[{"id":1759641,"web_url":"http://patchwork.ozlabs.org/comment/1759641/","msgid":"","list_archive_url":null,"date":"2017-08-29T20:16:21","subject":"Re: [PATCH] Deprecate libcrypt and don't build it by default.","submitter":{"id":4349,"url":"http://patchwork.ozlabs.org/api/people/4349/","name":"Joseph Myers","email":"joseph@codesourcery.com"},"content":"On Tue, 29 Aug 2017, Zack Weinberg wrote:\n\n> Back in June, Björn Esser proposed to add OpenBSD-compatible bcrypt\n> support to our implementation of crypt(3), and I replied that it might\n> actually make more sense to _remove_ libcrypt from glibc, freeing up\n> libcrypt.so.1 and crypt.h to be provided by a separate project that\n> could move faster. (For instance, libxcrypt:\n> https://github.com/besser82/libxcrypt)\n\nI don't believe libxcrypt's claim to be a binary-compatible replacement \nfor libcrypt.so.1. It looks to me like it uses symbol version GLIBC_2.0 \nunconditionally for the glibc symbols, when the actual base version \ndepends on the architecture / ABI for which glibc is built; GLIBC_2.0 is \nonly for a few architectures such as i386 with very longstanding ports. \n(It could of course be taught to find the base version at configure time, \ne.g. by checking the output of objdump -T on libc for a symbol such as abs \nwe can be confident won't get new symbol versions, though for that you \nfirst need to locate the shared libc the compiler is linking against, \nwhich is not completely trivial - \"$CC $CFLAGS $CPPFLAGS \n-print-file-name=libc.so\" will give you the linker script, not the shared \nlibrary, and paths therein may be relative to a sysroot so you'd need to \nprocess the linker script and combine with -print-sysroot output; \"$CC \n$CFLAGS $CPPFLAGS -print-file-name=libc.so.6\" is incorrect on alpha where \nit's libc.so.6.1.)","headers":{"Return-Path":"","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":["patchwork-incoming@bilbo.ozlabs.org","mailing list libc-alpha@sourceware.org"],"Authentication-Results":["ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=sourceware.org\n\t(client-ip=209.132.180.131; helo=sourceware.org;\n\tenvelope-from=libc-alpha-return-83843-incoming=patchwork.ozlabs.org@sourceware.org;\n\treceiver=)","ozlabs.org; dkim=pass (1024-bit key;\n\tsecure) header.d=sourceware.org header.i=@sourceware.org\n\theader.b=\"sAK7IGJr\"; dkim-atps=neutral","sourceware.org; auth=none"],"Received":["from sourceware.org (server1.sourceware.org [209.132.180.131])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256\n\tbits)) (No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xhfzq48J4z9sPt\n\tfor ;\n\tWed, 30 Aug 2017 06:16:39 +1000 (AEST)","(qmail 46339 invoked by alias); 29 Aug 2017 20:16:32 -0000","(qmail 46249 invoked by uid 89); 29 Aug 2017 20:16:32 -0000"],"DomainKey-Signature":"a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id\n\t:list-unsubscribe:list-subscribe:list-archive:list-post\n\t:list-help:sender:date:from:to:cc:subject:in-reply-to:message-id\n\t:references:mime-version:content-type; q=dns; s=default; b=f2F4t\n\tNEKw/5BZKMxk2/imBS5dqn6dx7Dii55Db/bolo2pDym+ixLIrPKILCNcuCKu7RVu\n\tCqi3OF/p0XQzSpgHbk3ogGppBaw2odOVRlWdwsVdGMMG/0fWqkzQt5wO8h7xPE7G\n\tKikDsRnTQSr/Qo6UE2T15xo1zviaOZ18DHwQRo=","DKIM-Signature":"v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id\n\t:list-unsubscribe:list-subscribe:list-archive:list-post\n\t:list-help:sender:date:from:to:cc:subject:in-reply-to:message-id\n\t:references:mime-version:content-type; s=default; bh=NweUm7eCRr9\n\tbQpcztf9sMZ0rXXY=; b=sAK7IGJrfFUca4kRHilKlD45CBuqaK3KG8jLP7qRWgC\n\tiLAo4yEoMDcQlIcHwrCrtqbK/IY4cQlhqDlt1qtpYY0N0W5kK34N9HGlUpQcTYs+\n\tgLSYHTgEk+g0xwS6mjRLOXV79RNUbScv9Fd7lgs+FRq1ZkmVFZz1y936kQ+9BPwE\n\t=","Mailing-List":"contact libc-alpha-help@sourceware.org; run by ezmlm","Precedence":"bulk","List-Id":"","List-Unsubscribe":"","List-Subscribe":"","List-Archive":"","List-Post":"","List-Help":",\n\t","Sender":"libc-alpha-owner@sourceware.org","X-Virus-Found":"No","X-Spam-SWARE-Status":"No, score=-2.0 