Private fixes from Microsoft released to different customers could also break you since they may be distributed by those customers without your knowing about them (since they are not distributed or announced generally).
-----Original Message----- From: Sascha Beaumont [mailto:sascha.beaum...@gmail.com] Sent: Monday, February 15, 2010 7:41 PM To: General discussion for Windows Installer XML toolset. Subject: Re: [WiX-users] Microsoft merge modules and policy modules, what to include? Thanks Blair, So you're basically saying a 3rd party software update that includes an updated module from MS could break something? If so, then that only sounds like a problem if we have a long lead time between releases/updates or aren't keeping the dev/build/test machines up to date with the latest windows updates. Cheers, Sascha On Tue, Feb 16, 2010 at 1:43 PM, Blair <os...@live.com> wrote: > I forget where it is documented, but here is what happens: > > If you include the policy module(s), then anyone can install a replacement > runtime that claims to be backward compatible with the one you > install/tested against and your program will start using that "newer" one > instead of the one you tested with. Makes it easier for future installations > to "break" your setup (remember DLL-hell, anyone?). > > If you don't include the policy module(s), and you take last year's ATL > security update, and the runtime doesn't get updated somewhere in your > build/delivery system, you break as well. > > Personally I have found that the risks associated with shipping the policy > modules were less than the troubles caused by not shipping it, but others > beg to differ. It is a decision you need to make in consultation with your > QA team, realizing that if you take the policy modules you risk support > costs or even security issues you will have zero control over in the future. > Most QA people I know would argue against the policy modules given that > information. > > -----Original Message----- > From: Sascha Beaumont [mailto:sascha.beaum...@gmail.com] > Sent: Monday, February 15, 2010 2:42 PM > To: General discussion for Windows Installer XML toolset. > Subject: [WiX-users] Microsoft merge modules and policy modules, what to > include? > > Hi, > > Looking over > http://blogs.msdn.com/astebner/archive/2007/02/13/building-an-msi-using-wix- > v3-0-that-includes-the-vc-8-0-runtime-merge-modules.aspx > I see the following note: > > <update date="2/11/2009"> Removed references to policy MSMs because > the general recommendation is to not include policy MSMs when > redistributing the VC runtime files. </update> > > We're distributing policy modules with our application (full module > list below) - can anyone point me in the right direction as to where > this "general recommendation" is documented? Or what problems > including or excluding the policy modules may cause or solve? > > As a side note, can anyone confirm if any of the modules I'm including > below are not required on particular operating systems? Specifically > the last four which showed up during a dependency scan on a 3rd party > library we use. We support Windows 2000/XP and later and from peeking > inside the modules I can tell that GDIPlus is not installed on > anything later than Windows 2000 but the others seem to have no such > conditions. > > GDIPlus.msm > VC_User_CRT71_RTL_X86_---.msm > Microsoft_VC80_CRT_x86.msm > policy_8_0_Microsoft_VC80_CRT_x86.msm > Microsoft_VC80_MFC_x86.msm > policy_8_0_Microsoft_VC80_MFC_x86.msm > MSVCRT.MSM > COMCAT.MSM > MFC42.MSM > MSVCIRT.MSM > > > Cheers, > Sascha > > ---------------------------------------------------------------------------- > -- > SOLARIS 10 is the OS for Data Centers - provides features such as DTrace, > Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW > http://p.sf.net/sfu/solaris-dev2dev > _______________________________________________ > WiX-users mailing list > WiX-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/wix-users > > > ---------------------------------------------------------------------------- -- > SOLARIS 10 is the OS for Data Centers - provides features such as DTrace, > Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW > http://p.sf.net/sfu/solaris-dev2dev > _______________________________________________ > WiX-users mailing list > WiX-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/wix-users > ---------------------------------------------------------------------------- -- SOLARIS 10 is the OS for Data Centers - provides features such as DTrace, Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW http://p.sf.net/sfu/solaris-dev2dev _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users ------------------------------------------------------------------------------ SOLARIS 10 is the OS for Data Centers - provides features such as DTrace, Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW http://p.sf.net/sfu/solaris-dev2dev _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
