From owner-freebsd-current@freebsd.org Tue Apr 19 14:33:02 2016 Return-Path: Delivered-To: freebsd-current@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6F592B13E80; Tue, 19 Apr 2016 14:33:02 +0000 (UTC) (envelope-from slw@zxy.spb.ru) Received: from zxy.spb.ru (zxy.spb.ru [195.70.199.98]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 2804A1699; Tue, 19 Apr 2016 14:33:02 +0000 (UTC) (envelope-from slw@zxy.spb.ru) Received: from slw by zxy.spb.ru with local (Exim 4.86 (FreeBSD)) (envelope-from ) id 1asWi2-00089U-DU; Tue, 19 Apr 2016 17:32:58 +0300 Date: Tue, 19 Apr 2016 17:32:58 +0300 From: Slawa Olhovchenkov To: Alfred Perlstein Cc: Julian Elischer , lev@FreeBSD.org, Glen Barber , Nathan Whitehorn , freebsd-current@freebsd.org, freebsd-pkgbase@freebsd.org Subject: Re: [CFT] packaging the base system with pkg(8) Message-ID: <20160419143258.GH4841@zxy.spb.ru> References: <20160302235429.GD75641@FreeBSD.org> <57152CE5.5050500@FreeBSD.org> <9D4B9C8B-41D7-42BC-B436-D23EFFF60261@ixsystems.com> <20160418191425.GW1554@FreeBSD.org> <571533B8.6090109@freebsd.org> <20160418194010.GX1554@FreeBSD.org> <57153E80.4080800@FreeBSD.org> <571551AB.4070203@freebsd.org> <5715E1E9.8060507@freebsd.org> <57164068.8080800@freebsd.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <57164068.8080800@freebsd.org> User-Agent: Mutt/1.5.24 (2015-08-30) X-SA-Exim-Connect-IP: X-SA-Exim-Mail-From: slw@zxy.spb.ru X-SA-Exim-Scanned: No (on zxy.spb.ru); SAEximRunCond expanded to false X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Apr 2016 14:33:02 -0000 On Tue, Apr 19, 2016 at 07:27:52AM -0700, Alfred Perlstein wrote: > Again, the point is that those objecting should put aside the time to > implement what you (and I) are suggesting: > > > I could live with: > > > > base-utils 11.1 > > - ktrace uninstalled > > - tcpdump uninstalled > > + dd 11.1.1 (CVE-123412 fix) > > > > > > > > but not > > {700 packages ) > > dd 11.1.1 dd with CVE fix > > {29 more packages} > > [tcpdump line is not present but you don't notice that] > > {10 more packages} > > [ktrace line would be here but you don't notice that either] > > {15 more packages} > > What should not happen is that this incremental step forward be blocked > by those unwilling to hash out the next steps. Teoretical. In practical this is happen with me.