Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 16 Jul 2016 17:13:39 +0200
From:      Baptiste Daroussin <bapt@FreeBSD.org>
To:        Atomic Beef <teddyg522@gmail.com>
Cc:        freebsd-pkg@freebsd.org
Subject:   Re: State of Provides/Requires
Message-ID:  <20160716151339.lvco3nmctrrk6h7s@ivaldir.etoilebsd.net>
In-Reply-To: <CAK%2B0_cD%2B3E1buHURDNJd-RD_W0Hs=0enqXzag5K5VYizb5rkCw@mail.gmail.com>
References:  <CAK%2B0_cD%2B3E1buHURDNJd-RD_W0Hs=0enqXzag5K5VYizb5rkCw@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help

--no3k4ezuqm3l23n5
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Jul 11, 2016 at 03:47:18PM -0400, Atomic Beef wrote:
> Hello,
>=20
> I was wondering what the state of provides/requires was. I found a couple
> of issues on Github that mentioned the feature, (
> https://github.com/freebsd/pkg/issues/1276 and
> https://github.com/freebsd/pkg/issues/805) but they are both over a year
> old at this point. This is a crucial feature to binary package management,
> not only because it saves disk space, but because it enhances security. F=
or
> example, any package depending on MySQL will usually choose to install
> mysql56-client which is marked as vulnerable and will never be patched. Is
> anyone currently working on implementing this?
>=20

Provides/Requires has been added in pkg around 1.4 (iirc)

They are not perfect and we would prefer to use what we call flexible
dependencies instead. that said flexible dependencies are not any close to =
be
implemented. So I think we should use current provides/requires mechanism i=
n the
mean time.

To use them the only issue in on the ports tree itself

Best regards,
Bapt

--no3k4ezuqm3l23n5
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=4yh/
-----END PGP SIGNATURE-----

--no3k4ezuqm3l23n5--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20160716151339.lvco3nmctrrk6h7s>