> On 7 Sep 2022, at 17:29, Mike Gilbert <flop...@gentoo.org> wrote: > > On Wed, Sep 7, 2022 at 11:56 AM Marek Szuba <mare...@gentoo.org> wrote: >> >> Dear everyone, >> >> I wonder if we should create a virtual package to allow our users - or >> at least those who run systemd anyway - to choose between sys-apps/dbus >> and sys-apps/dbus-broken as D-Bus implementation for their systems. The >> usual "Gentoo is about choice" thing aside, there is now at least one, >> security-related, problem with the former which can be worked around by >> switching to the latter: https://github.com/systemd/systemd/issues/22737 >> >> WDYT? > > A virtual seems a bit pointless for the following reasons: > > 1. dbus and dbus-broker can be (and usually are) installed simultaneously. > 2. dbus-broker[launcher] utilizes config files installed by dbus, and > actually RDEPENDs on sys-apps/dbus for that reason. > 3. Many client applications depend on sys-apps/dbus for libdbus.
A virtual _might_ have value to add to @system for desktop profiles, but I'm not sure. The other criticisms remain, of course. > > If you can think of some way to encourage users to install/enable > dbus-broker, that seems like a good idea to me. > Documentation on the wiki (either on the dbus page, or a new dbus-broker) explaining how to migrate & its advantages would be most welcome.
signature.asc
Description: Message signed with OpenPGP
