[Bug 1127] Review request: ailurus - makes Linux easier to use

RPM Fusion Bugzilla noreply at rpmfusion.org
Tue Apr 6 16:59:28 CEST 2010


http://bugzilla.rpmfusion.org/show_bug.cgi?id=1127





--- Comment #6 from Homer Xing <homer.xing at gmail.com>  2010-04-06 16:59:28 ---
> Hi Homer,
> 
> I'm pretty sure that messing with people's software repository configuration is
> not acceptable in a package. (I haven't taken a look at how this was achieved
> in this package).
> 
> An example why this might be bad: eg user installs package A from (removed
> repo), that requires current versions of libraries. They then install this
> package, which disables the repo. Fedora offers security patches for the libs
> that package A requires (specific version). Now the user can never successfully
> update to the security fixed packages because yum sees that the installed
> package would break.
> 
> ps. I haven't performed a normal review.
> 

Dear David,

You are right. Installing a package from third-party repository will lock down
the versions of libraries, for example, when the maintainer of the third-party
repository forgets to upgrade the package. 

However, I have not found out a solution yet. Should I completely remove all
third-party repositories from Ailurus?

Best regards,
Homer


-- 
Configure bugmail: http://bugzilla.rpmfusion.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
You are the assignee for the bug.


More information about the rpmfusion-developers mailing list