[gentoo-dev] pkg_setup() and sandbox

[Georgi Georgiev]

Should pkg_setup() be run in a sandbox?

The current reasons to not have it sandboxed include:

- ebuilds need to add users
- ... (any others?)

So, would it make sense to sandbox pkg_setup() and only unmask the
passwd files needed for adding users? enewuser & friends can be made to
unmask those locations on demand, thus making the transition painless.

What other reasons are there for having pkg_setup() outside the sandbox?

As to why I'm asking -- this[1] abolition of an ebuild made its way on
the qmail mailing list and I was shocked that it does not die in the
first place.

Disclamer: Exercise great caution with the following link. Only read one
line at a time or you may be overwhelmed. Take a break every 10 lines or
so. Have a sedative handy.

[1] http://briandowney.net/?page=linux&section=gentooebuilds&ebuild=netqmail

-- 
/\   Georgi Georgiev   /\ To think contrary to one's era is heroism.   /\
\/    [EMAIL PROTECTED]    \/ But to speak against it is madness. --       \/
/\  +81(90)2877-8845   /\ Eugene Ionesco                               /\

pgpb0bRUuKW7T.pgp
Description: PGP signature