* Re: [gentoo-dev] Apache security hole and ebuild
@ 2002-06-20 13:48 99% ` Bjarke Sørensen
0 siblings, 0 replies; 1+ results
From: Bjarke Sørensen @ 2002-06-20 13:48 UTC (permalink / raw
To: gentoo-dev
On Thu, Jun 20, 2002 at 01:46:59PM +0200, Wout Mertens wrote:
> > On Wed, Jun 19, 2002 at 09:44:38AM -0400, Grant Goodyear wrote:
> > > Actually, all of the changes are documented. Take a look
> > > at /usr/portage/net-www/apache/ChangeLog.
> > Just not when you already worked arround this and have this
> > "complicated/large site". Sorry I missed the announce that something
> > vital was done to apache. Good thing I havn't blindly upgraded.
> Which is very good, as a "complicated/large site"-admin, you need to test
> things before you make them happen. If you tweak stuff in a package, you
> can expect it to break updates...
If the layout and placing of files hadn't been changed I could just
have upgraded.
Don't get me wrong I think the update was needed to make some sense
and enable some default security (not running as nobody).
> > Too many people have problems with it. But maybe we all expected
> > something more than a note in a changelog for such a change.
> But that is exactly what Changelog is for, notifying the user about what
> changed. Although I admit it doesn't have a lot of visibility, we might
> want to do something about that, like an option on emerge that shows the
> changelogs since your version...
> If you have other ideas, please tell us.
Maybe some verbosity in this direction could be implemented in emerge
then?
Like:
gugi root # emerge mutt --pretend
These are the packages that I would merge, in order.
Calculating dependencies ...done!
[ebuild U ] net-mail/mutt-1.4 to /
gugi root # emerge mutt --verbose --pretend
These are the packages that I would merge, in order.
Calculating dependencies ...done!
[ebuild U ] net-mail/mutt-1.4 to /
29 Apr 2002; Ryan Phillips <rphillips@gentoo.org> mutt-1.4.ebuild :
new version
gugi root #
That would be nice.
--
| Bjarke Sørensen / 9000.WASD
|
| There are 10 types of people in this world:
| Those who understand binary, and those who don't.
^ permalink raw reply [relevance 99%]
Results 1-1 of 1 | reverse | options above
-- pct% links below jump to the message on this page, permalinks otherwise --
2002-06-19 22:13 [gentoo-dev] Apache security hole and ebuild Bjarke Sørensen
2002-06-20 11:46 ` Wout Mertens
2002-06-20 13:48 99% ` Bjarke Sørensen
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox