On Monday 23 May 2011 16:52:08 Dominik Heidler wrote:
Hi,
curently all patches with the rebootNeeded flag set to "yes" are automaticly treated as interactive. see https://bugzilla.novell.com/show_bug.cgi?id=665853
https://bugzilla.novell.com/show_bug.cgi?id=221476 https://bugzilla.novell.com/show_bug.cgi?id=224192 Yes, this is the behavior all stakeholders agreed on a couple of years ago.
We should make this behaviour changeable via zypp.conf Any further suggestions?
IMO nothing for a global zypp.conf setting, but something the application may control. AFAIR security team wanted to make sure security fixes which require a reboot are never installed unattended. Otherwise it may happen the security fix is installed, but the system is still vulnerable due to the missing reboot, And no admin knows about this. That's why we IMO should not change the default behavior. But zypper may get a new option which, in conjunction with non-interactive, causes 'rebootNeeded' patches to be included. And if such patches were actually included, zypper should print a BIG MESSAGE on the screen (best at the end and blinking yellow on red) # ###################################################################### # # One of installed patches required a reboot of the system! # # ###################################################################### In libzypp we can offer some 'Patch::isInteractive( REBOOT_OK )', so the application can easily get the right set of patches. (Anyway you need to involve the security/maintenance team to communicate that further on 'rebootNeeded' no longer implies 'interactive'. And if it is just to perevent anyone from placing some actually interactive script into such a patch.) -- cu, Michael Andres +------------------------------------------------------------------+ Key fingerprint = 2DFA 5D73 18B1 E7EF A862 27AC 3FB8 9E3A 27C6 B0E4 +------------------------------------------------------------------+ Michael Andres SUSE LINUX Products GmbH, Development, ma@suse.de GF:Jeff Hawn,Jennifer Guild,Felix Imendörffer, HRB16746(AG Nürnberg) Maxfeldstrasse 5, D-90409 Nuernberg, Germany, ++49 (0)911 - 740 53-0 +------------------------------------------------------------------+ -- To unsubscribe, e-mail: zypp-devel+unsubscribe@opensuse.org For additional commands, e-mail: zypp-devel+help@opensuse.org