required=5.0 tests=AWL, BAYES_00,\n\tRCVD_IN_DNSWL_NONE, SPF_PASS,\n\tURIBL_RED autolearn=ham version=3.3.2 spammy=taught, ports,\n\ttherein, H*c:HHHHH","X-HELO":"relay1.mentorg.com","Date":"Tue, 29 Aug 2017 20:16:21 +0000","From":"Joseph Myers ","To":"Zack Weinberg ","CC":", ,\n\t","Subject":"Re: [PATCH] Deprecate libcrypt and don't build it by default.","In-Reply-To":"<20170829184247.6875-1-zackw@panix.com>","Message-ID":"","References":"<20170829184247.6875-1-zackw@panix.com>","User-Agent":"Alpine 2.20 (DEB 67 2015-01-07)","MIME-Version":"1.0","Content-Type":"multipart/mixed;\n\tboundary=\"-1152306461-1501960066-1504037781=:23565\"","X-ClientProxiedBy":"svr-ies-mbx-01.mgc.mentorg.com (139.181.222.1) To\n\tsvr-ies-mbx-01.mgc.mentorg.com (139.181.222.1)"}},{"id":1759677,"web_url":"http://patchwork.ozlabs.org/comment/1759677/","msgid":"","list_archive_url":null,"date":"2017-08-29T20:49:21","subject":"Re: [PATCH] Deprecate libcrypt and don't build it by default.","submitter":{"id":65878,"url":"http://patchwork.ozlabs.org/api/people/65878/","name":"Zack Weinberg","email":"zackw@panix.com"},"content":"On Tue, Aug 29, 2017 at 4:16 PM, Joseph Myers wrote:\n> On Tue, 29 Aug 2017, Zack Weinberg wrote:\n>> Back in June, Björn Esser proposed to add OpenBSD-compatible bcrypt\n>> support to our implementation of crypt(3), and I replied that it might\n>> actually make more sense to _remove_ libcrypt from glibc, freeing up\n>> libcrypt.so.1 and crypt.h to be provided by a separate project that\n>> could move faster. (For instance, libxcrypt:\n>> https://github.com/besser82/libxcrypt)\n>\n> I don't believe libxcrypt's claim to be a binary-compatible replacement\n> for libcrypt.so.1. It looks to me like it uses symbol version GLIBC_2.0\n> unconditionally for the glibc symbols, when the actual base version\n> depends on the architecture / ABI for which glibc is built; GLIBC_2.0 is\n> only for a few architectures such as i386 with very longstanding ports.\n\nWell, that's just a plain old bug. Obviously a bug that needs to be\nfixed before we can call libxcrypt a binary-compatible drop-in\nreplacement, but not a _difficult_ bug - they can crib from the\nlibcrypt.abilist files. I'm willing to try to work up a patch if\nBjörn agrees.\n\n(The soname needs to be libcrypt.so.1.1 on alpha, too.)\n\nzw","headers":{"Return-Path":"","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":["patchwork-incoming@bilbo.ozlabs.org","mailing list libc-alpha@sourceware.org"],"Authentication-Results":["ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=sourceware.org\n\t(client-ip=209.132.180.131; helo=sourceware.org;\n\tenvelope-from=libc-alpha-return-83845-incoming=patchwork.ozlabs.org@sourceware.org;\n\treceiver=)","ozlabs.org; dkim=pass (1024-bit key;\n\tsecure) header.d=sourceware.org header.i=@sourceware.org\n\theader.b=\"nFvDq5mv\"; dkim-atps=neutral","sourceware.org; auth=none"],"Received":["from sourceware.org (server1.sourceware.org [209.132.180.131])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256\n\tbits)) (No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xhgjn4tkWz9sMN\n\tfor ;\n\tWed, 30 Aug 2017 06:49:32 +1000 (AEST)","(qmail 107492 invoked by alias); 29 Aug 2017 20:49:27 -0000","(qmail 107245 invoked by uid 89); 29 Aug 2017 20:49:26 -0000"],"DomainKey-Signature":"a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id\n\t:list-unsubscribe:list-subscribe:list-archive:list-post\n\t:list-help:sender:mime-version:in-reply-to:references:from:date\n\t:message-id:subject:to:cc:content-type\n\t:content-transfer-encoding; q=dns; s=default; b=qWM/RWKl0FuvcAob\n\tT3tbmA1BcOjCVmIRanzJrBWU2F6wVRU3gmfyXwXEn0J1y4ri3AiCNy41KkZUS7Kr\n\tJo3HpUGSK1yO4oQlSm8mD/HFN1jN7J9ForBeaAwSYoWaEIFjaVGeERZgj8z9o75U\n\t+0CF+Nb+175Q4Xm+nNK0GuqQqAE=","DKIM-Signature":"v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id\n\t:list-unsubscribe:list-subscribe:list-archive:list-post\n\t:list-help:sender:mime-version:in-reply-to:references:from:date\n\t:message-id:subject:to:cc:content-type\n\t:content-transfer-encoding; s=default; bh=IL3f3vh2ZnRRU82WUxHuq5\n\tcrl88=; b=nFvDq5mvIUlYgTaoaYzxuKHkyIQ7SGq4EfYzeTeRSteH3Bp3BsKRAp\n\tCgEfsVEWdQ+7xeacZmw7U7iIYnwUyUnc9HfB9BgJIx7AnyedAAKG50is//aJpkAq\n\t8EBhaIW7kMDQlqNKxVgaFtpHmhKWrHdfkKr6hPhsIzBrqBsQ2UeGM=","Mailing-List":"contact