CVS update: samba/source

[Andrew Bartlett]

On Thu, 2003-09-11 at 00:08, Gerald (Jerry) Carter wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On Wed, 10 Sep 2003, Alexander Bokovoy wrote:
> 
> > 
> > Date:	Wed Sep 10 13:39:09 2003
> > Author:	ab
> > 
> > Update of /home/cvs/samba/source
> > In directory dp.samba.org:/tmp/cvs-serv3495
> > 
> > Modified Files:
> >       Tag: SAMBA_3_0
> > 	configure.in 
> > Log Message:
> >
> > Now that CAN-2003-0689 is published officially, we need to make possible
> > to build on systems with fixed getgrouplist() in GNU libc < 2.3.2.
> > Unfortunately, we can't detect correctness of getgrouplist() functioning
> > in portable way so this is left up to developer/packager.
> > 
> > This patch adds --with-good-getgrouplist[=no] switch to configure which
> > packagers on Linux platforms could use to specify in their own builds if
> > they now that glibc on their platform is fixed w.r.t CAN-2003-0689. By
> > default we still think that glibc is vulnerable and perform our version
> > check.
> 
> Why do we have to add another configure option?  It takes forever to gid 
> rid of these things.  If a package maintainer kno9ws that glibc is ok on 
> their platform, then they can patch the source (samba).  That's what linux 
> distros do anyways.
> 
> I really want to revert this change but will wait to see if other people
> agree.
> 
> Sorry.  I should have spoken up in response to your original mail.

I agree - these take forever, and those that 'know' their system is fine
(and only a packager can really know that, as they can assert a
dependency) can patch. 

Otherwise, we have a config option for years - but worse we have people
who will turn it on/off on all sorts of systems, without understanding
it.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20030910/eeb8e86c/attachment.bin