From owner-freebsd-current@FreeBSD.ORG Sat Aug 25 00:01:53 2012 Return-Path: Delivered-To: current@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id F31C51065670; Sat, 25 Aug 2012 00:01:52 +0000 (UTC) (envelope-from bapt@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id B9A248FC08; Sat, 25 Aug 2012 00:01:52 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.5/8.14.5) with ESMTP id q7P01qZh091367; Sat, 25 Aug 2012 00:01:52 GMT (envelope-from bapt@FreeBSD.org) Received: (from bapt@localhost) by freefall.freebsd.org (8.14.5/8.14.5/Submit) id q7P01qTP091366; Sat, 25 Aug 2012 00:01:52 GMT (envelope-from bapt@FreeBSD.org) X-Authentication-Warning: freefall.freebsd.org: bapt set sender to bapt@FreeBSD.org using -f Date: Sat, 25 Aug 2012 02:01:48 +0200 From: Baptiste Daroussin To: Doug Barton Message-ID: <20120825000148.GF37867@ithaqua.etoilebsd.net> References: <97612B57-1255-4BB3-A6D3-FC74324C6D67@FreeBSD.org> <20120824081543.GB2998@ithaqua.etoilebsd.net> <50380269.6020003@FreeBSD.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="hK8Uo4Yp55NZU70L" Content-Disposition: inline In-Reply-To: <50380269.6020003@FreeBSD.org> User-Agent: Mutt/1.5.21 (2010-09-15) Cc: ports@FreeBSD.org, Steve Wills , current@FreeBSD.org Subject: Re: pkgng suggestion: renaming /usr/sbin/pkg to /usr/sbin/pkg-bootstrap X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Aug 2012 00:01:53 -0000 --hK8Uo4Yp55NZU70L Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Aug 24, 2012 at 03:38:33PM -0700, Doug Barton wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 >=20 > On 8/24/2012 1:15 AM, Baptiste Daroussin wrote: > > BTW for people who haven't tested and want to share their opinion, > > here is how work /usr/sbin/pkg: > >=20 > > it first checks if ${LOCALBASE}/sbin/pkg is there - if yes it > > directly execute ${LOCALBASE}/sbin/pkg with arguments passed to > > /usr/sbin/pkg >=20 > As others have already pointed out, this is a bad idea for a variety > of reasons, not the least of which is security related. It also > removes one of the primary benefits of pkg, that it be (fully) hosted > in the ports tree. Can anyone give me he details on the security related problem? Can I also have the details on why it would remove the benefits of being fu= lly hosted in the ports, I have no plan to remove it, currently the ports tree = is also able to bootstrap itself pkg without needing /usr/sbin/pkg. the bootstrap tool is currently just a transparent way to bootstrap pkgng, = it is not mandatory at all, one can leave without it, and it doesn't prevent pkgn= g to fully leave in the ports tree? What do I miss here? Once again I'm not opposed at all to remove it in favour of pkg-bootstrap, = but it currently seems to lacks a bit of detailed arguments. > Let me rephrase that more simply ... very few users are ever going to > need the bootstrapping tool that will be in the base. Making it > mandatory for *every* user is therefore not only a bad idea, it's > contrary to one of the primary goals of the project. >=20 Why would it be mandatory? it is just a transparent kind of helper tool regards, Bapt --hK8Uo4Yp55NZU70L Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (FreeBSD) iEYEARECAAYFAlA4FewACgkQ8kTtMUmk6EzFnACgvvOVzgLNzx51yzdtlqvX063X K6MAni8S6ev9t5CuWLs76Glyk5BiqaPF =TJIn -----END PGP SIGNATURE----- --hK8Uo4Yp55NZU70L--