From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id sHT1DUCDwWNRggAAbAwnHQ (envelope-from ) for ; Fri, 13 Jan 2023 17:13:52 +0100 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id gHz1DUCDwWNOLAAA9RJhRA (envelope-from ) for ; Fri, 13 Jan 2023 17:13:52 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id D2DA712913 for ; Fri, 13 Jan 2023 17:13:51 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1pGLs4-0002n5-4z; Fri, 13 Jan 2023 10:21:32 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pGLrb-0002Xj-B6 for guix-patches@gnu.org; Fri, 13 Jan 2023 10:21:03 -0500 Received: from debbugs.gnu.org ([209.51.188.43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1pGLra-0000NV-Sv for guix-patches@gnu.org; Fri, 13 Jan 2023 10:21:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1pGLra-0005KQ-GL for guix-patches@gnu.org; Fri, 13 Jan 2023 10:21:02 -0500 X-Loop: help-debbugs@gnu.org Subject: [bug#52109] How to resolve? (Re: [bug#52109] [PATCH] gnu: Add unrar-free.) References: Resent-From: Simon Tournier Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Fri, 13 Jan 2023 15:21:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 52109 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Liliana Marie Prikler , Giovanni Biscuolo , Maxim Cournoyer Cc: kiasoc5 , 52109@debbugs.gnu.org, Foo Chuan Wei Received: via spool by 52109-submit@debbugs.gnu.org id=B52109.167362324520427 (code B ref 52109); Fri, 13 Jan 2023 15:21:02 +0000 Received: (at 52109) by debbugs.gnu.org; 13 Jan 2023 15:20:45 +0000 Received: from localhost ([127.0.0.1]:52147 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pGLrI-0005JO-GH for submit@debbugs.gnu.org; Fri, 13 Jan 2023 10:20:44 -0500 Received: from mail-wm1-f41.google.com ([209.85.128.41]:35719) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pGLrF-0005J9-Qf for 52109@debbugs.gnu.org; Fri, 13 Jan 2023 10:20:42 -0500 Received: by mail-wm1-f41.google.com with SMTP id m8-20020a05600c3b0800b003d96f801c48so19002900wms.0 for <52109@debbugs.gnu.org>; Fri, 13 Jan 2023 07:20:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=content-transfer-encoding:mime-version:message-id:date:in-reply-to :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to; bh=Gkq0Pai+IpqMMvO8heyqzmTBqnrInAl/lCk8zXcgtXM=; b=Zx92uwV9lcfTrJtzNPS5O72i5Lr2FzU8rADXLT4SFwNeEPhPOGi7GC4plzC0nWfcBy kggV/90b8NL5EUvLYYfeFDeUM1+WXkg0ssQv8avZqiyq9UMeYPZdLRZGyXznoc4slBgE wBAl4RJIMFHopD7dYrnkYTX/E7g18JQHnmCIR/VsufoRF0FYpnqOEd3A5jl1iRKEVK0j FUM693ecbTeQEnkWlcenzPyJP/JrI1bjQmnpZ3UpdDvloCtHY1WatIZkJrQO3IziTNlO 4s1kU08yezaxE3k+m4imeanLUFqXj6xTXPcM8P4EoHdCNOSw3uY6NFlDF0sxIdL1nCUO fvaA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:message-id:date:in-reply-to :subject:cc:to:from:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=Gkq0Pai+IpqMMvO8heyqzmTBqnrInAl/lCk8zXcgtXM=; b=aFMSanUdEMfMz6h7AnNYau/pgzDzdqLSpNEpLPHd9xCiaSReh8gaB2a0gfTQ3oIRE7 mXx16QMfp/5Nb4Z8TJU9T/3A9rlsFsFR6QhsstcwzWLdCqqKzdtjW3xlWUBieA5oX/Au 4+lKQXyGMpLUJxJQ8CzhVHxy86SeRnpG7SS3KMHGF/T0XCtIBONk0bOA/FyGgU/dQNzr fZLAMfgYsfBezP2j7A7O6eqZSj+L11pVNM2IsF5YaHUb6qNSdcYv3b+vrD09HyxB1WU7 OiKVw0bR+6y0lrxQ6DIdExQU8E50f+mtQpuYgk/HKWHd6XSSWt/K4J6uuN6q0mT+5wZ+ nBgA== X-Gm-Message-State: AFqh2kqhtWPYkd2YBU1PcEx73RjGQxzVjgFlLUcG6FNI44Tg0zi0kwm9 Ya/Dx5GUUVXKALanA7hzXZU= X-Google-Smtp-Source: AMrXdXsH51X9YaUOiWbeW79Lxzu2gAfziwqpj0R7negNYYv9P4/pAVSDypzZ4cMGtKCdNQgpyL6mig== X-Received: by 2002:a05:600c:1ca6:b0:3da:21d9:f48a with SMTP id k38-20020a05600c1ca600b003da21d9f48amr561654wms.4.1673623235734; Fri, 13 Jan 2023 07:20:35 -0800 (PST) Received: from pfiuh07 ([193.48.40.241]) by smtp.gmail.com with ESMTPSA id g14-20020a05600c4ece00b003d9ea176d54sm27770577wmq.27.2023.01.13.07.20.34 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 13 Jan 2023 07:20:35 -0800 (PST) From: Simon Tournier In-Reply-To: <4ad22b3194af69f3b8db5e471a1f4ced2118590f.camel@gmail.com> Date: Fri, 13 Jan 2023 16:20:32 +0100 Message-ID: <877cxqwjen.