NetBSD Problem Report #46646

From www@NetBSD.org  Sun Jul  1 18:14:06 2012
Return-Path: <www@NetBSD.org>
Received: from mail.netbsd.org (mail.netbsd.org [149.20.53.66])
	by www.NetBSD.org (Postfix) with ESMTP id EDC1663B8E6
	for <gnats-bugs@gnats.NetBSD.org>; Sun,  1 Jul 2012 18:14:05 +0000 (UTC)
Message-Id: <20120701181405.4E53F63B882@www.NetBSD.org>
Date: Sun,  1 Jul 2012 18:14:05 +0000 (UTC)
From: dross@pobox.com
Reply-To: dross@pobox.com
To: gnats-bugs@NetBSD.org
Subject: sysinst should configure fetch-pkg-vulnerabilities automatically if you choose to install pkgsrc
X-Send-Pr-Version: www-1.0

>Number:         46646
>Category:       install
>Synopsis:       sysinst should configure fetch-pkg-vulnerabilities automatically if you choose to install pkgsrc
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    install-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Jul 01 18:15:01 +0000 2012
>Closed-Date:    
>Last-Modified:  Sun May 01 05:33:40 +0000 2016
>Originator:     David Ross
>Release:        6 BETA2
>Organization:
>Environment:
>Description:
It's great that sysinst now provides the option to automatically install pkgsrc.  It would be fantastic if this would also set up fetch-pkg-vulnerabilities.

The way I've been doing this manually is to run:
mkdir /var/db/pkg
pkg_admin rebuild
pkg_admin fetch-pkg-vulnerabilities

Then in crontab:
0 3 * * * /usr/sbin/pkg_admin fetch-pkg-vulnerabilities >/dev/null 2>&1
0 4 * * * /usr/sbin/pkg_admin audit 
>How-To-Repeat:
n/a
>Fix:
see above

>Release-Note:

>Audit-Trail:
From: David Holland <dholland-bugs@netbsd.org>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: Re: install/46646: sysinst should configure
 fetch-pkg-vulnerabilities automatically if you choose to install pkgsrc
Date: Sun, 1 Jul 2012 19:18:18 +0000

 On Sun, Jul 01, 2012 at 06:15:01PM +0000, dross@pobox.com wrote:
  > It's great that sysinst now provides the option to automatically
  > install pkgsrc.  It would be fantastic if this would also set up
  > fetch-pkg-vulnerabilities.

 Probably... but all it has to do is put fetch_pkg_vulnerabilities=YES
 in daily.conf.

 -- 
 David A. Holland
 dholland@netbsd.org

From: Julian Djamil Fagir <jdf@NetBSD.org>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: Re: install/46646: sysinst should configure
 fetch-pkg-vulnerabilities automatically if you choose to install pkgsrc
Date: Tue, 3 Jul 2012 21:24:46 +0200

 --Sig_/Z8CSwKJiH/T260RDTpu3/.j
 Content-Type: text/plain; charset=US-ASCII
 Content-Transfer-Encoding: quoted-printable

 Hi,

 > >Synopsis:       sysinst should configure fetch-pkg-vulnerabilities
 > >automatically if you choose to install pkgsrc Confidential:   no
 >
 > It's great that sysinst now provides the option to automatically install
 > pkgsrc.  It would be fantastic if this would also set up
 > fetch-pkg-vulnerabilities.
 >=20
 > The way I've been doing this manually is to run:
 > mkdir /var/db/pkg
 > pkg_admin rebuild
 > pkg_admin fetch-pkg-vulnerabilities
 >=20
 > Then in crontab:
 > 0 3 * * * /usr/sbin/pkg_admin fetch-pkg-vulnerabilities >/dev/null 2>&1
 > 0 4 * * * /usr/sbin/pkg_admin audit=20
 there are many tasks one could add to sysinst that would be useful, but it's
 all at the cost of usability.
 For fetch-pkg-vulnerabilities to be useful in most scenarios the MTA must be
 set up, thus network being set up, etc, a long ist of dependencies.
 I would consider this fine-tuning rather than setup. And I think sysinst
 should stay minimal, with only a selected set of actions to be performed
 which are really needed for initial setup.

