On 15/04/15 07:32 AM, Fabian Arrotin wrote:
OTOH, I (personally) think that vault is like giving a gun for people to shoot themselves in the foot : using deprecated/unpatched/unsecured/unmaintained packages on a distro is not what I'd consider best practice. There are a *few* corner cases where it can be handy, but those are already mirroring internally those versions, for specific usage, and don't rely on vault.centos.org
Primary goal for us is preserving for archival and forensic purposes. Every now and again people have a need to compare pristine binaries with those that came from a compromised system -- in which case having something like vault.centos.org is invaluable.
-Konstantin