On 01/03/2013 10:31 PM, Michael Orlitzky wrote:
> On 01/03/2013 08:45 PM, Anthony G. Basile wrote:
>> Can people please comment on the PT_PAX to XATTR_PAX migration guide
>> before I put it up on line
>>
>> http://dev.gentoo.org/~blueness/zzz/pax-migrate-xattr.xml
>>
>
> Everything looks good to me except the overlay instructions. The
> suggestion to copy the overlay eclass on top of the portage one is a
> little dubious. Can you sync afterwards?
I agree. I'll drop that suggestion. Its what I did for quick testing
but not appropriate for long term. It would not survive a sync.
>
> You also mention adding the overlay and "make sure you set up your
> repos.conf." I'm just not sure what you mean there, I've never used
> repos.conf for anything. What am I supposed to do with it?
In /etc/portage/repos.conf you should add
[DEFAULT]
class-overrides = hardened-dev
This causes the eclass from the overlay to override the default eclass
from the portage tree. man portage and you'll see. I'll add a blurb
about it in the howto.
>
> Unrelated: would it make sense at some point to set USE=xattr in the
> profile if this is the way forward?
Good point. I'll look into making it part of the profiles for all
hardened systems.
>
> Oh and I think USE="ptpax xtpax" is redundant now, but you probably know
> that.
It is and it isn't. I have IUSE="+ptpax +xtpax" in the ebuild. What I
wanted to say here was "don't turn off either because we'll need both
for the migration". I think I'll take out the USE="ptpax xtpax" and
just and an English sentence warning not to turn of either.
Thanks for the feedback!
--
Anthony G. Basile, Ph.D.
Gentoo Linux Developer [Hardened]
E-Mail : blueness@gentoo.org
GnuPG FP : 8040 5A4D 8709 21B1 1A88 33CE 979C AF40 D045 5535
GnuPG ID : D0455535