> > > and secondly, this is easily abusable by third-package maintainers > > > and even packages from completely different, non-Debian > > > repositories: > > > > > > Package: some-package > > > Depends: gnome > > > Recommended-When: gnome > > Third-party repositories have root access on your system, see Google's > (past?) packages for things that could be done. Chrome does not abuse > it but only fiddles in your sources.list and crontab because they want > to ensure that you don't browse the internet with a browser full of > security holes (whether this is a good way to do this does not seem to > belong to this thread).
No, third-party repositories do not have any access on my system, packages from third-party repositories do _if_ I have installed them, and usually, I think, it's a regular user access, not root one, given I pre-checked package maintainer scripts before the installation. 'Recommended-When' gives them (= packages from any repositories) an ability to be installed by default accompanying any package they want. A major difference as for me. -- Eugene V. Lyubimkin aka JackYF, JID: jackyf.devel(maildog)gmail.com C++/Perl developer, Debian Developer -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20110522151949.GB5031@r500-debian
