[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Possibility of packaging JDK 1.3?



Bernd,

You're supposed to _trust_ the distributions you put in your
sources.list. If you don't, don't put them in there. Adding security
features of this sort to apt is probably not even remotely trivial...

Regards,

Alex.

On Thu, 8 Mar 2001, Bernd Eckenfels wrote:

> On Thu, Mar 08, 2001 at 02:22:36PM -0300, Carlos Laviola wrote:
> > Yes you are, this is one of Blackdown.org's official mirrors, as listed in
> > http://www.blackdown.org/java-linux/mirrors.html. The .deb's there are made by
> > them.
> 
> It is still a security problem that you are unable to limit the pachages apt
> will suck from a given source. It could even happen by accident that
> blackdown is putting some unstable libc on their server and BANG your system
> is hossed.
> 
> Greetings
> Bernd
> -- 
>   (OO)      -- Bernd_Eckenfels@Wendelinusstrasse39.76646Bruchsal.de --
>  ( .. )  ecki@{inka.de,linux.de,debian.org} http://home.pages.de/~eckes/
>   o--o     *plush*  2048/93600EFD  eckes@irc  +497257930613  BE5-RIPE
> (O____O)  When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl!
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-devel-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> 



Reply to: