Mailinglist Archive: zypp-devel (70 mails)

[Stephan Kulow <coolo@xxxxxxx>]

Am Mittwoch 31 Oktober 2007 schrieb Klaus Kaempf:
> * mlschroe@xxxxxxxxxxxxxxxx <mlschroe@xxxxxxxxxxxxxxxx> [Oct 31. 2007 
12:55]:
> > Author: mlschroe
> > Date: Wed Oct 31 12:54:49 2007
> > New Revision: 7726
> >
> > URL: http://svn.opensuse.org/viewcvs/zypp?rev=7726&view=rev
> > Log:
> > - allow downgrade for INSTALL_SOLVABLE
>
> Be careful. Again, this is a policy.
>
> For the use case of "non-root user has rights to install updates",
> updates must be strictly monotic increasing. Otherwise its a security
> hole since this user could install older software with known risks.
Then the application doing the update shouldn't INSTALL_SOLVABLE a solvable
it knows should not be installed. Hardly job of the solver.

Greetings, Stephan
-- 
To unsubscribe, e-mail: zypp-devel+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: zypp-devel+help@xxxxxxxxxxxx