K 10
svn:author
V 5
dougb
K 8
svn:date
V 27
2011-02-08T04:48:53.844890Z
K 7
svn:log
V 732
Tweak the way INDEX files are downloaded and installed to be only
require root privileges for the minimum possible number of actions,
and do things in a more secure way:
1. If necessary to download the new INDEX.bz2, as a non-root user, do
it in a temporary directory created with mktemp
2. If necessary to update the actual INDEX file unzip it in that same
temporary directory
3. Only use $PM_SU_CMD to install the file if necessary
4. Unlink both INDEX and INDEX.bz2 in their real locations before
installing the new versions

Use unset for a lot more variables in the above code.

Add the -p flag for install to pm_install_s

Move the initialization of PM_WRKDIRPREFIX to the area where other
build-related variables are handled

END