I just installed f27 in ins full and minimal template on Q4.0 from the
repos. When installing extra packages (for example sys-net tools) in
f27-minimal the download works, BUT checksums fails. The point is that
fucking dnf ignorantly installs the packages anyhow without putting any
questions. Result: such a tempate is compromised right from the
beginning, I will have to delete it without ever running it.
The warning to all users is to NEVER run unattended (say, scripted)
updates on fedora based templates since apparently they give a shit on
security.
For me this drastically increases the motivation to compile a
debian-minimal and kick out all fedoras (with the sad exception of dom0).
Bernard
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/a9e44f3c-6274-b781-2075-d613238f21a2%40web.de.
For more options, visit https://groups.google.com/d/optout.