 Regards, Julian

 --Sig_/Z8CSwKJiH/T260RDTpu3/.j
 Content-Type: application/pgp-signature; name=signature.asc
 Content-Disposition: attachment; filename=signature.asc

 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1.4.9 (GNU/Linux)

 iEYEARECAAYFAk/zRv4ACgkQc7h7cu1Hpp7y/QCfdAQhk/ACbmynMUkpAe/d8S6N
 0+cAoJNhqjA/N/vIU2cy0KPtNErjxNQN
 =kOnN
 -----END PGP SIGNATURE-----

 --Sig_/Z8CSwKJiH/T260RDTpu3/.j--

From: David Ross <dross@pobox.com>
To: <gnats-bugs@netbsd.org>, <install-manager@netbsd.org>,
	<gnats-admin@netbsd.org>, <netbsd-bugs@netbsd.org>
Cc: 
Subject: RE: install/46646: sysinst should configure
 fetch-pkg-vulnerabilities automatically if you choose to install pkgsrc
Date: Wed, 4 Jul 2012 09:45:09 -0700

 --_5a57876b-4d9b-4df0-8ad3-24f5ee9a1d5e_
 Content-Type: text/plain; charset="iso-8859-1"
 Content-Transfer-Encoding: quoted-printable


 Regarding fetch_pkg_vulnerabilities=3DYES in daily.conf=2C I'm wondering if=
  this will run immediately on the first boot.  Otherwise the user will like=
 ly just start building from pkgsrc right away without the benefit of the vu=
 lnerability check.   Looks like there was a previous discussion of this:htt=
 p://mail-index.netbsd.org/tech-userlevel/2010/01/oindex.htmlSee "fetch_pkg_=
 vulnerabilities enabled by default (was: CVS commit: src/etc)"
  There was a privacy concern in that thread concerning the default behavior=
 . So how about a separate option in the new sysinst menu to enable the vuln=
 erability check=2C positioned right under the option to install pkgsrc?  Th=
 at seems like a reasonable compromise. Regarding Julian's concern about the=
  MTA being configured...  The nice thing about the vulnerability check=2C f=
 or me at least=2C is that it prevents you from accidentally installing vuln=
 erable packages.  I haven't been paying attention to any mail it's sending =
 me.  =3D) I also understand the need to keep sysinst minimal=2C but providi=
 ng an option to check for package vulnerabilities seems very fundamental. D=
 avid Rossdross@pobox.com > From: jdf@NetBSD.org
 > To: install-manager@netbsd.org=3B gnats-admin@netbsd.org=3B netbsd-bugs@n=
 etbsd.org=3B dross@pobox.com
 > Subject: Re: install/46646: sysinst should configure fetch-pkg-vulnerabil=
 ities automatically if you choose to install pkgsrc
 > CC:=20
 > Date: Tue=2C 3 Jul 2012 19:25:02 +0000
 >=20
 > The following reply was made to PR install/46646=3B it has been noted by =
 GNATS.
 >=20
 > From: Julian Djamil Fagir <jdf@NetBSD.org>
 > To: gnats-bugs@NetBSD.org
 > Cc:=20
 > Subject: Re: install/46646: sysinst should configure
 >  fetch-pkg-vulnerabilities automatically if you choose to install pkgsrc
 > Date: Tue=2C 3 Jul 2012 21:24:46 +0200
 >=20
 >  --Sig_/Z8CSwKJiH/T260RDTpu3/.j
 >  Content-Type: text/plain=3B charset=3DUS-ASCII
 >  Content-Transfer-Encoding: quoted-printable
 > =20
 >  Hi=2C
 > =20
 >  > >Synopsis:       sysinst should configure fetch-pkg-vulnerabilities
 >  > >automatically if you choose to install pkgsrc Confidential:   no
 >  >
 >  > It's great that sysinst now provides the option to automatically insta=
 ll
 >  > pkgsrc.  It would be fantastic if this would also set up
 >  > fetch-pkg-vulnerabilities.
 >  >=3D20
 >  > The way I've been doing this manually is to run:
 >  > mkdir /var/db/pkg
 >  > pkg_admin rebuild
 >  > pkg_admin fetch-pkg-vulnerabilities
 >  >=3D20
 >  > Then in crontab:
 >  > 0 3 * * * /usr/sbin/pkg_admin fetch-pkg-vulnerabilities >/dev/null 2>&=
 1
 >  > 0 4 * * * /usr/sbin/pkg_admin audit=3D20
 >  there are many tasks one could add to sysinst that would be useful=2C bu=
 t it's
 >  all at the cost of usability.
 >  For fetch-pkg-vulnerabilities to be useful in most scenarios the MTA mus=
 t be
 >  set up=2C thus network being set up=2C etc=2C a long ist of dependencies=
 .
 >  I would consider this fine-tuning rather than setup. And I think sysinst
 >  should stay minimal=2C with only a selected set of actions to be perform=
 ed
 >  which are really needed for initial setup.
 > =20
 >  Regards=2C Julian
 > =20
 >  --Sig_/Z8CSwKJiH/T260RDTpu3/.j
 >  Content-Type: application/pgp-signature=3B name=3Dsignature.asc
 >  Content-Disposition: attachment=3B filename=3Dsignature.asc
 > =20
 >  -----BEGIN PGP SIGNATURE-----
 >  Version: GnuPG v1.4.9 (GNU/Linux)
 > =20
 >  iEYEARECAAYFAk/zRv4ACgkQc7h7cu1Hpp7y/QCfdAQhk/ACbmynMUkpAe/d8S6N
 >  0+cAoJNhqjA/N/vIU2cy0KPtNErjxNQN
 >  =3DkOnN
 >  -----END PGP SIGNATURE-----
 > =20
 >  --Sig_/Z8CSwKJiH/T260RDTpu3/.j--
 > =20
  		 	   		  =

