Re: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-27 Thread Sid Spry
On Sat, Jun 27, 2020, at 5:43 AM, Rich Freeman wrote: > But, as I said, using more uids/gids in general means having more > separation. In general it only increases security, with the caveat > that it does potentially make auditing more complex. > Android's security model is uid per app. This

Re: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-27 Thread Rich Freeman
On Fri, Jun 26, 2020 at 10:18 PM james wrote: > > On 6/26/20 4:40 PM, Rich Freeman wrote: > > Removing the group doesn't actually make things more secure, because > > processes can use a gid even if it doesn't exist in /etc/groups. > > Effectively any POSIX system has every uid/gid available even

Re: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-26 Thread james
On 6/26/20 4:40 PM, Rich Freeman wrote: On Fri, Jun 26, 2020 at 4:03 PM james wrote: So can some of the smarter (gentoo) folks illuminate how to totally avoid groups and users, except for the minimum required, application specific? For example like serial line tools, or outline a set of

Re: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-26 Thread james
On 6/26/20 4:36 PM, Jack wrote: On 2020.06.26 16:03, james wrote: On 6/26/20 12:38 PM, Daniel Frey wrote: On 6/20/20 7:04 PM, William Kenworthy wrote: Thanks for filing the bug. Gah! I forgot about this! I filed a bug now, I hope I made it clear enough. Others can pipe in there with

Re: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-26 Thread Michael Orlitzky
On 2020-06-26 16:03, james wrote: > > BEFORE I contribute to this bug, The bug is already fixed in a newer version of portage =)

Re: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-26 Thread Rich Freeman
On Fri, Jun 26, 2020 at 4:03 PM james wrote: > > So can some of the smarter (gentoo) folks illuminate how to totally > avoid groups and users, except for the minimum required, application > specific? For example like serial line tools, or outline a set of > tweaks/setting to avoid these

Re: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-26 Thread Jack
On 2020.06.26 16:03, james wrote: On 6/26/20 12:38 PM, Daniel Frey wrote: On 6/20/20 7:04 PM, William Kenworthy wrote: Thanks for filing the bug. Gah! I forgot about this! I filed a bug now, I hope I made it clear enough. Others can pipe in there with comments if they like. I did

Re: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-26 Thread J. Roeleveld
On 26 June 2020 22:03:35 CEST, james wrote: >On 6/26/20 12:38 PM, Daniel Frey wrote: >> On 6/20/20 7:04 PM, William Kenworthy wrote: >>> Thanks for filing the bug. >> >> Gah! I forgot about this! >> >> I filed a bug now, I hope I made it clear enough. Others can pipe in >> there with comments

Re: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-26 Thread james
On 6/26/20 12:38 PM, Daniel Frey wrote: On 6/20/20 7:04 PM, William Kenworthy wrote: Thanks for filing the bug. Gah! I forgot about this! I filed a bug now, I hope I made it clear enough. Others can pipe in there with comments if they like. I did indicate the two potential proposals to

Re: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-26 Thread Daniel Frey
On 6/20/20 7:04 PM, William Kenworthy wrote: Thanks for filing the bug. Gah! I forgot about this! I filed a bug now, I hope I made it clear enough. Others can pipe in there with comments if they like. I did indicate the two potential proposals to correct the issue in the bug itself.

Re: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-21 Thread Rich Freeman
On Sat, Jun 20, 2020 at 10:04 PM William Kenworthy wrote: > > I cant see any > advantage to having multiple ebuilds for a package instead of using a > support framework to deal with it other than exposing multiple > opportunities for things to go wrong and make it harder to fix. This not > an

Re: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-20 Thread Daniel Frey
On 6/20/20 7:04 PM, William Kenworthy wrote: On 21/6/20 9:40 am, Daniel Frey wrote: On 6/20/20 6:21 PM, Rich Freeman wrote: On Sat, Jun 20, 2020 at 7:06 PM Daniel Frey wrote: Maybe when I have a moment I'll file a bug. Dan Thanks for filing the bug.  One of my pet peeves is that the

