From debbugs-submit-bounces@debbugs.gnu.org Wed Oct 07 13:04:41 2020 Received: (at submit) by debbugs.gnu.org; 7 Oct 2020 17:04:41 +0000 Received: from localhost ([127.0.0.1]:57977 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kQCrk-0004o5-T3 for submit@debbugs.gnu.org; Wed, 07 Oct 2020 13:04:41 -0400 Received: from lists.gnu.org ([209.51.188.17]:57598) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kQCrg-0004nv-J3 for submit@debbugs.gnu.org; Wed, 07 Oct 2020 13:04:35 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:53772) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kQCrg-00013n-EU for guix-patches@gnu.org; Wed, 07 Oct 2020 13:04:32 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:48457) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kQCrg-0005C1-4k; Wed, 07 Oct 2020 13:04:32 -0400 Received: from [2001:980:1b4f:1:42d2:832d:bb59:862] (port=42636 helo=dundal.janneke.lilypond.org) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1kQCrd-0005Ss-8b; Wed, 07 Oct 2020 13:04:29 -0400 From: Jan Nieuwenhuizen To: guix-patches@gnu.org Subject: [PATCH] gnu: sudo: Depend on python-minimal instead of python. Organization: AvatarAcademy.nl X-Url: http://AvatarAcademy.nl Date: Wed, 07 Oct 2020 19:04:27 +0200 Message-ID: <87362qc6hw.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="=-=-=" X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) --=-=-= Content-Type: text/plain Hi, Depending on python pulls in X11: --8<---------------cut here---------------start------------->8--- $ guix graph --path sudo libx11 sudo@1.9.3p1 python@3.8.2 tk@8.6.10 libx11@1.6.9 --8<---------------cut here---------------end--------------->8--- which is unfortunate, especially for the Hurd. However...do we really want to extend sudo with eh, a large programming language that has a more impressive CVE list than a lovely tiny language such as, say Guile? ;) Greetings, Janneke --=-=-= Content-Type: text/x-patch; charset=utf-8 Content-Disposition: inline; filename=0001-gnu-sudo-Depend-on-python-minimal-instead-of-python.patch Content-Transfer-Encoding: quoted-printable >From e28a7f0679cc70f48f2583b2f3fe5f9a1984d6cc Mon Sep 17 00:00:00 2001 From: "Jan (janneke) Nieuwenhuizen" Date: Wed, 7 Oct 2020 18:49:29 +0200 Subject: [PATCH] gnu: sudo: Depend on python-minimal instead of python. Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset=3DUTF-8 * gnu/packages/admin.scm (sudo)[inputs]: Use python-minimal instead of python. --- gnu/packages/admin.scm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gnu/packages/admin.scm b/gnu/packages/admin.scm index e62a145614..399c55a080 100644 --- a/gnu/packages/admin.scm +++ b/gnu/packages/admin.scm @@ -1499,7 +1499,7 @@ system administrator.") ("linux-pam" ,linux-pam) ,@(if (%current-target-system) '() - `(("python" ,python))) + `(("python" ,python-minimal))) ("zlib" ,zlib))) (home-page "https://www.sudo.ws/") (synopsis "Run commands as root") --=20 Jan Nieuwenhuizen | GNU LilyPond http://lilypond.org Freelance IT http://JoyofSource.com | Avatar=C2=AE http://AvatarAcademy.com --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable --=20 Jan Nieuwenhuizen | GNU LilyPond http://lilypond.org Freelance IT http://JoyofSource.com | Avatar=C2=AE http://AvatarAcademy.com --=-=-=-- From debbugs-submit-bounces@debbugs.gnu.org Wed Oct 07 17:18:49 2020 Received: (at 43851) by debbugs.gnu.org; 7 Oct 2020 21:18:49 +0000 Received: from localhost ([127.0.0.1]:58260 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kQGpl-0004QX-JY for submit@debbugs.gnu.org; Wed, 07 Oct 2020 17:18:49 -0400 Received: from tobias.gr ([80.241.217.52]:54968) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kQGpg-0004QL-AH for 43851@debbugs.gnu.org; Wed, 07 Oct 2020 17:18:48 