 --_5a57876b-4d9b-4df0-8ad3-24f5ee9a1d5e_
 Content-Type: text/html; charset="iso-8859-1"
 Content-Transfer-Encoding: quoted-printable

 <html>
 <head>
 <style><!--
 .hmmessage P
 {
 margin:0px=3B
 padding:0px
 }
 body.hmmessage
 {
 font-size: 10pt=3B
 font-family:Tahoma
 }
 --></style></head>
 <body class=3D'hmmessage'><div dir=3D'ltr'>
 Regarding fetch_pkg_vulnerabilities=3DYES in daily.conf=2C I'm wondering if=
  this will run immediately on the&nbsp=3Bfirst boot.&nbsp=3B Otherwise&nbsp=
 =3Bthe user will likely&nbsp=3Bjust start building from pkgsrc right away w=
 ithout the benefit of the vulnerability check.&nbsp=3B <BR>&nbsp=3B<BR>Look=
 s like there was a previous discussion of this:<BR><a href=3D"http://mail-i=
 ndex.netbsd.org/tech-userlevel/2010/01/oindex.html">http://mail-index.netbs=
 d.org/tech-userlevel/2010/01/oindex.html</a><BR>See&nbsp=3B"fetch_pkg_vulne=
 rabilities enabled by default (was: CVS commit: src/etc)"<br>&nbsp=3B<BR>Th=
 ere was a privacy concern&nbsp=3Bin that thread&nbsp=3Bconcerning the defau=
 lt behavior.<BR>&nbsp=3B<BR>So how about a separate option in the new sysin=
 st menu to enable the vulnerability check=2C positioned right under the opt=
 ion to install pkgsrc?&nbsp=3B That seems like a reasonable compromise.<BR>=
 &nbsp=3B<BR>Regarding Julian's concern about the MTA being configured...&nb=
 sp=3B The nice thing about the vulnerability check=2C for me at least=2C is=
  that it prevents you from accidentally installing vulnerable packages.&nbs=
 p=3B I haven't been paying attention to any mail it's sending me.&nbsp=3B =
 =3D)<BR>&nbsp=3B<BR>I also understand the need to keep sysinst minimal=2C b=
 ut providing an option to check for package vulnerabilities seems very fund=
 amental.<BR>&nbsp=3B<BR>David Ross<BR><a href=3D"mailto:dross@pobox.com">dr=
 oss@pobox.com</a><BR>&nbsp=3B<BR><div><div id=3D"SkyDrivePlaceholder"></div=
 >&gt=3B From: jdf@NetBSD.org<br>&gt=3B To: install-manager@netbsd.org=3B gn=
 ats-admin@netbsd.org=3B netbsd-bugs@netbsd.org=3B dross@pobox.com<br>&gt=3B=
  Subject: Re: install/46646: sysinst should configure fetch-pkg-vulnerabili=
 ties automatically if you choose to install pkgsrc<br>&gt=3B CC: <br>&gt=3B=
  Date: Tue=2C 3 Jul 2012 19:25:02 +0000<br>&gt=3B <br>&gt=3B The following =
 reply was made to PR install/46646=3B it has been noted by GNATS.<br>&gt=3B=
  <br>&gt=3B From: Julian Djamil Fagir &lt=3Bjdf@NetBSD.org&gt=3B<br>&gt=3B =
 To: gnats-bugs@NetBSD.org<br>&gt=3B Cc: <br>&gt=3B Subject: Re: install/466=
