On Fri, 11 Aug 2000, Jag wrote:
>Date: Fri, 11 Aug 2000 06:15:28 -0700
>From: Jag <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Subject: Re: Security problem? cyrus imapd needs e2fsprogs-devel?
>
>On Fri, 11 Aug 2000, Nalin Dahyabhai wrote:
>
>> The e2fsprogs-devel package contains libcom_err, which is a popular
>> library for integrating error-reporting strings into a package (it's
>> used by Kerberos, Zephyr, e2fsprogs, and just about anything ever
>> written at MIT, and possibly CMU as well).
>
>Would it be possible to make a seperate package(s) for these common
>libraries (com_err, et, ss) so that packages can just rely on that
>library package being installed rather then relying on e2fsprogs to be
>installed. Having a seperate package seems to better match the way Red
>Hat has packaged other programs/libraries.
Yeah, for sure. _I_ have e2fsprogs installed, but NOT the devel
package. I won't install the devel either. So cyrus imap will
end up not on my machines. I'm very leary of getting a package
from a security site that includes crypto, and also requires me
having low level disk libraries installed REGARDLESS of the
reasons. I'm not going to audit the code for it. I'll err on
the side of caution...
--
Mike A. Harris Linux advocate
Computer Consultant GNU advocate
Capslock Consulting Open Source advocate
Try out Red Hat Linux today: http://www.redhat.com
ftp://ftp.redhat.com/pub/redhat/redhat-6.2/
_______________________________________________
Redhat-devel-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-devel-list
