Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2013-07-21 Thread Pacho Ramos
El mar, 03-07-2012 a las 10:02 +0200, Michał Górny escribió: On Mon, 02 Jul 2012 13:45:26 -0700 Zac Medico zmed...@gentoo.org wrote: On 07/02/2012 01:36 PM, viv...@gmail.com wrote: Il 02/07/2012 22:01, Zac Medico ha scritto: On 07/02/2012 12:48 PM, Pacho Ramos wrote: El lun,

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2013-07-21 Thread Zac Medico
On 07/21/2013 03:53 AM, Pacho Ramos wrote: El mar, 03-07-2012 a las 10:02 +0200, Michał Górny escribió: On Mon, 02 Jul 2012 13:45:26 -0700 Zac Medico zmed...@gentoo.org wrote: On 07/02/2012 01:36 PM, viv...@gmail.com wrote: Il 02/07/2012 22:01, Zac Medico ha scritto: On 07/02/2012 12:48 PM,

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2013-07-21 Thread Alex Xu
On 21/07/13 02:25 PM, Zac Medico wrote: On 07/21/2013 03:53 AM, Pacho Ramos wrote: El mar, 03-07-2012 a las 10:02 +0200, Michał Górny escribió: On Mon, 02 Jul 2012 13:45:26 -0700 Zac Medico zmed...@gentoo.org wrote: On 07/02/2012 01:36 PM, viv...@gmail.com wrote: Il 02/07/2012 22:01, Zac

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2013-07-21 Thread Mike Gilbert
On Sun, Jul 21, 2013 at 2:30 PM, Alex Xu alex_y...@yahoo.ca wrote: userpriv and usersandbox don't work in pypy because os.setgroups isn't implemented there. I had a go at it a while back, but the complete and utter lack of any documentation whatsoever... kinda threw me off. I don't think we

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-07-03 Thread Pacho Ramos
El lun, 02-07-2012 a las 13:45 -0700, Zac Medico escribió: On 07/02/2012 01:36 PM, viv...@gmail.com wrote: Il 02/07/2012 22:01, Zac Medico ha scritto: On 07/02/2012 12:48 PM, Pacho Ramos wrote: El lun, 28-05-2012 a las 14:34 -0700, Zac Medico escribió: Hi, In case you aren't familiar

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-07-03 Thread Michał Górny
On Mon, 02 Jul 2012 13:45:26 -0700 Zac Medico zmed...@gentoo.org wrote: On 07/02/2012 01:36 PM, viv...@gmail.com wrote: Il 02/07/2012 22:01, Zac Medico ha scritto: On 07/02/2012 12:48 PM, Pacho Ramos wrote: El lun, 28-05-2012 a las 14:34 -0700, Zac Medico escribió: Hi, In case you

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-07-03 Thread viv...@gmail.com
Il 02/07/2012 22:45, Zac Medico ha scritto: On 07/02/2012 01:36 PM, viv...@gmail.com wrote: Il 02/07/2012 22:01, Zac Medico ha scritto: On 07/02/2012 12:48 PM, Pacho Ramos wrote: El lun, 28-05-2012 a las 14:34 -0700, Zac Medico escribió: Hi, In case you aren't familiar with

Re: Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-07-03 Thread Andreas K. Huettel
I guess something like this might work in pkg_postinst of the portage ebuild: find $DISTDIR -maxdepth 1 -type d -uid 0 | xargs chown -R portage:portage I would only trigger something like this once, when upgrading from a version that doesn't have userpriv enabled by default. If you

Re: Re: Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-07-03 Thread Andreas K. Huettel
I guess something like this might work in pkg_postinst of the portage ebuild: find $DISTDIR -maxdepth 1 -type d -uid 0 | xargs chown -R portage:portage I would only trigger something like this once, when upgrading from a version that doesn't have userpriv enabled by default.

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-07-02 Thread Pacho Ramos
El lun, 28-05-2012 a las 14:34 -0700, Zac Medico escribió: Hi, In case you aren't familiar with FEATURES=userpriv, here's the description from the make.conf(5) man page: Allow portage to drop root privileges and compile packages as portage:portage without a sandbox (unless usersandbox

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-07-02 Thread Zac Medico
On 07/02/2012 12:48 PM, Pacho Ramos wrote: El lun, 28-05-2012 a las 14:34 -0700, Zac Medico escribió: Hi, In case you aren't familiar with FEATURES=userpriv, here's the description from the make.conf(5) man page: Allow portage to drop root privileges and compile packages as

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-07-02 Thread viv...@gmail.com
Il 02/07/2012 22:01, Zac Medico ha scritto: On 07/02/2012 12:48 PM, Pacho Ramos wrote: El lun, 28-05-2012 a las 14:34 -0700, Zac Medico escribió: Hi, In case you aren't familiar with FEATURES=userpriv, here's the description from the make.conf(5) man page: Allow portage to drop root

