tech-pkg archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: gtk3 w/o dbus no longer possible?



On Sun, Nov 17, 2024 at 12:36:26AM +0100, Thomas Klausner wrote:
 > > But also: because it's very difficult to keep the thing from running
 > > if it's installed; because it installs setuid root frobs so it can't
 > > be contained to a single user account; and because of these factors,
 > > once it's running you get a whole new class of attack vectors/security
 > > risks.
 > > 
 > > It's one thing, in the absence of alternative infrastructure, to
 > > install it because you need it for something; it's another thing for
 > > large numbers of widely-used applications that don't need it to
 > > quietly start running it.
 > 
 > at-spi2-core has a atk_only option. You can enable it by
 > 
 > MESON_ARGS+= -Datk_only=true

This turns out to be straightforward and has been committed.

-- 
David A. Holland
dholland%netbsd.org@localhost


Home | Main Index | Thread Index | Old Index