Mailinglist Archive: zypp-devel (226 mails)

[Jan Kupec <jkupec@xxxxxxx>]

The wrapper is ready in svn [1,2]. It will return:
0   on success,
1   in case of general failure,
2   in case some of the repos were said to be refreshed but some failed,
101 in case of the wrapper failure (no suid bit, exec failed, etc..).

I added a "Deprecated" warning to the old zypp-checkpatches-wrapper
saying that it will be dropped before 11.1 release.


One minor one big (security) issue to solve:

Minor)

The former wrapper and the check-patches utility produced XML output as
it needed to feed complex data for machine consumption. But the refresh
utility only prints error messages on error and apart from that only
some progress messages.

Do we still want it in XML? Or should i make the XML output optional?

Security)

libzypp now uses repo2solv.sh shell script from satsolver-tools to build
the .solv files when refreshing the repository. It has been suggested
that this could be a security issue. And if it is, why not use the
rpmdb2solv, rpmmd2solv, susetags2solv, etc binaries directly depending
on the type of repo (which we probably already know in libzypp)?


[1] http://svn.opensuse.org/svn/zypp/trunk/zypper/src/zypp-refresh.cc
[2] http://svn.opensuse.org/svn/zypp/trunk/zypper/src/zypp-refresh-wrapper.c
-- 
To unsubscribe, e-mail: zypp-devel+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: zypp-devel+help@xxxxxxxxxxxx