From owner-freebsd-stable Wed Jul 5 2:40:10 2000 Delivered-To: freebsd-stable@freebsd.org Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21]) by hub.freebsd.org (Postfix) with ESMTP id E961C37B7BC; Wed, 5 Jul 2000 02:40:05 -0700 (PDT) (envelope-from kris@FreeBSD.org) Received: from localhost (kris@localhost) by freefall.freebsd.org (8.9.3/8.9.2) with ESMTP id CAA21265; Wed, 5 Jul 2000 02:40:05 -0700 (PDT) (envelope-from kris@FreeBSD.org) X-Authentication-Warning: freefall.freebsd.org: kris owned process doing -bs Date: Wed, 5 Jul 2000 02:40:05 -0700 (PDT) From: Kris Kennaway To: Doug Barton Cc: Greg Rumple , stable@FreeBSD.org Subject: Re: KerberosIV in 3.x (Re: problems building world?) In-Reply-To: <3962F731.5E0600A7@gorean.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Wed, 5 Jul 2000, Doug Barton wrote: > Kris Kennaway wrote: > > > > On Tue, 4 Jul 2000, Greg Rumple wrote: > > > > > I just cvsup'd one of my 3.4-STABLE boxes today, and can no longer make > > > world. I had to remove cvs-crypto from my supfile as well. Here is a > > > small snip of the error I am encountering. > > > > There was a major KerberosIV update that went in earlier today - if you > > don't require Kerberos, then just don't set "MAKE_KERBEROS4" in > > /etc/make.conf. > > > > Assar Westerlund will hopefully be addressing this shortly: sorry for the > > temporary breakage, folks, but it is a necessary update for security > > reasons. > > With due respect to Assar, this is the kind of breakage that just > cannot happen in a -Stable branch. You could almost get away with this > in 4.0 right now, but once 4.1-RELEASE goes out the door we will be > severely damaging our claims of stability and production-readiness with > these kinds of mistakes. > > The argument that the commit was necessary for security implies that > _greater_ care be taken to insure that the changes work. No angry words > or recriminations are needed, just more caution in the future. Assar's commit was wholly authorized by the security-officers, including the possibility of breakage. It was important we get this in ASAP, for reasons which will soon become clear. Kris -- In God we Trust -- all others must submit an X.509 certificate. -- Charles Forsythe To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message