From nobody Wed Dec 14 11:11:04 2022 X-Original-To: freebsd-questions@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4NXCNy2dfLz4kMWm for ; Wed, 14 Dec 2022 11:11:46 +0000 (UTC) (envelope-from yasu@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4NXCNy29Tdz47fZ; Wed, 14 Dec 2022 11:11:46 +0000 (UTC) (envelope-from yasu@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1671016306; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=t2RuQF8Ov6RbWxxcn6HQhPFwBb6OBfGGaygBv+QHqIU=; b=j0fEXYf1+NpOkYdICcwljjIeevrgnweDBj+FLYeZPmno4FBkjp8xmxs2NZcjow7I62M0q3 JelRcrRIEtEtVB4loR+CroKH6eFIagZnaUttYZ7chLp7xFUEVyItP1j9slr/ln5JC2IWNn sIPUcoH2mKO1Mexf+y/EnM5pXw3kw2A3u3JxTxYivMAp0hXeQzENAzZMS694pdELyXAXyq 5giIYxCXRvtAgiuYJ0awYxDMt/FBKeD09qSWFp4YB1KvFJVLt4iTKOkI4xVZDDXALLmFZ2 TzUxRqrhqqVpCt2M8Ylw9JNlbPtVWtcWzCpohM9w6vSaoNB4/AzljpewxUmR3A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1671016306; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=t2RuQF8Ov6RbWxxcn6HQhPFwBb6OBfGGaygBv+QHqIU=; b=LU+y6GYywcUoIMjvFt7iF8RVskJ9c27GmzI3/4gYKIGlEXEcmbjhGyGdcsV79k0QUenXUn OoVGZO1hYZUup2E51VR3yERPLxo0TEoGOb+GfCBGGDI70aO8xy57BZSj1pFADeJZG235Kr wngpSxYz9i1/FKcE86Y+D5QldEbmJ8h9ShlxiQq+PMH+ONaV0IAEDowhiIkbbCchFsAtWO EUkXHv0hXkLTKdOR6Pcg7Wx63L4cvazL7lNjxiJMfWTAAjMahLgboylugqxvAcDcerO18g trm8xFapdYTiLiSD4pJANikQE64Mn/Xg2wKQsFfKvcKoM1beXhHZjREfgVDlrA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1671016306; a=rsa-sha256; cv=none; b=mH/e6X5P1E76YED7jt9m4dn4JZlkoCpct8vSWTPkt+KculQcr+XRVn8JVqyul8GSAk7CjJ Mw7hS4mrLCM08OZwAqyPBFNt20fOX3N+LEkAJd5wDUVpmTmtolWbWcwvvaWy8mWvnGcnr5 uaf2yHi1H8QTLO+KVaH9nR4PIf0VUvUOcQ/HZYBftDpVvSSGNF2eSJQ3iZn86fiAI/SNxt clfagb2e4j5KHYuEbUVYUeW82aWPRJ6Rokfz+gHkkgY0OF4I9MWT7F6UjwT4g0aodWzGOA w4PQ+kdPWOBRuouzVQuEBeBnQS88Q2KTPrRTAe6PmQmSxnRDDZZXpJNcv/6WYg== Received: from localhost (unknown [IPv6:240b:11:220:fe00:8d6f:956b:d123:ef02]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (Client did not present a certificate) (Authenticated sender: yasu/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id 4NXCNx4bfLzf42; Wed, 14 Dec 2022 11:11:45 +0000 (UTC) (envelope-from yasu@FreeBSD.org) Date: Wed, 14 Dec 2022 20:11:04 +0900 (JST) Message-Id: <20221214.201104.1234506425110480502.yasu@FreeBSD.org> To: freebsd-questions@freebsd.org Subject: Re: Does glib really need python at runtime? From: Yasuhiro Kimura In-Reply-To: <3e71a826-6fbd-30b6-2577-d400d0cb7eca@qeng-ho.org> References: <3e71a826-6fbd-30b6-2577-d400d0cb7eca@qeng-ho.org> X-Mailer: Mew version 6.8 on Emacs 30.0.50 List-Id: User questions List-Archive: https://lists.freebsd.org/archives/freebsd-questions List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-ThisMailContainsUnwantedMimeParts: N From: Arthur Chance Subject: Does glib really need python at runtime? Date: Wed, 14 Dec 2022 10:57:42 +0000 > I installed a package that needs glib on a server and noticed that > python was installed as glib depends on it > > root@arthur:1# pkg info -d glib > glib-2.74.1,2: > libxml2-2.10.3_1 > python39-3.9.15 <----- > pcre2-10.40 > libffi-3.4.3 > gettext-runtime-0.21 > libiconv-1.17 > > I can understand python being need for building glib, but as a run time > dependency it's ridiculous, as well as exposing a massive attack > surface. Does anyone know what's going on here? glib-genmarshal and glib-mkenums are python script. So they require python to run. yasu@eastasia[3311]% file /usr/local/bin/glib-genmarshal /usr/local/bin/glib-mkenums /usr/local/bin/glib-genmarshal: a /usr/bin/env /usr/local/bin/python3.11 script, ASCII text executable /usr/local/bin/glib-mkenums: a /usr/bin/env /usr/local/bin/python3.11 script, ASCII text executable yasu@eastasia[3311]% --- Yasuhiro Kimura