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-07-02 Thread Zac Medico
On 07/02/2012 01:36 PM, viv...@gmail.com wrote: Il 02/07/2012 22:01, Zac Medico ha scritto: On 07/02/2012 12:48 PM, Pacho Ramos wrote: El lun, 28-05-2012 a las 14:34 -0700, Zac Medico escribió: Hi, In case you aren't familiar with FEATURES=userpriv, here's the description from the

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-29 Thread Agostino Sarubbo
On Monday 28 May 2012 14:34:22 Zac Medico wrote: Hi, In case you aren't familiar with FEATURES=userpriv, here's the description from the make.conf(5) man page: Allow portage to drop root privileges and compile packages as portage:portage without a sandbox (unless usersandbox is also

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-29 Thread Richard Yao
On 05/29/12 04:43, Agostino Sarubbo wrote: I'm using usersync since a long time, how about add it too? This is also a good idea. I second it. signature.asc Description: OpenPGP digital signature

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-29 Thread Zac Medico
On 05/29/2012 01:43 AM, Agostino Sarubbo wrote: On Monday 28 May 2012 14:34:22 Zac Medico wrote: Hi, In case you aren't familiar with FEATURES=userpriv, here's the description from the make.conf(5) man page: Allow portage to drop root privileges and compile packages as portage:portage

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-29 Thread Michał Górny
On Tue, 29 May 2012 02:05:08 -0700 Zac Medico zmed...@gentoo.org wrote: On 05/29/2012 01:43 AM, Agostino Sarubbo wrote: On Monday 28 May 2012 14:34:22 Zac Medico wrote: Hi, In case you aren't familiar with FEATURES=userpriv, here's the description from the make.conf(5) man page:

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-29 Thread Rich Freeman
On Tue, May 29, 2012 at 10:11 AM, Michał Górny mgo...@gentoo.org wrote: Wouldn't that break users who sync using a regular user? And then break again, and again every time portage is merged? Yup, unless that regular user is the same one used for userpriv (if I'm correctly understanding the

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-29 Thread hasufell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/29/2012 04:50 PM, Rich Freeman wrote: On Tue, May 29, 2012 at 10:11 AM, Michał Górny mgo...@gentoo.org wrote: Wouldn't that break users who sync using a regular user? And then break again, and again every time portage is merged? Yup,

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-29 Thread Rich Freeman
On Tue, May 29, 2012 at 10:57 AM, hasufell hasuf...@gentoo.org wrote: I am against too many defaults. It's documented and people can activate it. I'm already annoyed by pre-set stuff like cups in releases/make.defaults. While universal agreement is a bit much to hope for, I just wanted to

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-29 Thread hasufell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/29/2012 05:23 PM, Rich Freeman wrote: On Tue, May 29, 2012 at 10:57 AM, hasufell hasuf...@gentoo.org wrote: I am against too many defaults. It's documented and people can activate it. I'm already annoyed by pre-set stuff like cups in

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-29 Thread Jeff Horelick
On 29 May 2012 12:27, hasufell hasuf...@gentoo.org wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/29/2012 05:23 PM, Rich Freeman wrote: On Tue, May 29, 2012 at 10:57 AM, hasufell hasuf...@gentoo.org wrote: I am against too many defaults. It's documented and people can activate

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-29 Thread Ralph Sennhauser
On Tue, 29 May 2012 18:27:51 +0200 hasufell hasuf...@gentoo.org wrote: Well then let my clarify: I'm against too many pre-set (meaning activated) features/useflags. Think of it as nouserpriv feature. ;) Either way, to disable userpriv is kind of working against QA as a package really should be

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-29 Thread Michael Orlitzky
How about introducing e.g. FEATURES=nouserpriv, and make the current userpriv behavior the default? The migration might be a bit more confusing, but it allows portage to gradually adopt better stuff without having FEATURES=everything under the sun.

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-29 Thread Mike Gilbert
On Tue, May 29, 2012 at 3:46 PM, Michael Orlitzky mich...@orlitzky.com wrote: How about introducing e.g. FEATURES=nouserpriv, and make the current userpriv behavior the default? Portage currently defaults to running the build process as root. The entire point of this thread is that Zac wants

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-29 Thread William Hubbs
On Tue, May 29, 2012 at 03:46:39PM -0400, Michael Orlitzky wrote: How about introducing e.g. FEATURES=nouserpriv, and make the current userpriv behavior the default? No. Please stay away from things like this. It is reverse logic and can be very confusing. Just adding -userpriv to your features

