Stephen Hahn wrote: > * Kyle McDonald <KMcDonald at Egenera.COM> [2008-02-27 19:23]: > >> Now that I think of it, I'm going to want to figure out a way that once >> a machine is installed, I can disable IPS, so user/admins can't >> mistakenly use it to change the config of the machine. >> > > How do you disable pkgadd (and pkgadd -d http://...)? I mean, how > inconvenient do you want to make it (since it's not irreversible > without making exotic assumptions about the filesystems involved...)? > > True. But pkgadd wasn't so easy to get bits from who kows where that might bring in other bits from who knows where else. The user had to have the pkg file itself > (The freeze subcommand to pkg(1) will let you stop accidental upgrade, > but one can just unfreeze.) > > Also true. I need to think about htis more.
Maybe all I really need to do is make sure the repository clones the systems install from are frozen. I'm not trying to stop all changes that might be done, only trying to stop the simple mistakes. -Kyle > - Stephen > >
