Re: XATTR_PAX migration
Michael Orlitzky <michael-h8kpsi0JglZWk0Htik3J/[email protected]>
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Message-ID | <[email protected]> |
On 09/09/2013 01:47 PM, Anthony G. Basile wrote: > > That was my mistake. When I dropped XT I forgot to update the comment. > We tried XT right off the bat, but discovered a couple of problems: 1) > install doesn't preserve xattr. we have a solution but it isn't working > that well, and 2) there were lots of warning thrown for non hardened > users which annoyed them. So we dropped to just PT. > What do you recommend then? Stick with PT_PAX until the install thing is fixed, and then add PAX_MARKINGS=XT to make.conf?