 46: sysinst should configure<br>&gt=3B  fetch-pkg-vulnerabilities automatic=
 ally if you choose to install pkgsrc<br>&gt=3B Date: Tue=2C 3 Jul 2012 21:2=
 4:46 +0200<br>&gt=3B <br>&gt=3B  --Sig_/Z8CSwKJiH/T260RDTpu3/.j<br>&gt=3B  =
 Content-Type: text/plain=3B charset=3DUS-ASCII<br>&gt=3B  Content-Transfer-=
 Encoding: quoted-printable<br>&gt=3B  <br>&gt=3B  Hi=2C<br>&gt=3B  <br>&gt=
 =3B  &gt=3B &gt=3BSynopsis:       sysinst should configure fetch-pkg-vulner=
 abilities<br>&gt=3B  &gt=3B &gt=3Bautomatically if you choose to install pk=
 gsrc Confidential:   no<br>&gt=3B  &gt=3B<br>&gt=3B  &gt=3B It's great that=
  sysinst now provides the option to automatically install<br>&gt=3B  &gt=3B=
  pkgsrc.  It would be fantastic if this would also set up<br>&gt=3B  &gt=3B=
  fetch-pkg-vulnerabilities.<br>&gt=3B  &gt=3B=3D20<br>&gt=3B  &gt=3B The wa=
 y I've been doing this manually is to run:<br>&gt=3B  &gt=3B mkdir /var/db/=
 pkg<br>&gt=3B  &gt=3B pkg_admin rebuild<br>&gt=3B  &gt=3B pkg_admin fetch-p=
 kg-vulnerabilities<br>&gt=3B  &gt=3B=3D20<br>&gt=3B  &gt=3B Then in crontab=
 :<br>&gt=3B  &gt=3B 0 3 * * * /usr/sbin/pkg_admin fetch-pkg-vulnerabilities=
  &gt=3B/dev/null 2&gt=3B&amp=3B1<br>&gt=3B  &gt=3B 0 4 * * * /usr/sbin/pkg_=
 admin audit=3D20<br>&gt=3B  there are many tasks one could add to sysinst t=
 hat would be useful=2C but it's<br>&gt=3B  all at the cost of usability.<br=
 >&gt=3B  For fetch-pkg-vulnerabilities to be useful in most scenarios the M=
 TA must be<br>&gt=3B  set up=2C thus network being set up=2C etc=2C a long =
 ist of dependencies.<br>&gt=3B  I would consider this fine-tuning rather th=
 an setup. And I think sysinst<br>&gt=3B  should stay minimal=2C with only a=
  selected set of actions to be performed<br>&gt=3B  which are really needed=
  for initial setup.<br>&gt=3B  <br>&gt=3B  Regards=2C Julian<br>&gt=3B  <br=
 >&gt=3B  --Sig_/Z8CSwKJiH/T260RDTpu3/.j<br>&gt=3B  Content-Type: applicatio=
 n/pgp-signature=3B name=3Dsignature.asc<br>&gt=3B  Content-Disposition: att=
 achment=3B filename=3Dsignature.asc<br>&gt=3B  <br>&gt=3B  -----BEGIN PGP S=
 IGNATURE-----<br>&gt=3B  Version: GnuPG v1.4.9 (GNU/Linux)<br>&gt=3B  <br>&=
 gt=3B  iEYEARECAAYFAk/zRv4ACgkQc7h7cu1Hpp7y/QCfdAQhk/ACbmynMUkpAe/d8S6N<br>=
 &gt=3B  0+cAoJNhqjA/N/vIU2cy0KPtNErjxNQN<br>&gt=3B  =3DkOnN<br>&gt=3B  ----=
 -END PGP SIGNATURE-----<br>&gt=3B  <br>&gt=3B  --Sig_/Z8CSwKJiH/T260RDTpu3/=
 .j--<br>&gt=3B  <br></div> 		 	   		  </div></body>
 </html>=

 --_5a57876b-4d9b-4df0-8ad3-24f5ee9a1d5e_--

From: matthew green <mrg@eterna.com.au>
To: gnats-bugs@NetBSD.org
Cc: install-manager@netbsd.org, gnats-admin@netbsd.org,
    netbsd-bugs@netbsd.org, dross@pobox.com
Subject: re: install/46646: sysinst should configure fetch-pkg-vulnerabilities automatically if you choose to install pkgsrc
Date: Thu, 05 Jul 2012 05:57:11 +1000

 >  For fetch-pkg-vulnerabilities to be useful in most scenarios the MTA must be
 >  set up, thus network being set up, etc, a long ist of dependencies.
 >  I would consider this fine-tuning rather than setup. And I think sysinst
 >  should stay minimal, with only a selected set of actions to be performed
 >  which are really needed for initial setup.

 this is false.

 it's useful for having pkgsrc tell you that the package you're
 installing is vulnerable, which is extremely useful and good.

 additionally, having it setup means the admin can manually run
 the check.  again, quite useful and good.


 .mrg.

From: Julian Djamil Fagir <gnrp@komkon2.de>
To: matthew green <mrg@eterna.com.au>, gnats-bugs@NetBSD.org
Cc: 
Subject: Re: install/46646: sysinst should configure
 fetch-pkg-vulnerabilities automatically if you choose to install pkgsrc
Date: Wed, 4 Jul 2012 22:30:16 +0200

 --Sig_/ryrrMvlJE/04O3v0RnM0w5i
 Content-Type: text/plain; charset=US-ASCII
 Content-Transfer-Encoding: quoted-printable

 Hi,

 > >  For fetch-pkg-vulnerabilities to be useful in most scenarios the MTA
 > > must be set up, thus network being set up, etc, a long ist of
 > > dependencies. I would consider this fine-tuning rather than setup. And I
 > > think sysinst should stay minimal, with only a selected set of actions =
 to
 > > be performed which are really needed for initial setup.
 >=20
 > this is false.
 >=20
 > it's useful for having pkgsrc tell you that the package you're
 > installing is vulnerable, which is extremely useful and good.
 >=20
 > additionally, having it setup means the admin can manually run
 > the check.  again, quite useful and good.
 ok, I mixed this up after reading the comment about daily.conf.

