On Thu, 25 May 2006 21:57:30 -0400
Alec Warner <[EMAIL PROTECTED]> wrote:

> +.B sesandbox
> +Enable sandbox\-ing with selinux support, such that the selinux
> contexts are set properly. 
> +.TP

The description isn't quite accurate -- what it does is to spawn
sandboxed processes in a more restricted domain to provide some
kernel-level confinement of the build process. SELinux contexts will
get set properly regardless of whether sesandbox is enabled or not.
-- 
gentoo-portage-dev@gentoo.org mailing list

Reply via email to