libc-alpha-help@sourceware.org; run by ezmlm","Precedence":"bulk","List-Id":"","List-Unsubscribe":"","List-Subscribe":"","List-Archive":"","List-Post":"","List-Help":",\n\t","Sender":"libc-alpha-owner@sourceware.org","X-Virus-Found":"No","X-Spam-SWARE-Status":"No, score=-1.9 required=5.0 tests=AWL, BAYES_00,\n\tRP_MATCHES_RCVD, SPF_PASS,\n\tURIBL_RED autolearn=ham version=3.3.2 spammy=claim, our","X-HELO":"mailbackend.panix.com","X-Gm-Message-State":"AHYfb5gOluQRasII6gbWQf4hfgXlHqm9KkUlPbSDp7bUVaXBKtIGawFz\n\tyx5CmUvaTKF5A3gRkecvP1MDFGGI9A==","X-Google-Smtp-Source":"ADKCNb7+kaLPNQ98DmosZGVh7t+PR7+zj3iPwYyYOB2RMZGaLvAY+tt5HUVPjwk8r7AqdF65BBtGCvHjh0uGj5ce03o=","X-Received":"by 10.36.139.132 with SMTP id g126mr3608012ite.135.1504039762104;\n\tTue, 29 Aug 2017 13:49:22 -0700 (PDT)","MIME-Version":"1.0","In-Reply-To":"","References":"<20170829184247.6875-1-zackw@panix.com>\n\t","From":"Zack Weinberg ","Date":"Tue, 29 Aug 2017 16:49:21 -0400","X-Gmail-Original-Message-ID":"","Message-ID":"","Subject":"Re: [PATCH] Deprecate libcrypt and don't build it by default.","To":"Joseph Myers ","Cc":"GNU C Library , =?utf-8?q?Bj=C3=B6rn_Esser?=\n\t, \tFlorian Weimer ","Content-Type":"text/plain; charset=\"UTF-8\"","Content-Transfer-Encoding":"quoted-printable"}},{"id":1759681,"web_url":"http://patchwork.ozlabs.org/comment/1759681/","msgid":"","list_archive_url":null,"date":"2017-08-29T20:58:17","subject":"Re: [PATCH] Deprecate libcrypt and don't build it by default.","submitter":{"id":4349,"url":"http://patchwork.ozlabs.org/api/people/4349/","name":"Joseph Myers","email":"joseph@codesourcery.com"},"content":"On Tue, 29 Aug 2017, Zack Weinberg wrote:\n\n> On Tue, Aug 29, 2017 at 4:16 PM, Joseph Myers wrote:\n> > On Tue, 29 Aug 2017, Zack Weinberg wrote:\n> >> Back in June, Björn Esser proposed to add OpenBSD-compatible bcrypt\n> >> support to our implementation of crypt(3), and I replied that it might\n> >> actually make more sense to _remove_ libcrypt from glibc, freeing up\n> >> libcrypt.so.1 and crypt.h to be provided by a separate project that\n> >> could move faster. (For instance, libxcrypt:\n> >> https://github.com/besser82/libxcrypt)\n> >\n> > I don't believe libxcrypt's claim to be a binary-compatible replacement\n> > for libcrypt.so.1. It looks to me like it uses symbol version GLIBC_2.0\n> > unconditionally for the glibc symbols, when the actual base version\n> > depends on the architecture / ABI for which glibc is built; GLIBC_2.0 is\n> > only for a few architectures such as i386 with very longstanding ports.\n> \n> Well, that's just a plain old bug. Obviously a bug that needs to be\n> fixed before we can call libxcrypt a binary-compatible drop-in\n> replacement, but not a _difficult_ bug - they can crib from the\n> libcrypt.abilist files. I'm willing to try to work up a patch if\n> Björn agrees.\n\nI'm not convinced that duplicating all the information about which ABIs \nuse which symbol versions, and how to distinguish different ABIs on each \narchitecture that has ABIs with different base versions, is a good idea.