Re: [gentoo-hardened] XATTR_PAX migration

[Tóth Attila]

2013.Szeptember 10.(K) 16:00 időpontban Anthony G. Basile ezt írta:
> On 09/10/2013 08:52 AM, "Tóth Attila" wrote:
>> 2013.Szeptember 10.(K) 13:50 időpontban Anthony G. Basile ezt írta:
>>> On 09/09/2013 06:06 PM, Alex Efros wrote:
>>>> Hi!
>>>>
>>>> On Mon, Sep 09, 2013 at 05:26:57PM -0400, Anthony G. Basile wrote:
>>>>> install is being wrapped by install.py.  As a result every instance
>>>>> of
>>>>> install mean invoking the python interpreter.  With lots and lots of
>>>>> installs, this adds up to being very slow.
>>>>
>>>> Why not just add a patch for `install`? Even if you will just exec
>>>> `paxctl-ng` at end of `install` it still will be much faster.
>>>>
>>>
>>> We decided that changing the default behavior of install was not a good
>>> idea.  See [1]
>>>
>>> There are places where we have to do pax markings before install. We
>>> could do them twice, that was the other option.  When I wrote the
>>> python
>>> wrapper, I had no idea it was going to be this slow.
>>>
>>> Ref
>>> [1] https://bugs.gentoo.org/show_bug.cgi?id=470660
>>>
>>> --
>>> Anthony G. Basile, Ph. D.
>>> Chair of Information Technology
>>> D'Youville College
>>> Buffalo, NY 14201
>>> [phone]
>>>
>>
>> Dear blueness: what is the future perspective?
>>
>
> Well right now, I don't have a hard plan.  I'll need to speak with Zac
> Medico how he might want to replace that wrapper.  It should be possible
> to just drop in a compiled version of install with our patch that
> preserves *just* user.pax.flags.

Sounds great. I'll surely test it as soon as it appears in the hardened
overlay or such.

Thx: Dw.
-- 
dr Tóth Attila, Radiológus, 06-20-825-8057
Attila Toth MD, Radiologist, [phone]