package reprepro
tags 515030 + pending
thanks

* Neil Williams <codeh...@debian.org> [090212 22:25]:
> I'm thinking of an option in conf/distributions that says:
> 
> StableIsFrozen: true
> 
> or similar - that prohibits any alteration of anything in the distribution 
> described
> by that stanza, until that line is removed. No overrides on the command line, 
> no --ignore
> option, no option but commenting out that line which, hopefully, makes it 
> clear that
> the change is only made when a new stable release is being prepared. Once 
> frozen, reprepro
> would allow no reprepro operation that could possibly invalidate any existing 
> signature on
> the Release file(s) - including not changing the timestamp on the Release 
> file(s) by reprepro.
> 
> 'include*' and 'delete' would be impossible for stable, 'update' would be 
> disabled, 'pull' as well,
> even --export=force would ignore stable (and probably complain noisily that 
> stable is
> frozen and cannot be forced). This should not be permissions based because 
> the repository
> still needs to be maintained by a team.

I've added a ReadOnly: yes option in CVS.

I hope it disables all possible write accesses. It might need some more
testing to make sure all of the other commands still work properly (but
catching those that open things read-write without need is a good
maintaince task anyway...).

Thanks for your suggestion,
        Bernhard R. Link



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to