[Bug 217844] devel/gvfs

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217844

            Bug ID: 217844
           Summary: devel/gvfs
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: gnome at FreeBSD.org
          Reporter: jt at ixsystems.com
          Assignee: gnome at FreeBSD.org
             Flags: maintainer-feedback?(gnome at FreeBSD.org)

Due to the wikileaks dump of Vault7, we know there is a 0-day against HALd. 
Since HALd is mostly unused on the linux side, its very unlikely that it will
get patched since most distros are using systemd now.

gvfs can build without HAL support.  I ran gvfs-lite on linux for quite a while
back in the days that I was a linux distro dev.

Should we disable hal in gvfs for this reason?  I realize that some programs
that rely on gvfs with hal will loose some functionality, so it comes down to
the issue of what's more important.  Security or Features.  

I personally side with security, but this isn't my port, so it's not my choice
to decide.

-- 
You are receiving this mail because:
You are the assignee for the bug.