[Yum-devel] yum-security plugin review, possible merge into yum-utils?

James Antill jantill at redhat.com
Tue Apr 24 17:56:23 UTC 2007


On Tue, 2007-04-24 at 09:34 -0400, James Antill wrote:

> > Ideas/Suggestions:
> > 
> >     o --{advisory,bz,cve} should be able to refine {list,info}-sec results
> 
>  Right, I had thought of this, and also merging the "list-sec bzs" in
> the other direction ... but then it gets more crufty, so I did
> neither :).
>  I'll post a patch to do --bz and --cve for the list/info commands.
> 
> >     o list-sec should only list updates (id - nvr - title, or something),
> >       instead of displaying details; while show-sec could simply just
> >       `print notice` and allow the yum.update_md.UpdateNotice.__str__ to
> >       do the rest.
> 
>  Right, I'd thought of trying to make list-sec even more compact. You'd
> probably still want to know which are md['type'] == "security", but that
> could just be a single char somewhere.

 Ok, one thing I remember is that I had list and info roughly similar
because I wanted "list-security bzs" to be useful (show the BZ numbers)
and the same for "list-security cves". So here is a patch against CVS
yum-utils which does the above two things, but shows the useful IDs when
listing those. Eg.

% sudo yum -C list-sec --advisory FEDORA-2007-436 FEDORA-2007-431 --bz 235572             
[...]
FEDORA-2007-436 bugfix   coreutils - 5.97-12.5.fc6.i386
FEDORA-2007-431 bugfix   lftp - 3.5.9-0.fc6.i386
FEDORA-2007-428 bugfix   yum - 3.0.6-1.fc6.noarch
% sudo yum -C list-sec bzs --advisory FEDORA-2007-436 
[...]
 223869 bugfix   coreutils - 5.97-12.5.fc6.i386
 230052 bugfix   coreutils - 5.97-12.5.fc6.i386
 235401 bugfix   coreutils - 5.97-12.5.fc6.i386
 236311 bugfix   coreutils - 5.97-12.5.fc6.i386

-- 
James Antill <jantill at redhat.com>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: yum-security-plugin.patch
Type: text/x-patch
Size: 12336 bytes
Desc: not available
Url : http://lists.baseurl.org/pipermail/yum-devel/attachments/20070424/8dccfa4e/attachment.bin 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.baseurl.org/pipermail/yum-devel/attachments/20070424/8dccfa4e/attachment.pgp 


More information about the Yum-devel mailing list