[Yum] centralized metadata for security
Muayyad AlSadi
alsadi at gmail.com
Fri Nov 7 18:50:23 UTC 2008
>If you have out of sync. mirrors frequently enough that this is
>a problem, you should also turn on --unique-md-filenames.
the file I'm talking about (repomd.xml) is not affected by
--unique-md-filenames.
> Better yet, provide a cryptographic signature of the repomd.xml - which yum now supports.
> Or, alternatively, provide all the mirror info in a file like repomd.xml - but in the metalinks format, which yum also now supports.
does fedora uses those two feature yet
More information about the Yum
mailing list