As discussed on gentoo-dev & as suggested by Paul de Vrieze, I am opening a bug to request a "webmin" global USE flag. My Gentoo server runs with no GUI at all, and when I need to configure an application (rather a *server-application*) on it, I immediately search /etc for the config files & edit them in nano. I was consequently quite shocked when I emerged Samba, to find that the Swat component is hard-wired into ebuild. Now, I'm not disputing that there may be good reasons for this, but I had emerge'd this beautiful, simple, non-GUI, server-optimised Unix, and a certainly don't want such rubbish on my system!! Surely this is a securuty risk..? Or do I just not want it on my system because it offends my sense of neatness & order..? I propose a global "webmin" USE flag, therefore, which can be used by all or any ebuilds which have optional web-based admiistration utilities. It seems to me that there are quite a number of packages which could take advantage of this flag. Reproducible: Always Steps to Reproduce: 1. emerge samba 2. 3. Actual Results: It insalled SWAT! Expected Results: Not installed SWAT.
Bug-wranglers - please assign this to whoever is looking after Samba now. Thanks, Stu
It is not easy to install samba without swat. The samba ebuild installs /etc/xinetd.d/swat which has 'disabled = yes' by default. Hence, there is a minimal security risk. A majority of users won't even have xinetd running. Suggest -> WONT or INVALID
Are you sure..? I've been unsuccessful playing around with this myself, but I have very poor Bash / ebuild skills. I'm sure I have read articles on the net in which others have installed Samba without SWAT - I can't find them right now, but I gathered that it was a brutal `rm -rf /some/path/to/swat` at some point during the configure / make. My personal opinion is SWAT is simply uglier than I am, and it shouldn't be on my system at all. Do I have to move this upstream..? I fear that this would be a low-joy move.
There's no clean way to disable swat in samba, and automatic removing it is a very bad idea IMHO. If the samba team puts some nice way in autoconf to disable building and installing of swat, feel free to reopen this bug. Closing it as upstream now.
