Removing "modules" from the Userland

[Joe Holden]

illoai at gmail.com wrote:
> On 11/29/06, Nadow <el.nadow at gmail.com> wrote:
>> Hi! I installed the 6.2-RC1 version but now I have decided to remove
>> the profiled libraries and I know that for that purpose I have to add
>> the line "NO_PROFILE=" to the make.conf before the "make world"
>> action.
>>
>> My doubt is if I reinstall or upgrade the Userland without this option
>> or anyone (let's say Kerberos, Sendmail.. etc) that I have already
>> installed, these options are going to be removed, or simply are not
>> going to be upgraded and/or reinstalled again.
> 
> Assuming I have read you correctly, when you put
> NO_PROFILE=
> NO_SENDMAIL=
> et al
> into you /etc/make.conf that buildworld (and by extension
> installworld) skip over these, leaving the old versions
> untouched.  For example, as I have many of those set
> in /etc/make.conf ls -l /usr/sbin gives me in part:
> 
> -r-xr-xr-x  1 root  wheel      35884 Nov 21 22:25 mtree
> -r-xr-xr-x  2 root  wheel    1359316 Feb  1  2006 named
> -r-xr-xr-x  1 root  wheel    1060104 Feb  1  2006 named-checkconf
> -r-xr-xr-x  1 root  wheel    1011336 Feb  1  2006 named-checkzone
> -r-xr-xr-x  2 root  wheel       1738 Feb  1  2006 named.reconfig
> -r-xr-xr-x  2 root  wheel       1738 Feb  1  2006 named.reload
> -r-xr-xr-x  1 root  wheel       6688 Nov 21 22:26 ndis_events
> 
> Where you can see that, although I have rebuilt world as of
> 21 Nov, since I have NO_BIND= set, the /usr/sbin/named*
> has not been touched since 01 Feb.  I suppose they could be
> deleted, but AFIK the buildworld/installworld cycle will not do
> this for you.
> 
> On the other hand, if you are not cramped for space they do
> (generally) no harm.
> 
> On the gripping hand, a malicious user might be able to start
> up and then exploit known bugs in those services, so you may
> be better off either upgrading to known good versions or
> deleting them.
> 
Perhaps someone could write a script/something to generate a diff
between buildworld and installed libs for this purpose?

Just a thought as I also have alot of flags like that in make.conf

Ta,
Joe