[gentoo-dev] chroot USE flag?

[Brandon Hale <brandon@comp-u-tek.com>]

I propose a new USE flag for a few key services that would install the
package in a chroot "out of the box." This idea was inspired by a
conversation between Greg Fitzgerald (gregf) and myself on applying
ideas from OpenBSD to Gentoo. Another source of inspiration is the
excelent pkg_config code in the latest bind9 ebuilds. I further
discussed this idea w/ memebers of the gentoo-hardened team and further
crystalized the workings of such a flag. I would propose that the ebuild
include two conditional install proceedures keyed on the chroot USE
flag. The only possible problem I forsee is building devices inside the
sandbox, which could be accomplished in pkg_postinstall as a last
resort. I would be happy for any feedback or further development of this
idea.

Brandon Hale



--
gentoo-dev@gentoo.org mailing list