On Fri, 01 Mar 2013 12:14:18 +0100
Vít Ondruch <vondruch(a)redhat.com> wrote:
Dne 1.3.2013 10:23, Tomas Radej napsal(a):
> On Fri, 1 Mar 2013 03:26:09 -0500 (EST)
> Bohuslav Kabrda <bkabrda(a)redhat.com> wrote:
>
>> - A very nice functionality would be to only add other coprs to
>> repos. This way, we could make sure that anything user tries to
>> install will have dependencies met and also we will have them
>> under control. Also, that would allow us to generate RPMs
>> with .repo files that would depend on other (e.g. copr X depends
>> on copr Y, generated RPM for X depends on RPM for Y, Yum can
>> download that somehow). Thoughts?
Security aside, this must be allowed. If somebody want shoot oneself
in the foot, why anybody should prevent it?
If that is 3rd party repo with binary packages, how would you build
them otherwise in Copr, if you don't have sources? And if I want to
get them, nobody can stop me to repackage it in binary RPM.
You try to put more obstacles in a way then necessary and tries to
pretend that there is some security where it is not.
Vit,
+1. completely.
-sv