From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id C5749138350 for ; Wed, 22 Apr 2020 19:15:51 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id DC09CE0FED; Wed, 22 Apr 2020 19:15:39 +0000 (UTC) Received: from mail-pg1-f194.google.com (mail-pg1-f194.google.com [209.85.215.194]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 9071BE0DFB for ; Wed, 22 Apr 2020 19:15:39 +0000 (UTC) Received: by mail-pg1-f194.google.com with SMTP id o185so1589592pgo.3 for ; Wed, 22 Apr 2020 12:15:39 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=BP4+wcGhuNoeKgbuAjvqndH4etHGj/QRH1u/Bnh3Wcs=; b=JNVWtJUysSiHhxFLQ1ladSpTo3GdYV0FwBygesiFGDVHGawILOaywVVDpc6l8BOQHt 7kSLC8ph9cU2qF4OFx6pj4ZNnY32qJcsUKCHMub+dYdnareoXgnAFQDuhcjSd+LW57+X /KN2kfp3rL90e/Uw9MygAzAtVCkMwWvFqA85w0lVbs6TMSATk31lw+sx+ZiLM69Fm7hJ mh1tpCDDJkJO13ri3HLrfK2q58itp3Za/Y9OBCot7P53tJPn/lRvDmxNzxn8HWMTGlfi pHqYvqXMMK3CQYD3DVBv0gz5m/N6noldogdGYkiPcehrB1v8Y/G4sWRaKbNKH8D35QAN o2dg== X-Gm-Message-State: AGi0PuYCKqzYex6tU6RmHdRviAfiUJKqkM0NN44BB7iIXdBSWsrwSTl/ ny7DddYjDbiC+f6c24ulhGC6AA7d5IiO98/BtURKrw6v X-Google-Smtp-Source: APiQypI6f/picMTrJD1zDQEsB5sojbS5t9IkT8ByzRDditiWaUdwpnvaLmhj5rpHQEJNTDw4sdMKFFOJ8Sa8DQZqe0Q= X-Received: by 2002:aa7:800b:: with SMTP id j11mr31151pfi.142.1587582932002; Wed, 22 Apr 2020 12:15:32 -0700 (PDT) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 References: <20200421165803.GB187193@redacted> <11506562.O9o76ZdvQC@peak> <20200421190145.GF187193@redacted> <20200422161455.GA23147@legohost> <20200422162629.GA4639@legohost> <20200422180825.GA12885@legohost> In-Reply-To: From: Michael Jones Date: Wed, 22 Apr 2020 14:15:20 -0500 Message-ID: Subject: Re: [OBORONA-SPAM] Re: [OBORONA-SPAM] Re: [OBORONA-SPAM] Re: [gentoo-user] Is Gentoo dead? To: gentoo-user@lists.gentoo.org Content-Type: multipart/alternative; boundary="000000000000b6c1b805a3e5f4ae" X-Archives-Salt: c2ce0cae-75db-43a7-bdb1-995426880fdc X-Archives-Hash: 915dbb63fe61e1964fd11273b07e5eef --000000000000b6c1b805a3e5f4ae Content-Type: text/plain; charset="UTF-8" On Wed, Apr 22, 2020 at 1:33 PM Michael Orlitzky wrote: > On 4/22/20 2:24 PM, Michael Jones wrote: > > > > > > On Wed, Apr 22, 2020 at 1:19 PM Michael Orlitzky > > wrote: > > > > How do you plan to update all of your programs when there's a > security > > vulnerability in, say, OpenSSL? > > > > > > Is there some reason why all packages that depend on OpenSSL, > > transitively, could not be recompiled? > > If you statically link more than a few things, this is emerge -e @world > twenty times a day. > > Why would I need to emerge world? Portage knows the full list of packages that depend on openssl, transitively. Unless you're generalizing to say that (almost) everything depends on openssl, I suppose. Also, didn't the handbook, at one point, say not to sync portage more than once a day? So why would package installations happen 20 times per day? --000000000000b6c1b805a3e5f4ae Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Wed, Apr 22, 2020 at 1:33 PM Micha= el Orlitzky <mjo@gentoo.org> wr= ote:
On 4/22/20 = 2:24 PM, Michael Jones wrote:
>
>
> On Wed, Apr 22, 2020 at 1:19 PM Michael Orlitzky <mjo@gentoo.org
> <mailto:mjo@gen= too.org>> wrote:
>
>=C2=A0 =C2=A0 =C2=A0How do you plan to update all of your programs when= there's a security
>=C2=A0 =C2=A0 =C2=A0vulnerability in, say, OpenSSL?
>
>
> Is there some reason why all packages that depend on OpenSSL,
> transitively, could not be recompiled?=C2=A0

If you statically link more than a few things, this is emerge -e @world
=C2=A0twenty times a day.


Why would I need to emerge world? Port= age knows the full list of packages that depend on openssl, transitively.

Unless you're generalizing to say that (almost)= everything depends on openssl, I suppose.

Also, d= idn't the handbook, at one point, say not to sync portage more than onc= e a day? So why would package installations happen 20 times per day?=C2=A0<= /div>
--000000000000b6c1b805a3e5f4ae--