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tobias.gr; s=2018; bh=i8iq8FHKvQ1dLvMVyYEpXeJJlZTVJo/AZf2u4qp5U1M=; h=date:in-reply-to: references:subject:cc:to:from; b=GQxznxfZ2YnyL6w6hDRx1QLFlXRyXnM0lePwC +3or9SEHIYL3lLzRv8mOMyoWY3wuHROhtnn2NdmKUkh9SRnRveGynqN5xtX/eS+bfThHk6 tt/2IE7j3Wv0qjzpbSrqmxL+LmWPKI6CE3MIwAwHl3J9CFMKUv6a08YLdHGoZHcTVAbtGJ etF8YNC+QRjvskxiojM4P21ubVKHjlENFa1n+RTg1OSVCnymT2mLmY2NOMXrwWuHOApOf8 eg/DUDF/I5OL8isn6TJkNo7sCYUvKvTK3yFPNgp47CratwBv0QxdUPymzASCMikaC8Oqi7 11dggpWj0Ez6YpXk3cF+wXDag== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id 6f3b9e71 (TLSv1.2:ECDHE-ECDSA-AES256-GCM-SHA384:256:NO); Wed, 7 Oct 2020 21:18:52 +0000 (UTC) BIMI-Selector: v=BIMI1; s=default; From: Tobias Geerinckx-Rice To: Jan Nieuwenhuizen Subject: Re: [bug#43851] [PATCH] gnu: sudo: Depend on python-minimal instead of python. References: <87362qc6hw.fsf@gnu.org> In-reply-to: <87362qc6hw.fsf@gnu.org> Message-ID: <87v9fld9al.fsf@nckx> Date: Wed, 07 Oct 2020 23:18:43 +0200 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 43851 Cc: 43851@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) --=-=-= Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Good evening Janneke, Jan Nieuwenhuizen =E5=86=99=E9=81=93=EF=BC=9A > Depending on python pulls in X11: It only depends on Python because I wasn't [consciously] aware of=20 the existence of python-minimal. Your patch LGTM. > However...do we really want to extend sudo with eh, a large=20 > programming > language I enabled Python support in sudo because it exists for the same=20 reason that Guile does. If we want a less hackable sudo - certainly a defensible position=20 =2D that's fine by me. If we do, then yes, I think Python is=20 reasonable considering the alternative (C). > that has a more impressive CVE list than a lovely tiny language > such as, say Guile? ;) Python has a more impressive almost-anything than Guile so that=20 means nothing. Kind regards, T G-R --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iIMEARYKACsWIQT12iAyS4c9C3o4dnINsP+IT1VteQUCX34wsw0cbWVAdG9iaWFz LmdyAAoJEA2w/4hPVW15bmcA/A5uszUb5+L+VgWlQuEMf85wlWZymoAfOOtQYNLQ magiAP9cEZ6UflKvWkBIxTq4bveM+sEWZMrv+B3pnXzGnwTIDg== =IWmU -----END PGP SIGNATURE----- --=-=-=-- From debbugs-submit-bounces@debbugs.gnu.org Thu Oct 08 03:03:14 2020 Received: (at 43851) by debbugs.gnu.org; 8 Oct 2020 07:03:14 +0000 Received: from localhost ([127.0.0.1]:58537 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kQPxJ-00027V-WA for submit@debbugs.gnu.org; Thu, 08 Oct 2020 03:03:14 -0400 Received: from dd26836.kasserver.com ([85.13.145.193]:56848) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kQPxI-00027M-4i for 43851@debbugs.gnu.org; Thu, 08 Oct 2020 03:03:13 -0400 Received: from localhost (80-110-126-103.cgn.dynamic.surfer.at [80.110.126.103]) by dd26836.kasserver.com (Postfix) with ESMTPSA id 69A2633620C8; Thu, 8 Oct 2020 09:03:10 +0200 (CEST) Date: Thu, 8 Oct 2020 09:03:07 +0200 From: Danny Milosavljevic To: Jan Nieuwenhuizen Subject: Re: [bug#43851] [PATCH] gnu: sudo: Depend on python-minimal instead of python. Message-ID: <20201008090242.56cb7083@scratchpost.org> In-Reply-To: <87362qc6hw.fsf@gnu.org> References: <87362qc6hw.fsf@gnu.org> X-Mailer: Claws Mail 3.17.5 (GTK+ 2.24.32; x86_64-unknown-linux-gnu) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="Sig_/U4/H3AtNNw2FNPl0K64=kog"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 43851 Cc: 43851@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) --Sig_/U4/H3AtNNw2FNPl0K64=kog Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Hi Janneke, On Wed, 07 Oct 2020 19:04:27 +0200 Jan Nieuwenhuizen wrote: > Depending on python pulls in X11: >=20 > --8<---------------cut here---------------start------------->8--- > $ guix graph --path sudo libx11 > sudo@1.9.3p1 > python@3.8.2 > tk@8.6.10 > libx11@1.6.9 > --8<---------------cut here---------------end--------------->8--- >=20 > which is unfortunate, especially for the Hurd. >=20 > However...do we really want to extend sudo with eh, a large programming > language that has a more impressive CVE list than a lovely tiny language > such as, say Guile? ;) I am very much in favor of not having unnecessary dependencies in things which are suid root. Also, there already IS PAM support in sudo, and PAM has modules--so why have yet another weird new mechanism? For auditing, there is auditd (even in Guix already). Furthermore, it makes updating sudo more brittle. Also, we removed when cross-compiling already, pointing to other problems. Please remove the python dependency entirely. --Sig_/U4/H3AtNNw2FNPl0K64=kog Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEds7GsXJ0tGXALbPZ5xo1VCwwuqUFAl9+uasACgkQ5xo1VCww uqWAxggAmv6G7aFC8vszTgWrrD7TYWBwNqjIcWlVI6Znu58C6EIgihs2ycrhrfkV vqdN6Ye8UvFEPsgsQUnBUq1rt605QloLaBbpkPrf5jMqXvx0jrzbrSmWDUQ9tUNl 1FajdrqaC7kadQTjeQEKyNU0kogw8kyV2E8IB0afXsx2W8McL/CYleSR9I8wQeFH 3IT9xEzlF0fp7zly7VnXH/iOCe/YxufAzi7ULTcZJ/HUANcYA3aEeSF9/AmVJIiG oBUEk8MQVPrNKQ00i3H+fmD9VbF0XUNTz5puIUzdD0g8CzSWx0QxFaE9aJBmSZrb IymHebU8ftIN4ia1PSFY9KNUcfmmlw== =sLgV -----END PGP SIGNATURE----- --Sig_/U4/H3AtNNw2FNPl0K64=kog-- From debbugs-submit-bounces@debbugs.gnu.org Fri Oct 09 13:18:57 2020 Received: (at 43851) by debbugs.gnu.org; 9 Oct 2020 17:18:57 +0000 Received: from localhost ([127.0.0.1]:36147 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kQw2i-0001pt-Nx for submit@debbugs.gnu.org; Fri, 09 Oct 2020 13:18:57 -0400 Received: from eggs.gnu.org ([209.51.188.92]:42854) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kQw2g-0001pg-47 for 43851@debbugs.gnu.org; Fri, 09 Oct 2020 13:18:55 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:48192) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kQw2a-0002tc-1g; Fri, 09 Oct 2020 13:18:48 -0400 Received: from [2001:980:1b4f:1:42d2:832d:bb59:862] (port=36932 helo=dundal.janneke.lilypond.org) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1kQw2Z-0004I6-IF; Fri, 09 Oct 2020 13:18:47 -0400 From: Jan Nieuwenhuizen To: Tobias Geerinckx-Rice Subject: Re: [bug#43851] [PATCH] gnu: sudo: Depend on python-minimal instead of python. Organization: AvatarAcademy.nl References: <87362qc6hw.fsf@gnu.org> <87v9fld9al.fsf@nckx> X-Url: http://AvatarAcademy.nl Date: Fri, 09 Oct 2020 19:18:44 +0200 In-Reply-To: <87v9fld9al.fsf@nckx> (Tobias Geerinckx-Rice's message of "Wed, 07 Oct 2020 23:18:43 +0200") Message-ID: <87imbjs4gb.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 43851 Cc: 43851@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Tobias Geerinckx-Rice writes: Hello Tobias, > Jan Nieuwenhuizen =E5=86=99=E9=81=93=EF=BC=9A >> Depending on python pulls in X11: > > It only depends on Python because I wasn't [consciously] aware of the > existence of python-minimal. Your patch LGTM. > >> However...do we really want to extend sudo with eh, a large >> programming >> language > > I enabled Python support in sudo because it exists for the same reason > that Guile does. Yes, hackability/extensibility makes sense and is good in general... > If we want a less hackable sudo - certainly a defensible position - > that's fine by me. If we do, then yes, I think Python is reasonable > considering the alternative (C). ...but in this case, yes, a less hackable sudo is what I'm certainly leaning towards. Danny Milosavljevic writes: > I am very much in favor of not having unnecessary dependencies in things > which are suid root. Also, there already IS PAM support in sudo, and > PAM has modules--so why have yet another weird new mechanism? For auditi= ng, > there is auditd (even in Guix already). > Furthermore, it