On Tue, Aug 2, 2011 at 11:05 AM, Anthony G. Basile <bluen...@gentoo.org> wrote: > On 08/02/2011 10:54 AM, Ciaran McCreesh wrote: >>> > I was thinking something even dirtier, something outside of the PMS >>> > altogether, along the lines of what one does when converting to a >>> > selinux system where one relabels the entire filesystem with rlpkg. >>> > So no, not something via pkg_postinst(). >> Please don't. > Why would this be bad?
Something that comes to mind would be the inability to systematically verify the installed system. We obviously don't currently store posix capabilities the way we store mtimes and hashes, but I would think that this would just be one more part of the EAPI if we properly define it. That said, I don't see manual scripts outside of portage being a possible workaround, but it should probably only be used experimentally. Rich