4 ms·
There's a clean way to disable updates in the refresh.hold option, no? Or are you missing a feature like apt's pinning where you can exclude single packages fro
by fulafel 5y ago
There's a clean way to disable updates in the refresh.hold option, no? Or are you missing a feature like apt's pinning where you can exclude single packages from getting updated, but otherwise keep using the "update all packages" functionality? I think that's a rare enough use case that users can be reasonably burdened to use a non snap version of that app.
I agree with the "mystery meat" criticism though, especially for Firefox they should make the packaging process transparent.
- no_time 5y agorefresh.hold has an upper limit of 90 days, which is ridiculous...
- fulafel 5y agoKeeping your snaps including the browser > 90 days behind in security patches seems like a really bad idea. It's better you have to actively postpone it periodically, having weighed the vulnerabilities publicized & fixed vs whatever your motivation to holding the update, rather than have a fail-open type of configuration that you can forget in the "not updating" state. Firefox fixes and makes public a RCE vulnerability quite frequently, more than once a month on average. Also, if you want to have a more leisurely pace of browser functionality changes, you can also choose Firefox ESR that still receives timely security fixes.