Re: [gentoo-dev] RFC: virtual/dbus

2022-09-08 Thread Sam James


> On 7 Sep 2022, at 17:29, Mike Gilbert  wrote:
> 
> On Wed, Sep 7, 2022 at 11:56 AM Marek Szuba  wrote:
>> 
>> Dear everyone,
>> 
>> I wonder if we should create a virtual package to allow our users - or
>> at least those who run systemd anyway - to choose between sys-apps/dbus
>> and sys-apps/dbus-broken as D-Bus implementation for their systems. The
>> usual "Gentoo is about choice" thing aside, there is now at least one,
>> security-related, problem with the former which can be worked around by
>> switching to the latter: https://github.com/systemd/systemd/issues/22737
>> 
>> WDYT?
> 
> A virtual seems a bit pointless for the following reasons:
> 
> 1. dbus and dbus-broker can be (and usually are) installed simultaneously.
> 2. dbus-broker[launcher] utilizes config files installed by dbus, and
> actually RDEPENDs on sys-apps/dbus for that reason.
> 3. Many client applications depend on sys-apps/dbus for libdbus.

A virtual _might_ have value to add to @system for desktop profiles,
but I'm not sure. The other criticisms remain, of course.

> 
> If you can think of some way to encourage users to install/enable
> dbus-broker, that seems like a good idea to me.
> 

Documentation on the wiki (either on the dbus page, or a new dbus-broker)
explaining how to migrate & its advantages would be most welcome.


signature.asc
Description: Message signed with OpenPGP


[gentoo-dev] RFC: virtual/dbus

2022-09-07 Thread Marek Szuba

Dear everyone,

I wonder if we should create a virtual package to allow our users - or 
at least those who run systemd anyway - to choose between sys-apps/dbus 
and sys-apps/dbus-broken as D-Bus implementation for their systems. The 
usual "Gentoo is about choice" thing aside, there is now at least one, 
security-related, problem with the former which can be worked around by 
switching to the latter: https://github.com/systemd/systemd/issues/22737


WDYT?

PS. Cc'ing maintainers of both packages to see what they might have got 
to say about this.


--
Marecki


OpenPGP_signature
Description: OpenPGP digital signature