\n\n(powerpc64le uses libcrypt-le.abilist; if you just used libcrypt.abilist \nfiles, you'd miss that one.)","headers":{"Return-Path":"","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":["patchwork-incoming@bilbo.ozlabs.org","mailing list libc-alpha@sourceware.org"],"Authentication-Results":["ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=sourceware.org\n\t(client-ip=209.132.180.131; helo=sourceware.org;\n\tenvelope-from=libc-alpha-return-83847-incoming=patchwork.ozlabs.org@sourceware.org;\n\treceiver=)","ozlabs.org; dkim=pass (1024-bit key;\n\tsecure) header.d=sourceware.org header.i=@sourceware.org\n\theader.b=\"isdvUOIn\"; dkim-atps=neutral","sourceware.org; auth=none"],"Received":["from sourceware.org (server1.sourceware.org [209.132.180.131])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256\n\tbits)) (No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xhgwC1FM1z9sN7\n\tfor ;\n\tWed, 30 Aug 2017 06:58:34 +1000 (AEST)","(qmail 58954 invoked by alias); 29 Aug 2017 20:58:28 -0000","(qmail 57011 invoked by uid 89); 29 Aug 2017 20:58:28 -0000"],"DomainKey-Signature":"a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id\n\t:list-unsubscribe:list-subscribe:list-archive:list-post\n\t:list-help:sender:date:from:to:cc:subject:in-reply-to:message-id\n\t:references:mime-version:content-type; q=dns; s=default; b=d6xD2\n\tLiBhKkIG7JpkRZP1i1ivT3p9HbznZF14Dt+SuwfnGPn9p/jPaN/zqmIu+JVgsxhu\n\tw8a9DvtOyjNc2G3Gyg+7wkHoCARMOeefN4p0Jc4V42GWHcgdsOF+4at7NN66UE+9\n\tD1ycMkAtvZ87R2wjJBFuCrjzueG5zULZXsNSb8=","DKIM-Signature":"v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id\n\t:list-unsubscribe:list-subscribe:list-archive:list-post\n\t:list-help:sender:date:from:to:cc:subject:in-reply-to:message-id\n\t:references:mime-version:content-type; s=default; bh=6okvdPFmAlI\n\t/iXGkVMc0eKBrHmg=; b=isdvUOInWTpj0OfcGInLW08K2drfy1CYB/NgkxcEDPj\n\tpfordrN8Afhvrw0xH/f8iMh1avf7E/BcTylazwJ3gnYVAH7J8MIONCVe+/MFLBm4\n\t9uQ+7lBnkw/HlUKN/VV8R1VNCCdTJzAdJMiiLlQywD6sXMC4mYp3Hz0V2EN1O6Fg\n\t=","Mailing-List":"contact libc-alpha-help@sourceware.org; run by ezmlm","Precedence":"bulk","List-Id":"","List-Unsubscribe":"","List-Subscribe":"","List-Archive":"","List-Post":"","List-Help":",\n\t","Sender":"libc-alpha-owner@sourceware.org","X-Virus-Found":"No","X-Spam-SWARE-Status":"No, score=-2.0 required=5.0 tests=AWL, BAYES_00,\n\tRCVD_IN_DNSWL_NONE, SPF_PASS,\n\tURIBL_RED autolearn=ham version=3.3.2 spammy=Hx-languages-length:1657,\n\tH*c:HHHHH, claim","X-HELO":"relay1.mentorg.com","Date":"Tue, 29 Aug 2017 20:58:17 +0000","From":"Joseph Myers ","To":"Zack Weinberg ","CC":"GNU C Library , =?iso-8859-15?q?Bj=F6rn_Ess?=\n\t=?iso-8859-15?q?er?= ,\n\tFlorian Weimer ","Subject":"Re: [PATCH] Deprecate libcrypt and don't build it by default.","In-Reply-To":"","Message-ID":"","References":"<20170829184247.6875-1-zackw@panix.com>\n\t\n\t","User-Agent":"Alpine 2.20 (DEB 67 2015-01-07)","MIME-Version":"1.0","Content-Type":"multipart/mixed;\n\tboundary=\"-1152306461-1105864273-1504040297=:23565\"","X-ClientProxiedBy":"svr-ies-mbx-01.mgc.mentorg.com (139.181.222.1) To\n\tsvr-ies-mbx-01.mgc.mentorg.com (139.181.222.1)"}},{"id":1759698,"web_url":"http://patchwork.ozlabs.org/comment/1759698/","msgid":"","list_archive_url":null,"date":"2017-08-29T21:20:41","subject":"Re: [PATCH] Deprecate libcrypt and don't build it by default.","submitter":{"id":65878,"url":"http://patchwork.ozlabs.org/api/people/65878/","name":"Zack Weinberg","email":"zackw@panix.com"},"content":"On Tue, Aug 29, 2017 at 4:58 PM, Joseph Myers wrote:\n> On Tue, 29 Aug 2017, Zack Weinberg wrote:\n>> On Tue, Aug 29, 2017 at 4:16 PM, Joseph Myers wrote:\n>> >\n>> > I don't believe libxcrypt's claim to be a binary-compatible replacement\n>> > for libcrypt.so.1. It looks to me like it uses symbol version GLIBC_2.0\n>> > unconditionally for the glibc symbols,\n>>\n>> Well, that's just a plain old bug. Obviously a bug that needs to be\n>> fixed before we can call libxcrypt a binary-compatible drop-in\n>> replacement, but not a _difficult_ bug - they can crib from the\n>> libcrypt.abilist files. I'm willing to try to work up a patch if\n>> Björn agrees.\n>\n> I'm not convinced that duplicating all the information about which ABIs\n> use which symbol versions, and how to distinguish different ABIs on each\n> architecture that has ABIs with different base versions, is a good idea.