[Bug 287992] security/py-pwntools: opt us out of PATH pollution, solves conflict with sysutils/moreutils

From: <bugzilla-noreply_at_freebsd.org>
Date: Thu, 03 Jul 2025 18:32:29 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287992

            Bug ID: 287992
           Summary: security/py-pwntools: opt us out of PATH pollution,
                    solves conflict with sysutils/moreutils
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs@FreeBSD.org
          Reporter: milios@ccsys.com
                CC: ehaupt@FreeBSD.org, sunpoet@FreeBSD.org
                CC: ehaupt@FreeBSD.org, sunpoet@FreeBSD.org
             Flags: maintainer-feedback?

i tossed this into the Makefile:

PYDISTUTILS_INSTALLARGS+=       --only-use-pwn-command

because pwntools by default installs a metric ton of super generic-sounding
commands which are just shortcuts to `pwn foo` and `pwn bar` etc.

`main`, `version`, `update`, `debug` just to name a few. i mean, c'mon; who do
these guys think they are? LOL obviously reasonable people tho since they
exposed that flag to opt out.

nothing i'm aware of ever invokes those shorthand commands directly in script
or anything. i'd add that line to the port and call it a day but you may choose
to put it behind an option, the default for which i have no opinion. (POLA says
install them since we've ever installed them, so users dont lose their way
after an upgrade. Common sense says let's get rid of them and make it opt-in
instead of opt-out.)

admittedly the only actual conflict I ran into for my environment was `errno`.
both packages' command serve essentially the same purpose, from what i can
tell, but they dont *quite* have identical interfaces, so its a conflict only
to be resolved by getting one or the other out of the way. my initial thought
was just delete that single command in post-install target but then i
considered the rest of their commands and thought: sheesh only my ex wife has a
greater sense of entitlement!

IMHO, moreutils is far more deserving of the real estate it uses in $PATH

-- 
You are receiving this mail because:
You are the assignee for the bug.