Re: Possibility of packaging JDK 1.3?
On Thu, Mar 08, 2001 at 06:38:57PM +0100, Bernd Eckenfels wrote:
> On Thu, Mar 08, 2001 at 02:22:36PM -0300, Carlos Laviola wrote:
> > Yes you are, this is one of Blackdown.org's official mirrors, as listed in
> > http://www.blackdown.org/java-linux/mirrors.html. The .deb's there are made
> > by them.
>
> It is still a security problem that you are unable to limit the pachages apt
> will suck from a given source. It could even happen by accident that
> blackdown is putting some unstable libc on their server and BANG your system
> is hossed.
It should be possible to prevent this using the pinning feature of the new apt
(see apt_preferences(5)). You could list each package that you wish to have
retrieved from the blackdown source, and pin any other packages from that
source to priority -1.
--
- mdz
Reply to: