Mailinglist Archive: opensuse-buildservice (349 mails)

< Previous Next >
Re: [opensuse-buildservice] Re: How secure is openSUSE build service?
  • From: Patrick Shanahan <ptilopteri@xxxxxxxxx>
  • Date: Wed, 31 Oct 2007 22:11:07 -0400
  • Message-id: <20071101021107.GC10548@xxxxxxxxxxxxxxx>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

* Aniruddha <mailing_list@xxxxxxxxx> [10-31-07 20:31]:
[...]
For Gentoo/FreeBSD/Debian/Ubuntu/ there aren't additional repositories
necessary since these distributions maintain 14000-22000 packages
themselves. openSUSE on the other hand forces you to use 3r party
repositories to get basic functionality working (see
http://opensuse-community.org/Restricted_Formats/10.3 ).

But you are not 'forced' to use anything. Basic functionality is
provided.

And you don't have to trust the packager, you trust the distribution and
it's security policy. And don't forget packages passes many hands before
ending up in the stable tree. In Debian/Ubuntu it goes from Experimental
to Unstable to Testing to Stable. I can assure that when it arrives at
Stable you can trust it for 100%. Gentoo/FreeBSD is the same, they have
a very, very long testing period for new packages finally arrive in the
stable tree.

Compare this to the openSUSE buildservice where everyone can get an
account start a repo and wreck havoc because there aren't any safety
precautions.


"Something" must be *terribly* wrong somewhere as no "problems" I am
aware have been made public.

I understand your concern, you have NO trust of anyone. I believe
there is a word for that, but....

btw, you have made *many* posts recently critical of the openSUSE
distribution and the way that things are done. Is there *anything*
you find *right* about openSUSE distributions? Because, if you cannot
find anything *right*, one wonders why you remain!

- --
Patrick Shanahan Plainfield, Indiana, USA HOG # US1244711
http://wahoo.no-ip.org Photo Album: http://wahoo.no-ip.org/gallery2
Registered Linux User #207535 @ http://counter.li.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4-svn4472 (GNU/Linux)

iD8DBQFHKTW6ClSjbQz1U5oRAj9AAJwJpY6KLybKn9bPyQWI5SyWWEVBLwCeLlJO
7MovEwUG/G1n2KKtjBCCnBs=
=GJIP
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-buildservice+help@xxxxxxxxxxxx

< Previous Next >
List Navigation
Follow Ups
References