Re: Introducing the hardening-wrapper package (was: Exim4 problems)

[Samuel Thibault]

Svante Signell, le Tue 31 May 2011 10:20:26 +0200, a écrit :
> On Tue, 2011-05-31 at 09:35 +0200, Samuel Thibault wrote:
> > Svante Signell, le Tue 31 May 2011 09:21:56 +0200, a écrit :
> > > > Did you try to build in a chroot?
> > > 
> > > No, how to do that? Is it sufficient to install sbuild (and wanna-build,
> > > buildd)
> > 
> > You don't need sbuild. You just need another partition, run debootstrap
> > in it, and chroot into it. You'll need to firmlink servers/socket/{1,2}
> > from the root to get named pipes and network sockets working.
> 
> Do I really need a separate partition? According to the debootstrap
> manpage it does not seem to be required.

In the GNU/Hurd case, yes.

> Anyway, if using a separate partition, how large should that partition
> be, is 10GB enough?

Largely. 1GB would be enough too.

> There is also a package called pbuilder automating all this. Usable?

No, since a separate partition is required.

Samuel