Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 108561 - USE="*" pulls in all dependencies but doesn't affect USE
Summary: USE="*" pulls in all dependencies but doesn't affect USE
Status: RESOLVED FIXED
Alias: None
Product: Portage Development
Classification: Unclassified
Component: Core (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Portage team
URL:
Whiteboard:
Keywords: InVCS
Depends on:
Blocks: 115839
  Show dependency tree
 
Reported: 2005-10-08 20:10 UTC by Alec Warner
Modified: 2006-01-27 19:25 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
my test ebuild (testpackage-99.ebuild,492 bytes, text/plain)
2005-10-08 20:10 UTC, Alec Warner (RETIRED)
Details
a log of this behavior (typescript,10.42 KB, text/plain)
2005-10-08 20:13 UTC, Alec Warner (RETIRED)
Details
Remove the compat code. (portage_dep_use_reduce.patch,455 bytes, patch)
2005-10-09 20:40 UTC, Alec Warner (RETIRED)
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Alec Warner (RETIRED) archtester gentoo-dev Security 2005-10-08 20:10:04 UTC
I made a test ebuild to try out a few things with USE="*" and I noticed odd 
behavior.  I don't believe support for this was ever intended, but it does 
things that could wreak havoc to a system if used.

Fex, USE="*" emerge -pv testpackage doesn't print out that all flags are really 
on, even though the DEPEND phase pulls in all the dependencies.

This also means the USE flags in the VDB entry are also wrong.  It also points 
to invalid environment data in binpkgs, very dangerous when inserting a binpkg 
into another system, mostly likely the package will fail since it links to 
things that won't exist on a different system.

Maybe just want to add some documentation that USE="*" is very bad, or just make 
it no longer work, or even cooler, make it work correctly because mplayer and 
friends have a lot of use flags ;)
Comment 1 Alec Warner (RETIRED) archtester gentoo-dev Security 2005-10-08 20:10:45 UTC
Created attachment 70194 [details]
my test ebuild

The ebuild I wrote to test out flags and dependencies.
Comment 2 Alec Warner (RETIRED) archtester gentoo-dev Security 2005-10-08 20:13:40 UTC
Created attachment 70195 [details]
a log of this behavior

Just a lot detailing an installation and incorrect data in the VDB, and my
emerge info.
Comment 3 Alec Warner (RETIRED) archtester gentoo-dev Security 2005-10-09 20:37:27 UTC
swegener mentioned that this was a compat hack for repoman of old, and a quick 
scan of repoman shows that the newer versions use matchall instead of USE="*".

I've also checked gentoolkit, gentoolkit-dev to see if they used use_reduce in 
an improper manner.  They don't appear to use it at all.

Unless there is a reason to keep this, might as well axe it out of portage.

Comment 4 Alec Warner (RETIRED) archtester gentoo-dev Security 2005-10-09 20:40:08 UTC
Created attachment 70265 [details, diff]
Remove the compat code.

Here is a patch to remove the old compat code.
Comment 5 Jason Stubbs (RETIRED) gentoo-dev 2005-12-30 23:28:52 UTC
Released in portage-2.1_pre3
Comment 6 Jason Stubbs (RETIRED) gentoo-dev 2006-01-27 19:25:33 UTC
Released in 2.1_pre4