[gentoo-dev] New project: Gentoo Containers

2014-10-03 Thread Pavlos Ratis
Hello everyone, I would like to announce Gentoo Containers project[1]. Gentoo Containers project aims to provide automatically generated, minimal container images for a variety of formats (i.e. Docker[2], LMCTFY, LXC) and architectures using Gentoo. This allows users of the containers to have a

[gentoo-dev] [PATCH git-r3] Remove unnecessary HEAD-branch mapping code

2014-10-03 Thread Michał Górny
Remove the code responsible for recognizing which branch HEAD pointed out to since it was unsafe and unnecessarily complex. A proper match is not really necessary since all operations can be safely performed on an opaque 'HEAD' (or rather refs/git-r3/HEAD since fetching to HEAD directly breaks git

[gentoo-dev] Adding dev-lang/perl version to emerge --info

2014-10-03 Thread Andreas K. Huettel
Hi all, since Perl is a fairly central package and it's hard to debug problems without the exact version, the perl team would like to add dev-lang/perl to profiles/info_pkgs. This has the effect that the installed version of dev-lang/perl is by default included in every emerge --info

Re: [gentoo-dev] [PATCH git-r3] Remove unnecessary HEAD-branch mapping code

2014-10-03 Thread Peter Stuge
Michał Górny wrote: Remove the code responsible for recognizing which branch HEAD pointed out to since it was unsafe and unnecessarily complex. A proper match is not really necessary since all operations can be safely performed on an opaque 'HEAD' (or rather refs/git-r3/HEAD since fetching to

Re: [gentoo-dev] Adding dev-lang/perl version to emerge --info

2014-10-03 Thread Lars Wendler
On Sat, 4 Oct 2014 00:05:19 +0200 Andreas K. Huettel wrote: Hi all, since Perl is a fairly central package and it's hard to debug problems without the exact version, the perl team would like to add dev-lang/perl to profiles/info_pkgs. This has the effect that the installed version of

[gentoo-dev] Re: Re: Looking for alternative to RESTRICT=userpriv

2014-10-03 Thread Steven J. Long
On Fri, Oct 03, 2014 at 05:01:20AM +0200, Peter Stuge wrote: Steven J. Long wrote: On Tue, Sep 30, 2014 at 07:52:02AM -0700, Zac Medico wrote: The IPC implementation that I've suggested does not involve an SUID helper, so it is much more secure. Security would rely on the permission

Re: [gentoo-dev] Re: Re: Looking for alternative to RESTRICT=userpriv

2014-10-03 Thread Peter Stuge
Steven J. Long wrote: It's a lot more secure to have a single well-defined privileged trust anchor (the privileged process) with a well-defined protocol, than to have built-in privilege escalation which allows arbitrary actions. You appear to have missed the point of what it does. I