Bug 431910

Summary:	xattr based pax needs documentation
Product:	Gentoo Linux	Reporter:	Anthony Basile <blueness>
Component:	Hardened	Assignee:	The Gentoo Linux Hardened Team <hardened>
Status:	RESOLVED FIXED
Severity:	normal	CC:	pageexec, roman.zilka
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	427888

Description Anthony Basile gentoo-dev

2012-08-18 21:56:34 UTC

This bug is here simply to remind me to get the documentationon done: 0) how to configure the kernel for xattr based pax, 1) how to migrate from PT_PAX to xattr pax, 2) how to maintain an xattr pax based pax system.  This issue rises to the level of a bug, and a blocker, because the unexpecting user who has a legacy system pulled out from underneath may find herself in trouble.  The change over should be accompanied by a news item.

Comment 1 Anthony Basile gentoo-dev

2012-12-29 23:35:13 UTC

There is now updated documentation at

    http://www.gentoo.org/proj/en/hardened/pax-quickstart.xml

Comment 2 Roman Žilka 2013-04-08 10:35:44 UTC

Please consider adding a line to make.conf(5) -> FEATURES -> xattr about the fact that when this feature is set, pax xattr markings happen, and vice versa. Idea spawned from discussion in bug 464932.

Comment 3 Roman Žilka 2013-04-11 16:01:51 UTC

(In reply to comment #2)
> Please consider adding a line to make.conf(5) -> FEATURES -> xattr about the
> fact that when this feature is set, pax xattr markings happen, and vice
> versa. Idea spawned from discussion in bug 464932.

OK, this fact turned out not to be a fact. Ignore the above comment, please.