public inbox for gentoo-dev@lists.gentoo.org
 help / color / mirror / Atom feed
From: "Michał Górny" <mgorny@gentoo.org>
To: gentoo-dev@lists.gentoo.org
Subject: Re: [gentoo-dev] Vanilla sources
Date: Sat, 04 Jan 2020 19:41:21 +0100	[thread overview]
Message-ID: <4dbeee024f04b343fa370ae62453b4b5c727f42c.camel@gentoo.org> (raw)
In-Reply-To: <20200104083859.6e82fd4d@computer>

[-- Attachment #1: Type: text/plain, Size: 837 bytes --]

On Sat, 2020-01-04 at 08:38 +0100, Hanno Böck wrote:
> On Fri, 3 Jan 2020 15:48:54 +0100
> Toralf Förster <toralf@gentoo.org> wrote:
> 
> > #       Restrict potential illegal access via links
> > # 
> > fs.protected_hardlinks = 1
> > fs.protected_symlinks = 1 
> 
> Given the issues with openrc:
> Wouldn't it be a good idea to add these by default to Gentoo's
> sysctl.conf in baselayout?

Yes, we should.  This really sounds like some horror where developers
are hacking things around in sources instead of communicating with
people maintaining the component where a proper fix belongs.

> 
> As far as I understand this from the thread by now, these are set by
> default by Gentoo Sources. So we shouldn't really expect much breakage
> if we set them via sysctl.
> 
> 

-- 
Best regards,
Michał Górny


[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 618 bytes --]

  parent reply	other threads:[~2020-01-04 18:41 UTC|newest]

Thread overview: 50+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2019-12-28  7:09 [gentoo-dev] Keywordreqs and slacking arch teams Michał Górny
2019-12-28  9:27 ` Kent Fredric
2019-12-28  9:35   ` Fabian Groffen
2019-12-28 11:05     ` Kent Fredric
2019-12-28 11:14       ` Michael 'veremitz' Everitt
2019-12-28 11:27         ` Kent Fredric
2019-12-28 11:40           ` James Le Cuirot
2019-12-28 11:44             ` Kent Fredric
2019-12-28 11:32         ` Kent Fredric
2019-12-28 11:35           ` Michael 'veremitz' Everitt
2019-12-28 11:42             ` Kent Fredric
2019-12-28 18:05               ` Alec Warner
2019-12-29  2:19                 ` Aaron Bauman
2019-12-29  5:09                   ` Kent Fredric
2019-12-30  1:45         ` A Schenck
2020-01-02 20:32       ` Rolf Eike Beer
2020-01-02 23:25         ` Mike Pagano
2020-01-02 23:35           ` Rolf Eike Beer
2020-01-03  0:19             ` Michael 'veremitz' Everitt
2020-01-03  2:40             ` Aaron Bauman
2020-01-03 10:00               ` Rolf Eike Beer
2020-01-04 11:09                 ` Rolf Eike Beer
2020-01-04 11:25                   ` Michael 'veremitz' Everitt
2020-01-04 13:35                     ` Rolf Eike Beer
2020-01-03 14:37             ` [gentoo-dev] Vanilla sources Michael Orlitzky
2020-01-03 14:40               ` Toralf Förster
2020-01-03 14:41                 ` Michael Orlitzky
2020-01-03 14:46                   ` Rich Freeman
2020-01-03 14:48                     ` Toralf Förster
2020-01-03 22:32                       ` Michael 'veremitz' Everitt
2020-01-04  7:38                       ` Hanno Böck
2020-01-04 18:39                         ` William Hubbs
2020-01-04 18:41                         ` Michał Górny [this message]
2020-01-07  8:52                           ` Hanno Böck
2020-01-03 14:52                     ` Michael Orlitzky
2020-01-03 14:55                       ` Michael Orlitzky
2020-01-03 16:28                         ` Aaron Bauman
2020-01-04 11:01                           ` Rich Freeman
2020-01-04 11:42                             ` Roy Bamford
2020-01-04 12:54                               ` Rich Freeman
2020-01-04 13:08                                 ` Roy Bamford
2020-01-04 13:43                                   ` Thomas Deutschmann
2020-01-05 10:34                                     ` Roy Bamford
2020-01-04 20:13                                 ` Christopher Head
2020-01-04 20:39                                   ` Rich Freeman
2020-01-04 13:47                             ` Thomas Deutschmann
2020-01-04 18:41                         ` William Hubbs
2020-01-04 18:42                           ` Michał Górny
2020-01-04 19:13                           ` Rolf Eike Beer
2020-01-05 16:41                             ` Michael Orlitzky

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4dbeee024f04b343fa370ae62453b4b5c727f42c.camel@gentoo.org \
    --to=mgorny@gentoo.org \
    --cc=gentoo-dev@lists.gentoo.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox