Re: [arch-general] A good time to switch to dash as /bin/sh?

2014-09-26 Thread Mailing Lists
On Fri, Sep 26, 2014, at 05:43 PM, Martti Kühne wrote: > Removing bashisms would not have any inpact in security but rather > enable us switching /bin/sh away from /usr/bin/bash. Which we in > general appear to agree on? > > cheers! > mar77i We do, but let's hope a dev weighs in on this. Or rathe

Re: [arch-general] A good time to switch to dash as /bin/sh?

2014-09-26 Thread Mailing Lists
On Fri, Sep 26, 2014, at 05:43 PM, Martti Kühne wrote: > Removing bashisms would not have any inpact in security but rather > enable us switching /bin/sh away from /usr/bin/bash. Which we in > general appear to agree on? > > cheers! > mar77i No problems there. All I'm saying is that switching sho

Re: [arch-general] A good time to switch to dash as /bin/sh?

2014-09-26 Thread Mailing Lists
On Fri, Sep 26, 2014, at 05:05 PM, lolilolicon wrote: > The grep would find some false positives -- e.g., some perl script might > include #!/bin/sh in its body (such as findimagedupes). > > With dash you don't really need -p, which is more strict. > > The following will reduce the count drastica

Re: [arch-general] A good time to switch to dash as /bin/sh?

2014-09-26 Thread Mailing Lists
On Fri, Sep 26, 2014, at 02:52 PM, lolilolicon wrote: > On Fri, Sep 26, 2014 at 4:20 PM, Martti Kühne wrote: > [...] > > Despite that I'm still not convinced as to why > > the issue in question is such a big deal, I must say it's unlikely > > we're better off with a less active, less used shell. >

Re: [arch-general] testing/ca-certificates-utils problem installing

2014-09-23 Thread Mailing Lists
On Tue, Sep 23, 2014, at 12:59 PM, Jan Alexander Steffens wrote: > On Tue, Sep 23, 2014 at 8:29 AM, Jan Alexander Steffens > wrote: > > This got rushed, poorly, and the updates were removed. I'm very sorry. > > Please downgrade again: > > > > pacman -S core/ca-certificates{,-cacert} > > extra/{nss

Re: [arch-general] Errors regarding the ssl certificates

2014-09-23 Thread Mailing Lists
On Tue, Sep 23, 2014, at 12:00 PM, Jan Alexander Steffens wrote: > On Tue, Sep 23, 2014 at 8:28 AM, Mailing Lists > wrote: > > Curl needs to be recompiled with the new locations of the certificates. > > A quick glance at the PKGBUILD shows me that the compile flag > > --

[arch-general] Errors regarding the ssl certificates

2014-09-22 Thread Mailing Lists
Curl needs to be recompiled with the new locations of the certificates. A quick glance at the PKGBUILD shows me that the compile flag --with-ca-bundle is set to /etc/ssl/certs/ca-certificates.crt, while as of the last update (20140923-2 in testing), this location does not seem to exist any more. Th