Gentoo Archives: gentoo-commits

From: Fabian Groffen <grobian@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] proj/portage:prefix commit in: man/, pym/portage/package/ebuild/, pym/portage/
Date: Tue, 02 Oct 2012 11:59:46
Message-Id: 1349178943.d89a3f12837b9ba9b401b15d4da28b221c5268ec.grobian@gentoo
1 commit: d89a3f12837b9ba9b401b15d4da28b221c5268ec
2 Author: Fabian Groffen <grobian <AT> gentoo <DOT> org>
3 AuthorDate: Tue Oct 2 11:55:43 2012 +0000
4 Commit: Fabian Groffen <grobian <AT> gentoo <DOT> org>
5 CommitDate: Tue Oct 2 11:55:43 2012 +0000
6 URL: http://git.overlays.gentoo.org/gitweb/?p=proj/portage.git;a=commit;h=d89a3f12
7
8 backout fda43d31a566e72c03d264461e9ae07ed35077e5
9
10 We better always have logging, since if there are no violations (as
11 should be) there is no performance penalty or log messages at all.
12
13 ---
14 man/make.conf.5 | 6 ------
15 pym/portage/const.py | 5 ++---
16 pym/portage/package/ebuild/doebuild.py | 7 +------
17 3 files changed, 3 insertions(+), 15 deletions(-)
18
19 diff --git a/man/make.conf.5 b/man/make.conf.5
20 index 9c84819..70ac4d3 100644
21 --- a/man/make.conf.5
22 +++ b/man/make.conf.5
23 @@ -464,12 +464,6 @@ On Mac OS X platforms that have /usr/bin/sandbox-exec available (10.5
24 and later), this particular sandbox implementation is used instead of
25 sys-apps/sandbox.
26 .TP
27 -.B sandbox-debug
28 -Enable debug messages regarding sandboxing. This currently only has
29 -an effect on Mac OS X platforms where it enables logging of denied
30 -access into /var/log/system.log. Note that logging is extremely slow
31 -and will slow down the emerge process considerably.
32 -.TP
33 .B sesandbox
34 Enable SELinux sandbox\-ing. Do not toggle this \fBFEATURE\fR yourself.
35 .TP
36
37 diff --git a/pym/portage/const.py b/pym/portage/const.py
38 index b6b9493..74cda03 100644
39 --- a/pym/portage/const.py
40 +++ b/pym/portage/const.py
41 @@ -79,7 +79,7 @@ MACOSSANDBOX_PROFILE = '''(version 1)
42
43 (allow default)
44
45 -(deny file-write*@@LOGGING@@)
46 +(deny file-write* (with no-log))
47
48 (allow file-read* file-write*
49 (literal
50 @@ -101,7 +101,6 @@ MACOSSANDBOX_PROFILE = '''(version 1)
51 #"^(/private)?/var/run/syslog$"
52 )
53 )'''
54 -MACOSSANDBOX_NOLOG=" (with no-log)"
55
56 PORTAGE_GROUPNAME = portagegroup
57 PORTAGE_USERNAME = portageuser
58 @@ -138,7 +137,7 @@ SUPPORTED_FEATURES = frozenset([
59 "noauto", "noclean", "nodoc", "noinfo", "noman",
60 "nostrip", "notitles", "parallel-fetch", "parallel-install",
61 "prelink-checksums", "preserve-libs",
62 - "protect-owned", "python-trace", "sandbox", "sandbox-debug",
63 + "protect-owned", "python-trace", "sandbox",
64 "selinux", "sesandbox", "sfperms",
65 "sign", "skiprocheck", "split-elog", "split-log", "splitdebug",
66 "strict", "stricter", "suidctl", "test", "test-fail-continue",
67
68 diff --git a/pym/portage/package/ebuild/doebuild.py b/pym/portage/package/ebuild/doebuild.py
69 index 2db7900..1d0661e 100644
70 --- a/pym/portage/package/ebuild/doebuild.py
71 +++ b/pym/portage/package/ebuild/doebuild.py
72 @@ -39,7 +39,7 @@ from portage import auxdbkeys, bsd_chflags, \
73 _shell_quote, _unicode_decode, _unicode_encode
74 from portage.const import EBUILD_SH_ENV_FILE, EBUILD_SH_ENV_DIR, \
75 EBUILD_SH_BINARY, INVALID_ENV_FILE, MISC_SH_BINARY, \
76 - EPREFIX, MACOSSANDBOX_PROFILE, MACOSSANDBOX_NOLOG
77 + EPREFIX, MACOSSANDBOX_PROFILE
78 from portage.data import portage_gid, portage_uid, secpass, \
79 uid, userpriv_groups
80 from portage.dbapi.porttree import _parse_uri_map
81 @@ -1461,11 +1461,6 @@ def spawn(mystring, mysettings, debug=0, free=0, droppriv=0, sesandbox=0, fakero
82 sbprofile = sbprofile.replace("@@WRITEABLE_PREFIX@@", sbprefixpath)
83 sbprofile = sbprofile.replace("@@WRITEABLE_PREFIX_RE@@", sbprefixre)
84
85 - if "sandbox-debug" in features:
86 - sbprofile = sbprofile.replace("@@LOGGING@@", "")
87 - else:
88 - sbprofile = sbprofile.replace("@@LOGGING@@", MACOSSANDBOX_NOLOG)
89 -
90 keywords["profile"] = sbprofile
91 spawn_func = portage.process.spawn_macossandbox
92 else: