tb
9ee6e93f88
Enable builds with a dedicated user that cannot elevate privileges or write
to /usr/src or /usr/xenocara. Change /usr/{,x}obj to owner build:wobj with mode 770 and install the systemwide makefiles before starting a build. The root of the noperm fs containing DESTDIR should also be owned by build:wobj. Developers will need to add their users to group wobj to be able to write to /usr/{,x}obj/. "push forward" deraadt; testing, input & ok rpe |
8 years ago | |
---|---|---|
src | Enable builds with a dedicated user that cannot elevate privileges or write | 8 years ago |