<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<TITLE> [Mageia-dev] Removal of sun java
</TITLE>
<LINK REL="Index" HREF="index.html" >
<LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Removal%20of%20sun%20java&In-Reply-To=%3C4F758035.4050104%40colin.guthr.ie%3E">
<META NAME="robots" CONTENT="index,nofollow">
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<LINK REL="Previous" HREF="013713.html">
<LINK REL="Next" HREF="013727.html">
</HEAD>
<BODY BGCOLOR="#ffffff">
<H1>[Mageia-dev] Removal of sun java</H1>
<B>Colin Guthrie</B>
<A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Removal%20of%20sun%20java&In-Reply-To=%3C4F758035.4050104%40colin.guthr.ie%3E"
TITLE="[Mageia-dev] Removal of sun java">mageia at colin.guthr.ie
</A><BR>
<I>Fri Mar 30 11:43:17 CEST 2012</I>
<P><UL>
<LI>Previous message: <A HREF="013713.html">[Mageia-dev] Removal of sun java
</A></li>
<LI>Next message: <A HREF="013727.html">[Mageia-dev] Removal of sun java
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#13715">[ date ]</a>
<a href="thread.html#13715">[ thread ]</a>
<a href="subject.html#13715">[ subject ]</a>
<a href="author.html#13715">[ author ]</a>
</LI>
</UL>
<HR>
<!--beginarticle-->
<PRE>'Twas brillig, and Guillaume Rousse at 30/03/12 10:17 did gyre and gimble:
><i> Using task-obsolete is fine:
</I>><i> - its purpose is crystal-clear
</I>><i> - if I don't want it, I don't install it
</I>><i>
</I>><i> Adding an obsolete tag in openjdk to remove sun jdk now, for security
</I>><i> concernes, whereas we had suffered a useless mess of at least four
</I>><i> available java environnement at once for years uselessly (excepted for
</I>><i> blindly applying jpackage project practices), doesn't seems quite similar.
</I>
Well think of it this way (assuming I have the facts vaguely straight):
Forget about Cauldron and mga2
We're providing a known insecure version to mga1 users.
We need to find a way to update mga1 somehow right? Or do we want to
just abandon them?
Assuming we do not want to abandon them, what do we do? I'd suggest
shipping a new empty package that replaces it with a README.urpmi
telling them to go to Sun directly is the most responsible thing for us
to do. If they do not have a JRE installed, and they have packages that
require one, then they should be prompted to install e.g. openjdk to
satisfy package deps. That should work OK right?
Otherwise we're basically washing our hands of our users' security. This
isn't hand holding or taking away choice. It's about informing them and
being a socially responsible distributor.
I don't why this is even a problem point for discussion.
Whatever is decided, the position on mga1 then just then flows through
into mga2.
Col
--
Colin Guthrie
colin(at)mageia.org
<A HREF="http://colin.guthr.ie/">http://colin.guthr.ie/</A>
Day Job:
Tribalogic Limited <A HREF="http://www.tribalogic.net/">http://www.tribalogic.net/</A>
Open Source:
Mageia Contributor <A HREF="http://www.mageia.org/">http://www.mageia.org/</A>
PulseAudio Hacker <A HREF="http://www.pulseaudio.org/">http://www.pulseaudio.org/</A>
Trac Hacker <A HREF="http://trac.edgewall.org/">http://trac.edgewall.org/</A>
</PRE>
<!--endarticle-->
<HR>
<P><UL>
<!--threads-->
<LI>Previous message: <A HREF="013713.html">[Mageia-dev] Removal of sun java
</A></li>
<LI>Next message: <A HREF="013727.html">[Mageia-dev] Removal of sun java
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#13715">[ date ]</a>
<a href="thread.html#13715">[ thread ]</a>
<a href="subject.html#13715">[ subject ]</a>
<a href="author.html#13715">[ author ]</a>
</LI>
</UL>
<hr>
<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev
mailing list</a><br>
</body></html>