On 03/29/2016 03:19 AM, Florian Weimer wrote:
Here is a list of things I would like to propose for Fedora 25:
OK.
Split all NSS modules into separate packages, except nss_files and
nss_dns. This will make it eventually possible to deprecate nss_hesiod,
and build nss_nis and nss_nisplus against libtirpc instead of the
built-in RPC library.
This sounds good.
Remove dns from the networks service in /etc/nsswitch.conf. Hardly
anyone needs it, and the implementation is quite broken anyway. It just
increases attack surface needlessly.
Could you expand on this a bit more?
Build rawhide *and* the f25 branch with assertions enabled.
Agreed.
Use a single statically linked binary for sln and ldconfig.
Agreed.
The F25 schedule has been accelerated:
https://fedoraproject.org/wiki/Releases/25/Schedule
Which means F25 will have to ship with glibc 2.23, there will be
no way we can get 2.24 into a stable shape by then. glibc 2.24
has an intended release of February 2017.
So any changes we make must be strictly cosmetic, and the above
changes you mention seem in that sort of category e.g. preparing
for further changes in later releases.
Could you go ahead and create *one* change request page which
covers all of these:
(a) Update to glibc 2.23.1 stable branch.
(b) NSS subpackaging.
(c) Enabling assertions.
(d) Statically linking sln/ldconfig
I'd call it:
https://fedoraproject.org/wiki/Changes/GLIBC223_F25_Update
For a template I'd used:
https://fedoraproject.org/wiki/Changes/GLIBC223
--
Cheers,
Carlos.