Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 320371 - sci-geosciences/googleearth should *optionally* install the bundled minimial nss-mdns
Summary: sci-geosciences/googleearth should *optionally* install the bundled minimial ...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High enhancement (vote)
Assignee: Vlastimil Babka (Caster) (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-05-18 11:06 UTC by Martin Väth
Modified: 2010-05-20 12:39 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Martin Väth 2010-05-18 11:06:46 UTC
Although I appreciate that most bundled libraries are now "unbundled"
from googleearth, I would like to see this for the bundled minimal
nss-mdns only optionally (i.e., controlled by a USE-flag, similarly
to the qt-bundled USE-flag):

The reason is that sys-auth/nss-mdns from the tree needs net-dns/avahi
(and by that also sys-libs/libcap and sys-apps/attr), the installation
of all of which have strong security implications (depending on
the security concept on the machine, it might be a possible attack vector
to have these packets installed).

Thus, in order to be able to use googleearth on such systems relatively safe,
it would be nice if there were a USE-flag to have the bundled minimal
nss-mdns which keeps the security implications to a minimum.
Comment 1 Vlastimil Babka (Caster) (RETIRED) gentoo-dev 2010-05-19 20:20:40 UTC
OK I added a mdns-bundled flag for this. Though I kind of doubt that a machine with strong security concept should be used to run stuff like google earth at all :)
Comment 2 Martin Väth 2010-05-20 12:39:20 UTC
Thanks a lot.

You are right, the real cause of the problem is that googleearth is too
insecure (e.g. by using such things like nss-mdns).
However, I doubt that I can convince google to change this, and the application
is simply needed, occassionally...