On Wed, Sep 7, 2022 at 11:56 AM Marek Szuba <mare...@gentoo.org> wrote: > > Dear everyone, > > I wonder if we should create a virtual package to allow our users - or > at least those who run systemd anyway - to choose between sys-apps/dbus > and sys-apps/dbus-broken as D-Bus implementation for their systems. The > usual "Gentoo is about choice" thing aside, there is now at least one, > security-related, problem with the former which can be worked around by > switching to the latter: https://github.com/systemd/systemd/issues/22737 > > WDYT?
A virtual seems a bit pointless for the following reasons: 1. dbus and dbus-broker can be (and usually are) installed simultaneously. 2. dbus-broker[launcher] utilizes config files installed by dbus, and actually RDEPENDs on sys-apps/dbus for that reason. 3. Many client applications depend on sys-apps/dbus for libdbus. If you can think of some way to encourage users to install/enable dbus-broker, that seems like a good idea to me.