makes updating sudo more brittle. > Also, we removed when cross-compiling already, pointing to other problems. > Please remove the python dependency entirely. @Tobias: would you please revert/remove the Python addition to sudo (or else discuss some more with others?). >> that has a more impressive CVE list than a lovely tiny language >> such as, say Guile? ;) > > Python has a more impressive almost-anything than Guile so that means > nothing. Yeah, Python is amazing. Greetings, Janneke --=20 Jan Nieuwenhuizen | GNU LilyPond http://lilypond.org Freelance IT http://JoyofSource.com | Avatar=C2=AE http://AvatarAcademy.com From debbugs-submit-bounces@debbugs.gnu.org Fri Oct 09 14:15:52 2020 Received: (at 43851) by debbugs.gnu.org; 9 Oct 2020 18:15:52 +0000 Received: from localhost ([127.0.0.1]:36165 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kQwvo-00038F-8J for submit@debbugs.gnu.org; Fri, 09 Oct 2020 14:15:52 -0400 Received: from mail-qt1-f195.google.com ([209.85.160.195]:40412) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kQwvl-00037z-0y for 43851@debbugs.gnu.org; Fri, 09 Oct 2020 14:15:50 -0400 Received: by mail-qt1-f195.google.com with SMTP id m9so8610896qth.7 for <43851@debbugs.gnu.org>; Fri, 09 Oct 2020 11:15:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version:content-transfer-encoding; bh=tocuameXTUJR+9btNQNMF8dRcpgGhgaf9zI4c5MYY24=; b=TnAWrM9JUEplUL/btsNP2tPO4h8hjV0LVLZsK8rvjdkTV+0YCYjdtkEHu7Yb6rkcqY 0njWRasw5Fcs+AfywQu0RPPIWiPc14QgA2YFLezxMQ8A4yFOxlcyRvwlIFSVtumdvC1M C85Y/wJ4XBJ5pdci8hWxerPWn25wZAPjiWcngPlRFHXhIh+Rqvd2sS02HQt0LA5iBt9x a7TZ52Nn08w7jCIhy4UWNqFYK1ZTiPUNzzCB0kGTstLj3MLx5xHNmEWxft1PW5UxEIeR lbYwkMdL1g5CSdGUyvKeph9HwQ13sOtlbazHUk0Zlw1KpchzOWwTBYo96XwtQZMozKrB 5Crg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version:content-transfer-encoding; bh=tocuameXTUJR+9btNQNMF8dRcpgGhgaf9zI4c5MYY24=; b=sRy8a2ZBMdhn2VAbutUOQQ6TlloHgEF+lY4ijnAZ3uHa2EG1GMoHSx6i9PE/dHwcsi LX8CR/PKyzclYqCj9s5f+tJYKci0TWvCD0jFoD562y0yL48ZyeKNx5iQFh6DM9Q1OsfO jCERHEJDF/mcfWE5styHavYvGP295GagdygJkZn8LlzJucwcn9h7vrTzuL3Jamschpjc ZeqBd54EeUqx3C0w1+YZ+t3y/ZYDCzx1+b7nt6njTmZzaqrxUw83zmwe7JPYtW6uCshS +eoXHwmCEU0lxUzqMnQY0CpwZvAp5RVxMk8qk0Z2AWrtUMpM7LU6IfM24Doxn+Zj7BnG cAeA== X-Gm-Message-State: AOAM531T91MOHO9pIFEZunePgPkYBSSK+W+qiKqguE4V4Ndtlhg+2Xsw gJiPBUIJ66tpow/BTJECB60n35j0OOwLyQ== X-Google-Smtp-Source: ABdhPJwQzcgngXNkaWVXa3CpIPMMDPG+bhQMlDGUcpfeaiRcep96NKlD9a7S5NkqI4VgD0EV4rM4/A== X-Received: by 2002:ac8:711a:: with SMTP id z26mr14670075qto.75.1602267343151; Fri, 09 Oct 2020 11:15:43 -0700 (PDT) Received: from hurd (dsl-10-148-10.b2b2c.ca. [72.10.148.10]) by smtp.gmail.com with ESMTPSA id m18sm6869665qkg.77.2020.10.09.11.15.42 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 09 Oct 2020 11:15:42 -0700 (PDT) From: Maxim Cournoyer To: Tobias Geerinckx-Rice Subject: Re: [bug#43851] [PATCH] gnu: sudo: Depend on python-minimal instead of python. References: <87362qc6hw.fsf@gnu.org> <87v9fld9al.fsf@nckx> Date: Fri, 09 Oct 2020 14:15:41 -0400 In-Reply-To: <87v9fld9al.fsf@nckx> (Tobias Geerinckx-Rice's message of "Wed, 07 Oct 2020 23:18:43 +0200") Message-ID: <87wnzzqn8y.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 43851 Cc: 43851@debbugs.gnu.org, Jan Nieuwenhuizen X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hello Tobias! Tobias Geerinckx-Rice writes: > Good evening Janneke, > > Jan Nieuwenhuizen =E5=86=99=E9=81=93=EF=BC=9A >> Depending on python pulls in X11: > > It only depends on Python because I wasn't [consciously] aware of the > existence of python-minimal. Your patch LGTM. > >> However...do we really want to extend sudo with eh, a large >> programming >> language > > I enabled Python support in sudo because it exists for the same reason > that Guile does. > > If