Vincent Danen <[EMAIL PROTECTED]> wrote: > [snip] > Main gets updated. contribs doesn't. > > I don't see what is so difficult about this. This is how it has > *always* been. It hasn't changed. No need for a policy regarding it. > This is just how it's done.
I agree that mandrake is not responsible for providing updated packages for contribs even when there is a security problem. But I think there is a nice solution: msec makes a daily list of all installed rpms. of course it could also fetch a list of rpms which have security problems from some place. It could compare those lists and then send a an email to root that there is a problem with a package and that it should be updated or removed. # Han -- http://www.xs4all.nl/~hanb/software http://www.xs4all.nl/~hanb/documents/quotingguide.html
