Gentoo Archives: gentoo-hardened

From: "Anthony G. Basile" <basile@××××××××××××××.edu>
To: gentoo-hardened@l.g.o, Zac Medico <zmedico@g.o>
Subject: Re: [gentoo-hardened] XATTR_PAX migration
Date: Tue, 10 Sep 2013 14:00:36
Message-Id: 522F260F.60703@opensource.dyc.edu
In Reply to: Re: [gentoo-hardened] XATTR_PAX migration by "Tóth Attila"
1 On 09/10/2013 08:52 AM, "Tóth Attila" wrote:
2 > 2013.Szeptember 10.(K) 13:50 időpontban Anthony G. Basile ezt írta:
3 >> On 09/09/2013 06:06 PM, Alex Efros wrote:
4 >>> Hi!
5 >>>
6 >>> On Mon, Sep 09, 2013 at 05:26:57PM -0400, Anthony G. Basile wrote:
7 >>>> install is being wrapped by install.py. As a result every instance of
8 >>>> install mean invoking the python interpreter. With lots and lots of
9 >>>> installs, this adds up to being very slow.
10 >>>
11 >>> Why not just add a patch for `install`? Even if you will just exec
12 >>> `paxctl-ng` at end of `install` it still will be much faster.
13 >>>
14 >>
15 >> We decided that changing the default behavior of install was not a good
16 >> idea. See [1]
17 >>
18 >> There are places where we have to do pax markings before install. We
19 >> could do them twice, that was the other option. When I wrote the python
20 >> wrapper, I had no idea it was going to be this slow.
21 >>
22 >> Ref
23 >> [1] https://bugs.gentoo.org/show_bug.cgi?id=470660
24 >>
25 >> --
26 >> Anthony G. Basile, Ph. D.
27 >> Chair of Information Technology
28 >> D'Youville College
29 >> Buffalo, NY 14201
30 >> (716) 829-8197
31 >>
32 >
33 > Dear blueness: what is the future perspective?
34 >
35
36 Well right now, I don't have a hard plan. I'll need to speak with Zac
37 Medico how he might want to replace that wrapper. It should be possible
38 to just drop in a compiled version of install with our patch that
39 preserves *just* user.pax.flags.
40
41 cc-ing Zac.
42
43 --
44 Anthony G. Basile, Ph. D.
45 Chair of Information Technology
46 D'Youville College
47 Buffalo, NY 14201
48 (716) 829-8197

Replies

Subject Author
Re: [gentoo-hardened] XATTR_PAX migration "Tóth Attila" <atoth@××××××××××.hu>