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-29 Thread Michael Orlitzky
On 05/29/12 15:58, Mike Gilbert wrote: On Tue, May 29, 2012 at 3:46 PM, Michael Orlitzky mich...@orlitzky.com wrote: How about introducing e.g. FEATURES=nouserpriv, and make the current userpriv behavior the default? Portage currently defaults to running the build process as root. The

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-29 Thread Zac Medico
On 05/29/2012 07:11 AM, Michał Górny wrote: On Tue, 29 May 2012 02:05:08 -0700 Zac Medico zmed...@gentoo.org wrote: On 05/29/2012 01:43 AM, Agostino Sarubbo wrote: I'm using usersync since a long time, how about add it too? Yeah, I think that would be a good default too. I guess the

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-29 Thread Hilco Wijbenga
On 29 May 2012 12:46, Michael Orlitzky mich...@orlitzky.com wrote: How about introducing e.g. FEATURES=nouserpriv, and make the current userpriv behavior the default? rootpriv instead of nouserpriv? The migration might be a bit more confusing, but it allows portage to gradually adopt better

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-29 Thread Zac Medico
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/29/2012 07:57 AM, hasufell wrote: I am against too many defaults. It's documented and people can activate it. I'm already annoyed by pre-set stuff like cups in releases/make.defaults. In the case of userpriv and usersync, I expect that we

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-29 Thread Zac Medico
On 05/29/2012 02:47 PM, Hilco Wijbenga wrote: On 29 May 2012 12:46, Michael Orlitzky mich...@orlitzky.com wrote: How about introducing e.g. FEATURES=nouserpriv, and make the current userpriv behavior the default? rootpriv instead of nouserpriv? What's the use case for this? Can't we just

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-29 Thread Richard Yao
On 05/29/12 18:11, Zac Medico wrote: On 05/29/2012 02:47 PM, Hilco Wijbenga wrote: On 29 May 2012 12:46, Michael Orlitzky mich...@orlitzky.com wrote: How about introducing e.g. FEATURES=nouserpriv, and make the current userpriv behavior the default? rootpriv instead of nouserpriv? What's

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-29 Thread Zac Medico
On 05/29/2012 04:22 PM, Richard Yao wrote: On 05/29/12 18:11, Zac Medico wrote: On 05/29/2012 02:47 PM, Hilco Wijbenga wrote: On 29 May 2012 12:46, Michael Orlitzky mich...@orlitzky.com wrote: How about introducing e.g. FEATURES=nouserpriv, and make the current userpriv behavior the default?

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-29 Thread Hilco Wijbenga
On 29 May 2012 15:11, Zac Medico zmed...@gentoo.org wrote: On 05/29/2012 02:47 PM, Hilco Wijbenga wrote: On 29 May 2012 12:46, Michael Orlitzky mich...@orlitzky.com wrote: How about introducing e.g. FEATURES=nouserpriv, and make the current userpriv behavior the default? rootpriv instead of

[gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-28 Thread Zac Medico
Hi, In case you aren't familiar with FEATURES=userpriv, here's the description from the make.conf(5) man page: Allow portage to drop root privileges and compile packages as portage:portage without a sandbox (unless usersandbox is also used). The rationale for having the separate usersandbox

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-28 Thread Andreas K. Huettel
Am Montag 28 Mai 2012, 23:34:22 schrieb Zac Medico: I've been using FEATURES=userpriv usersandbox for years, and I don't remember experiencing any problems because of it, so I think that it would be reasonable to have it enabled by default. Objections? No objections. Excellent idea. --

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-28 Thread Davide Pesavento
On Mon, May 28, 2012 at 11:34 PM, Zac Medico zmed...@gentoo.org wrote: Hi, In case you aren't familiar with FEATURES=userpriv, here's the description from the make.conf(5) man page:  Allow portage to drop root privileges and compile packages as  portage:portage without a sandbox (unless

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-28 Thread Michael Weber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 05/28/2012 11:34 PM, Zac Medico wrote: I've been using FEATURES=userpriv usersandbox for years, and I don't remember experiencing any problems because of it, so I think that it would be reasonable to have it enabled by default. Objections?

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-28 Thread Maxim Kammerer
On Tue, May 29, 2012 at 12:34 AM, Zac Medico zmed...@gentoo.org wrote: Note that ebuilds can set RESTRICT=userpriv if they require superuser privileges during any of the src_* phases that userpriv affects. Current list of packages in portage using userpriv restriction: app-laptop/tp_smapi

Re: [gentoo-dev] RFC: Enable FEATURES=userpriv usersandbox by default?

2012-05-28 Thread Rich Freeman
On Mon, May 28, 2012 at 9:09 PM, Maxim Kammerer m...@dee.su wrote: Ditto, ~2 years with regular full @world rebuild. Yup, been years since the last time I even saw a bug for this. Probably wouldn't hurt to announce in news if it will impact existing users. I doubt anybody would actually