I just installed f27 in ins full and minimal template on Q4.0 from the repos. When installing extra packages (for example sys-net tools) in f27-minimal the download works, BUT checksums fails. The point is that fucking dnf ignorantly installs the packages anyhow without putting any questions. Result: such a tempate is compromised right from the beginning, I will have to delete it without ever running it.

The warning to all users is to NEVER run unattended (say, scripted) updates on fedora based templates since apparently they give a shit on security.

For me this drastically increases the motivation to compile a debian-minimal and kick out all fedoras (with the sad exception of dom0).
Bernard

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a9e44f3c-6274-b781-2075-d613238f21a2%40web.de.
For more options, visit https://groups.google.com/d/optout.

Reply via email to