Gentoo Archives: gentoo-hardened

From: "Anthony G. Basile" <basile@××××××××××××××.edu>
To: gentoo-hardened@l.g.o, Zac Medico <zmedico@g.o>
Subject: Re: [gentoo-hardened] XATTR_PAX migration
Date: Tue, 10 Sep 2013 14:58:26
Message-Id: 522F3396.2070602@opensource.dyc.edu
In Reply to: Re: [gentoo-hardened] XATTR_PAX migration by "Tóth Attila"
1 On 09/10/2013 10:40 AM, "Tóth Attila" wrote:
2 > 2013.Szeptember 10.(K) 16:00 időpontban Anthony G. Basile ezt írta:
3 >> On 09/10/2013 08:52 AM, "Tóth Attila" wrote:
4 >>> 2013.Szeptember 10.(K) 13:50 időpontban Anthony G. Basile ezt írta:
5 >>>> On 09/09/2013 06:06 PM, Alex Efros wrote:
6 >>>>> Hi!
7 >>>>>
8 >>>>> On Mon, Sep 09, 2013 at 05:26:57PM -0400, Anthony G. Basile wrote:
9 >>>>>> install is being wrapped by install.py. As a result every instance
10 >>>>>> of
11 >>>>>> install mean invoking the python interpreter. With lots and lots of
12 >>>>>> installs, this adds up to being very slow.
13 >>>>>
14 >>>>> Why not just add a patch for `install`? Even if you will just exec
15 >>>>> `paxctl-ng` at end of `install` it still will be much faster.
16 >>>>>
17 >>>>
18 >>>> We decided that changing the default behavior of install was not a good
19 >>>> idea. See [1]
20 >>>>
21 >>>> There are places where we have to do pax markings before install. We
22 >>>> could do them twice, that was the other option. When I wrote the
23 >>>> python
24 >>>> wrapper, I had no idea it was going to be this slow.
25 >>>>
26 >>>> Ref
27 >>>> [1] https://bugs.gentoo.org/show_bug.cgi?id=470660
28 >>>>
29 >>>> --
30 >>>> Anthony G. Basile, Ph. D.
31 >>>> Chair of Information Technology
32 >>>> D'Youville College
33 >>>> Buffalo, NY 14201
34 >>>> (716) 829-8197
35 >>>>
36 >>>
37 >>> Dear blueness: what is the future perspective?
38 >>>
39 >>
40 >> Well right now, I don't have a hard plan. I'll need to speak with Zac
41 >> Medico how he might want to replace that wrapper. It should be possible
42 >> to just drop in a compiled version of install with our patch that
43 >> preserves *just* user.pax.flags.
44 >
45 > Sounds great. I'll surely test it as soon as it appears in the hardened
46 > overlay or such.
47 >
48 > Thx: Dw.
49 >
50
51 Actually that's probably the way to start this. I can put a version on
52 install on the hardened overlay name it something like install-portage.
53 It will *not* install over install, but install somewhere in the
54 portage path where we now have install.py. Then we can test my patch
55 against install.
56
57
58 --
59 Anthony G. Basile, Ph. D.
60 Chair of Information Technology
61 D'Youville College
62 Buffalo, NY 14201
63 (716) 829-8197