Drawing lessons from fatal SELinux bug #1054350

[Reindl Harald]

Am 24.01.2014 16:40, schrieb Ralf Corsepius:
> On 01/24/2014 04:06 PM, Reindl Harald wrote:
>>> a) This would blow away all installed packages, which aren't available in permanently enabled repos
>>
>> that is not true, try it out
> Been there many times

no, you did not and you did also not in your example below

> Real world example with a package I maintain, which currently has an update pending in updates-testing:
>
> # yum distro-sync
> ...
> Downgrading:
> gumbo-parser                              x86_64      
> 1.0-0.2.20131001gitd90ea2b.fc20                               fedora
> ...
> Removed:
>   gumbo-parser.x86_64 0:1.0-0.2.20131204git87b99f2.fc20
> 
> Installed:
>   gumbo-parser.x86_64 0:1.0-0.2.20131001gitd90ea2b.fc20

nothing is blown away, you only did not read the output
because it was *downgraded* and *not* removed

this is *completly* different than "blown away"
this is what distro-sync *is supposed to do*
upgrade or downgrade any package which is in whatever current repo
but it *does not* blow away packages not in any repo at all
________________________________________

and if you would not have stripped this paragraph of my original
reply you maybe had looked twice

>> *that* is the reason not to do so because it would downgrade anything updated
>> explicitly from updates-testing,kde-testing,koji which would be a bad default

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 246 bytes
Desc: OpenPGP digital signature
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20140124/ab30ddf4/attachment.sig>