On 6/24/2011 11:31 AM, Rostyslaw Lewyckyj wrote:
Lee wrote:
On 6/23/11, Justin Wood (Callek)<[email protected]> wrote:
I just wanted to make you all aware of a user-facing change I am being
forced to make for SeaMonkey 2.2
The idea is I'd either not make it, or risk keeping users exposed to
security risks far longer than should be the case.
Bug 666518 (PLEASE respond only here unless you are helping to FIX the
bug, advocacy will be fine in newsgroups/e-mail but not bug, thank you)
I will be removing the Windows Installers' ability to selectively
install extensions.
The codepaths that make the packaging of the installer able to support
this feature are very complex, and apparantly quite easy to break. While
removing the ability entirely (user facing anyway) is as simple as
dropping one variable in a makefile we control.
I do have ideas on how I can restore the basic functionality offered by
this installer feature, but it won't be until 2.5 at the earliest I can
get that working, and I have no guarantees as I have not looked deeply
into it yet. But I feel that my efforts to support a very complex system
here which HAVE to coexist with the Firefox systems and are only growing
in complexity as of late, are better spent supporting other aspects of
SeaMonkey and doing bug fixing/stability/releng on a wider scale.
After reading that bug, if you have any
comments/complaints/show-of-support or suggestions, please feel free to
state them here.
show-of-support: thank you for continuing to work on SeaMonkey
After looking at the bug report I'm no closer to understanding what
the security risks are, but if all it means is I have to do another
step or three to uninstall extensions that I don't want vs. some
security issue.. I think you made the right decision.
Thanks again,
Lee
As long as during the install process of 2.2, it is made _clear_
to the client which extensions are being automatically installed,
and there is a clear set of instructions for how the person can
uninstall each of these extensions, (in case they wish to do so).
During the install process of 2.2 you now get "all of SeaMonkey" whereas
unless you did "CUSTOM" before you got the same thing as we do now.
Supporting CUSTOM selection of the addons we ship with is not easily
possible anymore [without much more time investment than I feel
comfortable with], and is why I removed that, you are still able to
change all other custom options, and you are still able to
disable/uninstall extensions on a per-profile basis like in 2.1.
I have absolutely no plans to mention this explicitly in the installer,
as the basics are meant to "just work".
Of note is the Windows Installer is the ONLY shipping method that ever
allowed this optional feature. The Windows Zip, linux shippings, and the
mac .dmg did not have this potential.
--
~Justin Wood (Callek)
_______________________________________________
support-seamonkey mailing list
[email protected]
https://lists.mozilla.org/listinfo/support-seamonkey
