Merged from trunk 8843:8867

   Merged from trunk 8843:8867

   | 8844    | In order to know exactly which atoms/sets should be added to |
   | zmedico | the world file, the depgraph performs set expansion later.   |
   |         | It will get confused about where the atoms came from if it's |
   |         | not allowed to expand them itself.                           |

   | 8845    | bootstrap.sh expects that the "system" set always exists, so |
   | zmedico | create it automatically if necessary.                        |

   | 8846    | Show ? if the installed package is missing a repository      |
   | zmedico | label. The stable version of portage creates these labels    |
   |         | now, so false positives won't be as common as they used to   |
   |         | be.                                                          |

   | 8848    | - repository configuration file and `emerge --sync           |
   | zmedico | [repo_set]... [repo]...` support for overlays and binhosts   |
   |         | (zmedico)                                                    |

   | 8849    | Make SetConfig.getSets() return a copy of the psets          |
   | zmedico | attribute instead of a direct reference. Fix the to stop     |
   |         | relying on having the direct reference.                      |

   | 8850    | Keep the RootConfig.sets attribute in sync with the          |
   | zmedico | SetConfig.                                                   |

   | 8851    | Fix broken timestamp logic in do_snapshot(). Thanks to Alon  |
   | zmedico | Bar-Lev <alonbl@gentoo.org> for this patch.                  |

   | 8852    | Remove redundant successful exit call from the "depend"      |
   | zmedico | phase and let it run to the bottom of ebuild.sh just like    |
   |         | the other phases.                                            |

   | 8853    | Bug #201506 - Make preprocess_ebuild_env() preserve          |
   | zmedico | SANDBOX_{DENY,PREDICT,READ,WRITE} between all phases, except |
   |         | when the environment comes directly from environment.bz2.    |

   | 8857    | Prevent the filter_opts local variable from leaking into the |
   | zmedico | environment in preprocess_ebuild_env().                      |

   | 8859    | Declare retval as a local variable.                          |
   | zmedico |                                                              |

   | 8861    | Bug #201513 - Fix typos for preserve-libs and                |
   | zmedico | PreservedLibraryConsumerSet. Thanks to Arfrever Frehtes      |
   |         | Taifersar Arahesis <Arfrever.FTA@GMail.Com> for this patch.  |

   | 8862    | Remove automatic "system" and "world" set creation since we  |
   | zmedico | can probably rely on having a complete config.               |

   | 8863    | Perform set argument validation in emerge_main() even for    |
   | zmedico | values actions that need to expland sets themselves.         |

   | 8864    | Add a TODO note about remaining work for bug #189417.        |
   | zmedico |                                                              |

   | 8865    | Bug #189417 - Explicitly whitelist any remaining variables   |
   | zmedico | that are allowed to leak into the ebuild environment. Also,  |
   |         | fix spawnebuild to properly filter the env when it spawns    |
   |         | misc-functions.sh after the install phase. There is still    |
   |         | some remaining leakage that seems to come from something in  |
   |         | the ebuild environment sourcing /etc/profile.                |

   | 8866    | Bug #189417 - Whitelist BASH_ENV since we need to have it    |
   | zmedico | set in order to prevent sandbox from causing env leakage by  |
   |         | sourcing /etc/profile via it's bashrc.                       |

   | 8867    | Bug #189417 - Comment on how the whitelist and BASH_ENV are  |
   | zmedico | used to prevent environment leakage.                         |

svn path=/main/branches/prefix/; revision=8869