[plug] Re: Building RPMS

Anthony J. Breeds-Taurima tony at cantech.net.au
Mon Dec 13 09:27:57 WST 1999


On Sun, 12 Dec 1999, John Summerfield wrote:

> > I see a difference between 'should not' (my words) and 'does not' (yours).
> > 
> > I have had an rpm that did indeed try to update the running system as part 
> > of the build process. This alone invalidates your 'does not.'

Alright ... What I meant was "doesn't install if things are constructed
properly"

<snip> 

> This package was put together by Red Hat Software.

This is VERY disappointing.  I had expected RedHat to at least get things
right.   But this also illustrates that you should check the .specs before
installing an rpm.


So basiclly as I see it we've said.

Building RPMS, SHOULDn't install files/update a running system BUT does, when
things havn't been donr properly.  RedHat even break the rules.

Before BUILDIng RPMS the sources, makefiles, patches and .spec file(s) should
be checked, for security / system confilct issues.

Yours Tony.



More information about the plug mailing list