Date: Wed, 5 Jul 2000 02:40:05 -0700 (PDT) From: Kris Kennaway <kris@FreeBSD.org> To: Doug Barton <DougB@gorean.org> Cc: Greg Rumple <grumple@zaphon.llamas.net>, stable@FreeBSD.org Subject: Re: KerberosIV in 3.x (Re: problems building world?) Message-ID: <Pine.BSF.4.21.0007050238270.84259-100000@freefall.freebsd.org> In-Reply-To: <3962F731.5E0600A7@gorean.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 5 Jul 2000, Doug Barton wrote:
> Kris Kennaway wrote:
> >
> > On Tue, 4 Jul 2000, Greg Rumple wrote:
> >
> > > I just cvsup'd one of my 3.4-STABLE boxes today, and can no longer make
> > > world. I had to remove cvs-crypto from my supfile as well. Here is a
> > > small snip of the error I am encountering.
> >
> > There was a major KerberosIV update that went in earlier today - if you
> > don't require Kerberos, then just don't set "MAKE_KERBEROS4" in
> > /etc/make.conf.
> >
> > Assar Westerlund will hopefully be addressing this shortly: sorry for the
> > temporary breakage, folks, but it is a necessary update for security
> > reasons.
>
> With due respect to Assar, this is the kind of breakage that just
> cannot happen in a -Stable branch. You could almost get away with this
> in 4.0 right now, but once 4.1-RELEASE goes out the door we will be
> severely damaging our claims of stability and production-readiness with
> these kinds of mistakes.
>
> The argument that the commit was necessary for security implies that
> _greater_ care be taken to insure that the changes work. No angry words
> or recriminations are needed, just more caution in the future.
Assar's commit was wholly authorized by the security-officers, including
the possibility of breakage. It was important we get this in ASAP, for
reasons which will soon become clear.
Kris
--
In God we Trust -- all others must submit an X.509 certificate.
-- Charles Forsythe <forsythe@alum.mit.edu>
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0007050238270.84259-100000>