[Rpm-maint] Feature request: Improved speed for 'rpm -qa'
Bill Nottingham
notting at redhat.com
Tue Dec 19 22:58:10 UTC 2006
James Olin Oden (james.oden at gmail.com) said:
> I always thought that it was enough to check the header at install
> time when it was being inserted into the DB, but now I can see why one
> might want to do this check even on queries, as a query is often used
> as input into some larger process. The person running the "process"
> may have all authority to do what they are going to do based on the
> inputs from the rpm DB, and have no malicious intent, but rogue data
> may make them do something they would not have otherwise done.
But access control to the database itself would seem to be better
done at a higher level, such as a SELinux policy, or even plain
old ACLs and permissions, rather than expensive checks on every
database access.
Bill
More information about the Rpm-maint
mailing list