Gentoo Archives: gentoo-portage-dev

From: Alec Warner <warnera6@×××××××.edu>
To: gentoo-portage-dev@l.g.o
Subject: [gentoo-portage-dev] Environment Whitelisting
Date: Sun, 21 Aug 2005 20:26:08
Message-Id: 4308E349.8010107@egr.msu.edu
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA1
3
4 Was talking with Brian about the build environment and how settings were
5 to be passed into the build environment.
6
7 Essentially three scenarios were presented.
8
9 1) The full environment is passed to the build environment. This was
10 generally agreed upon to be bad since there are environmental things
11 that can cause build problems.
12
13 2) The full environment is parsed via a blacklist to strip out
14 environment settings that are known to be bad for building packages.
15 This leads to a clean* build environment. However, maintaining the
16 blacklist can be a challenge if it grows in size.
17
18 (*) clean, meaining all the bad things we know about are not in the
19 build environment. This does not account for the bad things we do NOT
20 know about.
21
22 3) The full environment is parsed via a whitelist to get a list of
23 environment settings that are known to be good for building packages.
24 This leads to a clean build environment, as only whitelisted environment
25 settings are passed in. However, the whitelist will probably be worse
26 to maintain than a blacklist.
27
28 Both 2) and 3) above have issues where some build variables are bad for
29 ebuild X but not ebuild Y. I am unsure how exactly to cover any kind of
30 situation like that ( and I don't have an example from the tree, save
31 perhaps LANG=weird-language ).
32
33 To me 1) is unacceptable and 3) is the best option. Feel free to shoot
34 these down as you see fit ;)
35
36 - -Alec Warner (antarus)
37 -----BEGIN PGP SIGNATURE-----
38 Version: GnuPG v1.4.1 (GNU/Linux)
39 Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
40
41 iQIVAwUBQwjjSGzglR5RwbyYAQIAeQ//cGJLLF0BKATfaUjAikiKgJ8miHeMBw9p
42 UMN+xmB3N48Qj8bEC9qhhisSVZGFUVBuucWX5ObKGOG9vQx2Ry/i3NJG0W124s77
43 f9lLYOcPBOXV6Wo9F4WQ20SZt+0ktoCe2aphC/aVVyiyQhagtqjud50caBcUVfGq
44 OlpZLLze9LW5SeqRC5N826kZJh63wP/4YOqqRo5DKjIJb/ahFUT0IZqBVWs2OADD
45 548yRsBsW4G3n8+JxANbGVeFwPACiWc+DFUBU651X36D01+D/M/a5Cp1f+J+Y2IW
46 AouTkuzxmu8FgiK1+xNN3hOPM+PiqHfcWT7gBa+5Xb+h19mwgJuQAAD7stQNKxZk
47 GorIA6GubOx+6qQd4nbzdR7bm2/LUhpC2IOQlIwmMwh2RPYnVp7QRILvsFRGPELV
48 Fb0/enfwD2EzhwJJKkx5LFOdTFA71RP7WICNUJTbntRWp89aspgPg+gB/6gq9s0t
49 Hf8oRsHR1Xox0NH09oJTTToxakgjdnSrjUAG42ZqDLRvP1x8FmL6BWbYZ9CIXBaJ
50 r7wxYCwW6pQGcuCAtZCnc9UEIHXTZuy4btxnrfxAwtT10dJub2BrBo4TSZgRQyKu
51 ++N3nxVb0m8qOgRJYsv4hBb0ybJgrDiqCmvfSgSEJAO1+wKPnR8YhEqsOkNBul4Y
52 sLBvLF9lJl8=
53 =AXLx
54 -----END PGP SIGNATURE-----
55 --
56 gentoo-portage-dev@g.o mailing list

Replies

Subject Author
Re: [gentoo-portage-dev] Environment Whitelisting Zac Medico <zmedico@×××××.com>
[gentoo-portage-dev] Re: Environment Whitelisting Drake Wyrm <wyrm@×××××.com>
Re: [gentoo-portage-dev] Environment Whitelisting Marius Mauch <genone@g.o>