1 |
On 05/29/2012 01:43 AM, Agostino Sarubbo wrote: |
2 |
> On Monday 28 May 2012 14:34:22 Zac Medico wrote: |
3 |
>> Hi, |
4 |
>> |
5 |
>> In case you aren't familiar with FEATURES=userpriv, here's the |
6 |
>> description from the make.conf(5) man page: |
7 |
>> |
8 |
>> Allow portage to drop root privileges and compile packages as |
9 |
>> portage:portage without a sandbox (unless usersandbox is also used). |
10 |
>> |
11 |
>> The rationale for having the separate "usersandbox" setting, to enable |
12 |
>> use of sys-apps/sandbox, is that people who enable userpriv sometimes |
13 |
>> prefer to have sandbox disabled in order to slightly improve |
14 |
>> performance. However, I would recommend to enable usersandbox by |
15 |
>> default, for the purpose of logging sandbox violations. |
16 |
>> |
17 |
>> Note that ebuilds can set RESTRICT="userpriv" if they require superuser |
18 |
>> privileges during any of the src_* phases that userpriv affects. |
19 |
>> |
20 |
>> I've been using FEATURES="userpriv usersandbox" for years, and I don't |
21 |
>> remember experiencing any problems because of it, so I think that it |
22 |
>> would be reasonable to have it enabled by default. Objections? |
23 |
> |
24 |
> I'm using usersync since a long time, how about add it too? |
25 |
|
26 |
Yeah, I think that would be a good default too. I guess the portage |
27 |
ebuild can do a recursive adjustment of $PORTDIR permissions in |
28 |
pkg_postinst, in order to solve bug #277970 [1]. |
29 |
|
30 |
For userpriv, it will have to do a similar recursive adjustment of |
31 |
permissions for directories inside $DISTDIR (such as git-src and |
32 |
svn-src), since userpriv causes src_unpack to run with lower privileges. |
33 |
|
34 |
[1] https://bugs.gentoo.org/show_bug.cgi?id=277970 |
35 |
-- |
36 |
Thanks, |
37 |
Zac |