On Nov 29, 2015, at 15:31 16, Gordan Bobic <[email protected]> wrote:

> I have to say I a inclined to completely exclude abrt, especially after
> the recently discovered security snafu with (it it was sending out
> the salted/hashed password strings with the sosreport). I can see the
> point of something like it on Fedora, but if crash level bugs haven't
> been weeded out by the time it gets downstream two layers to us, it is
> questionable how much we can realistically do about it.

I disagree.  Abrt works with any package that has been properly signed and the 
appropriate pub key registered in /etc/pki/rpm-gpg; it is not limited to use 
with just upstream packages.  As a third-party integrator, I’ve found it to be 
an extremely useful tool.  While the recent security snafu is indeed 
unfortunate, it hardly renders the system obsolete.  The abrt maintainers patch 
it and move on, as with any other discovered vulnerability.

Cheers!


|----------------------------------------------------------------------|
| Frederick F. Gleason, Jr. |              Chief Developer             |
|                           |              Paravel Systems             |
|----------------------------------------------------------------------|
|          A room without books is like a body without a soul.         |
|                                         -- Cicero                    |
|----------------------------------------------------------------------|

_______________________________________________
users mailing list
[email protected]
https://lists.redsleeve.org/mailman/listinfo/users

Reply via email to