From nobody Fri Jan 6 03:49:40 2023 X-Original-To: freebsd-security@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Np8VH4LqHz2pPWt for ; Fri, 6 Jan 2023 03:49:43 +0000 (UTC) (envelope-from grarpamp@gmail.com) Received: from mail-vs1-xe2d.google.com (mail-vs1-xe2d.google.com [IPv6:2607:f8b0:4864:20::e2d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1D4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Np8VG6mkCz4HyQ for ; Fri, 6 Jan 2023 03:49:42 +0000 (UTC) (envelope-from grarpamp@gmail.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20210112 header.b=K++kXLlf; spf=pass (mx1.freebsd.org: domain of grarpamp@gmail.com designates 2607:f8b0:4864:20::e2d as permitted sender) smtp.mailfrom=grarpamp@gmail.com; dmarc=pass (policy=none) header.from=gmail.com Received: by mail-vs1-xe2d.google.com with SMTP id s127so413014vsb.5 for ; Thu, 05 Jan 2023 19:49:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=cc:to:subject:message-id:date:from:references:in-reply-to :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=i1EpVsONavu6cMlcPhJsrBT0V7CIsc3rXZercKZOSRk=; b=K++kXLlfJY6FKD1uX2U+IwUBtV0KH3ZGoCGQWWscap+VBMdwJ22KGbEBCpidG1HxLC lp2VsF5vLqhcIfyK4qdXFMwOiogHTMqovM1xwNfFp75VW+2aQ+VVZlROSkK+KrtCLNk/ KFNBpsYN67PZ3lXfWbfDhMlgUh+vQcfLzse7QiiZRO2PHhQ4HPfDxg4gdfGyMZ1kA9wG 9vCWYPi/Pi31ZT4NlHk5eOi3+oFHkL2zizHFH+DhPri6899HxRTRnWWPXyCZi2KOGDMD APJ5INtKNIUTveb6FgkM9qszcUed38M2sSuqxSr+t4z7qTz6vqZtCe0hBiLX9kfFNs1e kF0Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:subject:message-id:date:from:references:in-reply-to :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=i1EpVsONavu6cMlcPhJsrBT0V7CIsc3rXZercKZOSRk=; b=dnJ1fXRy8/EacopmzZDovH0Ss7b0zI38sWkcVgyztL4zymFYIJXOFLrMKfGmukhKGU AONlnp7UUYayhql9veQ0BiuBpnZbkngQk6Ozf15oZSfGdHSYfTRNpvxVKL2E+9Tb64ZP lFXhkEvanj/Gy0F+ETrxiWSu2oqEfB6rdONs5CmVww960vTaFQoshPa+sfRWr0VQJWpJ kCOisNBgVx13COWde0+W0zPrMvNCDXWCl8t11QVuVF14dNbc9pxdh2wsSMVjedTk2gyT Ed2da+FQ67f8966wOwLqQrKrM2WNq3A6ySjRnX66MJjQ3GPyQHCogbbEyJnlMPdW1kna aKWQ== X-Gm-Message-State: AFqh2kqs6FQ7RmfWkrMPHHs3xwvy/pHwkz0zCgcqV46SazV2DlGJTx+S vCp1Ro2VEwuWHu970SHb/wE4MYPPOgwu47pMw/qp/cs6SlWGlTl7oT0= X-Google-Smtp-Source: AMrXdXvWbveg6rX1UtTXAiA3ofPS10oI616VNxNFRCrRjaAdNswfbVll4/44i1zQmaWxxRUuI4E8lp4lPu+8++26d78= X-Received: by 2002:a67:fb5a:0:b0:3c7:9cb5:5980 with SMTP id e26-20020a67fb5a000000b003c79cb55980mr4654527vsr.44.1672976981411; Thu, 05 Jan 2023 19:49:41 -0800 (PST) List-Id: Security issues List-Archive: https://lists.freebsd.org/archives/freebsd-security List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-security@freebsd.org X-BeenThere: freebsd-security@freebsd.org MIME-Version: 1.0 Received: by 2002:a05:612c:1190:b0:374:fe0f:8b62 with HTTP; Thu, 5 Jan 2023 19:49:40 -0800 (PST) In-Reply-To: <6373b14e-5fbc-7b09-e385-c7286ac9d3d8@freebsd.org> References: <6373b14e-5fbc-7b09-e385-c7286ac9d3d8@freebsd.org> From: grarpamp Date: Thu, 5 Jan 2023 22:49:40 -0500 Message-ID: Subject: Re: Putting OPIE to rest (was: Re: cant login after make installworld: pam_opie.so.6 not found) To: freebsd-current@freebsd.org Cc: freebsd-ports@freebsd.org Content-Type: text/plain; charset="UTF-8" X-Spamd-Result: default: False [-3.99 / 15.00]; NEURAL_HAM_LONG(-1.00)[-0.999]; NEURAL_HAM_MEDIUM(-1.00)[-0.998]; NEURAL_HAM_SHORT(-1.00)[-0.995]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20210112]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36:c]; MIME_GOOD(-0.10)[text/plain]; FROM_EQ_ENVFROM(0.00)[]; MLMMJ_DEST(0.00)[freebsd-security@freebsd.org]; ARC_NA(0.00)[]; FREEMAIL_ENVFROM(0.00)[gmail.com]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::e2d:from]; DKIM_TRACE(0.00)[gmail.com:+]; RCVD_TLS_LAST(0.00)[]; FREEMAIL_FROM(0.00)[gmail.com]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_TWO(0.00)[2]; TO_DN_NONE(0.00)[]; MID_RHS_MATCH_FROMTLD(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim] X-Rspamd-Queue-Id: 4Np8VG6mkCz4HyQ X-Spamd-Bar: --- X-ThisMailContainsUnwantedMimeParts: N On 1/5/23, Graham Perrin wrote: > I recall the original email Orthagonal as it, and some notes since neither consider any potential gap issue or/of any perhaps whimful removal process, nor moves forward on any of potential better alternatives to that which were hint (port) a bit in posts even before the removal was taken. Opie is not some hi-maint lo-api-compat legacy driver holding back kernel dev, it's a tiny stable user app plugin that just works for decades. Now users are posting locked out, punted to deploy non-replacements, and can't even compile it back because code gone from trees in use. There was hardly reason to remove it (lots of other things could be considered "outlived usefulness" but don't get removed), and even if so (as perhaps part of say some larger discuss on pam), there was zero reason for the removal team not to portify it given FreeBSD has already set good example of moving even large/complex user apps from base to ports. That should have, and still should be done, with opie. Consider on that process for future, rather than whatever is thought of some app. Cheers. Cc: ports, as the lo-maint hi-api-compat opie could also be used to +1 their competitive 35k count :) See also compat{M}x-{arch} packages. > https://lists.freebsd.org/archives/freebsd-current/2022-September/002565.html > https://lists.freebsd.org/archives/freebsd-hackers/2022-September/001479.html > https://lists.freebsd.org/archives/freebsd-security/2022-September/000081.html