Shared Packages

[David L Norris]

On Wed, 2004-05-05 at 17:27, Mike Hogsett wrote:
> Does anyone have any comments on this plan, similar experiences, etc.?

Yes, learn how to build signed RPMs for all your in-house software. 
Each machine can run "yum update" daily against your internal RPM
repository.  This gives you auditing, security, and all the other
benefits of RPM.  With RPM someone can't taint your rsync master and
infect all the internal machines with evil programs, for example.  And,
with RPM you can verify (rpmverify -a) that none of your files nor
programs have been improperly modified.

Pointers on building RPMs for Fedora (and Red Hat) systems:
http://fedora.redhat.com/participate/developers-guide/ch-rpm-building.html

RPM Howto (oldie but a goodie):
http://www.rpm.org/RPM-HOWTO/

-- 
 David Norris
  http://www.webaugur.com/dave/
  ICQ - 412039
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20040505/eb0ccd00/attachment-0001.sig>