we want a less hackable sudo - certainly a defensible position - > that's fine by me. If we do, then yes, I think Python is reasonable > considering the alternative (C). What kind of uses does the Python bindings provide? If we don't have any use for it, I think it may be better to let the dependency go altogether, to keep sudo as small and secure as possible. Thanks, Maxim From debbugs-submit-bounces@debbugs.gnu.org Fri Oct 09 14:48:58 2020 Received: (at 43851) by debbugs.gnu.org; 9 Oct 2020 18:48:58 +0000 Received: from localhost ([127.0.0.1]:36208 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kQxRq-0003vz-56 for submit@debbugs.gnu.org; Fri, 09 Oct 2020 14:48:58 -0400 Received: from tobias.gr ([80.241.217.52]:34212) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kQxRn-0003vq-Rb for 43851@debbugs.gnu.org; Fri, 09 Oct 2020 14:48:57 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tobias.gr; s=2018; bh=qonc7SVuA5QA6x/Arxx91LzFshzrhzrts+WM16G3f14=; h=date:in-reply-to: references:subject:cc:to:from; b=Rq1M07B6/Pm5RO2U1xYTprH29ULvCYAId0Zh2 CCVQ2UMJqMSli794w3VYThBfNTwkMDDeLneYa9idh0JYXs+0p7AvJoyVAzERqjmPjtPocD jNfFN9aHenRgWl5xcIvh2wBP9Y9E6WRMjPVHd1SSx8u72OYxAs4POCGfnJ1fU21QMRLQKL nI3vEmR36mnxg3eziV5lul1WqxphtrbJ0z3ZGXfoljJHswGWgbkw3+cAP75iuTLG+R3Ocx faHxe/qDSXcnw/3OQFgT/Ju0wD9W+1s9ycboYEYz/hBB0yq/qlA2p6tH1J76NDsB+fi2b2 z/28NQo1VMbqgLrDpDD0Qdr3g== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id 05c6611f (TLSv1.2:ECDHE-ECDSA-AES256-GCM-SHA384:256:NO); Fri, 9 Oct 2020 18:49:04 +0000 (UTC) BIMI-Selector: v=BIMI1; s=default; From: Tobias Geerinckx-Rice To: Maxim Cournoyer Subject: Re: [bug#43851] [PATCH] gnu: sudo: Depend on python-minimal instead of python. References: <87362qc6hw.fsf@gnu.org> <87v9fld9al.fsf@nckx> <87wnzzqn8y.fsf@gmail.com> In-reply-to: <87wnzzqn8y.fsf@gmail.com> Date: Fri, 09 Oct 2020 20:48:55 +0200 Message-ID: <87imbjz148.fsf@nckx> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 43851 Cc: 43851@debbugs.gnu.org, Jan Nieuwenhuizen X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) --=-=-= Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Heyho Maxim, Maxim Cournoyer =E5=86=99=E9=81=93=EF=BC=9A > What kind of uses does the Python bindings provide? They're not bindings in the way I understand the term; more like a=20 plug-in interface that allows you to implement security policies=20 beyond the rudimentary =E2=80=98sudoers=E2=80=99 format (or writing a C ext= ension=20 *shudder*). Basically: what we would have used Guile for :-) The rest of the world uses Python. However, PAM is not relevant to the discussion & served only to=20 confuse. > If we don't have any use for it, I think it may be better to let=20 > the > dependency go altogether, to keep sudo as small and secure as=20 > possible. I don't think sudo is either, nor does the presence of Python=20 affect that meaningfully. But let's stop this pointless=20 discussion since removing it helps the Hurd progress. That's=20 enough. The Hurd is a lot more exciting than the removal of sudo Python=20 support -- and actually *will* improve security! \o/, T G-R --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iIMEARYKACsWIQT12iAyS4c9C3o4dnINsP+IT1VteQUCX4Cwlw0cbWVAdG9iaWFz LmdyAAoJEA2w/4hPVW152rMA/0FsehkCPQ3219EJHTiYyd64DmgvSeU5p6qk8nMU iOOXAP4u8dVyKulU6tW1TatGVafuFr+ETtxe/eg/boDY0Ft6BA== =2wO0 -----END PGP SIGNATURE----- --=-=-=-- From debbugs-submit-bounces@debbugs.gnu.org Fri Oct 09 15:26:37 2020 Received: (at submit) by debbugs.gnu.org; 9 Oct 2020 19:26:37 +0000 Received: from localhost ([127.0.0.1]:36251 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kQy2E-0004s2-7j for submit@debbugs.gnu.org; Fri, 09 Oct 2020 15:26:37 -0400 Received: from lists.gnu.org ([209.51.188.17]:52926) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kQy2C-0004rt-BB