[Dev] [consensus] Features vs. Privacy in nonprism repo

[fauno]

Joshua Haase <hahj87 at gmail.com> writes:
>> Nonprism packages replace other packages in the same way that libre 
>> packages do. So I think 'nonprism' repo should also be activated by 
>> default.
>
> If there is a way to use nonprism by default and install the other
> version if needed, i'd vote for it to be activated by default.
>
> But this repo active by default and stopping you to use the other
> version is too invasive.

IMO privacy related changes to packages that don't break things should
be applied to any package, so +1 to backport them to [libre] and [pcr]!

(for instance, many arch packages contain o=rX permissions for files
where they aren't needed... wasn't there an arch-security comitee?)

-- 
:>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 584 bytes
Desc: not available
URL: <https://lists.parabola.nu/pipermail/dev/attachments/20161004/1757bb25/attachment.sig>