Mailinglist Archive: zypp-devel (226 mails)

[Jan Kupec <jkupec@xxxxxxx>]

Stanislav Visnovsky wrote:
> Dňa Tuesday 22 April 2008 13:36:16 Jan Kupec ste napísal:
> > Hi,
> >
> > so far, zypp-checkpatches-wrapper has been used in the updater applets
> > to refresh repos (needs root access) and check for patches. This
> > solution was not too flexible though and as there came a need to check
> > also for package updates, Thomas added the xml-updates command to zypper
> > directly. But that solution lacked the ability to do the suid refresh.
> >
> > So with Thomas we agreed that we'll try a different approach: drop
> > zypp-checkpatches-wrapper, use a new refresh-only suid wrapper and once
> > called, use zypper query commands directly as normal non-root to do
> > whathever queries you like (zypper --xmlout list-updates in the case of
> > the updater applets).
> >
> > The zypp-refresh and zypp-refresh-wrapper is fairly general thing then,
> > so my question is whether we should package it in zypper package or
> > directly in the libzypp package.
> >
> > I'd also appreciate opinions on this solution.
> >
> > @Security: zypp-refresh-wrapper will be much simpler than the previous
> > zypp-checkpatches-wrapper, so this should be an increase in security, too.
>
> Just keep in mind that there are other scripts using the wrapper, e.g. the 
> updates notification script from Christian.

The migration would be quite easy.

We could keep the old wrapper, but if we would be dropping it, were to
announce it (with a brief howto-migrate?).

j.
-- 
To unsubscribe, e-mail: zypp-devel+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: zypp-devel+help@xxxxxxxxxxxx