Date: Mon, 24 Jan 2005 21:51:46 -0800 From: Kris Kennaway <kris@obsecurity.org> To: "Donald J. O'Neill" <donaldj1066@fastmail.fm> Cc: Kris Kennaway <kris@obsecurity.org> Subject: Re: perl and ports Message-ID: <20050125055146.GA16896@xor.obsecurity.org> In-Reply-To: <200501242315.12888.donaldj1066@fastmail.fm> References: <ef60af0905012416425fdc0a7d@mail.gmail.com> <200501242120.16504.donaldj1066@fastmail.fm> <20050125032510.GA82758@xor.obsecurity.org> <200501242315.12888.donaldj1066@fastmail.fm>
next in thread | previous in thread | raw e-mail | index | archive | help
--PEIAKu/WMn1b1Hv9 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Jan 24, 2005 at 11:15:12PM -0600, Donald J. O'Neill wrote: > > > And if you want to install packages using the ports tree. > > > > Eh? > > > > > depend on installing packages only, ok. Of course, you have to wait > > > for them to be built. > > > > > > I just ran pkg_info -R perl-5.8.5, too many to count by hand. > > > > Well, yeah, but that's because you installed perl 5.8.5 or something > > that depends on it. If you use 4.x most such ports will be happy > > with the base system version of perl, and if you don't use 4.x then > > ports that don't require perl won't install it. > > >=20 > Yes, and that's my point Kris. Of the 537 ports that are installed on my= =20 > system, 318 of them require (have a dependency) perl-5.8.5 to run. What= =20 > about others that require it to build. So, if Gert, who is running=20 > FSBD5.3 on an amd64 system and has been building ports and using=20 > portupgrade, removes perl-5.8.5 (does a forced removal) because he=20 > can't see that it's used all over the place and thinks of it as a=20 > security issue because of earlier perl versions. He's going to have a=20 > big problem on his hands the first time he tries to use portupgrade and= =20 > finds a lot of decencies missing in his package database, and running=20 > pkgdb -F is going to fix them. The original question was whether perl is a required dependency to use the ports collection at all (no it isn't), not whether it is commonly used by applications in the ports collection. Thus, unless he is using a port that requires perl (the dependency will be registered, of course), it can be removed. Kris --PEIAKu/WMn1b1Hv9 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (FreeBSD) iD8DBQFB9d5yWry0BWjoQKURAr00AKCU5rNM0aVwvNjAm7WI/02dFH+FRwCdHtsc 6FiPzKcRubeicUX9jy+chKs= =e3dn -----END PGP SIGNATURE----- --PEIAKu/WMn1b1Hv9--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050125055146.GA16896>