Le Mer 6 novembre 2013 16:05, Adam Jackson a écrit : > On Wed, 2013-11-06 at 09:36 +0100, Roberto Ragusa wrote: >> On 11/04/2013 07:30 PM, Alberto Ruiz wrote: >> >> > A media codec should not be a system wide component (I'd go as far as >> > saying it should not be user-session wide, but application bundled). >> >> ??? >> Would you so apply the same reasoning to libjpeg and libtiff? >> Security nightmare. > > It's only a nightmare because we've steadfastly refused to build the > tools to a) track library bundling inside app-bundles b) automate bundle > rebuilds c) force replacement of bundle contents either by sysadmin > action or by policy. If you could do c there would be no reason not to depend on a system lib in the first place. Depending on system libs is painful because upstreams make replacement hard (hardcoding versions, depending on private patches to system libs, etc) -- Nicolas Mailhot -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
