Re: [gentoo-dev] Package up for grabs

2017-08-22 Thread Mart Raudsepp
Ühel kenal päeval, P, 23.07.2017 kell 16:13, kirjutas Manuel Rüger: > The following packages are up for grabs: > dev-libs/libgit2 We've taken this under gnome@g.o as we need to keep this in sync with dev-libs/libgit2-glib and dev-vcs/gitg anyways. We should notice bump needs once a compatible lib

[gentoo-dev] Guidelines for dangerous USE flags

2017-08-22 Thread Michael Orlitzky
The net-analyzer/nrpe package has a ./configure flag: --enable-command-args allows clients to specify command arguments. *** THIS IS A SECURITY RISK! *** Read the SECURITY file before using this option! Back in nrpe-2.x, it was available via USE=c

Re: [gentoo-dev] Guidelines for dangerous USE flags

2017-08-22 Thread Sven Vermeulen
On Tue, Aug 22, 2017 at 01:22:51PM -0400, Michael Orlitzky wrote: > The net-analyzer/nrpe package has a ./configure flag: > > --enable-command-args allows clients to specify command arguments. *** > THIS IS A SECURITY RISK! *** Read the SECURITY >

Re: [gentoo-dev] Guidelines for dangerous USE flags

2017-08-22 Thread Robin H. Johnson
On Tue, Aug 22, 2017 at 01:22:51PM -0400, Michael Orlitzky wrote: > 1) require EXTRA_ECONF to enable it. > 2) hide it behind a masked USE flag. > > Both options require about the same amount of work from the user, namely > editing something under /etc/portage. What do y'all think is the best >

[gentoo-dev] Help maintaining dev-erlang and ejabberd

2017-08-22 Thread aidecoe
Hi, Some time ago I've made an effort to split ejabberd into proper dependencies handled by portage rather than repackaging bundle produced by rebar. While I've found that easier to maintain, my lack of knowledge about Erlang makes maintenanace quite difficult. I'd appreciate if someone who actua

Re: [gentoo-dev] Help maintaining dev-erlang and ejabberd

2017-08-22 Thread R0b0t1
On Tue, Aug 22, 2017 at 3:50 PM, wrote: > Hi, > > Some time ago I've made an effort to split ejabberd into proper > dependencies handled by portage rather than repackaging bundle produced > by rebar. While I've found that easier to maintain, my lack of > knowledge about Erlang makes maintenanace