Re: external dependencies; trolling for more feedback, pushing to make it official ; -)


GARNOME is a framework for building the GNOME desktop and an assortment
of GNOME "extras" using existing source tarballs  If a source tarball
exists for libvolume_id, GARNOME will use it. If a source tarball for
libvolume_id does not exist, GARNOME cannot update HAL past version


On Thu, 2006-09-21 at 20:54 -0400, David Zeuthen wrote:
> On Thu, 2006-09-21 at 20:34 -0400, Joseph E. Sacco, Ph.D. wrote:
> > The hal/udev dependencies need to be resolved before moving on to
> > hal-0.5.8.x
> Joseph, I have several times asked you in private mails we've exchanged,
> why GARNOME cannot pull in the udev tarball for libvolume_id if you want
> to build HAL. I have even Cc'ed the udev maintainer if you had requests
> for changes in udev to make this easier for you. You have not come up
> with any concrete complaints. I am again Cc'ing Kay so he can help
> explain things if you have questions.
> I've said it before and I'll say it again: I am not going to carry
> libvolume_id in the HAL tarball until damn good reasons for doing so are
> raised. Why? Because said library reads data from untrusted sources
> (file systems) and as such I would be obligated to send out security
> updates if I was carrying the code.
> Thus, I believe the socalled "hal/udev dependencies" to be a non-issue
> until valid complaints are raised.
> Have a nice day.
>     David
joseph_sacco [at] comcast [dot] net

[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]