The other day I had a closer look at the zypper logs (well, I was digging for a time-history of installed packages). First … damn does zypper produce a lot of logs on a " productive" (or rather on a maintained - as in up-to-date) system.

But glazing over the logs, I found out something new about zypper. It actually has an internal list, which only purpose is to identify a trusted vendor …

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

[zypp::VendorAttr] VendorAttr.cc(VendorAttr):128 Trusted Vendors: {
[zypp::VendorAttr] VendorAttr.cc(VendorAttr):128   ati technologies inc.
[zypp::VendorAttr] VendorAttr.cc(VendorAttr):128   jpackage project
[zypp::VendorAttr] VendorAttr.cc(VendorAttr):128   novell
[zypp::VendorAttr] VendorAttr.cc(VendorAttr):128   nvidia
[zypp::VendorAttr] VendorAttr.cc(VendorAttr):128   opensuse
[zypp::VendorAttr] VendorAttr.cc(VendorAttr):128   sgi
[zypp::VendorAttr] VendorAttr.cc(VendorAttr):128   silicon graphics
[zypp::VendorAttr] VendorAttr.cc(VendorAttr):128   suse
[zypp::VendorAttr] VendorAttr.cc(VendorAttr):128 }

As you can see from the log, the list of trusted vendors is:

  • ati technologies inc.
  • jpackage project
  • novell
  • nvidia
  • opensuse
  • sgi
  • silicon graphics
  • suse