From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.43) id 1ED2h2-0005Vw-Ie for garchives@archives.gentoo.org; Wed, 07 Sep 2005 16:22:37 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.4/8.13.4) with SMTP id j87GHPs4021404; Wed, 7 Sep 2005 16:17:25 GMT Received: from rwcrmhc12.comcast.net (rwcrmhc12.comcast.net [216.148.227.85]) by robin.gentoo.org (8.13.4/8.13.4) with ESMTP id j87GHNjE017992 for ; Wed, 7 Sep 2005 16:17:24 GMT Received: from [192.168.123.141] (c-24-19-159-167.hsd1.wa.comcast.net[24.19.159.167]) by comcast.net (rwcrmhc12) with ESMTP id <2005090716205301400aq0obe>; Wed, 7 Sep 2005 16:20:53 +0000 Message-ID: <431F1381.7020505@munat.com> Date: Wed, 07 Sep 2005 09:21:21 -0700 From: Ben Munat User-Agent: Mozilla Thunderbird 1.0.5 (Windows/20050711) X-Accept-Language: en-us, en Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-server@gentoo.org Reply-to: gentoo-server@lists.gentoo.org MIME-Version: 1.0 To: gentoo-server@lists.gentoo.org Subject: Re: [gentoo-server] prioritising security updates References: <431E4AB0.60709@munat.com> <200509070751.42658.jaervosz@gentoo.org> In-Reply-To: <200509070751.42658.jaervosz@gentoo.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Archives-Salt: 8dd4541f-633c-42ba-a52e-77b8a66801eb X-Archives-Hash: 3d5c336418f27092606ae0645f65b3f3 Sune Kloppenborg Jeppesen wrote: > On Wednesday 07 September 2005 04:04, Ben Munat wrote: > >>So, how do I wind up with 17 packages that need to be updated? Hmm, perhaps >>these are all packages on my system that are neither in my world file nor >>depdencies of stuff in my world file? Would that then make them orphaned? >>And theoretically safe to delete? How does one find out if a specific >>package is required by any other packages again? > > Only packages you explicitly emerge are recorded in the world profile > (/var/lib/portage/world) dependencies are not. See the man pages for portage > and emerge for more details. > > HTH > Thanks... however, I knew this much -- found that I have to be careful with this when getting going on a new gentoo system. It's handy to say "emerge somephpapp" and get php and mysql in the process... except then they're not in my world file.... though I suppose I can always just add them by hand. But doing an "emerge -D world" should find any dependencies of anything in the world file that need updating, right? So, my questions still stand: are these packages that glsa-check is finding stuff that other packages depended on at one point -- so they got pulled in -- but are now no longer needed? And what tool can I use to ascertain this? "emerge --depclean" is basically useless... it always wants to uninstall things that I'm fairly sure are needed. "etcat" doesn't seem to have anything for finding dependecies. And "equery depends" is still "unimplemented"... (though I thought I'd used that at one point but it seems to find no results for everything I try). Ideas anyone? What do you use to keep orphaned packages off your system? b -- gentoo-server@gentoo.org mailing list