[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[bug#43851] [PATCH] gnu: sudo: Depend on python-minimal instead of pytho
[bug#43851] [PATCH] gnu: sudo: Depend on python-minimal instead of python.
Fri, 09 Oct 2020 19:18:44 +0200
Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux)
Tobias Geerinckx-Rice writes:
> Jan Nieuwenhuizen 写道：
>> Depending on python pulls in X11:
> It only depends on Python because I wasn't [consciously] aware of the
> existence of python-minimal. Your patch LGTM.
>> However...do we really want to extend sudo with eh, a large
> I enabled Python support in sudo because it exists for the same reason
> that Guile does.
Yes, hackability/extensibility makes sense and is good in general...
> If we want a less hackable sudo - certainly a defensible position -
> that's fine by me. If we do, then yes, I think Python is reasonable
> considering the alternative (C).
...but in this case, yes, a less hackable sudo is what I'm certainly
Danny Milosavljevic writes:
> I am very much in favor of not having unnecessary dependencies in things
> which are suid root. Also, there already IS PAM support in sudo, and
> PAM has modules--so why have yet another weird new mechanism? For auditing,
> there is auditd (even in Guix already).
> Furthermore, it makes updating sudo more brittle.
> Also, we removed when cross-compiling already, pointing to other problems.
> Please remove the python dependency entirely.
@Tobias: would you please revert/remove the Python addition to sudo (or
else discuss some more with others?).
>> that has a more impressive CVE list than a lovely tiny language
>> such as, say Guile? ;)
> Python has a more impressive almost-anything than Guile so that means
Yeah, Python is amazing.
Jan Nieuwenhuizen <firstname.lastname@example.org> | GNU LilyPond http://lilypond.org
Freelance IT http://JoyofSource.com | Avatar® http://AvatarAcademy.com
[bug#43851] [PATCH] gnu: sudo: Depend on python-minimal instead of python., Danny Milosavljevic, 2020/10/08