Bug#794120: ruby: please implement a way to forcibly disable download/installation of (Debian external) gems

2015-07-30 Thread Christoph Anton Mitterer
Package: ruby Version: 1:2.1.5.1 Severity: wishlist Tags: security Hi. AFAIU, the gems integration into ruby allows one (e.g. in principle also other packages) to download/install software which doesn't come vi the Debian Archives (i.e. I'm not talking about properly packaged "gems", as e.g. rub

Bug#794120: ruby: please implement a way to forcibly disable download/installation of (Debian external) gems

2015-07-30 Thread Christoph Anton Mitterer
On Thu, 2015-07-30 at 17:19 -0300, Antonio Terceiro wrote: > Yes, you are right. Ruby comes with its own package manager, as does > pretty much any other language these days. Well... none of the decent languages, like C, C++ does... they all work fine without. > If you don't trust software from o

Bug#794120: ruby: please implement a way to forcibly disable download/installation of (Debian external) gems

2015-07-31 Thread Antonio Terceiro
On Thu, Jul 30, 2015 at 11:03:58PM +0200, Christoph Anton Mitterer wrote: > On Thu, 2015-07-30 at 17:19 -0300, Antonio Terceiro wrote: > > That's all true, but unless you found a way for random stuff being > > installed without an explicit user request, then there is nothing to > > be > > fixed. >