\n\nThe plan would be to remove libcrypt from glibc one or two releases\nafter this deprecation, so it's not so much _duplicating_ the\ninformation as _moving_ it.\n\nzw","headers":{"Return-Path":"","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":["patchwork-incoming@bilbo.ozlabs.org","mailing list libc-alpha@sourceware.org"],"Authentication-Results":["ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=sourceware.org\n\t(client-ip=209.132.180.131; helo=sourceware.org;\n\tenvelope-from=libc-alpha-return-83850-incoming=patchwork.ozlabs.org@sourceware.org;\n\treceiver=)","ozlabs.org; dkim=pass (1024-bit key;\n\tsecure) header.d=sourceware.org header.i=@sourceware.org\n\theader.b=\"YqOcl5Xt\"; dkim-atps=neutral","sourceware.org; auth=none"],"Received":["from sourceware.org (server1.sourceware.org [209.132.180.131])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256\n\tbits)) (No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xhhQ00M8Lz9sPt\n\tfor ;\n\tWed, 30 Aug 2017 07:20:55 +1000 (AEST)","(qmail 39443 invoked by alias); 29 Aug 2017 21:20:45 -0000","(qmail 39431 invoked by uid 89); 29 Aug 2017 21:20:45 -0000"],"DomainKey-Signature":"a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id\n\t:list-unsubscribe:list-subscribe:list-archive:list-post\n\t:list-help:sender:mime-version:in-reply-to:references:from:date\n\t:message-id:subject:to:cc:content-type\n\t:content-transfer-encoding; q=dns; s=default; b=QmDHbLKoes7BijGQ\n\tR/oaLvl3uQdtsVEm5MeTdJwAZinEmKRANjzy+jxxJX4XEVN+zAmQk70xCD8bEz4y\n\t1ueZ8tNIQu2xMt4menqBm275ep/UYbGyUkHiF4MdJof4TJs92yl7eJL6K+U/ntMt\n\tVaKUIw+03dNTf7AfFcyhI/5tntk=","DKIM-Signature":"v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id\n\t:list-unsubscribe:list-subscribe:list-archive:list-post\n\t:list-help:sender:mime-version:in-reply-to:references:from:date\n\t:message-id:subject:to:cc:content-type\n\t:content-transfer-encoding; s=default; bh=C/dK4+HACbfLMZrpkSH2Sl\n\tKpXRE=; b=YqOcl5XtTp7bRbq7NkzXN8DqrdM48+D3I7gYqf2nctgbhrkn3PSBG8\n\t2lOTNIM4DqzwfrnUzGKbnOn4JMXLN029nJnE+8DlL7qJr3ERFh1pxB/kzUquwlEm\n\tCh0dbPDe5Q02qM8hfj6jRV7GnPuYyZIglyB65nQKDtrZQMT2c9e+E=","Mailing-List":"contact libc-alpha-help@sourceware.org; run by ezmlm","Precedence":"bulk","List-Id":"","List-Unsubscribe":"","List-Subscribe":"","List-Archive":"","List-Post":"","List-Help":",\n\t","Sender":"libc-alpha-owner@sourceware.org","X-Virus-Found":"No","X-Spam-SWARE-Status":"No, score=-1.5 required=5.0 tests=AWL, BAYES_00,\n\tRCVD_IN_SORBS_SPAM, RP_MATCHES_RCVD, SPF_PASS,\n\tURIBL_RED autolearn=no version=3.3.2 spammy=claim","X-HELO":"mailbackend.panix.com","X-Gm-Message-State":"AHYfb5gFh50C3oPcxmdCOdARVl/P/d0ztUsWxeMRm2ZEmvasMJSF9VpW\n\tKma89j5BK4Jzknr2OnlXu15vjNMlBA==","X-Google-Smtp-Source":"ADKCNb4wX12xHNN4gagHn6SSwq/WGj+gLC6YMrq3soakHKWf4HQD0oafJjeoKEpBLSYNxHbhs3bIWs1O/JwnPE5oUI0=","X-Received":"by 10.107.130.166 with SMTP id m38mr3183712ioi.325.1504041641463;\n\tTue, 29 Aug 2017 14:20:41 -0700 (PDT)","MIME-Version":"1.0","In-Reply-To":"","References":"<20170829184247.6875-1-zackw@panix.com>\n\t\n\t\n\t","From":"Zack Weinberg ","Date":"Tue, 29 Aug 2017 17:20:41 -0400","X-Gmail-Original-Message-ID":"","Message-ID":"","Subject":"Re: [PATCH] Deprecate libcrypt and don't build it by default.","To":"Joseph Myers ","Cc":"GNU C Library , =?utf-8?q?Bj=C3=B6rn_Esser?