Gentoo Archives: gentoo-web-user

From: Renat Lumpau <rl03@g.o>
To: gentoo-web-user@l.g.o
Subject: [gentoo-web-user] SLOTting
Date: Tue, 28 Feb 2006 08:48:59
Message-Id: 20060227215753.GQ1516@toucan.gentoo.org
1 webapp.eclass currently sets SLOT=${PVR}. This is, in principle, a good idea as
2 it allows to have multiple versions installed side-by-side. It also has one
3 important downside: security revision bumps are now ineffective, as the
4 vulnerable version does not get uninstalled.
5
6 I've done a little testing to see if the unmerging happens correctly:
7 - set SLOT=$PV in webapp.eclass
8 - emerge www-apps/sitebar-3.2.6
9 - emerge www-apps/sitebar-3.3.7, install in a different -d
10 - emerge a duff www-apps/sitebar-3.3.7-r1. Result: 3.3.7 is unmerged, 3.2.6 and
11 3.3.7-r1 are protected.
12
13 What else should we be thinking of?
14 --
15 Renat Lumpau all things web-apps
16 C6A838DA 04AF B5EE 17CB 1000 DDA5 D3FC 1338 ADC2 C6A8 38DA
17 America - land of the free*
18 *Void where prohibited, restrictions apply. Cash value 1/100c.