[gentoo-user] Sandbox vs userpriv

[gentoo-user] Sandbox vs userpriv

[Nilesh Govindrajan]

[-- Attachment #1: Type: text/plain, Size: 93 bytes --]

What's the disadvantage of compiling in sandbox instead of compiling
directly with userpriv?

[-- Attachment #2: Type: text/html, Size: 105 bytes --]

[gentoo-user] Re: Sandbox vs userpriv

[Nilesh Govindrajan]

[-- Attachment #1: Type: text/plain, Size: 185 bytes --]

On Aug 13, 2012 2:19 PM, "Nilesh Govindrajan" <contact@nileshgr.com> wrote:
>
> What's the disadvantage of compiling in sandbox instead of compiling
directly with userpriv?

*advantage

[-- Attachment #2: Type: text/html, Size: 279 bytes --]

Re: [gentoo-user] Re: Sandbox vs userpriv

[Hinnerk van Bruinehsen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 13.08.2012 10:50, Nilesh Govindrajan wrote:
> On Aug 13, 2012 2:19 PM, "Nilesh Govindrajan"
> <contact@nileshgr.com> wrote:
>> 
>> What's the disadvantage of compiling in sandbox instead of
>> compiling
> directly with userpriv?
> 
> *advantage
> 

I think the advantage is that you can compile as root with some kind
of protection. ;)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJQKMcgAAoJEJwwOFaNFkYco+8H/RpzlTRsA2pcBobv/L81B0J3
UQN8pDOwjaafm0rrjOFFrYG3XPDRML9dv0STULCqcpbtLFjdbmWmbLzn0DCDopbG
mu2yd+ZCac36KKtGJfBLJjKiJz3NwuAMkfpGcUqFK0EaeHkmYLYVi7yWEL9C9j+H
IATc2BJ4HFDgK5VJEYwFK+AlPwqr/Rkepsy38wId8hjKeQCCpsJ/C32we162aiuH
dP2OyfPrrXf0Jkb+9gTuXOlhPCgIlE7eDUfD/S77ysdGG2j6JzDzyPlk2BNz2P+S
5OQTqx2a/FvEU+JtyOEoSM1Ng4fvODfq+26G+T7Mn1mPvND6Eb0U4d+KjHJVuME=
=vAHc
-----END PGP SIGNATURE-----

Re: [gentoo-user] Re: Sandbox vs userpriv

[Dale]

[-- Attachment #1: Type: text/plain, Size: 472 bytes --]

Nilesh Govindrajan wrote:
>
> On Aug 13, 2012 2:19 PM, "Nilesh Govindrajan" <contact@nileshgr.com
> <mailto:contact@nileshgr.com>> wrote:
> >
> > What's the disadvantage of compiling in sandbox instead of compiling
> directly with userpriv?
>
> *advantage
>


I found this:

http://devmanual.gentoo.org/general-concepts/sandbox/

That help any? 

Dale

:-)  :-) 

-- 
I am only responsible for what I said ... Not for what you understood or how you interpreted my words!


[-- Attachment #2: Type: text/html, Size: 1162 bytes --]

Re: [gentoo-user] Re: Sandbox vs userpriv

[Michael Mol]

[-- Attachment #1: Type: text/plain, Size: 866 bytes --]

On Mon, Aug 13, 2012 at 4:50 AM, Nilesh Govindrajan <contact@nileshgr.com>wrote:

> On Aug 13, 2012 2:19 PM, "Nilesh Govindrajan" <contact@nileshgr.com>
> wrote:
> >
> > What's the disadvantage of compiling in sandbox instead of compiling
> directly with userpriv?
>
> *advantage
>

If you do things like parallel builds (-j applied to emerge, not just
make), a sandbox can help keep the build environment consistent throughout
a build. (And if that's not a feature that's currently in sandbox, it's one
where an extension of which is being discussed in -dev right now, and being
worked on by a few people.)

The other thing sandbox gives you is some protection from badly-written
build systems, such as ones which go out and modify files outside of
explicitly-allowed paths and the like, or try installing files before 'make
install'...that kind of thing.

-- 
:wq

[-- Attachment #2: Type: text/html, Size: 1314 bytes --]

Re: [gentoo-user] Re: Sandbox vs userpriv

[Nilesh Govindrajan]

On Mon 13 Aug 2012 05:37:27 PM IST, Michael Mol wrote:
> On Mon, Aug 13, 2012 at 4:50 AM, Nilesh Govindrajan
> <contact@nileshgr.com <mailto:contact@nileshgr.com>> wrote:
>
>     On Aug 13, 2012 2:19 PM, "Nilesh Govindrajan"
>     <contact@nileshgr.com <mailto:contact@nileshgr.com>> wrote:
>     >
>     > What's the disadvantage of compiling in sandbox instead of
>     compiling directly with userpriv?
>
>     *advantage
>
>
> If you do things like parallel builds (-j applied to emerge, not just
> make), a sandbox can help keep the build environment consistent
> throughout a build. (And if that's not a feature that's currently in
> sandbox, it's one where an extension of which is being discussed in
> -dev right now, and being worked on by a few people.)
>
> The other thing sandbox gives you is some protection from
> badly-written build systems, such as ones which go out and modify
> files outside of explicitly-allowed paths and the like, or try
> installing files before 'make install'...that kind of thing.
>
> --
> :wq

I see. Actually I came up with this question because dev-lang/php was 
emitting some errors when I was building with sandbox enabled (I never 
disabled it actually). I guess I'll enable it again and disable when 
some ebuilds trouble.

--
Nilesh Govindrajan
http://nileshgr.com