rofl0r

CONFIG_INTEL_IOMMU_DEFAULT_ON=y should make virtualization work much better. possible caveat: some older intel gpu might not like it. may need `intel_iommu=off` in kernel command.

busybox find is slow

2

TODO: implement fix suggested by dalias http://www.mail-archive.com/[email protected]/msg18342.html

https://github.com/mpv-player/mpv/issues/3652

gmp fails to detect 64bit ABI for some KVM cpu setup

6

reportedly, with a CPU emulated by qemu/kvm, gmp misdetects the host system as using 32bit abi when in fact it uses 64bit. ``` processor : 0 vendor_id : AuthenticAMD cpu...

evaluate libtool replacement

3

dolt: http://cgit.freedesktop.org/dolt http://dolt.freedesktop.org/ jlibtool https://github.com/alandekok/jlibtool/ mlibtool https://github.com/GregorR/mlibtool

https://trac.nginx.org/nginx/ticket/879 ``` OpenEmbedded has beaten nginx into cross compiling see http://cgit.openembedded.org/meta-openembedded/tree/meta-webserver/recipes-httpd/nginx ```

potential security issue with su impl

5

if this kernel bug is still not fixed, we may have a potential security issue when root starts programs with su -c as another user, and that user was compromised,...

(unless they're not using it, i.e. they use freestanding C++ such as libtorrent)

http://pkg.sabotage.tech/process.cgi?action=pkgoverview&pkg=gnupg ``` i486-linux-musl-gcc -L/home/sabotage/www/building/lib -isystem /home/sabotage/www/building/include -fdata-sections -ffunction-sections -Os -g0 -fno-unwind-tables -fno-asynchronous-unwind-tables -Wa,--noexecstack -mtune=generic -D_GNU_SOURCE -Wall -Wno-pointer-sign -s -Wl,--gc-sections -Wl,-z,relro,-z,now -o mpicalc mpicalc.o ../cipher/libcipher.a ../mpi/libmpi.a ../util/libutil.a ../mpi/libmpi.a(mpi-add.o): In function `mpi_add':...

with super_chroot, kbd, gradm, and ping-perm packages fail

1

super_chroot was introduced in https://github.com/rofl0r/sabotage/commit/28f8fe96236122e8ec5dd2222410beb2b586d11d 1) kbd fails to use dumpkmap due to /dev/console permissions 2) gradm fails to mknod $(MKNOD) -m 0622 $(DESTDIR)/dev/grsec c 1 13 3) ping-perms fails...