[Samba] leaving a domain?

[Michael Tokarev]

20.06.2024 15:45, Rowland Penny via samba wrote:
> On Thu, 20 Jun 2024 15:19:35 +0300
> Michael Tokarev <mjt at tls.msk.ru> wrote:

>> 2. it is the first time I see mention of setproctitle in samba
>> context. If such dependency is needed, I'd say it should be
>> documented somewhere, no?
> 
> It is, just not very well, see here:
> 
> https://wiki.samba.org/index.php/Package_Dependencies_Required_to_Build_Samba

This one is to *build* samba (which is obviously wrong, setproctitle is not
needed during build time), not to *run* samba.

With my package maintainer hat on, I'd say samba packages does not need
setproctitle runtime dependency, because specifying passwords on the command
line is inherently insecure, and installing setproctitle will eliminate the
warning but will not fix the underlying issue entirely (and also will give a
precedent - such usage is okay here, so it must be okay to extend it to other
tools as well).  So the right way is to avoid specifying passwords on the command
line entirely, and if the user knows what they're doing, they can install the
setproctitle thing manually.

Thanks,

/mjt

-- 
GPG Key transition (from rsa2048 to rsa4096) since 2024-04-24.
New key: rsa4096/61AD3D98ECDF2C8E  9D8B E14E 3F2A 9DD7 9199  28F1 61AD 3D98 ECDF 2C8E
Old key: rsa2048/457CE0A0804465C5  6EE1 95D1 886E 8FFB 810D  4324 457C E0A0 8044 65C5
Transition statement: http://www.corpit.ru/mjt/gpg-transition-2024.txt