Re: FC6: reducing size, moving packages out to fedora extras, security?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I think the installation process (from Extras) could do with some polishing, maybe enough to make users never have to use the command line for yum ( I think I still would use the command line personally)

Presently, I do not consider FC to be too large, but apperently this may not be the overall perception.

On 3/20/06, Axel Thimm < Axel.Thimm@xxxxxxxxxx> wrote:
On Mon, Mar 20, 2006 at 05:29:16PM -0500, Mike A. Harris wrote:
> IMHO, moving more and more stuff out of Core and into Extras is an
> overall good idea, so long as the infrastructure is present in
> _advance_ to make it easy to install the stuff that has moved to
> Extras, both at OS install time and later, and without requiring
> mandatory network access.  ie:  Fedora Extras on CD, kindof like
> powertools was before, but with anaconda support for that.

I think this is already the plan for FC6 and the timeframe looks right
to get these parts done.

But I hope one thing doesn't get lost in this transition: Mark Cox and
his team have been checking RHEL and FC only until now (or has this
changed?). So currently I know the software on the 5 CDs has been
checked against CVEs rigorously and the security team has taken
appropriate measures.

I think this kind of security infrastructure is needed for moving
these targeted 2/3 of Fedora Core to Fedora Extras. I'm afraid that
simply assigning all of Fedora Extras to be checked as good as Fedora
Core has been means more human resources which may not be
available. So I see three scenarios:

o packages moved to Fedora Extras are not being checked by Mark Cox
  and friends anymore

o Mark Cox get a lot more coworkers to be able to deal with all
  packages in Fedora Core and Fedora Extras

o Fedora Extras is split security-wise into 1st class and 2nd class
  citizens.

From a user's POV I'd wish the second scenario would happen.
--
Axel.Thimm at ATrpms.net


--
fedora-devel-list mailing list
fedora-devel-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-devel-list





--
As a boy I jumped through Windows, as a man I play with Penguins.
-- 
fedora-devel-list mailing list
fedora-devel-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-devel-list

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux