Re: [gentoo-dev] Automagic pax-mark

2013-04-09 Thread Anthony G. Basile
On 04/08/2013 01:14 PM, Mike Gilbert wrote: On Mon, Apr 8, 2013 at 10:21 AM, Michael Haubenwallner ha...@gentoo.org wrote: Actually I've wondered if it would make more sense to default to PAX_MARKINGS=none, and have the hardened profiles (or the user in make.conf) set a different value. That

Re: [gentoo-dev] Automagic pax-mark

2013-04-08 Thread Chí-Thanh Christopher Nguyễn
Mike Gilbert schrieb: After recent changes in dev-lang/v8 and related ebuilds, the pax-mark call no longer has a || die. This means that the resulting binaries may have PT_PAX, XATTR_PAX, both or neither markings depending on kernel configuration, filesystem and mount options. I'd say that

Re: [gentoo-dev] Automagic pax-mark

2013-04-08 Thread Rafael Goncalves Martins
On Mon, Apr 8, 2013 at 9:29 AM, Chí-Thanh Christopher Nguyễn chith...@gentoo.org wrote: Mike Gilbert schrieb: After recent changes in dev-lang/v8 and related ebuilds, the pax-mark call no longer has a || die. This means that the resulting binaries may have PT_PAX, XATTR_PAX, both or neither

Re: [gentoo-dev] Automagic pax-mark

2013-04-08 Thread Michael Haubenwallner
On 04/08/2013 12:08 AM, Anthony G. Basile wrote: On 04/07/2013 05:20 PM, Mike Gilbert wrote: On Sun, Apr 7, 2013 at 5:11 PM, Chí-Thanh Christopher Nguyễn chith...@gentoo.org wrote: Hello All, After recent changes in dev-lang/v8 and related ebuilds, the pax-mark call no longer has a ||

Re: [gentoo-dev] Automagic pax-mark

2013-04-08 Thread Mike Gilbert
On Mon, Apr 8, 2013 at 10:21 AM, Michael Haubenwallner ha...@gentoo.org wrote: Actually I've wondered if it would make more sense to default to PAX_MARKINGS=none, and have the hardened profiles (or the user in make.conf) set a different value. That makes some sense to me. The downside is

[gentoo-dev] Automagic pax-mark

2013-04-07 Thread Chí-Thanh Christopher Nguyễn
Hello All, After recent changes in dev-lang/v8 and related ebuilds, the pax-mark call no longer has a || die. This means that the resulting binaries may have PT_PAX, XATTR_PAX, both or neither markings depending on kernel configuration, filesystem and mount options. I'd say that is not a good

Re: [gentoo-dev] Automagic pax-mark

2013-04-07 Thread Mike Gilbert
On Sun, Apr 7, 2013 at 5:11 PM, Chí-Thanh Christopher Nguyễn chith...@gentoo.org wrote: Hello All, After recent changes in dev-lang/v8 and related ebuilds, the pax-mark call no longer has a || die. This means that the resulting binaries may have PT_PAX, XATTR_PAX, both or neither markings

Re: [gentoo-dev] Automagic pax-mark

2013-04-07 Thread Anthony G. Basile
On 04/07/2013 05:20 PM, Mike Gilbert wrote: On Sun, Apr 7, 2013 at 5:11 PM, Chí-Thanh Christopher Nguyễn chith...@gentoo.org wrote: Hello All, After recent changes in dev-lang/v8 and related ebuilds, the pax-mark call no longer has a || die. This means that the resulting binaries may have

Re: [gentoo-dev] Automagic pax-mark

2013-04-07 Thread Tom Wijsman
On Sun, 07 Apr 2013 18:08:41 -0400 Anthony G. Basile bluen...@gentoo.org wrote: I can try to get the user.pax on tmpfs patch into the Linux tree. At the very least, we can get it into gentoo-sources. What does this patch do? I haven't been following this discussion; also, please CC

Re: [gentoo-dev] Automagic pax-mark

2013-04-07 Thread Anthony G. Basile
On 04/07/2013 07:01 PM, Tom Wijsman wrote: On Sun, 07 Apr 2013 18:08:41 -0400 Anthony G. Basile bluen...@gentoo.org wrote: I can try to get the user.pax on tmpfs patch into the Linux tree. At the very least, we can get it into gentoo-sources. What does this patch do? I haven't been following