Subject: [bug#70022] [PATCH v3 1/3] doc: Warn about foreign distro Guix packages' security.

From: Maxim Cournoyer <[email-masked]>
Date: Wed, 05 Jun 2024 20:59:40 -0400

Hi,

Florian Pelz <[email-masked]> writes:

> * doc/guix.texi (Binary Installation): Prefix installation instructions
> with a warning.
>
> Change-Id: I088c7f00f4c3c8e32bdfd117ea934942930f7513
> ---
>  doc/guix.texi | 7 +++++++
>  1 file changed, 7 insertions(+)
>
> diff --git a/doc/guix.texi b/doc/guix.texi
> index 5efbd00984..f6bbed1de3 100644
> --- a/doc/guix.texi
> +++ b/doc/guix.texi
> @@ -741,6 +741,13 @@ Binary Installation
>  may be older than @value{VERSION} but you can update it afterwards by
>  running @samp{guix pull}.
>  
> +In the past, lately, security vulnerabilities in @command{guix-daemon}

The s/lately, // ?  (removing that part, which seems unnecessary)

> +have been discovered and fixes for them have not yet been provided in

Perhaps, 's/have not yet been provided/have yet to be provided/

> +foreign distributions' packages.  We advise those who install Guix,

'in foreign distributions' (without 'packages') seems sufficient to me.

> +both from the installation script or by distro packages, to also

Perhaps, 'or via the native package manager of their foreign
distribution' ?

-- 
Thanks,
Maxim