Re: [gentoo-portage-dev] [PATCH 2/3] Support FEATURES=pid-sandbox

2018-11-18 Thread Michał Górny
On Sat, 2018-11-17 at 19:20 -0800, Zac Medico wrote: > On 11/14/18 12:02 AM, Michał Górny wrote: > > @@ -531,6 +543,15 @@ def _exec(binary, mycommand, opt_name, fd_pipes, env, > > gid, groups, uid, umask, > > > >

Re: [gentoo-portage-dev] [PATCH 2/3] Support FEATURES=pid-sandbox

2018-11-17 Thread Zac Medico
On 11/14/18 12:02 AM, Michał Górny wrote: > @@ -531,6 +543,15 @@ def _exec(binary, mycommand, opt_name, fd_pipes, env, > gid, groups, uid, umask, > > errno.errorcode.get(ctypes.get_errno(), '?')), >

[gentoo-portage-dev] [PATCH 2/3] Support FEATURES=pid-sandbox

2018-11-14 Thread Michał Górny
Supporting using PID namespace in order to isolate the ebuild processes from host system, and make it possible to kill them all easily (similarly to cgroups but easier to use). Bug: https://bugs.gentoo.org/659582 Signed-off-by: Michał Górny --- lib/portage/const.py | 1 +