> There are huge security reasons to load all of the shit that is needed
> for MandrakeUpdate too. I don't want X-windows and perl on my
> secrurity gateways. Way too many holes and tools for the Wiley
> Cracker thanks.
>
> How about a non-perl (and non-python for that matter -- be better than
> RH) based character based, batchable update tool already?
>
> b.
>
> --
> Brian J. Murrell
>
you could just mirror all the sites to one base site... Incidently, perl is
secure if it's written well. =) From a security standpoint there really is
no 100% secure way to have a remote site update other computers. Even
non-gui programs tend to make insecure temp files that can be used
maliciously. Best bet is to take whatever systems you want to upgrade off of
their connection to the internet and keep them solely on a LAN. ::shrug::
But hey that's just my oppinion, each of us has our own way of doing things.
Ron's all_sync.pl works fine for me and is about as secure as things can
get, but if you would like another non-gui tool, maybe someone on the
Mandrake team and look at RH's and get a feel for it and adapt it.
just my few cents worth
-Tim
