On Tue, Mar 29, 2016 at 09:19:14AM +0200, Florian Weimer wrote:
Here is a list of things I would like to propose for Fedora 25:
Split all NSS modules into separate packages, except nss_files and
nss_dns. This will make it eventually possible to deprecate nss_hesiod,
and build nss_nis and nss_nisplus against libtirpc instead of the
built-in RPC library.
Remove dns from the networks service in /etc/nsswitch.conf. Hardly
anyone needs it, and the implementation is quite broken anyway. It just
increases attack surface needlessly.
Build rawhide *and* the f25 branch with assertions enabled.
Use a single statically linked binary for sln and ldconfig.
Another thing I've thought of for a while, enabling sanitizer options
in glibc. Not in glibc itself, but to build separate packages
(glibc-sanitize, glibc-devel-sanitize, etc.) that can replace glibc if
one wants to do that for testing. We only enable generation of this
in rawhide.
Siddhesh