Gentoo Archives: gentoo-dev

From: Brian Harring <ferringb@×××××.com>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] eclass for handling of file-based capabilities
Date: Sun, 06 Mar 2011 23:41:32
Message-Id: 20110306234017.GB9616@hrair
In Reply to: Re: [gentoo-dev] eclass for handling of file-based capabilities by Constanze Hausner
1 On Sun, Mar 06, 2011 at 05:34:29PM +0100, Constanze Hausner wrote:
2 > On 17:44 Sat 05 Mar , Ciaran McCreesh wrote:
3 > > * tar and xattrs is a massive problem, so how do binaries work?
4 > tar can be patched to support xattrs. If we want to use caps, we will
5 > have to apply those patches too. (iirc Fedora already uses such
6 > patches).
7
8 For binpkg, the approach I mentioned would remove the need to for tar
9 to support xattrs- the same mechanism for the PM to tweak the perms
10 would be usable. So no need for tar/bsdtar to restore xattrs- it's
11 undesirable anyways since as I mentioned, if the cap couldn't be
12 applied for whatever reason it would result in a chmod -s binary being
13 installed.
14
15 For src, I'd strongly be against restoration there. It just opens up
16 way too many surprises- a simple example is a tarball carrying the
17 immutable flag. Xattrs really should be specified by the ebuild (and
18 applied by the PM) instead- far more controlled namely.
19
20 ~harring