 >  Regarding fetch_pkg_vulnerabilities=3DYES in daily.conf
 > I'm wondering if this will run immediately on the first boot.  Otherwise
 > the user will likely just start building from pkgsrc right away without t=
 he
 > benefit of the vulnerability check.   Looks like there was a previous
 > discussion of this:
 > http://mail-index.netbsd.org/tech-userlevel/2010/01/oindex.html
 > See "fetch_pkg_=3Dvulnerabilities enabled by default (was: CVS commit:
 > src/etc)"
 Yep, this should be different.

 I'm still not sure about this. Having something in sysinst (and especially
 doing it by default) makes it the new default for everyone using sysinst for
 installing pkgsrc.

 I agree with you it's useful, but where does usefulness stop?
 You might argue that mdnsd is not needed for setting up a new system (tbh,
 I've never even looked at it), but it's exactly that kind of discussion.
 Especially having something periodic set up automatically is more critical.

 I'm not opposed to adding this feature to sysinst, but I would like to have=
  a
 discussion about what sysinst should be able to do and what kind of system =
 it
 finally sets up before adding more only useful features.
 If you tell me this is the official line and it should be done - ok, it's n=
 ot
 much work to implement that.

 Regards, Julian

 --Sig_/ryrrMvlJE/04O3v0RnM0w5i
 Content-Type: application/pgp-signature; name=signature.asc
 Content-Disposition: attachment; filename=signature.asc

 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.18 (NetBSD)

 iEYEARECAAYFAk/0p9wACgkQc7h7cu1Hpp4L7QCeK3X8TYh7ltQDZWVWM7UWpLOE
 lmIAn0v7S8lIAAsK3cmW2vKXmM55ck8h
 =NNUI
 -----END PGP SIGNATURE-----

 --Sig_/ryrrMvlJE/04O3v0RnM0w5i--

From: David Ross <dross@pobox.com>
To: <gnats-bugs@netbsd.org>, <install-manager@netbsd.org>,
	<gnats-admin@netbsd.org>, <netbsd-bugs@netbsd.org>
Cc: 
Subject: RE: install/46646: sysinst should configure
 fetch-pkg-vulnerabilities automatically if you choose to install pkgsrc
Date: Wed, 4 Jul 2012 19:23:27 -0700

 A response I posted a little earlier today was mangled because I didn't sen=
 d as a plain-text.  My high level points:

 =20

  - I agree that a sysinst menu option to enable vulnerability checking is a=
  good compromise.  This could be right under the new option that installs p=
 kgsrc.

 =20

  - The benefit of the feature (to me) is that it tells you a package is vul=
 nerable right when you try to build it.

 =20

  - If this feature is implemented=2C it should set everything up so that th=
 e vulnerability database is ready the first time you try to build a package=
 .  (Not just after 24 hours via a cron job.)

