Bug 543396 – sys-kernel/gentoo-sources: Add menu item for portage features

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Ryan Hill (RETIRED) 2015-03-15 09:59:33 UTC]

Created attachment 398962 [details, diff]
gentoo-sources-3.19.1-portage-Kconfig.patch

Re: RFC: enabling ipc-sandbox & network-sandbox by default, this patch adds an option to the Gentoo menu that enables CGROUPS for cgroup, IPC_NS for ipc-sandbox, and NET_NS for network-sandbox.

The first attachment is a patch is against 3.19.1 with 4567_distro-Gentoo-Kconfig.patch already applied.  The second is a new 4567_distro-Gentoo-Kconfig.patch.

[Comment 1 Ryan Hill (RETIRED) 2015-03-15 10:00:21 UTC]

Created attachment 398964 [details, diff]
4567_distro-Gentoo-Kconfig.patch

[Comment 2 Ryan Hill (RETIRED) 2015-03-15 10:10:56 UTC]

There's also TMPFS_XATTR for FEATURES="xattr" which is on by default.  Should we include that or is it mainly just for Hardened?

[Comment 3 Mike Pagano 2015-03-15 17:46:36 UTC]

Thanks for the patch. It is appreciated and makes my life easier.

I think TMPFS_XATTR is more for hardened.

[Comment 4 Zac Medico 2015-03-15 19:02:42 UTC]

FEATURES="xattr" is enabled by default only for hardened profiles, by this profile setting:

  hardened/linux/package.use.force:sys-apps/portage xattr

I think it's safe to assume that anyone who needs TMPFS_XATTR can enable it themselves.

[Comment 5 Mike Pagano 2015-03-20 00:18:44 UTC]

Released in 3.19.2.