On Mon, Sep 19, 2016 at 09:51:54PM +0200, Miroslav Rovis wrote:
> On 160919-08:11-1000, Joel Roth wrote:
> > Miroslav Rovis wrote:
> > > https://git.devuan.org/dev1fanboy/Upgrade-Install-Devuan/wikis/Devuan-without-dbus
> >
> > apt-get remove dbus doesn't help with de**an packaged apps dependent on
> > dbus such as inkscape and liferea.
> >
> (unable to make this experiment quicker and simpler)
> I'm attempting:
> # emerge -ptuDN inkscape
>
> These are the packages that would be merged, in reverse order:
>
> Calculating dependencies ... done!
>
> !!! All ebuilds that could satisfy ">=app-text/poppler-0.26.0:=[cairo]" have been masked.
> !!! One of the following masked packages is required to complete your request:
> - app-text/poppler-9999::gentoo (masked by: package.mask, missing keyword)
> /etc/portage/package.mask:
> #sys-fs/udev-init-scripts
> # (steveL) pulls in gdbus
> # 2 ln were temporarily masked. Else wouldn't have 'emerge world'.
>
> - app-text/poppler-0.47.0::gentoo (masked by: package.mask)
> - app-text/poppler-0.46.0-r1::gentoo (masked by: package.mask)
> - app-text/poppler-0.45.0::gentoo (masked by: package.mask)
> - app-text/poppler-0.42.0::gentoo (masked by: package.mask)
>
> (dependency required by "media-gfx/inkscape-0.91-r3::gentoo" [ebuild])
> (dependency required by "inkscape" [argument])
> For more information, see the MASKED PACKAGES section in the emerge
> man page or refer to the Gentoo Handbook.
>
>
> These are the packages that would be merged, in reverse order:
>
> Calculating dependencies ... done!
>
> Total: 0 packages, Size of downloads: 0 KiB
>
> #
>
> And yes, poppler pulls in dbus (if I tried to unmask it).
Which poppler packages need attention?
On my jessie:
$ apt-cache search poppler | wc -l
26
> Just as dev1fanboy says in this page:
> https://git.devuan.org/dev1fanboy/Upgrade-Install-Devuan/wikis/devuan-talk-version
> "Removing dbus is more involved and requires some compromises."
>
> I know I have Gimp installed. And maybe if there were devs (I have to
> remind that I'm not one, and for that reason I will soon abandon
> actively participating for this time around and continue only following
> the list)...
>
> [And maybe if there were devs] with time and enthusiasm it wouldn't be
> too hard to make a sans-dbus Inkscape...
>
> # emerge -p1 liferea
>
> These are the packages that would be merged, in order:
>
> Calculating dependencies ... done!
>
> !!! All ebuilds that could satisfy ">=gnome-base/gconf-1.1.9:2" have been masked.
> !!! One of the following masked packages is required to complete your request:
> - gnome-base/gconf-3.2.6-r4::gentoo (masked by: package.mask)
> - gnome-base/gconf-3.2.6-r3::gentoo (masked by: package.mask)
We all know that gnome is deeply coupled with dBus.
Separation is likely difficult, if not impossible.
Easier to accept dBus than systemd I think the security concerns are
are less.
Joel
> (dependency required by "net-news/liferea-1.10.16::gentoo" [ebuild])
> (dependency required by "liferea" [argument])
> For more information, see the MASKED PACKAGES section in the emerge
> man page or refer to the Gentoo Handbook.
>
> #
>
> Same thoughts as for Inkscape above.
>
> Also about Firefox, I forgot to say that getting a san-dbus Firefox
> package for Devuan is likely very little work, but on the part of a
> developer/maintainer. (And see my previous post in this thread: as
> advanced user I really can recommend Firefox, to my best understanding
> --not a programmer, so do take it with some reserve, sure-- it has
> improved privacy-wise.)
>
> On Gentoo it is available for user who ban dbus from their systems, like
> me:
>
> # emerge -p1 firefox
>
> These are the packages that would be merged, in order:
>
> Calculating dependencies .... done! [ebuild R ]
> www-client/firefox-48.0.1::gentoo USE="hardened hwaccel jemalloc3 skia
> -bindist -custom-cflags -custom-optimization -dbus -debug
> (-gmp-autoupdate) -gtk2 -jit (-neon) -pgo -pulseaudio (-selinux)
> -startup-notification (-system-cairo) -system-harfbuzz -system-icu
> -system-jpeg -system-libevent -system-libvpx -system-sqlite {-test}
> -wifi" L10N="-ach -af -an -ar -as -ast -az -be -bg -bn-BD -bn-IN -br -bs
> -ca -cs -cy -da -de -el -en-GB -en-ZA -eo -es-AR -es-CL -es-ES -es-MX
> -et -eu -fa -fi -fr -fy -ga -gd -gl -gu -he -hi -hr -hsb -hu -hy -id -is
> -it -ja -kk -km -kn -ko -lt -lv -mai -mk -ml -mr -ms -nb -nl -nn -or -pa
> -pl -pt-BR -pt-PT -rm -ro -ru -si -sk -sl -son -sq -sr -sv -ta -te -th
> -tr -uk -uz -vi -xh -zh-CN -zh-TW" 0 KiB
>
> Total: 1 package (1 reinstall), Size of downloads: 0 KiB
>
> #
>
> The "-dbus" without quotes above means it would compile without dbus
> dependency (and -p means only pretend --no actual install, and -1 this
> time, do not mark this install down).
>
> Regards to everybody! The remaining truly free world depends on the work
> of people like you. I mean it.
>
> (And if there are no followups I believe I have talked
> enough for this time around)
>
> --
> Miroslav Rovis
> Zagreb, Croatia
> http://www.CroatiaFidelis.hr
> _______________________________________________
> Dng mailing list
> Dng@???
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
--
Joel Roth
::
Re: [DNG] sans-dbus: was Mass bug f…
