Re: various pax-marking problems
"Anthony G. Basile" <[email protected]>
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Message-ID | <[email protected]> |
On 07/08/2013 09:09 AM, Alex Efros wrote: > Hi! > > On Mon, Jul 08, 2013 at 09:03:43AM -0400, Anthony G. Basile wrote: >> In your make.conf set PAX_MARKINGS="PT" in the former case or >> PAX_MARKINGS="XT". It is safe to set both: PAX_MARKINGS="PT XT" > > What is default if it's not set? I didn't remember mentioning it in "PT to > XT migration howto"… > Currently we had to drop back to PAX_MARKINGS="PT" in the eclass because non-hardened users were complaining about warnings that xattrs were not being set. I'll have to revisit this issue with a totally vanilla system when all the relevant pieces go stable, particularly portage. At that point I'll see if PAX_MARKINGS="PT XT" throws warnings and if it does just silence them. -- Anthony G. Basile, Ph. D. Chair of Information Technology D'Youville College Buffalo, NY 14201 (716) 829-8197