[gentoo-dev] Re: Bleeding edge hardened-sources: move PaX markings from ELF to Extended Attributes

2011-12-07 Thread Duncan
Mike Frysinger posted on Wed, 07 Dec 2011 20:58:15 -0500 as excerpted: > On Wednesday 07 December 2011 20:45:28 Duncan wrote: >> (1) Tail-packing. > > ext4 will be doing something similar: http://lwn.net/Articles/469805/ Thanks. I was ~3 months behind on LWN for awhile but am down to 4 weeks (

Re: [gentoo-dev] Re: {bi,multi}arch support for all x86/amd64/ppc/sparc systems

2011-12-07 Thread Mike Frysinger
On Wednesday 07 December 2011 21:12:37 Duncan wrote: > 1) Will this allow building grub from amd64/no-multilib, thus avoiding > having to have grub-static? That's the one thing I don't like about no- > multilib, having to use the pre-built grub-static. grub needs a C library to link `grub`. at t

Re: [gentoo-dev] Re: Bleeding edge hardened-sources: move PaX markings from ELF to Extended Attributes

2011-12-07 Thread Rich Freeman
On Wed, Dec 7, 2011 at 8:58 PM, Mike Frysinger wrote: > i have no sympathy for broken userspace code I define broken userspace code as anything that uses fsync except for transactional synchronization with external sources. My system is a bit beefier now, but one of the biggest performance issue

[gentoo-dev] Re: {bi,multi}arch support for all x86/amd64/ppc/sparc systems

2011-12-07 Thread Ryan Hill
On Thu, 8 Dec 2011 02:12:37 + (UTC) Duncan <1i5t5.dun...@cox.net> wrote: > 2) What about grub-2, and while we're on it, is a switch to that expected > any time soon, and/or is there a grub-static-2 in the wings? With the > grub-1 gpt patches (and hopefully btrfs support at some point) I'm n

[gentoo-dev] Re: {bi,multi}arch support for all x86/amd64/ppc/sparc systems

2011-12-07 Thread Duncan
Mike Frysinger posted on Wed, 07 Dec 2011 17:15:47 -0500 as excerpted: > the advantage is that it should obsolete the separate kgcc64 package for > most people. and i think it might help out with the multilib bootstrap > issue: you can't build multilib gcc without a multilib glibc, and can't > bu

Re: [gentoo-dev] Re: Bleeding edge hardened-sources: move PaX markings from ELF to Extended Attributes

2011-12-07 Thread Mike Frysinger
On Wednesday 07 December 2011 20:45:28 Duncan wrote: > (1) Tail-packing. ext4 will be doing something similar: http://lwn.net/Articles/469805/ although i don't find the overhead w/out tail packing to be a deal breaker > (3) The kernel folks don't screw with it as much as they do ext*. >

[gentoo-dev] Re: Bleeding edge hardened-sources: move PaX markings from ELF to Extended Attributes

2011-12-07 Thread Duncan
Anthony G. Basile posted on Wed, 07 Dec 2011 20:03:22 -0500 as excerpted: > I just tested with reiser3 and xattr works just fine. Just make sure > its enabled in the kernel and when you mount the fs use option > user_xattr for the user. namespace. Thanks. -- Duncan - List replies preferred.

[gentoo-dev] Re: Bleeding edge hardened-sources: move PaX markings from ELF to Extended Attributes

2011-12-07 Thread Duncan
Mike Frysinger posted on Wed, 07 Dec 2011 17:10:01 -0500 as excerpted: > while i've never tested xattrs on reiserfs (as alluded earlier, i've > dropped all my reiserfs usage in favor of ext4), but i know tmpfs works > (once you've enabled it in the kernel). Thanks. FWIW: (1) Tail-packing. (2)

Re: [gentoo-dev] Re: Bleeding edge hardened-sources: move PaX markings from ELF to Extended Attributes

2011-12-07 Thread Anthony G. Basile
On 12/07/2011 05:10 PM, Mike Frysinger wrote: > On Friday 02 December 2011 00:16:43 Duncan wrote: >> Longer: Does reiserfs (v3) support xattrs and thus, presumably caps and >> XT_PAX? Kernel reiserfs options suggest yes, but everything I've read >> elsewhere (including gentoo-dev caps project dis

[gentoo-dev] Re: Bleeding edge hardened-sources: move PaX markings from ELF to Extended Attributes

2011-12-07 Thread Duncan
Donnie Berkholz posted on Wed, 07 Dec 2011 15:47:01 -0500 as excerpted: > On 05:16 Fri 02 Dec , Duncan wrote: >> TL;DR: reiserfs (v3), for both caps and XT_PAX ?? > > A bit OT, but I find it incredibly ironic that perhaps the shortest > email you've ever written contained a TL;DR segment. =;

Re: [gentoo-dev] Adding a new selinux profile to default/linux/{amd64,x86}/10.0

2011-12-07 Thread Anthony G. Basile
On 12/07/2011 01:44 PM, Mike Frysinger wrote: > On Wednesday 07 December 2011 09:07:41 Anthony G. Basile wrote: >> Some time ago the selinux team restructured the selinux profiles and >> made a features/selinux which could be stacked on the hardened profiles >> for x86/amd64. At that time I also t

Re: [gentoo-dev] {bi,multi}arch support for all x86/amd64/ppc/sparc systems

2011-12-07 Thread Mike Frysinger
for those who cannot read minds: [1] https://bugs.gentoo.org/349405 -mike signature.asc Description: This is a digitally signed message part.

