[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[bug#59383] [PATCH] doc: Call out potential for downgrade attacks with t
|
From: |
Ludovic Courtès |
|
Subject: |
[bug#59383] [PATCH] doc: Call out potential for downgrade attacks with time-machine. |
|
Date: |
Tue, 22 Nov 2022 08:58:08 +0100 |
|
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) |
Hi,
zimoun <zimon.toutoune@gmail.com> skribis:
> @quotation Note
> The history of Guix is immutable and @command{guix time-machine}
> provides the exact same software as they are in a specific Guix
> revision. Naturally, no security fixes are provided for old versions
> of Guix or its channels. A careless use of @command{guix time-machine}
> opens the door to security vulnerabilities @xref{Invoking guix pull,
> @option{--allow-downgrades}}.
> @end quotation
I like that wording. Florian, WDYT?
Ludo’.