Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #245441

Re: Uninstalling a package removes other essential packages: What is the best course of action?

Show all headers | View raw

> No, I don't have the technical knowledge to audit libthai. My point is that
> why pull in non-English dependencies for an English-language
> installation....Doing so may increase the chance of attacks by hackers.

It's pretty hard to know what might be needed and what not.
Even monolingual computer users may very well want to see characters
written in non-latin scripts on their screen.  Whether it's math
symbols, emojis, or names of coworkers of Thai origins.

It's also hard to write the code in such a way that you can have support
for Thai scripts and latin scripts but not other scripts.

And of course, the same issue holds for completely different aspects
such as support for hardware devices you'll never use, or support for
file formats you'll never use, or support for specific features of your
programs which you'll never use.

If we could generate an installation image of Debian special-custom-made
to only support the functionality that you will use, and really remove
all the code and data that can be removed without affecting your
experience, I suspect that image would be *significantly* smaller.
And arguably more secure as well, as you point out.

But it's damn hard to do it automatically.  And before we can start
doing it, we'd need to know the future (which functionality will you
use).  So instead, we have to satisfy ourselves with the very crude
approximation offered by Debian's choice of packages to install :-(

Some distributions offer a bit more control, BTW.  I'm thinking of
distributions like OpenWRT, or Gentoo.  But what they offer is still
very crude compared to what could be done in theory, with unlimited
programmer-resources.


        Stefan

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Re: Uninstalling a package removes other essential packages: What is  the best course of action? "Andrew M.A. Cater" <amacater@einval.com> - 2022-02-13 14:20 +0100
  Re: Uninstalling a package removes other essential packages: What  is the best course of action? Stella Ashburne <rewefie@gmx.com> - 2022-02-14 11:30 +0100
    Re: Uninstalling a package removes other essential packages: What  is the best course of action? The Wanderer <wanderer@fastmail.fm> - 2022-02-14 13:50 +0100
      Re: Uninstalling a package removes other essential packages: What  is the best course of action? Stella Ashburne <rewefie@gmx.com> - 2022-02-15 19:00 +0100
        Re: Uninstalling a package removes other essential packages: What  is the best course of action? Kushal Kumaran <kushal@locationd.net> - 2022-02-15 20:00 +0100
        Re: Uninstalling a package removes other essential packages: What is the best course of action? Stefan Monnier <monnier@iro.umontreal.ca> - 2022-02-15 20:30 +0100
        Re: Uninstalling a package removes other essential packages: What  is the best course of action? The Wanderer <wanderer@fastmail.fm> - 2022-02-16 03:10 +0100
          Re: Uninstalling a package removes other essential packages: What  is the best course of action? Stella Ashburne <rewefie@gmx.com> - 2022-02-16 14:40 +0100
            Re: Uninstalling a package removes other essential packages: What  is the best course of action? The Wanderer <wanderer@fastmail.fm> - 2022-02-16 14:50 +0100
              Re: Uninstalling a package removes other essential packages: What  is the best course of action? Stella Ashburne <rewefie@gmx.com> - 2022-02-17 07:10 +0100
            Re: Uninstalling a package removes other essential packages: What is  the best course of action? <tomas@tuxteam.de> - 2022-02-16 15:10 +0100
              Re: Uninstalling a package removes other essential packages: What  is the best course of action? Curt <curty@free.fr> - 2022-02-16 16:40 +0100
                Re: Uninstalling a package removes other essential packages: What is  the best course of action? David Wright <deblis@lionunicorn.co.uk> - 2022-02-16 21:40 +0100
                Re: Uninstalling a package removes other essential packages: What is  the best course of action? <tomas@tuxteam.de> - 2022-02-17 06:50 +0100
                Re: Uninstalling a package removes other essential packages: What  is the best course of action? Curt <curty@free.fr> - 2022-02-17 10:50 +0100
                Re: Uninstalling a package removes other essential packages: What is  the best course of action? <tomas@tuxteam.de> - 2022-02-17 11:00 +0100
                Re: Uninstalling a package removes other essential packages: What  is the best course of action? Curt <curty@free.fr> - 2022-02-17 10:50 +0100
                Re: Uninstalling a package removes other essential packages: What is  the best course of action? <tomas@tuxteam.de> - 2022-02-17 11:00 +0100
              Re: Uninstalling a package removes other essential packages: What  is the best course of action? Stella Ashburne <rewefie@gmx.com> - 2022-02-17 07:10 +0100
                Re: Uninstalling a package removes other essential packages: What is  the best course of action? <tomas@tuxteam.de> - 2022-02-17 09:30 +0100
    Re: Uninstalling a package removes other essential packages: What is  the best course of action? Jonathan Dowland <jon+debian-user@dow.land> - 2022-02-17 11:10 +0100
      Re: Uninstalling a package removes other essential packages: What  is the best course of action? Tixy <tixy@yxit.co.uk> - 2022-02-17 18:10 +0100

csiph-web