=\n\t, \tFlorian Weimer ","Content-Type":"text/plain; charset=\"UTF-8\"","Content-Transfer-Encoding":"quoted-printable"}},{"id":1761208,"web_url":"http://patchwork.ozlabs.org/comment/1761208/","msgid":"<062b657a-6ac5-a883-7a5a-be0b1a78a6fa@redhat.com>","list_archive_url":null,"date":"2017-08-31T17:29:48","subject":"Re: [PATCH] Deprecate libcrypt and don't build it by default.","submitter":{"id":22438,"url":"http://patchwork.ozlabs.org/api/people/22438/","name":"Carlos O'Donell","email":"carlos@redhat.com"},"content":"On 08/29/2017 04:20 PM, Zack Weinberg wrote:\n> On Tue, Aug 29, 2017 at 4:58 PM, Joseph Myers wrote:\n>> On Tue, 29 Aug 2017, Zack Weinberg wrote:\n>>> On Tue, Aug 29, 2017 at 4:16 PM, Joseph Myers wrote:\n>>>>\n>>>> I don't believe libxcrypt's claim to be a binary-compatible replacement\n>>>> for libcrypt.so.1. It looks to me like it uses symbol version GLIBC_2.0\n>>>> unconditionally for the glibc symbols,\n>>>\n>>> Well, that's just a plain old bug. Obviously a bug that needs to be\n>>> fixed before we can call libxcrypt a binary-compatible drop-in\n>>> replacement, but not a _difficult_ bug - they can crib from the\n>>> libcrypt.abilist files. I'm willing to try to work up a patch if\n>>> Björn agrees.\n>>\n>> I'm not convinced that duplicating all the information about which ABIs\n>> use which symbol versions, and how to distinguish different ABIs on each\n>> architecture that has ABIs with different base versions, is a good idea.\n> \n> The plan would be to remove libcrypt from glibc one or two releases\n> after this deprecation, so it's not so much _duplicating_ the\n> information as _moving_ it.\n\nI disagree that removal can happen on those timescales, but I agree that\nit would be a good idea to split libcrypt out of glibc to allow for a\ndifferent development model\n\nFor example libcrypt + Network Security Services (NSS) (--enable-nss-crypt)\nis used by many users who need US government compliance with FIPS 140-1. It's\nnot clear to me that libxcrypt provides that kind of compliance. This means\nthat until then we'd need to keep the compat code in glibc. This doesn't mean\nwe can just sit around waiting for things to happen, I think Red Hat can and\nshould take an active role in helping libxcrypt.\n\nLike the Sun RPC to TIRPC transition, it is a long, long, way to Tipperary.","headers":{"Return-Path":"","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":["patchwork-incoming@bilbo.ozlabs.org","mailing list libc-alpha@sourceware.org"],"Authentication-Results":["ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=sourceware.org\n\t(client-ip=209.132.180.131; helo=sourceware.org;\n\tenvelope-from=libc-alpha-return-83992-incoming=patchwork.ozlabs.org@sourceware.org;\n\treceiver=)","ozlabs.org; dkim=pass (1024-bit key;\n\tsecure) header.d=sourceware.org header.i=@sourceware.org\n\theader.b=\"v3MIv7xa\"; dkim-atps=neutral","sourceware.org; auth=none"],"Received":["from sourceware.org (server1.sourceware.org [209.132.180.131])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256\n\tbits)) (No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xjqBx3j5Zz9sD5\n\tfor ;\n\tFri, 1 Sep 2017 03:30:17 +1000 (AEST)","(qmail 64650 invoked by alias); 31 Aug 2017 17:30:04 -0000","(qmail 64623 invoked by uid 89); 31 Aug 2017 17:30:03 -0000"],"DomainKey-Signature":"a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id\n\t:list-unsubscribe:list-subscribe:list-archive:list-post\n\t:list-help:sender:subject:to:cc:references:from:message-id:date\n\t:mime-version:in-reply-to:content-type\n\t:content-transfer-encoding; q=dns; s=default; b=r2MEMjKYr5G/27Uz\n\tMcROwZYXNVsoAkUMyLGj4Y++moUB3oheEP1+o1Wq3Agy8DYFTJ2CW8lZV52UtiT5\n\t4hgPJJ373XmXqdWkuIaiRUbZhQjGwnLtzHh8XhzE3x+oRvDvN6yAYxXXuF8uk7aO\n\tCoYgLGbVmGMsSQSSrPoDLxNEVI0=","DKIM-Signature":"v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id\n\t:list-unsubscribe:list-subscribe:list-archive:list-post\n\t:list-help:sender:subject:to:cc:references:from:message-id:date\n\t:mime-version:in-reply-to:content-type\n\t:content-transfer-encoding; s=default; bh=SmtB3R5D+X6zC+b8+eSqow\n\ttneKE=; b=v3MIv7xahtC2V0J3GksRYQGOf0TND8HQH4qygUqIVB8BfD/lKnT0BK\n\tGZ1u3En7/qHGONgCQ1yRPjzXPOrfpQe8QWUAq1HE64pdAQs9Xo5j7uDH7BFAWVmN\n\tSBBr/KjwtA5bRmBF+CAejp/0UkgkgF7trTS9wj78Bn1MvF3iLVkDI=","Mailing-List":"contact libc-alpha-help@sourceware.org; run by