On Mon, Aug 21, 2017 at 02:40:40PM +0100, Richard Hughes wrote:
> The original intention was to at least ensure that you
couldn't easily
> and accidentally put your system into a state where you couldn't put it
> back with the same tools you used to break it.
Does that include using tools like rm as root or just ones like rpm?
Of course not. And, for that matter, not _even_ rpm. (For this reason,
I think using the protected-packages functionality is better than
adding package deps for this purpose.
If the user has got root access and is able to remove random core
packages (also agreeing to a huge list if scary looking dependencies)
then perhaps that user shouldn't have admin access to a system...
It's really easy to miss something in a huge list. Or to not understand
the ramifications of something in a small list, and then regret it.
--
Matthew Miller
<mattdm(a)fedoraproject.org>
Fedora Project Leader