[gentoo-dev] Re: [gentoo-dev-announce] New developer: Thomas Sachau (tommy)

2008-03-21 Thread Santiago M. Mola
On Thu, Mar 20, 2008 at 7:07 PM, Petteri Räty <[EMAIL PROTECTED]> wrote: > Part of the ever growing German conspiracy, we have Thomas (tommy) > Sachau. He will be joining us to help with the pile of broken ebuilds > that some people call the Sunrise overlay. He has previously contributed > to th

[gentoo-dev] Re: Remaining PMS todo list etc

2008-03-21 Thread Ryan Hill
Ciaran McCreesh wrote: On Thu, 20 Mar 2008 18:02:31 -0600 Ryan Hill <[EMAIL PROTECTED]> wrote: How about just checking EUID == 0 in src_test and skip the tests (with a ewarn message) if it doesn't match your needs? I thought I remembered someone raising a stink about checking permissions being

Re: [gentoo-dev] Testing to see if services have crashed on hardened

2008-03-21 Thread Roy Marples
On Friday 21 March 2008 12:39:48 Natanael Copa wrote: > /* pid 1 is most likely owned by root */ > hardened = pid_is_running(1); > if (!hardened || (hardened && euid==0) { OK, we'll go with that for the time being. Thanks Roy -- gentoo-dev@lists.gentoo.org mailing list

[gentoo-dev] Re: Re: Re: RFC: New build types

2008-03-21 Thread Steve Long
Brian Harring wrote: > On Thu, Mar 20, 2008 at 06:51:13AM +, Steve Long wrote: >> I don't have figures, but my understanding is that one of the major >> factors in pkgcore's speed (which *is* impressive, even if the UI isn't >> quite there yet) is that it doesn't reload bash for every phase. (

Re: [gentoo-dev] Testing to see if services have crashed on hardened

2008-03-21 Thread Natanael Copa
On Fri, 2008-03-21 at 12:08 +, Roy Marples wrote: > On Friday 21 March 2008 10:44:12 Natanael Copa wrote: > > err... run rc-status as root? > > > > I mean if you are not supposed to see if a process is running or not as > > normal user, then hardned is doin it's job when does not allow rc-stat

Re: [gentoo-dev] Testing to see if services have crashed on hardened

2008-03-21 Thread Roy Marples
On Friday 21 March 2008 10:44:12 Natanael Copa wrote: > err... run rc-status as root? > > I mean if you are not supposed to see if a process is running or not as > normal user, then hardned is doin it's job when does not allow rc-status > to show this info to the unprivileged user. > > if (!HARDENE

Re: [gentoo-dev] Testing to see if services have crashed on hardened

2008-03-21 Thread Roy Marples
On Friday 21 March 2008 10:37:11 Fabian Groffen wrote: > Assuming you would use libkvm, on Darwin this means as unprivileged user > (not using suid) you can't see any processes at all. That's different from FreeBSD and NetBSD then. > > > This isn't really an easy answer, as we could have installe

[gentoo-dev] Re: Re: Re: RFC: New build types

2008-03-21 Thread Steve Long
Petteri Räty wrote: > Steve Long kirjoitti: >>> >> I don't see how it would wreak more havoc than a novice using, eg ANT >> from Java which s/he is comfortable with, and then further having to >> learn BASH peculiarities when things don't fit with the eclass. But yeah, >> the fun is what attracts

Re: [gentoo-dev] Re: Remaining PMS todo list etc

2008-03-21 Thread Ciaran McCreesh
On Fri, 21 Mar 2008 12:47:37 +0100 Christian Faulhammer <[EMAIL PROTECTED]> wrote: > Great, I accept that it is wrong, but can you tell me how to actually > rewrite it? Test for capabilities (read/write) on files or is there a > sane way to tell? Uh, test the condition that you actually want to

[gentoo-dev] Re: bzr.eclass into Portage

2008-03-21 Thread Christian Faulhammer
Hi, "Jorge Manuel B. S. Vicetto" <[EMAIL PROTECTED]>: > you can check the current version used in desktop-effects at > http://git.overlays.gentoo.org/gitweb/?p=proj/desktop-effects.git;a=blob_plain;f=eclass/bzr.eclass;hb=master Yes, I did not find xeffects, but desktop-effects I now know. > Wi

[gentoo-dev] Re: Remaining PMS todo list etc

2008-03-21 Thread Christian Faulhammer
Hi, Ciaran McCreesh <[EMAIL PROTECTED]>: > On Thu, 20 Mar 2008 08:52:40 +0100 > Christian Faulhammer <[EMAIL PROTECTED]> wrote: > > if has userpriv ${FEATURES} && ! has usersandbox ${FEATURES};then > > make check-local || die "test suite failed" > > else > > ewarn "Activate FEATURES=userp

Re: [gentoo-dev] Testing to see if services have crashed on hardened

2008-03-21 Thread Natanael Copa
On Fri, 2008-03-21 at 10:20 +, Roy Marples wrote: > Hi List. > > I've just removed the code to check for euid when running services and > instead > relying on permissions of the service state dir and testing errno. This is a > good thing, but it does have one side effect. > > OpenRC can t

Re: [gentoo-dev] Testing to see if services have crashed on hardened

2008-03-21 Thread Fabian Groffen
On 21-03-2008 10:20:45 +, Roy Marples wrote: > Hi List. > > I've just removed the code to check for euid when running services and > instead relying on permissions of the service state dir and testing > errno. This is a good thing, but it does have one side effect. > > OpenRC can track daemon

[gentoo-dev] Testing to see if services have crashed on hardened

2008-03-21 Thread Roy Marples
Hi List. I've just removed the code to check for euid when running services and instead relying on permissions of the service state dir and testing errno. This is a good thing, but it does have one side effect. OpenRC can track daemons by how they were started. So every time you run rc-status

[gentoo-dev] Trying to create nessus-bin-3.2.0 ebuild

2008-03-21 Thread Vladimir Rusinov
Hello! I'm trying to create nessus-bin-3.2.0 ebuild. I've downloaded Nessus-3.2.0-suse10.0.i586.rpm, checked its md5 sum, and I've done just a `cp nessus-bin-3.0.5.ebuild nessus-bin-3.2.0.ebuild`. But even scr_unpack() fails: >>> Unpacking Nessus-3.2.0-suse10.0.i586.rpm to /tmp/portage/net-analyz

Re: [gentoo-dev] Re: Remaining PMS todo list etc

2008-03-21 Thread Ciaran McCreesh
On Thu, 20 Mar 2008 18:02:31 -0600 Ryan Hill <[EMAIL PROTECTED]> wrote: > > How about just checking EUID == 0 in src_test and skip the tests > > (with a ewarn message) if it doesn't match your needs? > > I thought I remembered someone raising a stink about checking > permissions being a race condi