Re: Packages removed from frozen
Manoj Srivastava <srivasta@debian.org> writes:
> Craig> I think that removing packages for this would be ludicrous.
>
> Really? Difficult, maybe, politically hard, maybe. but
> ludicrous? That's very narrow minded of you.
No, ludicrous still. Not politically hard, politically impossible.
Not difficult, impossible. Ludicrous because it's like biting our
nose off to spite our face. There are so many circular dependencies
in the build process that taking out packages that depend on
themselves will accomplish nothing as far as making Debian buildable
from nothing but source. Ludicrous because it basically cuts out all
packages that are developed in a rather common pattern;
self-bootstrapping compilers and systems are considered elegant by
many, especially language designers.
Now, an exception list, or some other way to indicate which packages
require themselves is not ludicrous, and seems to fit right in with
what Build-Depends is supposed to do anyways.
> So how many packages are we talking about now? I still think
> that any package that requires a circular build depends should be
> in an excempted package list somewhere. In fact, it is so hard to
> track trojans (has everyone forgotten pike hack of the C compiler
> that inserted code in binary copies of itself and login to always
> allow him to login?), that Iwould like to see a list of these
> packages generated for teh Security FAQ.
Why another list when Build-Depends does this already?
Your security argument is a strawman. The source code is still there,
and the binaries are signed by a Debian maintainer. No more threat
than any other package in Debian. One could always reproduce the
bootstrapping from source. If you do feel compelled to pursue this, I
have no real problem with that, as it's your time and others that
would be wasted, and not mine. It might be interesting to see such a
list regardless of it's location anyways, to see how pervasive
self-bootstrapping is.
> So stay out of the discussion. Evil grin. And us others can
> have our way.
I'm not worried that this would ever be accepted, so except for
dogging your butt and making life hell for you I'll drop out! No,
just kidding Manoj, I have no intention of dogging you or anyone else
actually, as that would also be ludicrous 8^)
--
Craig Brozefsky <craig@red-bean.com>
Free Scheme/Lisp Software http://www.red-bean.com/~craig
"Hiding like thieves in the night from life, illusions of
oasis making you look twice. -- Mos Def and Talib Kweli
Reply to: