[lsb-discuss] LSB format packaging and security

Jeff Johnson n3npq at mac.com
Mon Apr 21 08:07:26 PDT 2008


On Apr 21, 2008, at 10:39 AM, Giovanni A. Orlando wrote:

>
> Of course I know it ... but we need something free including sources.
>

If you _REALLY_ want to save the world for GNU, then start asking
InstallShield to open source their code base. Why stop with linux,
wouldn't Windows users like you benefit from "freely available"
(and "free") "standard" installers everywhere?

BTW, if you think the code in rpm or LSB is poorly written, please  
permit
me to share an exhibit from my "Packaging Hall of Shame"

I have 3 packages in the exhibit:
     0994ecebe3be53f7da9af371fbd1cccf-5.7-2        Sat 10 Sep 2005  
01:46:36 PM EDT
     e0988ac5c38932c12da52bc9807dd1fc-5.7-2        Sat 10 Sep 2005  
01:46:33 PM EDT
     c3deffe61b09557dc76ad4c14469bc37-5.7-2        Sat 10 Sep 2005  
01:46:26 PM EDT

The packages (in rpm format because they ended up in /var/lib/rpm/ 
Packages
after installing) were installed by WebSphere/linux using  
InstallShield implemented
in Java.

The packages were built locally by the WebSphere installer, they were  
not
present in the original content when I tore it apart.

The run-time image of the installer was 562 Mb while installing on a  
RHEL4 platform.

What fascinates me (RPM is an occupational hazard of mine) is that  
the 3 entries in
my rpmdb contain no files, no dependencies, empty description and  
summary,
no scriptlets, and have odd names that appear to be MD5 digests:

Name        : 0994ecebe3be53f7da9af371fbd1cccf  Relocations: (not  
relocatable)
Version     : 5.7                               Vendor: IBM
Release     : 2                             Build Date: Sat 10 Sep  
2005 01:46:35 PM EDT
Install Date: Sat 10 Sep 2005 01:46:36 PM   Build Host:  
wellfleet.jbj.org
Group       : NA                            Source RPM:  
0994ecebe3be53f7da9af371fbd1cccf-5.7-2.src.rpm
Size        : 0                                License: NA
Signature   : (none)
URL         : http://www.ibm.com/software/wireless/wme
Summary     : NA
Description :

Name        : e0988ac5c38932c12da52bc9807dd1fc  Relocations: (not  
relocatable)
Version     : 5.7                               Vendor: IBM
Release     : 2                             Build Date: Sat 10 Sep  
2005 01:46:32 PM EDT
Install Date: Sat 10 Sep 2005 01:46:33 PM   Build Host:  
wellfleet.jbj.org
Group       : NA                            Source RPM:  
e0988ac5c38932c12da52bc9807dd1fc-5.7-2.src.rpm
Size        : 0                                License: NA
Signature   : (none)
URL         : http://www.ibm.com/software/wireless/wme
Summary     : NA
Description :

Name        : c3deffe61b09557dc76ad4c14469bc37  Relocations: (not  
relocatable)
Version     : 5.7                               Vendor: IBM
Release     : 2                             Build Date: Sat 10 Sep  
2005 01:46:25 PM EDT
Install Date: Sat 10 Sep 2005 01:46:26 PM   Build Host:  
wellfleet.jbj.org
Group       : NA                            Source RPM:  
c3deffe61b09557dc76ad4c14469bc37-5.7-2.src.rpm
Size        : 0                                License: NA
Signature   : (none)
URL         : http://www.ibm.com/software/wireless/wme
Summary     : NA
Description :

But I guess ISV (presumably IBM WebSphere qualifies) have speshul needs
from RPM packaging that can only be supplied by LSB format.

</scarcasm>

Sure was a pretty GUI though ...

73 de Jeff




More information about the lsb-discuss mailing list