libreswan

USE флаги

• caps - Use Linux capabilities library to control privilege
• curl - Add support for client-side URL transfer library
• dnssec - Use DNSSEC resolver (requires net-dns/unbound)
• ldap - Add LDAP support (Lightweight Directory Access Protocol)
• networkmanager - Enable net-misc/networkmanager support
• pam - Add support for PAM (Pluggable Authentication Modules) - DANGEROUS to arbitrarily flip
• seccomp - Enable seccomp (secure computing mode) to perform system call filtering at runtime to increase security of programs
• selinux - !!internal use only!! Security Enhanced Linux support, this must be set by the selinux profile or breakage will occur
• systemd - Enable use of systemd-specific libraries and features like socket activation or session tracking
• test - Enable dependencies and/or preparations necessary to run tests (usually controlled by FEATURES=test but can be toggled independently)

Советы по безопасности