[gentoo-hardened] [Bug 134620] portage does not uninstall files that have been modified by paxctl or chpax

[Alex Efros]

Hi!

As kevquinn@g.o says, discussion about this bug probably should be
moved into hardened maillist:

Clear-Text: http://bugs.gentoo.org/show_bug.cgi?id=134620
Secure: https://bugs.gentoo.org/show_bug.cgi?id=134620

>>>

I think quick dirty fix can be as simple as:

---/etc/portage/bashrc:---
if [ "${EBUILD_PHASE}" == "postinst" ]; then
    /etc/set_pax
fi
---cut---

but I'm not sure about sandbox paths at this stage - which path should be
used in /etc/set_pax script:
    chpax -flags /usr/bin/SOMETHING
or
    chpax -flags ${SOME_PORTAGE_PREFIX_VAR}/usr/bin/SOMETHING

-- 
			WBR, Alex.
-- 
gentoo-hardened@g.o mailing list