Gentoo Logo
Gentoo Spaceship




Note: Due to technical difficulties, the Archives are currently not up to date. GMANE provides an alternative service for most mailing lists.
c.f. bug 424647
List Archive: gentoo-scm
Navigation:
Lists: gentoo-scm: < Prev By Thread Next > < Prev By Date Next >
Headers:
To: gentoo-scm@g.o
From: Robert Buchholz <rbu@g.o>
Subject: Re: gentoo-x86 on git - Manifests
Date: Thu, 19 Feb 2009 10:47:33 +0100
On Thursday 19 February 2009, Robin H. Johnson wrote:
> On Wed, Feb 18, 2009 at 11:27:41PM +0100, Robert Buchholz wrote:
> > It'll also ease attacks on distfiles when first mirroring them.
>
> Umm, no, you missed part of what I said. I noted that the newer
> Manifests in Git would contain the hashes for ONLY the distfiles, not
> for other files. Distfiles suffer zero reduction in security.
> The master box is NEVER generating the hash for a distfile.

True, you made a different point. My argument was intended to address 
the proposal (at least as far as I understood it) in the previous mail 
(see cut below).
But it's a good thing we agree having DIST Manifest inside the 
repository is a vital feature!

------------------------------------------------------------------------
On Wednesday 18 February 2009, Donnie Berkholz wrote:
> On 08:05 Mon 16 Feb     , Maciej Mrozowski wrote:
> > Hence the question - is it possible to *not* store and .gitignore
> > Manifests is git controlled portage repository?
> > As portage metadata is regenerated, maybe it would be as well
> > possible to regenerate manifests on server?
> > I guess it would be possible but ineffective as it would require
> > all needed distfiles to be present as well and this is
> > unacceptable.
>
> Well, if you did the generation on the master mirror, this would be
> fine for the main tree. How about overlays, though?
------------------------------------------------------------------------


> > hash and (2) only one box would need to be attacked via
> > man-in-the-middle, whereas it is currently two.
>
> Your count of needing to attack two boxes presently is wrong. Just
> pick some community rsyncNN.CC.gentoo.org that also hosts distfiles
> via HTTP/FTP, and attack that box, replacing both a Manifest and the
> distfile.

The rsync attack can be avoided by using the signed tree tarballs.
The DIST hash attack can't.


Robert
Attachment:
signature.asc (This is a digitally signed message part.)
Replies:
Re: gentoo-x86 on git - Manifests
-- Robin H. Johnson
References:
gentoo-x86 on git - Manifests
-- Maciej Mrozowski
Re: gentoo-x86 on git - Manifests
-- Robert Buchholz
Re: gentoo-x86 on git - Manifests
-- Robin H. Johnson
Navigation:
Lists: gentoo-scm: < Prev By Thread Next > < Prev By Date Next >
Previous by thread:
Re: gentoo-x86 on git - Manifests
Next by thread:
Re: gentoo-x86 on git - Manifests
Previous by date:
Re: gentoo-x86 on git - Manifests
Next by date:
Re: gentoo-x86 on git - Manifests


Updated Jun 17, 2009

Summary: Archive of the gentoo-scm mailing list.

Donate to support our development efforts.

Copyright 2001-2013 Gentoo Foundation, Inc. Questions, Comments? Contact us.