Re: [gentoo-dev] Proposed security policy for web-based apps

[Martin Schlemmer]

On Fri, 2005-07-08 at 11:58 +0200, Diego 'Flameeyes' Pettenò wrote:
> On Wednesday 06 July 2005 20:10, Radoslaw Stachowiak wrote:
> > Why only web-based apps? What about other tools and apps exposed to the
> > network?
> Webapps are simpler to install to base users, they are generally just a
> "extract, change perms, execute php stuff".
> Other stuff is quite more difficult, and sometime you don't have new security
> bugs while upstream is away or dead. If all the "upstream away for more than
> 3 months" or "upstream dead, package works like a charm" will be removed in a
> couple of months from portage, users will start complaining.
> And I cannot say I would disagrees with them.

Stupid question .. why does webapps.eclass have SLOT=${PVR} ? This
basically means that even a bump from foo-webapp-1.0-r1 to
foo-webapp-1.0-r2 will not unmerge foo-webapp-1.0-r1 ...  Why do you
want every version, never mind every revision slotted?


Thanks,

-- 
Martin Schlemmer
Gentoo Linux Developer, Desktop/System Team Developer
Cape Town, South Africa