On Wed, 2016-06-15 at 08:57 +0100, Tom Hughes wrote: > I have far more worries about third party rpms which can put files > anyway, run any scriptlets they like at install time, and generally > interfere with the system as a whole.
Yeah, I'm not sure I like this part of the plan either. The goal is to make it as easy as possible to package software for Fedora, but I'm thinking that anyone who wants to distribute an RPM repo with metadata enabled in Fedora ought to be required to follow our packaging guidelines. That Chrome RPM seems like a weird case... but if Google's RPM sucks, just imagine what other vendors will do. You can horribly break the user's system with a bad RPM; there was a recent "dnf uninstalls sqlite" bug caused by some third-party RPM that bundles sqlite and also Provides it.... With Flatpak, it's indeed less of an issue. Your Flatpak might suck, but it can't hurt the system. Michael -- devel mailing list devel@lists.fedoraproject.org https://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org
