Mailinglist Archive: zypp-devel (47 mails)
| < Previous | Next > |
Re: [zypp-devel] "must see" advisories for security updates, distro upgrades, OBS
- From: Jano Kupec <jkupec@xxxxxxx>
- Date: Thu, 07 May 2009 19:06:56 +0200
- Message-id: <4A031530.5080309@xxxxxxx>
Stanislav Brabec wrote:
Hi, just to summarize, we need notification mechanism for package
updates. All we currently have is the output from rpm (which gets
printed only in zypper, and can be easily overlooked).
Does insnotify()/delnotify() work (where in the .spec file does one set
it)? Can we use it? Bubli said it worked, but was too annoying and
removed from UIs - maybe it wasn't used only for "must see" messages...
we need to do it:
- interactively - show message and wait until the user hits a key to
continue
- non-interactively, if non-interactive mode is requested - log
somewhere and, at the end, tell the user where s/he will find
additional info about pending actions.
--
cheers,
jano
Ján Kupec
YaST team
---------------------------------------------------------(PGP)---
Key ID: 637EE901
Fingerprint: 93B9 C79B 2D20 51C3 800B E09B 8048 46A6 637E E901
---------------------------------------------------------(IRC)---
Server: irc.freenode.net
Nick: jniq
Channels: #zypp #yast #suse #susecz
---------------------------------------------------------(EOF)---
Hallo.
I am thinking again about a correct way to notify users about "must see"
advisory, which may appear for some security updates.
It typically happens for opensc and I need to display: "Package update
is not sufficient. Please follow following instructions to make your
crypto tokens secure..."
It should be displayed:
- On security updated
- In OBS repository while upgrading from unfixed to fixed version
- During distro upgrade (customer upgrades from unpatched SLE10 SP1 to
fixed SLE11 opensc => display the advisory)
Ways used in past did not cover all cases. People complained, that the
advisory pop-up blocks update.
https://bugzilla.novell.com/show_bug.cgi?id=429786
Hi, just to summarize, we need notification mechanism for package
updates. All we currently have is the output from rpm (which gets
printed only in zypper, and can be easily overlooked).
Does insnotify()/delnotify() work (where in the .spec file does one set
it)? Can we use it? Bubli said it worked, but was too annoying and
removed from UIs - maybe it wasn't used only for "must see" messages...
we need to do it:
- interactively - show message and wait until the user hits a key to
continue
- non-interactively, if non-interactive mode is requested - log
somewhere and, at the end, tell the user where s/he will find
additional info about pending actions.
--
cheers,
jano
Ján Kupec
YaST team
---------------------------------------------------------(PGP)---
Key ID: 637EE901
Fingerprint: 93B9 C79B 2D20 51C3 800B E09B 8048 46A6 637E E901
---------------------------------------------------------(IRC)---
Server: irc.freenode.net
Nick: jniq
Channels: #zypp #yast #suse #susecz
---------------------------------------------------------(EOF)---
| < Previous | Next > |