[gentoo-dev] {bi,multi}arch support for all x86/amd64/ppc/sparc systems

2011-12-07 Thread Mike Frysinger
there's a bug open atm requesting we add biarch support to our x86/amd64 compilers [1]. i'd like to take this further and do it for all ppc systems too (sparc has already done this). basically, this just affects the code that gcc can generate. it does not affect the libraries it includes. i

Re: [gentoo-dev] Bleeding edge hardened-sources: move PaX markings from ELF to Extended Attributes

2011-12-07 Thread Mike Frysinger
On Thursday 01 December 2011 11:08:37 Anthony G. Basile wrote: > 2) PT_PAX markings. This puts the flags in an ELF program header. On > Gentoo systems, all binaries are compiled with a PT_PAX header ready to > go because of a patch against binutils [2]. The problem is precompiled > binaries whic

Re: [gentoo-dev] Re: Bleeding edge hardened-sources: move PaX markings from ELF to Extended Attributes

2011-12-07 Thread Mike Frysinger
On Friday 02 December 2011 00:16:43 Duncan wrote: > Longer: Does reiserfs (v3) support xattrs and thus, presumably caps and > XT_PAX? Kernel reiserfs options suggest yes, but everything I've read > elsewhere (including gentoo-dev caps project discussions) seems to > indicate no. Is the "no" simp

Re: [gentoo-dev] Re: Bleeding edge hardened-sources: move PaX markings from ELF to Extended Attributes

2011-12-07 Thread Donnie Berkholz
On 05:16 Fri 02 Dec , Duncan wrote: > TL;DR: reiserfs (v3), for both caps and XT_PAX ?? A bit OT, but I find it incredibly ironic that perhaps the shortest email you've ever written contained a TL;DR segment. -- Thanks, Donnie Donnie Berkholz Council Member / Sr. Developer Gentoo Linux Blo

Re: [gentoo-dev] Adding a new selinux profile to default/linux/{amd64,x86}/10.0

2011-12-07 Thread Mike Frysinger
On Wednesday 07 December 2011 09:07:41 Anthony G. Basile wrote: > Some time ago the selinux team restructured the selinux profiles and > made a features/selinux which could be stacked on the hardened profiles > for x86/amd64. At that time I also tested and found that it stacked > fine on default/l

Re: [gentoo-dev] So now that we have --quiet-build as default, can we talk about a forced LC_ALL=C again?

2011-12-07 Thread Mike Frysinger
On Sunday 04 December 2011 06:58:06 Chí-Thanh Christopher Nguyễn wrote: > Mike Frysinger schrieb: > > and in reality, you're complaining only about LC_MESSAGES, not LC_ALL or > > any other locale category ... > > I too think it is sufficient to have > LC_MESSAGES=C > in the default make.conf (or s

Re: [gentoo-dev] So now that we have --quiet-build as default, can we talk about a forced LC_MESSAGES=C again?

2011-12-07 Thread Mike Frysinger
On Monday 05 December 2011 17:12:44 Chí-Thanh Christopher Nguyễn wrote: > Rich Freeman schrieb: > >> Can we just translate the error messages? > > > > That seems pretty impractical to me. Google Translate is about your > > only option here, > > Actually the translation already exists in /usr/sh

Re: [gentoo-dev] So now that we have --quiet-build as default, can we talk about a forced LC_ALL=C again?

2011-12-07 Thread Zac Medico
On 12/04/2011 03:58 AM, Chí-Thanh Christopher Nguyễn wrote: > Mike Frysinger schrieb: >> and in reality, you're complaining only about LC_MESSAGES, not LC_ALL or any >> other locale category ... > > I too think it is sufficient to have > LC_MESSAGES=C > in the default make.conf (or somewhere else

[gentoo-dev] Re: So now that we have --quiet-build as default, can we talk about a forced LC_MESSAGES=C again?

2011-12-07 Thread Jeroen Roovers
On Sun, 4 Dec 2011 02:14:15 -0600 Ryan Hill wrote: > > Many dozens of times, and a magnitude more dozens of times, > > So a comparatively small number then. You seem to argue that the time I spend on getting bug reports right isn't essential or beneficial to your bugzilla work. Let's actually a

[gentoo-dev] Adding a new selinux profile to default/linux/{amd64,x86}/10.0

2011-12-07 Thread Anthony G. Basile
Hi everyone, Some time ago the selinux team restructured the selinux profiles and made a features/selinux which could be stacked on the hardened profiles for x86/amd64. At that time I also tested and found that it stacked fine on default/linux/{amd64,x86}/10.0. I'm emailing the list to see if th

Re: [gentoo-dev] We need *you* for a USE="selinux" dependency

2011-12-07 Thread Fabio Erculiani
On Mon, Dec 5, 2011 at 4:04 AM, Brian Harring wrote: > [..] > > While it appears that way, it's not actually true; RDEPEND is what the > pkg requires to be able to be usable, not what is required to merge > it. > [...] Correct, I didn't want to be so picky on the explanation. -- Fabio Erculiani

Re: [gentoo-dev] We need *you* for a USE="selinux" dependency

2011-12-07 Thread Paweł Hajdan, Jr.
On 12/5/11 9:42 PM, Sven Vermeulen wrote: > For end users, this is much more enjoyable. If we load up all policies, then > any interaction with the SELinux policies will take some time. Also, all > policies in memory do take up some space. Finally, for development purposes, > this is very much enjo

[gentoo-dev] Re: sys-libs/ncurses: punted from system in profiles

2011-12-07 Thread Duncan
Zac Medico posted on Tue, 06 Dec 2011 21:53:20 -0800 as excerpted: > On 12/06/2011 09:21 PM, Duncan wrote: >> Zac Medico posted on Tue, 06 Dec 2011 15:45:26 -0800 as excerpted: >> >>> /var/lib/portage/world_sets (in stable portage, @selected currently >>> only pulls in atoms from /var/lib/portage