ezmlm","Precedence":"bulk","List-Id":"","List-Unsubscribe":"","List-Subscribe":"","List-Archive":"","List-Post":"","List-Help":",\n\t","Sender":"libc-alpha-owner@sourceware.org","X-Virus-Found":"No","X-Spam-SWARE-Status":"No, score=-2.3 required=5.0 tests=AWL, BAYES_00,\n\tRCVD_IN_DNSWL_LOW, RCVD_IN_SORBS_SPAM,\n\tURIBL_RED autolearn=ham version=3.3.2 spammy=sit, government,\n\tServices, claim","X-HELO":"mail-qt0-f180.google.com","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n\td=1e100.net; s=20161025;\n\th=x-gm-message-state:subject:to:cc:references:from:organization\n\t:message-id:date:user-agent:mime-version:in-reply-to\n\t:content-language:content-transfer-encoding;\n\tbh=FszSmqmCOj9ragSHGK5+nsKjiC+bF5ajzMXCY2ElKps=;\n\tb=itMl54ES59dG9CbpSt5hB/5knxTTOObm/GZDWUsmxx+cE0JBtijZM0bgTJF7eBkzME\n\tcNlzKW9bp+6adUHXnY4fZOsrFOExYFnoQfeI8UrqDJ4uAJlf6GpE/px9/hKB657IHGEn\n\t12uUeK67ixNLrcC2YbFjq5oNd0d5Bfp2ECrJkRXpKYmK9+s8bplJcCbmbCeMW8BeT+w4\n\tU5I4BoQ991QLYVFAnqNNBm5W6foLi+Y1GuipoJ32kxLBT2MB2z16jgrXm46VsyeUHFBD\n\tvOkLgIMdy1GESNyjz2m9cDtN2LIoWCnvaWtNSlqnsPnmB1h5hBWvSokk7n+hkW2BtPHk\n\tG6rQ==","X-Gm-Message-State":"AHYfb5jODxtZ7/UvtT8panRBV5Elc84ax2idPHHCKxKKy1OjoFMXpfX/\n\tm/Aja/HnqWuoXwN1","X-Google-Smtp-Source":"ADKCNb6wj+6v/8x2KqUAPRXRKLI+7gAL5NTgsbXzCuogspJ8I7o0fAKLofQ6d+pKz3tUAUYwj76OwQ==","X-Received":"by 10.200.0.151 with SMTP id c23mr7784092qtg.209.1504200591549; \n\tThu, 31 Aug 2017 10:29:51 -0700 (PDT)","Subject":"Re: [PATCH] Deprecate libcrypt and don't build it by default.","To":"Zack Weinberg , Joseph Myers ","Cc":"GNU C Library , =?utf-8?q?Bj=C3=B6rn_Esser?=\n\t, Florian Weimer ","References":"<20170829184247.6875-1-zackw@panix.com>\n\t\n\t\n\t\n\t","From":"Carlos O'Donell ","Message-ID":"<062b657a-6ac5-a883-7a5a-be0b1a78a6fa@redhat.com>","Date":"Thu, 31 Aug 2017 12:29:48 -0500","User-Agent":"Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101\n\tThunderbird/52.2.1","MIME-Version":"1.0","In-Reply-To":"","Content-Type":"text/plain; charset=utf-8","Content-Transfer-Encoding":"8bit"}},{"id":1765347,"web_url":"http://patchwork.ozlabs.org/comment/1765347/","msgid":"<20170908132321.GA13779@altlinux.org>","list_archive_url":null,"date":"2017-09-08T13:23:22","subject":"Re: [PATCH] Deprecate libcrypt and don't build it by default.","submitter":{"id":16038,"url":"http://patchwork.ozlabs.org/api/people/16038/","name":"Dmitry V. Levin","email":"ldv@altlinux.org"},"content":"On Thu, Aug 31, 2017 at 12:29:48PM -0500, Carlos O'Donell wrote:\n> On 08/29/2017 04:20 PM, Zack Weinberg wrote:\n> > On Tue, Aug 29, 2017 at 4:58 PM, Joseph Myers wrote:\n> >> On Tue, 29 Aug 2017, Zack Weinberg wrote:\n> >>> On Tue, Aug 29, 2017 at 4:16 PM, Joseph Myers wrote:\n> >>>>\n> >>>> I don't believe libxcrypt's claim to be a binary-compatible replacement\n> >>>> for libcrypt.so.1. It looks to me like it uses symbol version GLIBC_2.0\n> >>>> unconditionally for the glibc symbols,\n> >>>\n> >>> Well, that's just a plain old bug. Obviously a bug that needs to be\n> >>> fixed before we can call libxcrypt a binary-compatible drop-in\n> >>> replacement, but not a _difficult_ bug - they can crib from the\n> >>> libcrypt.abilist files. I'm willing to try to work up a patch if\n> >>> Björn agrees.\n> >>\n> >> I'm not convinced that duplicating all the information about which ABIs\n> >> use which symbol versions, and how to distinguish different ABIs on each\n> >> architecture that has ABIs with different base versions, is a good idea.\n> > \n> > The plan would be to remove libcrypt from glibc one or two releases\n> > after this deprecation, so it's not so much _duplicating_ the\n> > information as _moving_ it.\n> \n> I disagree that removal can happen on those timescales, but I agree that\n> it would be a good idea to split libcrypt out of glibc to allow for a\n> different development model\n\nIf the consensus is to remove libcrypt from glibc sooner or later rather\nthan extend libcrypt with API from crypt_blowfish project, then libxcrypt\nis not going to be the only alternative.