[prev in list] [next in list] [prev in thread] [next in thread] 

List:       gentoo-dev
Subject:    Re: [gentoo-dev] New global use-flag [pax_kernel]
From:       Mike Frysinger <vapier () gentoo ! org>
Date:       2012-11-27 23:26:13
Message-ID: 201211271826.14011.vapier () gentoo ! org
[Download RAW message or body]


On Sunday 25 November 2012 18:57:12 Matthew Thode wrote:
> pax_kernel is used by 21 packages.  The description would generally be
> 'make changes to the package so it works under a pax enabled kernel'.
> Currently it is used to either patch or (inclusive) to pax mark.
> 
> What think you?

`paxctl` should be run if it exists, and a hardened profile should list that in 
its @system imo.  that cuts out quite a number of users.

as for patches applied to the source, i can't say w/out reading the actual 
patches if there's a better way (keying off defines, or runtime detection based 
on errno which we've done in glibc).
-mike

["signature.asc" (application/pgp-signature)]

[prev in list] [next in list] [prev in thread] [next in thread]