<html>
<head>
<meta name="viewport" content="width=device-width, initial-scale=1.0">
</head>
<body>
<br>
<blockquote style="border-left:3px solid #ccc; padding-left:10px;margin:0;">
<br> <span dir="ltr" style="margin-top:0; margin-bottom:0;">'Make a cron job to pull from the kernel repo automatically, either</span> <br> <span dir="ltr" style="margin-top:0; margin-bottom:0;">the stable <a href="http://kernel.org">kernel.org</a> or Fedora's official repo. Then you can run</span> <br> <span dir="ltr" style="margin-top:0; margin-bottom:0;">the merge_config script, and then build the kernel. Then, you can</span> <br> <span dir="ltr" style="margin-top:0; margin-bottom:0;">run `update-grub` or whatever is the process.'</span> <br> <br> <span dir="ltr" style="margin-top:0; margin-bottom:0;">> I was hoping a security tool existed for that purpose. I will do with make then</span> <br> <br> <span dir="ltr" style="margin-top:0; margin-bottom:0;">'Unless for learning, why do this? Fedora maintainers do know their</span> <br> <span dir="ltr" style="margin-top:0; margin-bottom:0;">stuff, so you can trust them. You are not going to audit changes</span> <br> <span dir="ltr" style="margin-top:0; margin-bottom:0;">anyways, so this exercise is futile as you are basically doing the</span> <br> <span dir="ltr" style="margin-top:0; margin-bottom:0;">same thing as `sudo dnf update` (or whatever the dnf command is),</span> <br> <span dir="ltr" style="margin-top:0; margin-bottom:0;">but without the testing from maintainers and other people. Not to</span> <br> <span dir="ltr" style="margin-top:0; margin-bottom:0;">mention the Fedora specific quirks which won't be there upstream.'</span> <br> <br> <span dir="ltr" style="margin-top:0; margin-bottom:0;">>I have chosen fedora for the relative pre built security guarantee it brings but i have reasons to believe the default quirks dont provide enough hardening for my situation. So I am now trying my best to follow and apply an official hardening guide and the kernel compiling is a part of it. For me this is a philosophical stake as much as a technical issue and an experiment: in 2023, can someone targeted who is only a geek be sovereign on a relatively trusted computer (ie relative free hardware from purism and free software) </span>
</blockquote>
</body>
</html>