[gobolinux-devel] Re: encrypted $home with pam_encfs - report

[Carlo Calica]

On 12/20/05, Hisham Muhammad <hisham.hm at gmail.com> wrote:
> >
> > Is it possible to include the unionfs sandbox into that list (not
> > necessary as your task). I tried to compile evolution and it wont start as
> > some paths are not set. This should also benefit from this sandbox. A
> > temporary fix would be to make a meta recipe for Gnome and Compile the
> > entire Gnome package.
>
> Sure, but I don't want big semantic changes for 013 (ie, just use it
> to compile the 'parent packages' to search lib/* stuff in /S/L/L, not
> the more radical behavior changes discussed in the list yet). The
> unionfs sandbox is indeed 'not my department', there might still be
> some more stuff to do there (does it already move files dropped in
> /System into the app's prefix?).
>

That's "my department".  Right now it needs better error handling if
unionfs is not available.  Then I'd like a Scripts release for greater
testing.  UnionSandbox would only be used if the env var
"UNIONSANDBOX=true" so non-testers wouldn't notice anything different.
 Other open issues; need rbind like behavior.  Currently, unionfs
doesn't handle submounts (ie /Users).  I also want UnionSandbox to map
one dir to another.  For instance, /P/Foo/Setting --->
/P/Foo/1.0/Resources/Defaults/Settings.  Both are fairly trivial.

WRT moving /System into app's prefix.  Not yet but is trivial.  The
bigger job is changing Compile to use the new prefix.  Should we
create a new Recipe variable to activate this?

--
Carlo J. Calica