An Implementation of the Linux Software Repository Model for other Operating Systems Neil McNab Anthony Bryan Appupdater Project Metalink Project
[email protected] [email protected] Abstract Installing the latest version of software is more critical Year after year, the frequency of updated releases of soft- than ever. There is a race between hackers and users to obtain ware continues to increase. Without an automated install software updates [Johansen 2008]. The availability of auto- process, the result is either that a system installs software mated exploit generation is increasing the frequency of zero with known defects and/or vulnerabilities, or systems require day exploits [Brumley 2008]. Time is critical in deploying new software versions. Mozilla Firefox 3.0.0 was released increased manual labor to maintain up-to-date software in- 1 stallations. Linux packages, in conjunction with repositories, in June 2008 . The current release in June 2009 was Firefox fill this need for automation to reduce both undesirable situa- 3.0.11. That is nearly a new security or bug fix release ev- tions. This model can be modified to a generic operating sys- ery month. Keeping up with this update pace on unmanaged tem environment, such as Windows, which currently lacks systems is extremely difficult, especially when considering the capability to update arbitrary software applications. Our other installed software requires updating as well. A pack- application, Appupdater, demonstrates this concept of de- age deployment tool is the best choice for this task [Jansen 2005]. To test this concept, we have implemented a program tecting, downloading, and installing upgrades automatically.