 =20

 David Ross
 dross@pobox.com

 =20

 =20

 ----------------------------------------
 > From: gnrp@komkon2.de
 > To: install-manager@netbsd.org=3B gnats-admin@netbsd.org=3B netbsd-bugs@n=
 etbsd.org=3B dross@pobox.com
 > Subject: Re: install/46646: sysinst should configure fetch-pkg-vulnerabil=
 ities automatically if you choose to install pkgsrc
 > CC:
 > Date: Wed=2C 4 Jul 2012 20:35:06 +0000
 >
 > The following reply was made to PR install/46646=3B it has been noted by =
 GNATS.
 >
 > From: Julian Djamil Fagir <gnrp@komkon2.de>
 > To: matthew green <mrg@eterna.com.au>=2C gnats-bugs@NetBSD.org
 > Cc:
 > Subject: Re: install/46646: sysinst should configure
 > fetch-pkg-vulnerabilities automatically if you choose to install pkgsrc
 > Date: Wed=2C 4 Jul 2012 22:30:16 +0200
 >
 > --Sig_/ryrrMvlJE/04O3v0RnM0w5i
 > Content-Type: text/plain=3B charset=3DUS-ASCII
 > Content-Transfer-Encoding: quoted-printable
 >
 > Hi=2C
 >
 > > > For fetch-pkg-vulnerabilities to be useful in most scenarios the MTA
 > > > must be set up=2C thus network being set up=2C etc=2C a long ist of
 > > > dependencies. I would consider this fine-tuning rather than setup. An=
 d I
 > > > think sysinst should stay minimal=2C with only a selected set of acti=
 ons =3D
 > to
 > > > be performed which are really needed for initial setup.
 > >=3D20
 > > this is false.
 > >=3D20
 > > it's useful for having pkgsrc tell you that the package you're
 > > installing is vulnerable=2C which is extremely useful and good.
 > >=3D20
 > > additionally=2C having it setup means the admin can manually run
 > > the check. again=2C quite useful and good.
 > ok=2C I mixed this up after reading the comment about daily.conf.
 >
 > > Regarding fetch_pkg_vulnerabilities=3D3DYES in daily.conf
 > > I'm wondering if this will run immediately on the first boot. Otherwise
 > > the user will likely just start building from pkgsrc right away without=
  t=3D
 > he
 > > benefit of the vulnerability check. Looks like there was a previous
 > > discussion of this:
 > > http://mail-index.netbsd.org/tech-userlevel/2010/01/oindex.html
 > > See "fetch_pkg_=3D3Dvulnerabilities enabled by default (was: CVS commit=
 :
 > > src/etc)"
 > Yep=2C this should be different.
 >
 > I'm still not sure about this. Having something in sysinst (and especiall=
 y
 > doing it by default) makes it the new default for everyone using sysinst =
 for
 > installing pkgsrc.
 >
 > I agree with you it's useful=2C but where does usefulness stop?
 > You might argue that mdnsd is not needed for setting up a new system (tbh=
 =2C
 > I've never even looked at it)=2C but it's exactly that kind of discussion=
 .
 > Especially having something periodic set up automatically is more critica=
 l.
 >
 > I'm not opposed to adding this feature to sysinst=2C but I would like to =
 have=3D
 > a
 > discussion about what sysinst should be able to do and what kind of syste=
 m =3D
 > it
 > finally sets up before adding more only useful features.
 > If you tell me this is the official line and it should be done - ok=2C it=
 's n=3D
 > ot
 > much work to implement that.
 >
 > Regards=2C Julian
 >
 > --Sig_/ryrrMvlJE/04O3v0RnM0w5i
 > Content-Type: application/pgp-signature=3B name=3Dsignature.asc
 > Content-Disposition: attachment=3B filename=3Dsignature.asc
 >
 > -----BEGIN PGP SIGNATURE-----
 > Version: GnuPG v2.0.18 (NetBSD)
 >
 > iEYEARECAAYFAk/0p9wACgkQc7h7cu1Hpp4L7QCeK3X8TYh7ltQDZWVWM7UWpLOE
 > lmIAn0v7S8lIAAsK3cmW2vKXmM55ck8h
 > =3DNNUI
 > -----END PGP SIGNATURE-----
 >
 > --Sig_/ryrrMvlJE/04O3v0RnM0w5i--
 > 		 	   		  =

State-Changed-From-To: open->feedback
State-Changed-By: dholland@NetBSD.org
State-Changed-When: Tue, 08 Sep 2015 08:58:10 +0000
State-Changed-Why:
Is the current behavior these days adequate?


State-Changed-From-To: feedback->open
State-Changed-By: dholland@NetBSD.org
State-Changed-When: Sun, 01 May 2016 05:33:40 +0000
State-Changed-Why:
AFAICT it does not download the vulnerabilities list during installation,
still.


>Unformatted:

NetBSD Home
NetBSD PR Database Search

(Contact us) $NetBSD: query-full-pr,v 1.39 2013/11/01 18:47:49 spz Exp $
$NetBSD: gnats_config.sh,v 1.8 2006/05/07 09:23:38 tsutsui Exp $
Copyright © 1994-2014 The NetBSD Foundation, Inc. ALL RIGHTS RESERVED.