Re: Security project meeting summary

On Tuesday 22 July 2008, Paige Thompson wrote:
> misfit[1004]:~% sudo emerge -uva nethack
> Password:
>
> These are the packages that would be merged, in order:
>
> Calculating dependencies |
> !!! All ebuilds that could satisfy "games-roguelike/nethack" have
> been masked.
> !!! One of the following masked packages is required to complete your
> request:
> - games-roguelike/nethack-3.4.3-r1 (masked by: package.mask)
> /usr/portage/profiles/package.mask:
> # Tavis Ormandy <[email protected]> (21 Mar 2006)
> # masked pending unresolved security issues #125902
>
>
> For more information, see MASKED PACKAGES section in the emerge man
> page or refer to the Gentoo Handbook.

Sorry, I do not understand the point you are trying to make. Nethack has 
an unresolved security bug, and if you want to install it anyway, put 
it in your /etc/portage/package.unmask  -- as described in
"man emerge". I do not see the gain by setting up a system that would 
completely ignore *all* security-related package masks.


Robert

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
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=JsO1
-----END PGP SIGNATURE-----