Bug 1296938
| Summary: | [RFE] dnf read only history for non-root users | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Ed Avis <eda> |
| Component: | dnf | Assignee: | rpm-software-management |
| Status: | CLOSED NOTABUG | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | low | ||
| Version: | 23 | CC: | jsilhan, mluscon, packaging-team-maint, pnemade, vmukhame |
| Target Milestone: | --- | Keywords: | FutureFeature, Triaged |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2016-11-30 10:03:47 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
It's a valid point. This package has changed ownership in the Fedora Package Database. Reassigning to the new owner of this component. This message is a reminder that Fedora 23 is nearing its end of life. Approximately 4 (four) weeks from now Fedora will stop maintaining and issuing updates for Fedora 23. It is Fedora's policy to close all bug reports from releases that are no longer maintained. At that time this bug will be closed as EOL if it remains open with a Fedora 'version' of '23'. Package Maintainer: If you wish for this bug to remain open because you plan to fix it in a currently maintained version, simply change the 'version' to a later Fedora version. Thank you for reporting this issue and we are sorry that we were not able to fix it before Fedora 23 is end of life. If you would still like to see this bug fixed and are able to reproduce it against a later version of Fedora, you are encouraged change the 'version' to a later Fedora version prior this bug is closed as described in the policy above. Although we aim to fix as many bugs as possible during every release's lifetime, sometimes those efforts are overtaken by events. Often a more recent Fedora release includes newer upstream software that fixes bugs or makes them obsolete. There might be security issues when it's readable by user. History used to be readable in yum but security team requested to change that. |
'dnf history' does not work as non-root, not even for read-only history queries. I understand that on many systems it may be a policy decision not to allow non-root to view the history of package updates, and this bug is not necessarily a request to change that default. And yet, the underlying rpm database is available for read-only access to ordinary users; and requiring a read-only report of package changes to run as root ends up expanding the number of things that require root access, which may end up weakening rather than strengthening security. Please add a documented way to allow read-only history operations ('dnf history list', 'dnf history info') to be run by non-root users.