Full disclosure [LWN.net]

Full disclosure

Posted Aug 17, 2008 13:17 UTC (Sun) by cmc (subscriber, #16767)
In reply to: Full disclosure by gdt
Parent article: An update on Fedora's "issues"

What about mirror sites, should they be preventing access for Fedora updates downloaded after a particular date to lessen the risk to their clients? With the current dearth of information, they can't make a decision.

The official word so far is no. There is a (closed) mailing list for mirror admins that is used to keep us apprised of various issues related to mirror maintenance. If there was some issue that required the mirrors to be shut down, they would say so. Of course they can't force compliance, but they could remove or replace material on the masters and those removals would trickle down to most regularly updated mirrors unless their maintainers took special steps to retain that material.

(Log in to post comments)

Full disclosure

Posted Aug 17, 2008 20:23 UTC (Sun) by danieldk (subscriber, #27876) [Link]

Of course they can't force compliance, but they could remove or replace material on the masters and those removals would trickle down to most regularly updated mirrors unless their maintainers took special steps to retain that material.

They can kinda force it, since most people use yum with (Fedora-provided) mirrorlists. If necessary, they could just remove unwanted mirrors from the mirrorlist. In fact, CentOS automatically returns mirrors close to the machine location (according to GeoIP), and leaves out mirrors that are not in sync.