for submit@debbugs.gnu.org; Fri, 09 Oct 2020 15:26:33 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:46024) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kQy2C-0005dX-4O for guix-patches@gnu.org; Fri, 09 Oct 2020 15:26:32 -0400 Received: from mail-qk1-x741.google.com ([2607:f8b0:4864:20::741]:44535) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1kQy29-0001fe-SE; Fri, 09 Oct 2020 15:26:31 -0400 Received: by mail-qk1-x741.google.com with SMTP id s7so11711897qkh.11; Fri, 09 Oct 2020 12:26:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=FdviHR8ruwBVVwRtL2xnXzLg687vfeRnEdnsiLfG2r8=; b=mgzVQuoeVcS4y1/Iqic4ogvbvgxvzGYW6rUjP919PIajDaTHAOLts8BXvjXVgo6qPO wbhMxUU/umsr4Uk2rI9EsARrI49L/rmuvw+mGOqG5PpXiBv9DbTHxPohExCvZTV6cNVk I1I0GkejeNf3lUyTP1pAvWXA89DSKBeJmnJY07wuadWb02RFF8G5nrMcpYiQDCXA+qxn P0eGgZTT98SF2Y9KwYpP+SdzBNf++kPXQhh1wrPHboi9AQbqY7M/P/5hsKArGLTI4LuW YKlzwh+Ph+O6v2eVkKnNvXPsdbzAUMx8KCrgT6RDftQnntgYrmnxTAaRagSwejVoPs8Z YuBw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=FdviHR8ruwBVVwRtL2xnXzLg687vfeRnEdnsiLfG2r8=; b=YD2jIj/RxQY/jg1vbrEcUvmiHsrZGDX30ngIguZlSMmmBMhUEJkxJVJYdafyEihyYW xJErv6v3hHRYvvb6D/Ph4/goLWTU8v8sdozuTDSvk0Sng7Knlqj6Z85nb0Fcdc/uELVX 0kTbVNrVFL5QgYJINKdjHMzxI1GAEoOMYYSqueA3CyirO0qtE7QHe6t0HUqZ9pu2R4Ev MbUOvkmZnJHP1SPs7EoSdjsQPLSUX/wizRnD0k7vIF5rSyEPCJlY7jilrrJ8wMcf/ro9 cXTamlr7CZexqEkg6I7pJbRzRzljebYfqjo8EeDA3aK9G+0E38+Y6oygRLxLW2ZtvkuL iPdw== X-Gm-Message-State: AOAM531cEdwvLwnYnUyMpe/QCBPA2TQYYqSdco73YTXjCssW+CZxm5gU 7Fogys5jwk1WiEPuaZ8BkXjptOTPYymN3wPnkM4= X-Google-Smtp-Source: ABdhPJxDXjksor16eDL3ETz9a6jOaNDv6bIK/3+QoELcHqVk7w0NXoz9vzWpLKNv+3jrVjwnobOVrT1531g7+KuQXMI= X-Received: by 2002:a37:a2cd:: with SMTP id l196mr13805287qke.201.1602271588544; Fri, 09 Oct 2020 12:26:28 -0700 (PDT) MIME-Version: 1.0 References: <87362qc6hw.fsf@gnu.org> <87v9fld9al.fsf@nckx> <87wnzzqn8y.fsf@gmail.com> <87imbjz148.fsf@nckx> In-Reply-To: <87imbjz148.fsf@nckx> From: zimoun Date: Fri, 9 Oct 2020 21:26:17 +0200 Message-ID: Subject: Re: [bug#43851] [PATCH] gnu: sudo: Depend on python-minimal instead of python. To: Tobias Geerinckx-Rice , Tobias Geerinckx-Rice via Guix-patches Content-Type: text/plain; charset="UTF-8" Received-SPF: pass client-ip=2607:f8b0:4864:20::741; envelope-from=zimon.toutoune@gmail.com; helo=mail-qk1-x741.google.com X-detected-operating-system: by eggs.gnu.org: No matching host in p0f cache. That's all we know. X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-Debbugs-Envelope-To: submit Cc: 43851@debbugs.gnu.org, Maxim Cournoyer , Jan Nieuwenhuizen X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) On Fri, 9 Oct 2020 at 20:49, Tobias Geerinckx-Rice via Guix-patches via wrote: > I don't think sudo is either, nor does the presence of Python > affect that meaningfully. But let's stop this pointless > discussion since removing it helps the Hurd progress. That's > enough. > > The Hurd is a lot more exciting than the removal of sudo Python > support -- and actually *will* improve security! I agree that supporting Hurd is more important than supporting hypothetical users using hypothetically sudo with Python. :-) Why not have 2 packages: 'sudo' (with Python) and 'sudo-minimal' (without). Or any other name. Cheers, simon From debbugs-submit-bounces@debbugs.gnu.org Fri Oct 09 15:45:00 2020 Received: (at submit) by debbugs.gnu.org; 9 Oct 2020 19:45:00 +0000 Received: from localhost ([127.0.0.1]:36289 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kQyK3-0005L4-J3 for submit@debbugs.gnu.org; Fri, 09 Oct 2020 15:45:00 -0400 Received: from lists.gnu.org ([209.51.188.17]:58952) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kQyK0-0005Kv-Dg for submit@debbugs.gnu.org; Fri, 09 Oct 2020 15:44:57 