From nobody Thu Mar 14 20:37:56 2024 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4TwfMv1PWVz5DXFj for ; Thu, 14 Mar 2024 20:38:03 +0000 (UTC) (envelope-from daniel.engberg.lists@pyret.net) Received: from smtp-bc0f.mail.infomaniak.ch (smtp-bc0f.mail.infomaniak.ch [IPv6:2001:1600:7:10::bc0f]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "relay.mail.infomaniak.ch", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4TwfMt2wPwz4gfP for ; Thu, 14 Mar 2024 20:38:02 +0000 (UTC) (envelope-from daniel.engberg.lists@pyret.net) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=pyret.net header.s=20231006 header.b=baEfxlyY; dmarc=pass (policy=reject) header.from=pyret.net; spf=pass (mx1.freebsd.org: domain of daniel.engberg.lists@pyret.net designates 2001:1600:7:10::bc0f as permitted sender) smtp.mailfrom=daniel.engberg.lists@pyret.net Received: from smtp-3-0001.mail.infomaniak.ch (smtp-3-0001.mail.infomaniak.ch [10.4.36.108]) by smtp-4-3000.mail.infomaniak.ch (Postfix) with ESMTPS id 4TwfMn0BTjzSVn; Thu, 14 Mar 2024 21:37:57 +0100 (CET) Received: from unknown by smtp-3-0001.mail.infomaniak.ch (Postfix) with ESMTPA id 4TwfMm44wHzMpq0F; Thu, 14 Mar 2024 21:37:56 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=pyret.net; s=20231006; t=1710448676; bh=MuDphfjuH1FeOEdSepT0dZEJpMLl4QgAOWxzeB2LNsg=; h=Date:Subject:From:Reply-To:To:Cc:References:In-Reply-To:From; b=baEfxlyYG53fksaFOVLGqT7/LjJbru+Ty5TC0m/PbuCbTbDyrCcf8y6JeZz38NkSq UZgVa2vUJO0ZhZLNt3ODiBtqhFHzDKDEazklQTPp5ayaBTeaWRIt2SHCrQgWAQVOxQ qs+mufC88o4NMunmYaCtRFsuF0EMqG5DPWStvFBEEW9GKBLHZAOqrhhZcn4Y8pCvIr R1U9GfZow5dCwgxTwPVlG6pP5qgXFjHmrxvqaXiOB6cxz5ABV4589Y4pY/70aGMIjQ 5asL+rJOkqk1sv7Zd+r/eohHlmgIhgesWcBhOVrntPMDg9BlnaT4lS6LrWZ/N2qXUt kKNa/WK3v5btQ== Message-ID: <7a7501f71442d27f6d8c1c0a16f247c1@mail.infomaniak.com> Date: Thu, 14 Mar 2024 21:37:56 +0100 Subject: Re: Proposed ports deprecation and removal policy From: Daniel Engberg Reply-To: Daniel Engberg To: Eugene Grosbein Cc: Florian Smeets , ports@freebsd.org List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-WS-User-Origin: eyJpdiI6InhiRUZwRXRzWHRNWThjY29LeUkxZFE9PSIsInZhbHVlIjoiLzhOVGVZZ1ZCYklSZ2I5dENPSmdrUT09IiwibWFjIjoiMWRiOWViZWY2MTlmYjE0ODFiMTI2MzE3OTM4YWQwMzEyMmM2OGNiMTRhYTc4MzVkNDUzOTU5YTMwNDZlZGI4NCIsInRhZyI6IiJ9 X-WS-User-Mbox: eyJpdiI6IkJ6Yk1EcFpUeGtwZHAvdFVFUmgrblE9PSIsInZhbHVlIjoiN1FQTkZVWWZxZkgyY3A3ZG5XTEUyZz09IiwibWFjIjoiMDUxMmYyNmViMTljMjJkYmMyOTczMDc1MDRjNzAyOTNmNWIxNzFkNDI0OGUzMzY0YmYwOWZiMmUyZTBjMjNjYSIsInRhZyI6IiJ9 X-WS-Location: eJxzKUpMKykGAAfpAmU- X-Mailer: Infomaniak Workspace (1.3.654) References: <435edf7c-a956-4317-b327-3372de70dbef@FreeBSD.org> <1c5b7818-842f-f7b8-9d4e-5bf681cad20e@grosbein.net> <64c7435c-2d69-1f62-ba7c-30812860a457@grosbein.net> <9646fd5d0666c8e57795ea1b370b6af1@mail.infomaniak.com> In-Reply-To: X-Infomaniak-Routing: alpha X-Spamd-Bar: --- X-Spamd-Result: default: False [-4.00 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-1.00)[-0.998]; DMARC_POLICY_ALLOW(-0.50)[pyret.net,reject]; R_DKIM_ALLOW(-0.20)[pyret.net:s=20231006]; R_SPF_ALLOW(-0.20)[+ip6:2001:1600:7:10::/64:c]; MIME_GOOD(-0.10)[text/plain]; ARC_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; TO_DN_SOME(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; ASN(0.00)[asn:29222, ipnet:2001:1600::/32, country:CH]; DKIM_TRACE(0.00)[pyret.net:+]; HAS_REPLYTO(0.00)[daniel.engberg.lists@pyret.net]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; MLMMJ_DEST(0.00)[ports@freebsd.org]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_LAST(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; REPLYTO_EQ_FROM(0.00)[] X-Rspamd-Queue-Id: 4TwfMt2wPwz4gfP On 2024-03-12T15:15:49.000+01:00, Eugene Grosbein wrot= e: > 12.03.2024 3:24, Daniel Engberg =D0=BF=D0=B8=D1=88=D0=B5=D1=82: >=20 > [skip] >=20 >=20 > > Another possible option would be to add something to the port's mate= data that makes pkg aware and easy notiable > > like using a specific color for portname and related information to si= gnal > > like if it's red it means abandonware and potentially reduced security= . > =20 > Of course, we need to inform users but not enforce. Tools, not policy. >=20 Eugene Hi, Given that we seem to agree on these points in general why should such port= s still be kept in the tree? We don't have such tooling available and it wo= nt likely happen anytime soon. Because it's convenient for a committer who = uses these in a controlled network despite being potentially harmful for ot= hers? Just to be clear, I'm after where do we draw the line in general. If we look at other distros in general based on availability the decision s= eems to favour overall user security than "convenience". Given that we have= security policies etc in place I'd say that we in general are leaning towa= rds user security? Best regards, Daniel