guix-patches
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[bug#59383] [PATCH] doc: Call out potential for downgrade attacks with t


From: Tobias Geerinckx-Rice
Subject: [bug#59383] [PATCH] doc: Call out potential for downgrade attacks with time-machine.
Date: Sat, 19 Nov 2022 14:37:16 +0100

Hi Florian,

and thanks for the patch.

pelzflorian (Florian Pelz) 写道:
+@quotation Note
+Naturally, no security fixes can be provided for old versions of Guix +or its channels. This also means that careless use of @command{guix
+time-machine} opens the door to downgrade attacks.
+@xref{Invoking guix pull, @option{--allow-downgrades}}.
+@end quotation

‘Attack’ is a very big word. It should not end a paragraph. What would the downgrade attack—distinct from a downgrade—look like?

Kind regards,

T G-R

Attachment: signature.asc
Description: PGP signature


reply via email to

[Prev in Thread] Current Thread [Next in Thread]