From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gentoo-dev+bounces-59571-garchives=archives.gentoo.org@lists.gentoo.org>
Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80])
	by finch.gentoo.org (Postfix) with ESMTP id 898461381F3
	for <garchives@archives.gentoo.org>; Mon,  8 Apr 2013 17:14:41 +0000 (UTC)
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
	by pigeon.gentoo.org (Postfix) with SMTP id DDE88E0A04;
	Mon,  8 Apr 2013 17:14:37 +0000 (UTC)
Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183])
	(using TLSv1 with cipher AECDH-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by pigeon.gentoo.org (Postfix) with ESMTPS id E9014E09EF
	for <gentoo-dev@lists.gentoo.org>; Mon,  8 Apr 2013 17:14:36 +0000 (UTC)
Received: from mail-ie0-x232.google.com (mail-ie0-x232.google.com [IPv6:2607:f8b0:4001:c03::232])
	(using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
	(No client certificate requested)
	(Authenticated sender: floppym)
	by smtp.gentoo.org (Postfix) with ESMTPSA id BE86E33DCC5
	for <gentoo-dev@lists.gentoo.org>; Mon,  8 Apr 2013 17:14:35 +0000 (UTC)
Received: by mail-ie0-f178.google.com with SMTP id bn7so7165187ieb.37
        for <gentoo-dev@lists.gentoo.org>; Mon, 08 Apr 2013 10:14:34 -0700 (PDT)
Precedence: bulk
List-Post: <mailto:gentoo-dev@lists.gentoo.org>
List-Help: <mailto:gentoo-dev+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-dev+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-dev+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-dev.gentoo.org>
X-BeenThere: gentoo-dev@lists.gentoo.org
Reply-to: gentoo-dev@lists.gentoo.org
MIME-Version: 1.0
X-Received: by 10.50.44.106 with SMTP id d10mr7501819igm.26.1365441274292;
 Mon, 08 Apr 2013 10:14:34 -0700 (PDT)
Received: by 10.64.102.66 with HTTP; Mon, 8 Apr 2013 10:14:34 -0700 (PDT)
In-Reply-To: <5162D274.9090807@gentoo.org>
References: <5161E0F1.1000308@gentoo.org>
	<CAJ0EP41W_q23opezX8PmPdySgHH43isMRFWKKoGAaTZ4ZW5x_Q@mail.gmail.com>
	<5161EE69.9050206@gentoo.org>
	<5162D274.9090807@gentoo.org>
Date: Mon, 8 Apr 2013 13:14:34 -0400
Message-ID: <CAJ0EP41yWy-Pbt4ZwW-O67v9UfO=xgycU=czw6r2ibaHbMADKA@mail.gmail.com>
Subject: Re: [gentoo-dev] Automagic pax-mark
From: Mike Gilbert <floppym@gentoo.org>
To: Gentoo Dev <gentoo-dev@lists.gentoo.org>
Content-Type: text/plain; charset=UTF-8
X-Archives-Salt: d4fecef6-dac8-480c-8f06-e6a428cefa87
X-Archives-Hash: 8385e58dd9abbd11c00b314dd54395bb

On Mon, Apr 8, 2013 at 10:21 AM, Michael Haubenwallner <haubi@gentoo.org> wrote:
> Actually I've wondered if it would make more sense to default to PAX_MARKINGS="none",
> and have the hardened profiles (or the user in make.conf) set a different value.

That makes some sense to me. The downside is that that switching from
vanilla gentoo to hardened would require a rebuild of all packages
that need pax markings.

> But thinking again now, I'm wondering if pax-mark should be done in pkg_preinst rather
> than src_install - for the sake of binary merges when the build machine has different
> PAX_MARKINGS than the target machine (no idea if that ever would happen).

This also makes sense to me.