Re: How secure is the openSUSE Build Service?

"Eduardo Tongson" <[email protected]> Thu, 1 Nov 2007 18:45:54 +0000
Newsgroups gmane.comp.security.linux
Message-ID <[email protected]>
Hi,

<http://download.opensuse.org/repositories/> Are those really third
party repositories?
As with any third party repository/tree/source the usual caveat apply:
You are on your own.

  Ed

On 10/31/07, Aniruddha <[email protected]> wrote:
> With the releae of openSUSE 10.3, openSUSE introduced
>  '1-Click Install' . However openSUSE only has security support for it's
> oss and non-oss repositories.
>
> How great of a security risk is adding third-party repositories which
> you can hardly verify ( http://download.opensuse.org/repositories/ )?
> What are the risks of getting rootkits and/or security exploits.
>
> Is openSUSE's approach more risky then Gentoo/FreeBSD which provides
> security fixes for all packages in their tree?
>
>
>
> --
> Regards,
>
> Aniruddha
>
>
>
>