Bug 141234

Summary: YOU: honor taboo flag
Product: [openSUSE] SUSE LINUX 10.0 Reporter: Hartmut Meyer <hartmut.meyer>
Component: YOUAssignee: Jiri Srain <jsrain>
Status: RESOLVED WONTFIX QA Contact: Klaus Kämpf <kkaempf>
Severity: Normal    
Priority: P5 - None CC: suse-beta
Version: Final   
Target Milestone: ---   
Hardware: x86   
OS: SuSE Linux 10.0   
Whiteboard:
Found By: SUSE Technical Services Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Description Hartmut Meyer 2006-01-03 14:11:01 UTC 
I'm using the turnpike VPN client which requires me to install a specific version of the ipsec-tools package.

Since that package is not from the SUSE Linux 10.0 installation media, it is set to "taboo" (verified with YaST2 package manager).

Since we published a security fix for the ipsec-tools package for 10.0, SUSE watcher constantly reminds me about a security fix being available.

I cannot install this patch without breaking my VPN connection. And I'm sure there are similar use-scenarios.

I notice that in YOU I can right-click on the patch and set it to taboo - that way YOU will not install this patch.

I suggest:

  ° don't pre-select patches that would break a taboo (still offer it but point 
    out to the user that this would effect a taboo'ed package)

  ° allow manually de-selecting patches (setting them to taboo) *AND* have YOU 
    remember this setting (it curryently does not remember such a setting)!

  ° don't advertise available new security (or other) patches through 
    SUSEwatcher if it is a tabooed package/patch
Comment 6 Jiri Srain 2006-01-11 16:08:57 UTC 
YOU (as distributed with 10.0) is not designed to honor the Taboo flag, and the update would not be simple, thus the bug will not be fixed for 10.0.

For future products, the patch handling (which will be rewritten) will be able to solve this problem (the design takes this into focus).