does mc really require perl*?

Bill Nottingham notting at redhat.com
Fri Sep 20 18:26:59 UTC 2013


Reindl Harald (h.reindl at thelounge.net) said: 
> Am 20.09.2013 17:18, schrieb Miloslav Trmač:
> > (IMHO, disk space is cheap enough that just using hard Requires: is
> > rarely wrong enough to worry about it.)
> 
> no it is *not*
> 
> in cloud infrastructure where you have 100, 500, 1000
> instances and need to reserve 50 or 150 MB more for the
> base OS because dependencie chains you end easily in
> a lot of gigabytes and not only the space, also the
> time updates on all the instances takes
> 
> additionally there is a security point of view
> 
> take a look which software comonents in the last few
> months had security-fixes where i even did not condiser
> that they could open a security hole willingly
> 
> with every pulled and distributed dependency you raise
> the amount of code with potential unknown security
> relevant bugs

Sure, it's a good principle, but you also have to tailor it to the
situations where it's applied.

For example, are people *really* using mc for work inside cloud images?  If
it's a tool that is confined to administator console usage on their
laptop/workstation, you could argue that there are different criteria for
what is considered an 'excessive' dependency.

Bill


More information about the devel mailing list