unity-design team mailing list archive

[Paul Sladen <ubuntu@xxxxxxxxxxxxxxx>]

On Mon, 5 Sep 2011, Christian Rupp wrote:

Hello Christian,

> find a way in the middle. …checked ppas get an "easy to add link".

Indeed, at the moment any PPA can provide (and override) any package
in the system.  Separating out archives that can provide core system
infrastructure, from "leaf-node" PPAs providing add-on functionality
would probably enable much of what you're after.

This could be done with signing keys; large organisations (clusters,
universities, corporates) who still want to override core
functionality locally could just add their own trusted keys to the
Ubuntu-derived system images they give users.

	-Paul