Re: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-20 Thread William Kenworthy
On 21/6/20 9:40 am, Daniel Frey wrote: > On 6/20/20 6:21 PM, Rich Freeman wrote: >> On Sat, Jun 20, 2020 at 7:06 PM Daniel Frey wrote: > > Maybe when I have a moment I'll file a bug. > > Dan > Thanks for filing the bug.  One of my pet peeves is that the last few years gentoo has been going down

Re: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-20 Thread Daniel Frey
On 6/20/20 6:21 PM, Rich Freeman wrote: On Sat, Jun 20, 2020 at 7:06 PM Daniel Frey wrote: You just pointed out the ambiguity. Emerging a package solely by its name worked 99.9% of the time before this change. Now new users get the fun of "Gee, which one is the one I actually want?" MythTV

Re: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-20 Thread Rich Freeman
On Sat, Jun 20, 2020 at 7:06 PM Daniel Frey wrote: > > You just pointed out the ambiguity. > > Emerging a package solely by its name worked 99.9% of the time before > this change. > > Now new users get the fun of "Gee, which one is the one I actually > want?" MythTV is a fairly clear one to

Re: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-20 Thread Paul Colquhoun
On Sunday, June 21, 2020 9:25:38 A.M. AEST Michael Orlitzky wrote: > On 2020-06-20 19:06, Daniel Frey wrote: > > I understand the dependencies problem that they were trying to solve, > > but I don't think the way it was implemented is a great one. > > This isn't a fundamental problem, it's your

Re: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-20 Thread Ralph Seichter
* Daniel Frey: > You just pointed out the ambiguity. I did no such thing, and there is no ambiguity. There is only the failure to specify a package's identifier ("atom"). > Emerging a package solely by its name worked 99.9% of the time before > this change. Perhaps for the packages you used; I

Re: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-20 Thread Michael Orlitzky
On 2020-06-20 19:06, Daniel Frey wrote: > > I understand the dependencies problem that they were trying to solve, > but I don't think the way it was implemented is a great one. > This isn't a fundamental problem, it's your package manager being dumb. File a bug; I can think of several

Re: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-20 Thread Daniel Frey
On 6/20/20 11:56 AM, Ralph Seichter wrote: * Daniel Frey: I went to emerge mythtv (I think) and now it says it's an ambiguous requests with *both* the group and user of the same name. You need to emerge "media-tv/mythtv", not just "mythtv". Nothing ambiguous about it. Further reading:

Re: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-20 Thread Ralph Seichter
* Daniel Frey: > I went to emerge mythtv (I think) and now it says it's an ambiguous > requests with *both* the group and user of the same name. You need to emerge "media-tv/mythtv", not just "mythtv". Nothing ambiguous about it. Further reading: https://www.gentoo.org/glep/glep-0081.html

Re: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-20 Thread Daniel Frey
On 6/19/20 9:04 PM, Walter Dnes wrote: Inquiring minds want to know. What exactly do they accomplish, besides cluttering up a database somewhere? It's not the cluttering of databases that bother me, it's the creation of many ambiguous requests now. I went to emerge mythtv (I think) and

RE: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-20 Thread Sean O'Myers
How do unsubscrip from all Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows 10 From: Walter Dnes<mailto:waltd...@waltdnes.org> Sent: Saturday, June 20, 2020 12:05 AM To: Gentoo Users List<mailto:gentoo-user@lists.gentoo.org> Subject: [gentoo-use

Re: [gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-20 Thread Dale
Walter Dnes wrote: > Inquiring minds want to know. What exactly do they accomplish, > besides cluttering up a database somewhere? > I found this: https://wiki.gentoo.org/wiki/Categories_acct-group_and_acct-user Dale :-)  :-) 

[gentoo-user] What's with all these "acct-group" ebuilds recently?

2020-06-19 Thread Walter Dnes
Inquiring minds want to know. What exactly do they accomplish, besides cluttering up a database somewhere? -- Walter Dnes I don't run "desktop environments"; I run useful applications