Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 82190 - Adding --disable-send-postcard-to-developer to the afterstep ebuilds
Summary: Adding --disable-send-postcard-to-developer to the afterstep ebuilds
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All All
: High normal (vote)
Assignee: Aaron Walker (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-02-15 18:01 UTC by Sven Wegener
Modified: 2005-03-30 09:21 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sven Wegener gentoo-dev 2005-02-15 18:01:25 UTC
I'd like to have --disable-send-postcard-to-developer added to the econf line
for the afterstep ebuilds. Reasons:

1. During src_compile afterstep tries to send that mail, I guess it's called by
   one of the Makefiles. If the following conditions are met this breaks sandbox:
   - ${PORTAGE_TMPDIR}/portage/homedir/.afterstep doesn't exist (precondition for
     afterstep to send that mail)
   - The MTA (for me exim) is configured to log things in /var/log (this causes the violation)
2. Information disclosure as according to the configure output the generated mail
   contains compiler and kernel version among several other things. Sending this
   mail shouldn't be the default for our users, who certainly don't know that
   afterstep sends that email, if their not familar with afterstep.
Comment 1 Nathan Mahon 2005-02-17 09:19:41 UTC
Are you sure it's doing it during compile?  It's a bug if so, because the email is warned about during compile, but actually only supposed to be sent when a user's dir is created.  I'm working on a more privacy friendly version anyway.

Thanks,
n8
Comment 2 Nathan Mahon 2005-03-30 08:48:30 UTC
this is all optional at runtime now. when a user first uses afterstep on an account, it will ask him, much like pine and others, whether they want to send the postcard. so ... it's fixed.
Comment 3 Aaron Walker (RETIRED) gentoo-dev 2005-03-30 09:21:07 UTC
2.00.04 is in cvs.