\n\nIn ALT, I merged crypt_blowfish into glibc's libcrypt more than 16 years\nago, and the way it's done is incompatible with the approach taken later\nby libxcrypt:\nfunction names in XCRYPT_2.0 interface differ from function names in new\ninterfaces we added, and the plugin approach implemented in libxcrypt that\nuses dlopen+dlsym to pull in encryption methods is absolutely no-no for\nthe system libcrypt.\n\nAs extending libcrypt within glibc doesn't seem to be a viable option, the\ncurrent status quo works well for us because the burden of rebasing a huge\npatch on top of the stale libcrypt is minimal.\n\nOn the contrary, libcrypt removal would force ALT to fork a standalone\nlibcrypt, that is, to invest our time and efforts into a project without\nany clear benefits to anyone.","headers":{"Return-Path":"","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":["patchwork-incoming@bilbo.ozlabs.org","mailing list libc-alpha@sourceware.org"],"Authentication-Results":["ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=sourceware.org\n\t(client-ip=209.132.180.131; helo=sourceware.org;\n\tenvelope-from=libc-alpha-return-84382-incoming=patchwork.ozlabs.org@sourceware.org;\n\treceiver=)","ozlabs.org; dkim=pass (1024-bit key;\n\tsecure) header.d=sourceware.org header.i=@sourceware.org\n\theader.b=\"kUnJLOkl\"; dkim-atps=neutral","sourceware.org; auth=none"],"Received":["from sourceware.org (server1.sourceware.org [209.132.180.131])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256\n\tbits)) (No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xpdLX5Mzmz9s7c\n\tfor ;\n\tFri, 8 Sep 2017 23:23:32 +1000 (AEST)","(qmail 96474 invoked by alias); 8 Sep 2017 13:23:27 -0000","(qmail 96460 invoked by uid 89); 8 Sep 2017 13:23:26 -0000"],"DomainKey-Signature":"a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id\n\t:list-unsubscribe:list-subscribe:list-archive:list-post\n\t:list-help:sender:date:from:to:subject:message-id:references\n\t:mime-version:content-type:in-reply-to; q=dns; s=default; b=nq0y\n\tZXjrnVXWlVrbDRtr2KChPPIYuaAOpVTmU6/ynboYdkvWXxIW7qGRwehVdzI79Ko7\n\tFF2WoM96YGJ7Vtu0gavUM8BjBkGbiBzWa2mRpdHanYSJ+4lDM+1236/LCzGe9jN4\n\tdLVK05U9j8CBwAbVCgHYiLoXc0C9CAFOj7nt540=","DKIM-Signature":"v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id\n\t:list-unsubscribe:list-subscribe:list-archive:list-post\n\t:list-help:sender:date:from:to:subject:message-id:references\n\t:mime-version:content-type:in-reply-to; s=default; bh=8CiHGc0Ni/\n\t1qfbkco3AMVL70HoA=; b=kUnJLOklXIi0ZBtoBTfkkuTIyXuFnS/XER5W/p8+mh\n\t5tFU2mbPKI3JGF7nFPRJUSee/z7s8vPaG3Vb8W+dTMUJgi8aEmRuxK7PINcWo9l/\n\tyxn6FoZlrN4vJMdgFv+d2eiNMDWPaq4Zre8EnGQ3sXLv9+oXJkW3rUcoZ1ylBesZ\n\tI=","Mailing-List":"contact libc-alpha-help@sourceware.org; run by ezmlm","Precedence":"bulk","List-Id":"","List-Unsubscribe":"","List-Subscribe":"","List-Archive":"","List-Post":"","List-Help":",\n\t","Sender":"libc-alpha-owner@sourceware.org","X-Virus-Found":"No","X-Spam-SWARE-Status":"No, score=-2.3 required=5.0 tests=AWL, BAYES_00,\n\tRP_MATCHES_RCVD, SPF_PASS,\n\tURIBL_RED autolearn=ham version=3.3.2 spammy=encryption,\n\tHx-languages-length:2475, invest, claim","X-HELO":"vmicros1.altlinux.org","Date":"Fri, 8 Sep 2017 16:23:22 +0300","From":"\"Dmitry V. Levin\" ","To":"libc-alpha@sourceware.org","Subject":"Re: [PATCH] Deprecate libcrypt and don't build it by default.","Message-ID":"<20170908132321.GA13779@altlinux.org>","Mail-Followup-To":"libc-alpha@sourceware.org","References":"<20170829184247.6875-1-zackw@panix.com>\n\t\n\t\n\t\n\t\n\t<062b657a-6ac5-a883-7a5a-be0b1a78a6fa@redhat.com>","MIME-Version":"1.0","Content-Type":"multipart/signed; micalg=pgp-sha256;\n\tprotocol=\"application/pgp-signature\"; boundary=\"y0ulUmNC+osPPQO6\"","Content-Disposition":"inline","In-Reply-To":"<062b657a-6ac5-a883-7a5a-be0b1a78a6fa@redhat.com>"}}]