Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 587410

Summary: sys-apps/elfix Consider installing paxctl-ng to /bin or /sbin instead
Product: Gentoo Linux Reporter: Jaak Ristioja <jaak>
Component: HardenedAssignee: The Gentoo Linux Hardened Team <hardened>
Status: CONFIRMED ---    
Severity: enhancement    
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Jaak Ristioja 2016-06-28 13:00:07 UTC
I think it should not be installed under /usr/bin or /usr/sbin. According to the Filesystem Hierarchy Standard, /usr may be mounted on some different partition and hence not be accessible in single user mode. Therefore having paxctl-ng under /usr might become a hindrance in some critical cases.

Additionally, as a developer, I often find myself using paxctl-ng to mark binaries compiled as a regular user. Hence it were comfortable if the utility were located in some directory present in $PATH (/sbin and /usr/sbin are not).
Comment 1 Anthony Basile gentoo-dev 2016-06-28 13:14:45 UTC
(In reply to Jaak Ristioja from comment #0)
> I think it should not be installed under /usr/bin or /usr/sbin. According to
> the Filesystem Hierarchy Standard, /usr may be mounted on some different
> partition and hence not be accessible in single user mode. Therefore having
> paxctl-ng under /usr might become a hindrance in some critical cases.
> 
> Additionally, as a developer, I often find myself using paxctl-ng to mark
> binaries compiled as a regular user. Hence it were comfortable if the
> utility were located in some directory present in $PATH (/sbin and /usr/sbin
> are not).

its should go into /sbin and i'll add a sym link for backwards compat.