Re: Dag repository...

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



On 1/7/07, John Summerfield <debian@xxxxxxxxxxxxxxxxxxxxxx> wrote:
Fabian Arrotin wrote:
> On Fri, 2007-01-05 at 15:10 -0500, David A. Woyciesjes wrote:
>
>>      A bit of a new guy around these parts...
>>
>>      I've done a bit of looking, and haven't found any newbie-friendly
>>instructions on how to add the Dag repository to my CentOS4 box. Could
>>somebody help me out and point me in the right direction? Thanks...
>>
>
> Have searched on the wiki ? :
> http://wiki.centos.org/Repositories/RPMForge
>


Some time ago, when I was using Debian/Woody, and Woody was creaking
with age, I added third-party repos for various things including newer
KDE, Mozilla....

It later occurred to me this was imprudent, and not just because I got a
system that became hard to maintain. What, I asked, was there to prevent
the maintainers of the KDE debs to insert a brummy kernel?

I asked, and the answer is that apt-get has the ability to control (it's
called pinning) what comes from where.


You can install the yum-protectbase rpm as a starter. You then say
"protect the rpms in this base". Someone could write a more
complicated one (per package protection), or they could write another
plugin that did weighting so you could select which archives have
precedence over others.

Now, I'm sure all the folk at rpmforge are straight-up good guys, but
should you really trust some relative unknown such as
debian@xxxxxxxxxxxxxxxxxxxxxxx to not slip malware into his repo when he
promotes some whiz-bang new lotto-winning program?

How does yum control this?




--

Cheers
John

-- spambait
1aaaaaaa@xxxxxxxxxxxxxxxx  Z1aaaaaaa@xxxxxxxxxxxxxxxx

Please do not reply off-list
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos



--
Stephen J Smoogen. -- CSIRT/Linux System Administrator
How far that little candle throws his beams! So shines a good deed
in a naughty world. = Shakespeare. "The Merchant of Venice"
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos

[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux