Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 30 Jul 2013 08:53:08 -0500
From:      Tim Daneliuk <tundra@tundraware.com>
To:        freebsd-stable <freebsd-stable@freebsd.org>
Subject:   Re: Bind in FreeBSD, security advisories
Message-ID:  <51F7C544.4050607@tundraware.com>
In-Reply-To: <CAOgwaMt4G02yhU0cbiq_EEwhi4=mgt2kLGJf0Rgb8t9wECsGJA@mail.gmail.com>
References:  <CAO%2BPfDctepQY0mGH7H%2BgOSm4HJwhe-RCND%2BmxAArnRxpWiCsjg@mail.gmail.com> <1375186900.23467.3223791.24CB348A@webmail.messagingengine.com> <51F7B5C7.6050008@digsys.bg> <CAOgwaMt4G02yhU0cbiq_EEwhi4=mgt2kLGJf0Rgb8t9wECsGJA@mail.gmail.com>

index | next in thread | previous in thread | raw e-mail

On 07/30/2013 08:13 AM, Mehmet Erol Sanliturk wrote:
> On Tue, Jul 30, 2013 at 8:47 AM, Daniel Kalchev <daniel@digsys.bg> wrote:
>
>>
>> On 30.07.13 15:21, Mark Felder wrote:
>>
>>> People don't seem upset about not having a webserver, IMAP/POP daemon,
>>> or LDAP server in base, so I don't understand what the big deal is about
>>> removing BIND.
>>>
>>
>> I believe the primary reason these things are not in the base system is
>> that they have plenty of dependencies, with possibly conflicting licenses
>> etc.
>>
>>   If the concern is over the rare case when you absolutely
>>> need a DNS recursor and there are none you can reach I suppose we should
>>> just import Unbound.
>>>
>>
>> There are many and good reasons to include an fully featured name server,
>> or at least full recursive resolver. For example, for properly supporting
>> DNSSEC.
>> We could in theory remove the BIND's authoritative name server
>> executable... if that is attracting the SAs.
>>
>> The justification "reduce the number of SA's", that is, "the bad PR" is
>> probably not enough. Going that direction, we should consider Comrade
>> Stalin's maxim "FreeBSD exists, there are problems, here is the solution --
>> no FreeBSD, no problems!" :-)
>>
>> Daniel
>>
>
>
>
> Then , there exists a new problem :
>
>
> "There is no FreeBSD ..."
>
>
> Thank you very much .
>
>

Exactly.  Either strip everything out of the base
including things like perl or admit that there is more
to a modern OS than just kernel and admin tools.



-- 
-----------------------------------------------------------------------
Tim Daneliuk


home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?51F7C544.4050607>