> The FLP does not recommend night yum updates via cron, which is what I > think you are recommending here. Is this the recommendation of the > Fedora Project? If you type 'chkconfig yum on', you get nightly updates in FC. It's designed to do it, and since FC1 there have been no updates that required any special handling. Even the kernel gets updated this way, without problems. I don't see that there is any expectation that the notices will be read. I believe that RHEL operates this way, too, as do many/most distros nowadays (e.g., Debian Ubuntu, cAos). I don't know about official policy, but I also don't know anyone who would risk operating any other way. The net has become an increasingly dangerous place to compute. > As a user, I very often want to know: > 1) Whether an update *doesn't* apply to me. So I want to get all the > updates, read them, and *know* that it doesn't apply to me. So if my > boss, wife, who ever asks me "did you install the latest XYZ update?" > or "should I install the latest XYZ update?" or "Why didn't you install > the latest XYZ update?" or what ever, I can say with confidence "I researched > the issue and that vulnerability doesn't apply in our case." Sounds labor-intense to me. Why not just take them all when they come out? yum will figure out whether you have the package, and will update it if so. This seems to be what's done by the vast majority of users nowadays. Then you can just say "yes", "yes", and "it got it automatically the night after it hit the net" to the person asking the questions, without needing to look up from the novel you'll now have time to read. :-) If it's not the recommendation of FLP to do automatic nightly yum updates off your repos, it should be, as it will be the practice of most FC users regardless of what you recommend. If you make a point of advising otherwise, it will be a strong enough incentive for many people to switch away from Fedora completely, and go with a distro that does support it for the long term. FWIW, my FC1 machines have been doing fine operating in this mode off your repos, so it doesn't appear you need to do much, other than avoid making packages that require manual installation. --jh-- -- fedora-legacy-list@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-legacy-list
