The (tlmgr) options ... have been superseded by verify-repo

[Norbert Preining]

Hi 

> Yes, right. But apologies, it actually came from my TL2017 config,

Umpf, yeah indeed, 2018 we didn't do anything there ;-)

> I understand, but imagine some malicious person placed that
> config, imagine that I don't have access rights to 2019/texmf-config/tlmgr
> as is default if installation was done by an sudo user with admin
> rights and perhaps I have no admin rights.

Well, the one who installs TL can put files into
2019/texmf-config/tlmgr, but could also change pdflatex to a shell
script that does rm -rf $HOME ... ;-)

Best

Norbert

--
PREINING Norbert                               http://www.preining.info
Accelia Inc.     +    JAIST     +    TeX Live     +    Debian Developer
GPG: 0x860CDC13   fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13