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:49872) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kQyK0-000466-2I for guix-patches@gnu.org; Fri, 09 Oct 2020 15:44:56 -0400 Received: from tobias.gr ([2a02:c205:2020:6054::1]:45714) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kQyJx-0003pl-Kj; Fri, 09 Oct 2020 15:44:55 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tobias.gr; s=2018; bh=zWU2PjslwW1GP/RNhRiA9gNQ95EQXEKa2PR9E71VED0=; h=date:in-reply-to: references:subject:cc:to:from; b=HwOVLwQWYdvr12xCVpqIlDaX1RrylCgaYxy56 Mcyrz8vQ2nDekPI2wWpybtAazihrm4/Ru/ROg7/Aar5w1XjXG9N3eGK4Hvtf5LECxDuUdX niNTKuuz0n27xRKoCwbd4NscMK8iqRf/4eath4eCeMngpX090NsaZMroCsYmsabkSMn7ZZ PfSDeQ4rrMTMAfgbvxNzgWlAUnn5z/xOymINRrUv3Rq10ArxiPy6hXqRF+hLvi1vWGKisD pXokBdmEwnDJWulgFREEsm5KL/WBildg3lmuVOXoSGnH2nBxzp5LUHpnkRe+FaPwl5lX0b e4jMwaWFgzHGVLwbLj1rp7s0g== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id 0b170522 (TLSv1.2:ECDHE-ECDSA-AES256-GCM-SHA384:256:NO); Fri, 9 Oct 2020 19:44:59 +0000 (UTC) BIMI-Selector: v=BIMI1; s=default; From: Tobias Geerinckx-Rice To: zimoun Subject: Re: [bug#43851] [PATCH] gnu: sudo: Depend on python-minimal instead of python. References: <87362qc6hw.fsf@gnu.org> <87v9fld9al.fsf@nckx> <87wnzzqn8y.fsf@gmail.com> <87imbjz148.fsf@nckx> In-reply-to: Date: Fri, 09 Oct 2020 21:44:49 +0200 Message-ID: <87d01ryyj2.fsf@nckx> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Received-SPF: pass client-ip=2a02:c205:2020:6054::1; envelope-from=me@tobias.gr; helo=tobias.gr X-detected-operating-system: by eggs.gnu.org: No matching host in p0f cache. That's all we know. X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-Debbugs-Envelope-To: submit Cc: 43851@debbugs.gnu.org, Maxim Cournoyer , Tobias Geerinckx-Rice via Guix-patches , Jan Nieuwenhuizen X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) --=-=-= Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable zimoun =E5=86=99=E9=81=93=EF=BC=9A > I agree that supporting Hurd is more important than supporting > hypothetical users using hypothetically sudo with Python. :-) I'm not hypothetical! I'm a real boy! > Why not have 2 packages: 'sudo' (with Python) and 'sudo-minimal' > (without). Or any other name. I suggested as much on #guix so it is by definition an excellent=20 suggestion. Janneke? T G-R --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iIMEARYKACsWIQT12iAyS4c9C3o4dnINsP+IT1VteQUCX4C9sQ0cbWVAdG9iaWFz LmdyAAoJEA2w/4hPVW15I0MBAPxsGu2b6szFXr6ixxpOyV9rzK/j5WzD2j63rEEA 2/CMAP0RQXX1sE70axrHRxC+THn9C8ybsqZMYXPYVYSkjTD9Bw== =r5hG -----END PGP SIGNATURE----- --=-=-=-- From debbugs-submit-bounces@debbugs.gnu.org Fri Oct 09 15:48:32 2020 Received: (at 43851-done) by debbugs.gnu.org; 9 Oct 2020 19:48:32 +0000 Received: from localhost ([127.0.0.1]:36294 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kQyNT-0005Qh-BG for submit@debbugs.gnu.org; Fri, 09 Oct 2020 15:48:31 -0400 Received: from eggs.gnu.org ([209.51.188.92]:44030) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kQyNS-0005QV-Hd for 43851-done@debbugs.gnu.org; Fri, 09 Oct 2020 15:48:30 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:50642) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kQyNN-0004LB-0O; Fri, 09 Oct 2020 15:48:25 -0400 Received: from [2001:980:1b4f:1:42d2:832d:bb59:862] (port=37746 helo=dundal.janneke.lilypond.org) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1kQyNM-00089Y-H8; Fri, 09 Oct 2020 15:48:24 -0400 From: Jan Nieuwenhuizen To: Tobias Geerinckx-Rice Subject: Re: [bug#43851] [PATCH] gnu: sudo: Depend on python-minimal instead of python. In-Reply-To: <87imbjz148.fsf@nckx> (Tobias Geerinckx-Rice's message of "Fri, 09 Oct 2020 20:48:55 +0200") Organization: AvatarAcademy.nl References: <87362qc6hw.fsf@gnu.org> <87v9fld9al.fsf@nckx> <87wnzzqn8y.fsf@gmail.com> <87imbjz148.fsf@nckx> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux) X-Url: http://AvatarAcademy.nl Date: Fri, 09 Oct 2020 21:48:22 +0200 Message-ID: <87d01rrxix.fsf@gnu.