Gentoo Archives: gentoo-dev

From: Paul de Vrieze <pauldv@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] 2004.1 will not include a secure portage.
Date: Thu, 25 Mar 2004 11:59:32
Message-Id: 200403251259.29280.pauldv@gentoo.org
In Reply to: Re: [gentoo-dev] 2004.1 will not include a secure portage. by Toby Dickenson
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA1
3
4 On Thursday 25 March 2004 11:00, Toby Dickenson wrote:
5 > On Thursday 25 March 2004 09:39, Paul de Vrieze wrote:
6 > > Especially as we don't
7 > > want to limit who may commit where.
8 >
9 > Short term, of course thats true. Long term, surely this is a critical
10 > part of managing an increasingly large number of developers by
11 > controlling the scope of damage that can be caused by compromise of
12 > *one* key / or one rogue developer.
13 >
14 > > In some cases it is actually
15 > > essential that certain parties (managers) perform fast commits on a
16 > > package they are not normally involved with.
17 >
18 > certain parties, sure. do all developers need this?
19
20 For certain parties would allready require a circumvention mechanism. As
21 you don't maintain a central list this would be troublesome and make
22 your proposal much more complicated than needed.
23
24 Paul
25
26 - --
27 Paul de Vrieze
28 Gentoo Developer
29 Mail: pauldv@g.o
30 Homepage: http://www.devrieze.net
31 -----BEGIN PGP SIGNATURE-----
32 Version: GnuPG v1.2.4 (GNU/Linux)
33
34 iD8DBQFAYsmgbKx5DBjWFdsRAqacAJsEtfW09gvjP/1Xrz9Kgm2p6rvRgQCgv1Nv
35 2injDOrud7HnLxo1MCvg3kM=
36 =FQGj
37 -----END PGP SIGNATURE-----
38
39 --
40 gentoo-dev@g.o mailing list