I wrote a yum plugin to use the security information out of the
updateinfo.xml files. So if anyone wants to have a look at it, and
comment I'm happy to take any and all feedback. You can get the fc6 and
fc7 rpms here (and the man page, in html format):

http://people.redhat.com/jantill/yum-security/

...it was also suggested that putting the plugin in the yum-utils
package might be the best solution, instead of having it in it's own
package. So, assuming that's possible, any feedback relative to that
would be much appreciated.


 Finally it's worth pointing out a couple of problems I ran into writing
the plugin:

1. exclude_hook doesn't seem to work, if you want to remove a couple of
things but maybe have them come back via. dependencies for things you
did want. Dito. delPackage(). In this case you need to use
preresolve_hook and getTsInfo() and then remove them from the
transaction.

2. If you remove _everything_ in the preresolve_hook (think security
only updates, when there are none) you end up with an empty transaction.
At which point nothing in yum spots this and asks the user to confirm a
transaction that does nothing. I currently work around this by doing
sys.exit(0) ... which is a horrible hack, I freely admit. This seems
like it should be a one or two line change to yum, could this go in?

3. There is no way to add a sub-command of list/info. I currently work
around this by having top level commands list-security and
info-security ... but that's kind of ugly.

4. It is somewhat annoying that there is a difference between "conduit"
code in the hooks, and the command class code which doesn't have a
conduit.

-- 
James Antill <[EMAIL PROTECTED]>

Attachment: signature.asc
Description: This is a digitally signed message part

_______________________________________________
Yum-devel mailing list
[EMAIL PROTECTED]
https://lists.dulug.duke.edu/mailman/listinfo/yum-devel

Reply via email to