News for hackers. Stuff that matters.

A comment on Limiting the power of package installation in Debian. Parent comment

Re:Limiting the power of package installation in Debian by nine_k on Friday November 16, 2018 @10:25AM (#18469297)
Yes, ideally, every version of software that changes any external data format (e.g. of config files) should always accept both new and old versions.

But, unfortunately, some software does not, and it still needs to be packaged.

[ Parent | on HN ]
Re:Limiting the power of package installation in Debian by gronne on Friday November 16, 2018 @11:29AM (#18469737)
True. And the only effective solutions I can think of are extremely ressource intensive (man hours) and therefore unrealistic. (Lile wrapping non-compliant apps and using mandatory access control for enforcement)
[ Parent | on HN ]
Re:Limiting the power of package installation in Debian by tinus_hn on Friday November 16, 2018 @06:40PM (#18472870)
And then you have moved stuff around and solved absolutely nothing, but you have created a new, permanent surface for security issues.
[ Parent | on HN ]