Re: various pax-marking problems

"Anthony G. Basile" <[email protected]>
Newsgroups gmane.linux.gentoo.hardened
Message-ID <[email protected]>
On 07/08/2013 09:09 AM, Alex Efros wrote:
> Hi!
>
> On Mon, Jul 08, 2013 at 09:03:43AM -0400, Anthony G. Basile wrote:
>> In your make.conf set PAX_MARKINGS="PT" in the former case or
>> PAX_MARKINGS="XT".  It is safe to set both: PAX_MARKINGS="PT XT"
>
> What is default if it's not set? I didn't remember mentioning it in "PT to
> XT migration howto"…
>

Currently we had to drop back to PAX_MARKINGS="PT" in the eclass because 
non-hardened users were complaining about warnings that xattrs were not 
being set.  I'll have to revisit this issue with a totally vanilla 
system when all the relevant pieces go stable, particularly portage.  At 
that point I'll see if PAX_MARKINGS="PT XT" throws warnings and if it 
does just silence them.

-- 
Anthony G. Basile, Ph. D.
Chair of Information Technology
D'Youville College
Buffalo, NY 14201
(716) 829-8197
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.