Thanks for those additional comments.
I close the task for apturl as this is fixed now. There is a task for
gdebi now to disable it or at least to disable the direct firefox
support for it.
** Changed in: apturl (Ubuntu)
Status: Confirmed = Fix Released
** Changed in: gdebi (Ubuntu)
So, in the very end, we don't care about the possibility to edit
/etc/apt/sources.list in a postinstall, using a package installed with
gdebi?
Or should this resolution be propagated to gdebi, too? This is not
coherent by now.
** Also affects: gdebi (Ubuntu)
Importance: Undecided
You should never edit sources.list in a postinst. If you want to enable
repositories you should drop a corresponding config file in
/etc/apt/sources.list.d.
Furthermore this is rather a (security) political than a technical
decision.
--
Disable support for adding repositories
Of course, you can use sources.list.d, so for exactly the same reasons
than apturl can be used by malicious people to add a repository to your
computer, also gdebi can. I am happy to have gdebi, and should I ever
need apturl functionality, I could just provide a deb with a single
file, installed
Back to confirmed, since we have _not_ disabled support for adding
repositories, which is required by the bug reporter. Wouter asked I
think the ability to add repositories to the apt sources should not be
enabled/included by default. This is potentially a huge security risk..
Now this is
I personally think .deb files should not be associated with gdebi in
firefox. It should be possible to download deb's from firefox to your
computer and then if you do want to install them, you should browse to
the files location and install it from there. I think it is a bad idea
to install
apturl (0.1ubuntu1) gutsy; urgency=low
* debian/control:
- fix typo in description (LP: #131828)
- add missing synaptic dependency (LP: #132067)
* apturl:
- check for already installed or unavailable packages
earlier (LP: #137053, LP: #137055)
- fix incorrect reference
** Changed in: apturl (Ubuntu)
Assignee: (unassigned) = Michael Vogt (mvo)
--
Disable support for adding repositories
https://bugs.launchpad.net/bugs/139227
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.
--
ubuntu-bugs
** Changed in: apturl (Ubuntu)
Target: None = ubuntu-7.10-rc
--
Disable support for adding repositories
https://bugs.launchpad.net/bugs/139227
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.
--
ubuntu-bugs mailing list
This is being discussed[1] on the ubuntu-devel mailing list. Currently,
th plan for Gutsy is to have it disabled.
[1] https://lists.ubuntu.com/archives/ubuntu-
devel/2007-September/024463.html
** Changed in: apturl (Ubuntu)
Importance: Undecided = High
Status: New = Confirmed
--
I dont' think that most people know what the consequences of keeping a
repo or not are. A lot of people don't even know what a repository is.
--
Disable support for adding repositories
https://bugs.launchpad.net/bugs/139227
You received this bug notification because you are a member of Ubuntu
I think apturl should make it easy to install from 3rd party
repositories. The ability to add apt sources is one of my favorite
features. apturl asks if you want to install the program, makes you
enter your password, does the install, and then asks if you want to keep
the repo or not. If you don't
12 matches
Mail list logo
