linux-ext4 - Re: Bug#924275: Pulls in lvm2 packages on systems not needing them

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20190311002208.GA4486@mit.edu>
Date:   Sun, 10 Mar 2019 20:22:08 -0400
From:   Theodore Ts'o <tytso@....edu>
To:     Sven Hartge <sven@...nhartge.de>, <924275@...s.debian.org>
CC:     <linux-ext4@...r.kernel.org>, <darrick.wong@...cle.com>,
        <control@...s.debian.org>
Subject: Re: Bug#924275: Pulls in lvm2 packages on systems not needing them

tag 924275 +pending
thanks

On Sun, Mar 10, 2019 at 09:29:04PM +0100, Sven Hartge wrote:
> 
> While I like the new fsck-via-LVM-snapshot feature, I think adding lvm2
> to Recommends is too agressive here.
> 
> On systems not using LVM this will needlessly pull in the whole LVM/DM
> machinery, including changes to the initramfs, as long as apt is in its
> default "install-recommends" configuration.
> 
> Only on systems where the system admin has changed the default to
> "no-install-recommends" nothing will happen.

Agreed; thanks for pointing this out!  I have the following patches
queued for the next release.

				- Ted


View attachment "0001-e2scrub-check-to-make-sure-lvm2-is-installed.patch" of type "text/x-diff" (2668 bytes)

View attachment "0002-debian-drop-lvm2-from-the-recommends-line.patch" of type "text/x-diff" (1030 bytes)