Ticket #7618 (new defect)

Opened 6 years ago

Last modified 6 years ago

Core OS upgrade support in Software Update control panel

Reported by: cscott Owned by: cscott
Priority: normal Milestone: 9.1.0-cancelled
Component: upgrade utility Version: not specified
Keywords: Cc: mstone
Action Needed: never set Verified: no
Deployments affected: Blocked By:
Blocking:

Description


Change History

Changed 6 years ago by cscott

  • milestone changed from 8.2.0 (was Update.2) to 9.1.0

Changed 6 years ago by cscott

See also #8629 for sj's reasons why this would be good.

Changed 6 years ago by cscott

  • cc mstone added

Consider the implications here wrt image security. olpc-update can alter files owned by root, and so can be used to gain root. This should only work with properly signed updates (use "fs signature"? or antitheft signature?) if you don't have a dev key.

Note: See TracTickets for help on using tickets.