Post Atd0KUlPFZi8DeVLRw by corbet@social.kernel.org
 (DIR) More posts by corbet@social.kernel.org
 (DIR) Post #Atd0KUlPFZi8DeVLRw by corbet@social.kernel.org
       2024-04-01T17:14:11.154514Z
       
       1 likes, 0 repeats
       
       Quote of the day (from the Fedora devel list):We have no mechanism to flag when J. Random Packager adds "Supplements: glibc" to their random leaf node package. As a reminder, *we are a project that allows 1,601 minimally-vetted people to deliver arbitrary code executed as root on hundreds of thousands of systems*, and this mechanism allows any one of those people to cause the package they have complete control over to be automatically pulled in as a dependency on virtually every single one of those systems.— Adam Williamson
       
 (DIR) Post #Atd0MqAadL0nBkP0Km by lispi314@udongein.xyz
       2024-04-02T05:48:44.534283Z
       
       1 likes, 0 repeats
       
       @corbet @tinker Huh. Does Fedora have worse processes than Debian?