From mboxrd@z Thu Jan 1 00:00:00 1970 From: ng0 Subject: Re: Shadow -> 4.4 Date: Fri, 20 Jan 2017 11:02:05 +0000 Message-ID: <87o9z2vvte.fsf@wasp.i-did-not-set--mail-host-address--so-tickle-me> References: <20170119200636.2767-1-contact.ng0@cryptolab.net> <20170120051657.GA27443@jasmine> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:51732) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cUWwP-0007Rd-HF for guix-devel@gnu.org; Fri, 20 Jan 2017 06:01:10 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cUWwM-00005v-H2 for guix-devel@gnu.org; Fri, 20 Jan 2017 06:01:09 -0500 Received: from fragranza.investici.org ([178.175.144.26]:25826) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1cUWwM-0008W4-6Z for guix-devel@gnu.org; Fri, 20 Jan 2017 06:01:06 -0500 Received: from [178.175.144.26] (fragranza [178.175.144.26]) (Authenticated sender: niasterisk@grrlz.net) by localhost (Postfix) with ESMTPSA id B6C112C00CE for ; Fri, 20 Jan 2017 11:00:59 +0000 (UTC) In-Reply-To: <20170120051657.GA27443@jasmine> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: guix-devel@gnu.org Leo Famulari writes: > On Thu, Jan 19, 2017 at 08:06:34PM +0000, contact.ng0@cryptolab.net wro= te: >> Question: I don't prefer to crash and burn systems, which test is >> enough to show that it works? Reconfiguring one of my own systems? > > Yes. If it breaks your system, you can always reboot into an earlier > system generation. Another option is to use a VM. I tested both cases, > and it works for me. > > Would anyone else like to test it? I have just reconfigured my system and I can login, and use sudo. More testing wasn't done. By the way, why don't we build 'shadow' with SELinux support? I know everyone is busy, but I think we really should get that hardening plan going - or at least come up with a plan on what we want now and who's interested/will be involved, etc. --=20 =E2=99=A5=E2=92=B6 ng0 -- https://www.inventati.org/patternsinthechaos/