Re: [gentoo-dev] Automagic pax-mark

2013-04-09 Thread Anthony G. Basile
On 04/08/2013 01:14 PM, Mike Gilbert wrote: On Mon, Apr 8, 2013 at 10:21 AM, Michael Haubenwallner wrote: Actually I've wondered if it would make more sense to default to PAX_MARKINGS="none", and have the hardened profiles (or the user in make.conf) set a different value. That makes some sens

Re: [gentoo-dev] Automagic pax-mark

2013-04-08 Thread Mike Gilbert
On Mon, Apr 8, 2013 at 10:21 AM, Michael Haubenwallner wrote: > Actually I've wondered if it would make more sense to default to > PAX_MARKINGS="none", > and have the hardened profiles (or the user in make.conf) set a different > value. That makes some sense to me. The downside is that that swi

Re: [gentoo-dev] Automagic pax-mark

2013-04-08 Thread Michael Haubenwallner
On 04/08/2013 12:08 AM, Anthony G. Basile wrote: > On 04/07/2013 05:20 PM, Mike Gilbert wrote: >> On Sun, Apr 7, 2013 at 5:11 PM, Chí-Thanh Christopher Nguyễn >> wrote: >>> Hello All, >>> >>> After recent changes in dev-lang/v8 and related ebuilds, the pax-mark call >>> no >>> longer has a || di

Re: [gentoo-dev] Automagic pax-mark

2013-04-08 Thread Rafael Goncalves Martins
On Mon, Apr 8, 2013 at 9:29 AM, Chí-Thanh Christopher Nguyễn wrote: > Mike Gilbert schrieb: >>> After recent changes in dev-lang/v8 and related ebuilds, the pax-mark call >>> no >>> longer has a || die. This means that the resulting binaries may have PT_PAX, >>> XATTR_PAX, both or neither marking

Re: [gentoo-dev] Automagic pax-mark

2013-04-08 Thread Chí-Thanh Christopher Nguyễn
Mike Gilbert schrieb: >> After recent changes in dev-lang/v8 and related ebuilds, the pax-mark call no >> longer has a || die. This means that the resulting binaries may have PT_PAX, >> XATTR_PAX, both or neither markings depending on kernel configuration, >> filesystem and mount options. >> >> I'd

Re: [gentoo-dev] Automagic pax-mark

2013-04-07 Thread Anthony G. Basile
On 04/07/2013 07:01 PM, Tom Wijsman wrote: On Sun, 07 Apr 2013 18:08:41 -0400 "Anthony G. Basile" wrote: I can try to get the user.pax on tmpfs patch into the Linux tree. At the very least, we can get it into gentoo-sources. What does this patch do? I haven't been following this discussion; a

Re: [gentoo-dev] Automagic pax-mark

2013-04-07 Thread Tom Wijsman
On Sun, 07 Apr 2013 18:08:41 -0400 "Anthony G. Basile" wrote: > I can try to get the user.pax on tmpfs patch into the Linux tree. At > the very least, we can get it into gentoo-sources. What does this patch do? I haven't been following this discussion; also, please CC ker...@gentoo.org when you

Re: [gentoo-dev] Automagic pax-mark

2013-04-07 Thread Anthony G. Basile
On 04/07/2013 05:20 PM, Mike Gilbert wrote: On Sun, Apr 7, 2013 at 5:11 PM, Chí-Thanh Christopher Nguyễn wrote: Hello All, After recent changes in dev-lang/v8 and related ebuilds, the pax-mark call no longer has a || die. This means that the resulting binaries may have PT_PAX, XATTR_PAX, both

Re: [gentoo-dev] Automagic pax-mark

2013-04-07 Thread Mike Gilbert
On Sun, Apr 7, 2013 at 5:11 PM, Chí-Thanh Christopher Nguyễn wrote: > Hello All, > > After recent changes in dev-lang/v8 and related ebuilds, the pax-mark call no > longer has a || die. This means that the resulting binaries may have PT_PAX, > XATTR_PAX, both or neither markings depending on kerne

[gentoo-dev] Automagic pax-mark

2013-04-07 Thread Chí-Thanh Christopher Nguyễn
Hello All, After recent changes in dev-lang/v8 and related ebuilds, the pax-mark call no longer has a || die. This means that the resulting binaries may have PT_PAX, XATTR_PAX, both or neither markings depending on kernel configuration, filesystem and mount options. I'd say that is not a good thi