Re: [gentoo-alt] prefix-portage as root

[Michael Weiser]

On Wed, Feb 27, 2008 at 06:19:39PM -0600, Jeremy wrote:

>> I'm afraid not, because when installing as user michael dosbin can't
>> chown a file to root:amanda and chmod it 1750. I'd have to fix
>> permissions manually all the time.

> Support for serveice scripts or daemons that run as root are not currently
> supported. See bug #196294 if you would like to contribute. the baselayout
> version in prefix is really old and needs alot of work.

Since Mac OS X now consistently uses launchd, which is hugely different
from sysvinit/inetd, I expected and accepted that. I'm looking for
root-safeness.

I'll have a go this evening at:

- compiling as root and seeing if the resulting permissions are sensible
- compiling as root and looking into preventing files outside of
  $EPREFIX being overwritten

I realised that fink doesn't do the second part either, so it's not that
much of a showstopper if prefix-portage doesn't do it. But it'd sure be
nice to have.

I also realised that sandbox might be Linux-specific and therefore take
a lot of effort to port to Mac OS X. A first step might be for emerge to
refuse placing files outside of $EPREFIX. This wouldn't catch broken
make install scripts overwriting /bin/bash but would catch broken
ebuilds compiling for /bin/bash instead of $EPREFIX/bin/bash.

How might FEATURES="userpriv" help here, d'you think?
-- 
Micha
-- 
gentoo-alt@l.g.o mailing list