From mboxrd@z Thu Jan 1 00:00:00 1970 From: Tobias Geerinckx-Rice Subject: bug#33300: hplip 3.18.9 contains non-free binary blobs Date: Wed, 07 Nov 2018 14:09:54 +0100 Message-ID: <875zx9dof1.fsf@nckx> References: <87sh0dur48.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:50657) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gKNbt-00072s-RY for bug-guix@gnu.org; Wed, 07 Nov 2018 08:11:06 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gKNbr-0003OI-UC for bug-guix@gnu.org; Wed, 07 Nov 2018 08:11:05 -0500 Received: from debbugs.gnu.org ([208.118.235.43]:33972) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1gKNbq-0003MW-Gu for bug-guix@gnu.org; Wed, 07 Nov 2018 08:11:03 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1gKNbq-00031V-Ag for bug-guix@gnu.org; Wed, 07 Nov 2018 08:11:02 -0500 Sender: "Debbugs-submit" Resent-Message-ID: Received: from eggs.gnu.org ([2001:4830:134:3::10]:50307) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gKNbP-0006dc-Sa for bug-guix@gnu.org; Wed, 07 Nov 2018 08:10:36 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gKNbF-00028x-Bx for bug-guix@gnu.org; Wed, 07 Nov 2018 08:10:33 -0500 In-reply-to: <87sh0dur48.fsf@gnu.org> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 33300@debbugs.gnu.org Ludo', How horrid. Ludovic Court=C3=A8s wrote: > I tried removing them with a snippet (patch attached), but=20 > installation > eventually fails while trying to link against libImageProcessor,=20 > which > is now missing. If I correctly read the Debian maintainer's post in the bug you=20 linked[0], it's possible to revert only the libImageProcessor=20 infec^Waddition. If it's all right with everyone, I'd like to give=20 that a try first. Say by tomorrow? Or do you want to revert first=20 & ask such questions later? > + ;; This trick changes the behavior of the > + ;; 'install-data-hook' target so that it=20 > doesn't install the > + ;; binary blobs. > + (substitute* "Makefile.in" > + (("^UNAME =3D.*") > + "UNAME =3D free-software-only-thanks\n") Nice. I wish it worked. Aside, -ish: looks like most distributions there found out about=20 this file due to some failing sanity check. Perhaps we could add=20 our own, in =E2=80=98guix lint=E2=80=99 or at build time, to warn about ELF= files=20 and other suspicious binaries in post-snippet sourceballs? No idea if it's worth the trouble/performance hit/false-positive=20 rate, of course. That's for the ner^Wgods to decide. Kind regards, T G-R [0]: https://bugs.launchpad.net/hplip/+bug/1785230/comments/6