Re: gtk3 w/o dbus no longer possible?

[David Holland <dholland-pkgtech%netbsd.org@localhost>]

On Sat, Nov 16, 2024 at 10:21:16PM +0000, Patrick Welche wrote:
 > > gtk2 didn't depend on dbus prior to this.
 > > 
 > > Now it does; that's broken.
 > 
 > Why does that make it "broken"?

Because dbus is systemd-quality system design, and a lot of us don't
want it on their systems.

But also: because it's very difficult to keep the thing from running
if it's installed; because it installs setuid root frobs so it can't
be contained to a single user account; and because of these factors,
once it's running you get a whole new class of attack vectors/security
risks.

It's one thing, in the absence of alternative infrastructure, to
install it because you need it for something; it's another thing for
large numbers of widely-used applications that don't need it to
quietly start running it.

-- 
David A. Holland
dholland%netbsd.org@localhost