Re: [gentoo-hardened] XATTR_PAX migration

[Alex Efros]

Hi!

On Mon, Sep 09, 2013 at 05:26:57PM -0400, Anthony G. Basile wrote:
> You can use XT_PAX provided you're not running something like a
> tinderbox, ie doing massive amounts of ebuilds.  The problem is that
> install is being wrapped by install.py.  As a result every instance of
> install mean invoking the python interpreter.  With lots and lots of
> installs, this adds up to being very slow.

I think it may be possible to add very ease and effective optimization -
call install.py only for executable files and use /usr/bin/install for all
other files. This can be implemented in single line in
/usr/lib/portage/bin/ebuild-helpers/xattr/install. Also it may make sense
to rewrite /usr/lib/portage/bin/ebuild-helpers/xattr/install in C.

-- 
			WBR, Alex.