|
From: | Tobias Geerinckx-Rice |
Subject: | [bug#59383] [PATCH] doc: Call out potential for downgrade attacks with time-machine. |
Date: | Sat, 19 Nov 2022 14:37:16 +0100 |
Hi Florian, and thanks for the patch. pelzflorian (Florian Pelz) 写道:
+@quotation Note+Naturally, no security fixes can be provided for old versions of Guix +or its channels. This also means that careless use of @command{guix+time-machine} opens the door to downgrade attacks. +@xref{Invoking guix pull, @option{--allow-downgrades}}. +@end quotation
‘Attack’ is a very big word. It should not end a paragraph. What would the downgrade attack—distinct from a downgrade—look like?
Kind regards, T G-R
signature.asc
Description: PGP signature
[Prev in Thread] | Current Thread | [Next in Thread] |