Mailinglist Archive: opensuse-security (636 mails)

< Previous Next >
Re: [suse-security] the new YOU, how it works for ME? =)
  • From: Tobias Burnus <burnus@xxxxxx>
  • Date: Fri, 09 Feb 2001 20:44:28 +0100
  • Message-id: <3A84489C.8C53BEA8@xxxxxx>
Hi,

bacano@xxxxxxxxxxxx wrote:
> Is it possible to give some details about the new Yast Online Update
> for suse 7.1?
> Quoting suse online zine:
> "For this purpose, suse makes all relevant patches and extensions
> available ..." - "relevant" regarding what is installed on the
> system, or general relevant for most users? how will this YOU works?
If I understand it correctly it simply checks the FTP-Server
on ${ftp.suse.com/pub/suse}/${platform}/update/${version}
^^^ or mirror? ^^^ i386 ^^^- 7.1

If you look at ftp://ftp.suse.com/pub/suse/i386/update/7.1/
there is a file called ./patches/ftp-1 which seems to describe updates:
Shortdescription.german : Willkommen zum SuSE Patch Update
Longdescription.english:
Welcome to SuSE Patch Update. This is only an info patch
which shows the functionality of the patch update.

Well, it doesn't seem to be in use presently ;-)

Moreover you can find now the ${package-name}_{de,en}.info files all
over the place which contain some information (packagename, file,
version, size, date, source, security update: Yes/no, update/change
description).

BTW: Why is there no _{en/de}.info file for xemacs in update/7.1/e2/ ?

> "during the installation, the user selects one of tree security
> levels" - what are the features/diferences in those 3 levels?
I think this is the same as in YaST 1 and uses
/etc/permissions.easy
/etc/permissions.secure
/etc/permissions.paranoid
Those presently set the rights of several files (suid bits, /dev/
rights, mount user or nouser etc.) I don't think that that changed much.

> Right now I dont have ftp access to check the suse ftp site for this,
> so if there are documentation about this, people can tell me RTFM,
> but pease also point me the link for it, for I can check l8r =;o)
Well you probably have to buy SuSE 7.1 (or wait until it gets leased as
FTP version) until you see it. The latter doesn't look that new (I don't
know 7.0's YaST2, but YaST1 has it).
The former seems to make it easier (with GnuPG signed RPMs :-) than
browsing around with yast (I never did before I simply used wget and rpm
;-). There is also autorpm which automates it even more (if you think
rpm{new/saved} is no harm ;-)

Tobias

< Previous Next >
Follow Ups
References