Summary: | sys-apps/elfix Consider installing paxctl-ng to /bin or /sbin instead | ||
---|---|---|---|
Product: | Gentoo Linux | Reporter: | Jaak Ristioja <jaak> |
Component: | Hardened | Assignee: | The Gentoo Linux Hardened Team <hardened> |
Status: | CONFIRMED --- | ||
Severity: | enhancement | ||
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- |
Description
Jaak Ristioja
2016-06-28 13:00:07 UTC
(In reply to Jaak Ristioja from comment #0) > I think it should not be installed under /usr/bin or /usr/sbin. According to > the Filesystem Hierarchy Standard, /usr may be mounted on some different > partition and hence not be accessible in single user mode. Therefore having > paxctl-ng under /usr might become a hindrance in some critical cases. > > Additionally, as a developer, I often find myself using paxctl-ng to mark > binaries compiled as a regular user. Hence it were comfortable if the > utility were located in some directory present in $PATH (/sbin and /usr/sbin > are not). its should go into /sbin and i'll add a sym link for backwards compat. |