|
From: | Mark H Weaver |
Subject: | bug#25852: Users not updating their installations of Guix |
Date: | Fri, 10 Mar 2017 20:48:24 -0500 |
User-agent: | Gnus/5.13 (Gnus v5.13) Emacs/25.1 (gnu/linux) |
address@hidden (Ludovic Courtès) writes: > Mark H Weaver <address@hidden> skribis: > >> We could simply issue a warning if the version of guix currently in use >> is more than N hours old, on the assumption that after N hours it's >> likely to be stale. The default value of N might be in the range 48-96 >> (2-4 days). A quick perusal through the recent commit log on our master >> branch indicates that it's quite rare for 4 days to pass without a >> security update. >> >> What do you think? > > That sounds like an easy and reasonable approach. > > I wonder what would be the best place to emit this warning. Upon ‘guix > package -i’ maybe? Also "guix package -u" and the "guix system" commands that build systems. I suspect that many users run "guix pull" as their normal users but never think to run it as root. Mark
[Prev in Thread] | Current Thread | [Next in Thread] |