Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 16 Mar 2017 15:08:05 +0000
From:      bugzilla-noreply@freebsd.org
To:        gnome@FreeBSD.org
Subject:   [Bug 217844] devel/gvfs
Message-ID:  <bug-217844-6497@https.bugs.freebsd.org/bugzilla/>

index | next in thread | raw e-mail

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217844

            Bug ID: 217844
           Summary: devel/gvfs
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: gnome@FreeBSD.org
          Reporter: jt@ixsystems.com
          Assignee: gnome@FreeBSD.org
             Flags: maintainer-feedback?(gnome@FreeBSD.org)

Due to the wikileaks dump of Vault7, we know there is a 0-day against HALd. 
Since HALd is mostly unused on the linux side, its very unlikely that it will
get patched since most distros are using systemd now.

gvfs can build without HAL support.  I ran gvfs-lite on linux for quite a while
back in the days that I was a linux distro dev.

Should we disable hal in gvfs for this reason?  I realize that some programs
that rely on gvfs with hal will loose some functionality, so it comes down to
the issue of what's more important.  Security or Features.  

I personally side with security, but this isn't my port, so it's not my choice
to decide.

-- 
You are receiving this mail because:
You are the assignee for the bug.

home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-217844-6497>