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 43851-done Cc: 43851-done@debbugs.gnu.org, Maxim Cournoyer X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Tobias Geerinckx-Rice writes: Hello! > Maxim Cournoyer =E5=86=99=E9=81=93=EF=BC=9A >> If we don't have any use for it, I think it may be better to let the >> dependency go altogether, to keep sudo as small and secure as >> possible. > > I don't think sudo is either, nor does the presence of Python affect > that meaningfully. But let's stop this pointless discussion since > removing it helps the Hurd progress. That's enough. > > The Hurd is a lot more exciting than the removal of sudo Python > support -- and actually *will* improve security! Thanks all, I've removed the python dependency from sudo; pushed to master as 165e0918da54643bfaf9a6cb6b866f8692e9f8f9. Greetings, Janneke --=20 Jan Nieuwenhuizen | GNU LilyPond http://lilypond.org Freelance IT http://JoyofSource.com | Avatar=C2=AE http://AvatarAcademy.com From debbugs-submit-bounces@debbugs.gnu.org Fri Oct 09 15:53:14 2020 Received: (at submit) by debbugs.gnu.org; 9 Oct 2020 19:53:15 +0000 Received: from localhost ([127.0.0.1]:36300 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kQyS2-0005Xx-95 for submit@debbugs.gnu.org; Fri, 09 Oct 2020 15:53:14 -0400 Received: from lists.gnu.org ([209.51.188.17]:52306) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kQyS0-0005Xn-0P for submit@debbugs.gnu.org; Fri, 09 Oct 2020 15:53:12 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:52492) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kQyRz-0004ii-Kz for guix-patches@gnu.org; Fri, 09 Oct 2020 15:53:11 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:50749) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kQyRx-00051T-3u; Fri, 09 Oct 2020 15:53:09 -0400 Received: from [2001:980:1b4f:1:42d2:832d:bb59:862] (port=37750 helo=dundal.janneke.lilypond.org) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1kQyRw-00007U-Bw; Fri, 09 Oct 2020 15:53:08 -0400 From: Jan Nieuwenhuizen To: Tobias Geerinckx-Rice Subject: Re: [bug#43851] [PATCH] gnu: sudo: Depend on python-minimal instead of python. Organization: AvatarAcademy.nl References: <87362qc6hw.fsf@gnu.org> <87v9fld9al.fsf@nckx> <87wnzzqn8y.fsf@gmail.com> <87imbjz148.fsf@nckx> <87d01ryyj2.fsf@nckx> X-Url: http://AvatarAcademy.nl Date: Fri, 09 Oct 2020 21:53:06 +0200 In-Reply-To: <87d01ryyj2.fsf@nckx> (Tobias Geerinckx-Rice's message of "Fri, 09 Oct 2020 21:44:49 +0200") Message-ID: <878scfrxb1.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: submit Cc: 43851@debbugs.gnu.org, Maxim Cournoyer , Tobias Geerinckx-Rice via Guix-patches , zimoun X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Tobias Geerinckx-Rice writes: Hi! > zimoun =E5=86=99=E9=81=93=EF=BC=9A >> I agree that supporting Hurd is more important than supporting >> hypothetical users using hypothetically sudo with Python. :-) > > I'm not hypothetical! I'm a real boy! > >> Why not have 2 packages: 'sudo' (with Python) and 'sudo-minimal' >> (without). Or any other name. > > I suggested as much on #guix so it is by definition an excellent > suggestion. > > Janneke? Oops, I missed that and just pushed Python removal. I would suggest sudo-with-python; but I'm fine with sudo-minimal too. Greetings, Janneke --=20 Jan Nieuwenhuizen | GNU LilyPond http://lilypond.org Freelance IT http://JoyofSource.com | Avatar=C2=AE http://AvatarAcademy.com From unknown Sun Jun 22 00:33:55 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Sat, 07 Nov 2020 12:24:06 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator