running it with USE="-alsa".

> 
> My last question, sorry guys (and girls), is about the grsecurity in the 
> 2.4 kernel (I chose 2.4 instead of 2.6). I set it to "low" for now, as 
> it said it wouldn't cause any compatibility issues with 99% of the 
> programs. Has anybody tried medium, or even high, with Asterisk? How 
> secure can you get the kernel without interfering with Asterisk.

Yes, I use asterisk with grsec on "high".  No problems.

> 
> 
> This is just more of a comment, but if anybody see's anything wrong with 
> it I'd like to know. I don't want to use the 0.9.0 ebuild (but I emerged 
> it just to get the dependencies taken care of) so I emerge'd the CVS 
> program so that I can upgrade libpri/zaptel/asterisk from 0.9.0 to the 
> latest.  The The Wiki mentions something about CVS and points to: 
> http://bugs.gentoo.org/show_bug.cgi?id=33345  but that link is dead.  I 
> figured I'd just CVS Asterisk the normal way, do the make install and it 
> should upgrade it.

I don't use the portage ebuild for Asterisk, so I don't really know. 
However, after a brief look at the ebuild, it looks like everything is 
in the right place.  To be sure, though, I would 'emerge unmerge 
asterisk zaptel libpri' and install these fresh using the normal 
configure/make/make install methods from the CVS sources.

> 
> Regards,
> Deon
> _______________________________________________
> Asterisk-Users mailing list
> Asterisk-Users at lists.digium.com
> http://lists.digium.com/mailman/listinfo/asterisk-users
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users