From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 21D3D1396D0 for ; Tue, 22 Aug 2017 18:44:25 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 8673A1FC05A; Tue, 22 Aug 2017 18:44:19 +0000 (UTC) Received: from smtp.gentoo.org (mail.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 3CBF41FC006 for ; Tue, 22 Aug 2017 18:44:19 +0000 (UTC) Received: from grubbs.orbis-terrarum.net (localhost [127.0.0.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 8BFB0341C78 for ; Tue, 22 Aug 2017 18:44:17 +0000 (UTC) Received: (qmail 18538 invoked by uid 10000); 22 Aug 2017 18:44:16 -0000 Date: Tue, 22 Aug 2017 18:44:16 +0000 From: "Robin H. Johnson" To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] Guidelines for dangerous USE flags Message-ID: References: <17347fd7-d6ed-4c08-8d02-24df9237b576@gentoo.org> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="m972NQjnE83KvVa/" Content-Disposition: inline In-Reply-To: <17347fd7-d6ed-4c08-8d02-24df9237b576@gentoo.org> User-Agent: Mutt/1.8.2 (2017-04-18) X-Archives-Salt: 66f9d1f0-ac7d-46b1-943b-c60fec2893a3 X-Archives-Hash: d6c2d6adca67fb692ae2183f725f1d3c --m972NQjnE83KvVa/ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Aug 22, 2017 at 01:22:51PM -0400, Michael Orlitzky wrote: > 1) require EXTRA_ECONF to enable it. > 2) hide it behind a masked USE flag. >=20 > Both options require about the same amount of work from the user, namely > editing something under /etc/portage. What do y'all think is the best > way to proceed? Are there other examples in the tree I could follow? =46rom a Gentoo Infrastructure team perspective, we'd strongly prefer USE flags, because that fits better into existing configuration management tools, almost none of which have handling for EXTRA_ECONF or rebuilding after EXTRA_ECONF changes (rebuild-on-USE-change is supported). And please do bring that option back, we do use it for NRPE in a limited set of cases (eg to avoid hard-coding passwords into the NRPE config). --=20 Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Trustee & Treasurer E-Mail : robbat2@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136 --m972NQjnE83KvVa/ Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Robbat2 @ Orbis-Terrarum Networks - The text below is a digital signature. If it doesn't make any sense to you, ignore it. iQKTBAEBCgB9FiEEveu2pS8Vb98xaNkRGTlfI8WIJsQFAlmce39fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEJE RUJCNkE1MkYxNTZGREYzMTY4RDkxMTE5Mzk1RjIzQzU4ODI2QzQACgkQGTlfI8WI JsQssA//UQmJL3/1NxK7+6c/px3hSvThEYc1jt6eMQA9/+ur7J9iyV3GeUKkoIAC pGtYJGNIuBsn+7siX5rxgpQanw3oNHCqaoP4hNmC9oZOzKO268nS+ggLFz5o2FKS GcoZgvYbhR/izW1/gCKRZxe1Q0cbX1h5G7Kyb9f8jVIYf+VxK78bn0tSfj0u3Gnc u1hUywmaajEocMhno8OxiSTyVHdb1B46SgH71ATK99EfCdzvC868B7W18aNMvbCm BQ4Jcq5gXuyuGuNLtWbIRCbrYtjs4ERe/I3qN3eyC1JTOgjgd9jC40Dcj7707S+8 koAtwhAcPWG1GTiqqlOf1RlzuXmJMqKwFkU1+dmLzu62mQJ7gTcQIdy2Vp7P8AXt kllkYTaHIXlZbAmfx/5G1EeT/Mny2ExHqOK1oDpa3478RRR6swoL8/IRwyzerwpO iRD6z+ugN9BMOBKMYWuuvy/wZ4AGpR59qHplRTtaL1Z+WAGSmNtccJLiGR8tI/jG sMoYrU7oZZTNcZQZBWPfeb6DYyBPGgeTPWrQzahToKHgVkn0tgHkVZwHFv1aaF5s fdSGjGBu2nVqTJpwGx0TwBOgg3zj4VEXYPcxCWCLoL98CY2u68gXxyHG8en4dFV9 kO1vuCQguH9CWAek071WAbmAbiPK+n6+3BhdwNfP1OFx5eqb2YU= =YEH1 -----END PGP SIGNATURE----- --m972NQjnE83KvVa/--