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20210112 header.b=Zx92uwV9; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none) ARC-Seal: i=1; s=key1; d=yhetil.org; t=1673626432; a=rsa-sha256; cv=none; b=lAp9d3fie3c7ELBBOBT0YVy+45jn60sQVix2uaEZFS/WDX2tcEpTzW48Q0ANwP4pHnh/HH 71KDGf0VCRPB+/0triCsffWUOuKm2sWd9Xse70ygDQH3IFbxTvWt0dBZi5XdLMbhf09jdp sTeSckqmeNTcUZcF+Qjoo+uFp1DVt4Wi+x+YTRTt55cBfFVC9HDbvZ6w7bpeVRI01cln2b tIsqXCrVhWza4LcwSbioGxhmFNcILg7oCGLwqbmWEnIA9yvREax3NSArEUB6937RUfgU0N u6WPQyfCUX9pyzHItPS4igmePp9ERTP8V7fkn2kze4RUXANliAqll8v+RvInLw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1673626432; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=Gkq0Pai+IpqMMvO8heyqzmTBqnrInAl/lCk8zXcgtXM=; b=OGuc68jvwqPkl4L3anpY45No/JaWn3JeIsO/HBP9VkO4xNhDDva5BNYwLik797VW61Rpsx XOkSMrkLDlS8wmjdIMeAFmqs//OzdXuUDfweL+/fMG0a4sYIQeZe6tkt2RFM6A0GhdvLLH pLIwb1m3i0RS0izKndw5vPlZu7XZrhTCAWZzrroGED8O6ms2ZBYB3wE3BdxD2hD5thvDDN LiDOsPM1EunHVVA1g9dEJiSBwmAvrxb53mCCh0Z/ZePzvJa2quZdssA7RXodqqxJ4lT71S 25LrVOLrSeJJ4tc3NbkuKNVFEkomShOaZnfNNGLYPrdFG+UGmgDsw6C31x7xgQ== X-Migadu-Queue-Id: D2DA712913 X-Migadu-Scanner: scn0.migadu.com Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20210112 header.b=Zx92uwV9; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none) X-Migadu-Spam-Score: 0.50 X-Spam-Score: 0.50 X-TUID: CYJNwxLmQS6r Hi Liliana, On jeu., 12 janv. 2023 at 21:29, Liliana Marie Prikler wrote: >> could this be a reason not to include a FSDG compliant software in >> Guix? > > A free system distribution must not steer users towards obtaining any > nonfree information for practical use, or encourage them to do so. [4] Liliana, it is *your* interpretation that unrar-free is=E2=80=93quoting FSDG=E2=80=93=E2=80=9Csteering users toward obtaining any non-free informat= ion for practical use, or encourage them to do so=E2=80=9D. It is not the interpretation of Trisquel folks. It is not my interpretation and probably also not the interpretation of many other peers here. For instance, a previous version of unrar had been added by commit, 0da8313c679f101c3f99970c50d6f0fef995f633 Author: John Darrington AuthorDate: Wed Mar 1 07:00:05 2017 +0100 Commit: John Darrington CommitDate: Wed Mar 1 18:57:00 2017 +0100 and then removed by 2560aa7adbfcb46306e8b19180bd48d39c2da6dc: gnu: Remove unrar. This package is abandoned upstream and contains serious bugs: http://seclists.org/oss-sec/2017/q3/329 https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2017-14120 https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2017-14121 https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2017-14122 * gnu/packages/compression.scm (unrar): Remove variable. Therefore, I am still missing what is blocking. ;-) The fact that FSDG is poorly worded is one thing, indeed. This sentence =E2=80=9Csteering users toward obtaining any non-free information for pract= ical use, or encourage them to do so=E2=80=9D from these FSDG could also be interpreted to many other features =E2=80=93 another story. :-) >From my point of view, all the packages allowing interoperability across various operating system (including non-free ones) fits my understanding of the Liliana=E2=80=99s interpretation of =E2=80=9Csteer users toward obta= ining any non-free information for practical use, or encourage them to do so=E2=80=9D; interpretation mainly based =E2=80=93 again, if I understand correctly =E2= =80=93 on speculations about the user=E2=80=99s intention. Therefore, we should also remove the packages: mednafen, docx2txt, antiword, bochs, cabextract, cl-mssql, emacs-powershell, etc. Any free reimplementation potentially offers a degraded experience compared to the proprietary product. It does not appear to me an argument to raise that this potentially degraded experience leads to =E2=80=9Csteering users toward obtaining any non-free information for pract= ical use, or encourage them to do so=E2=80=9D. Even, from my point of view, it = is the contrary: a free reimplementation even with weakness is liberating. Last, I do not understand your Liliana argument about =C2=ABObviously, unrar-free has a different CLI =E2=80=93 that's is whole shtick, after all = =E2=80=93 but I'd argue that this doesn't matter, because the people who prefer CLI over GUI know how to read manpages.=C2=BB. Well, we could apply it many flavor of similar tools. For instance, you would be in favor to remove/drop the CLI dulwich provided by the package python-dulwich since CLI Dulwich user could just read the Git man pages. Or similarly bmake vs make, coreutils vs busybox vs toybox, etc. Without saying that I do not even know which Guix package provides this bsdtar tool, from this FreeBSD tar manpage [1], it is not clear if RAR is supported or not. To know it, one needs to open this other man page [2]. Bah, yes an easy CLI matters! All in all, it appears that we disagree. :-) Cheers, simon 1: 2: