2,569
edits
Changes
From SME Server
Jump to navigationJump to searchTalk:Yum-plugin-priorities (view source)
Revision as of 01:54, 23 November 2008
, 01:54, 23 November 2008no edit summary
* a plugin, method, or option that blocks the update of packages from 3rd party repos if the new version requires a package that is included with SME / Centos that has not yet been updated.
* a plugin, method, or option that blocks the update of packages from 3rd party repos if the new version requires a package that is included with SME / Centos that has not yet been updated.
* a way to notify users of the blocked updates so they can decide if the blocked update involves a security issue
* a way to notify users of the blocked updates so they can decide if the blocked update involves a security issue
* '''or''' documentation on how to work around this issue, along the lines of "observe the problem, identify the blocking package, update the blocking package independantly using the "--noplugins" option, then finish your update
* '''or''' documentation on how to work around this issue, along the lines of "observe the problem, identify the blocking package, update the blocking package independently using the "--noplugins" option, then finish your update
:sn
:yes this is a big problem
:want to search or ask at the yum mailinglist, this should be a known problem
===Side note on security===
===Side note on security===
Is there any easy way to scan a SME server, identify any installed packages that are not considered secure by the SME developers, then modify /etc/motd and add a note to server-manager stating that "unevaluated packages are installed"?
Is there any easy way to scan a SME server, identify any installed packages that are not considered secure by the SME developers, then modify /etc/motd and add a note to server-manager stating that "unevaluated packages are installed"?
:Perhaps you can use the following audittool in your detection logic as it should report all contribs from 3d party repositories:
:Perhaps you can use the following audittool in your detection logic as it should report all contribs from 3d party repositories:
only difference is there will be a different fragment to modify /etc/yum.conf/something
only difference is there will be a different fragment to modify /etc/yum.conf/something
