1 |
robbat2 08/10/28 07:45:27 |
2 |
|
3 |
Modified: glep-0058.txt |
4 |
Log: |
5 |
Fix references to other GLEPs in the series and headers. |
6 |
|
7 |
Revision Changes Path |
8 |
1.4 xml/htdocs/proj/en/glep/glep-0058.txt |
9 |
|
10 |
file : http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/proj/en/glep/glep-0058.txt?rev=1.4&view=markup |
11 |
plain: http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/proj/en/glep/glep-0058.txt?rev=1.4&content-type=text/plain |
12 |
diff : http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/proj/en/glep/glep-0058.txt?r1=1.3&r2=1.4 |
13 |
|
14 |
Index: glep-0058.txt |
15 |
=================================================================== |
16 |
RCS file: /var/cvsroot/gentoo/xml/htdocs/proj/en/glep/glep-0058.txt,v |
17 |
retrieving revision 1.3 |
18 |
retrieving revision 1.4 |
19 |
diff -p -w -b -B -u -u -r1.3 -r1.4 |
20 |
--- glep-0058.txt 22 Oct 2008 18:01:42 -0000 1.3 |
21 |
+++ glep-0058.txt 28 Oct 2008 07:45:27 -0000 1.4 |
22 |
@@ -1,15 +1,15 @@ |
23 |
GLEP: 58 |
24 |
Title: Security of distribution of Gentoo software - Infrastructure to User distribution - MetaManifest |
25 |
-Version: $Revision: 1.3 $ |
26 |
-Last-Modified: $Date: 2008/10/22 18:01:42 $ |
27 |
+Version: $Revision: 1.4 $ |
28 |
+Last-Modified: $Date: 2008/10/28 07:45:27 $ |
29 |
Author: Robin Hugh Johnson <robbat2@g.o>, |
30 |
Status: Draft |
31 |
Type: Standards Track |
32 |
Content-Type: text/x-rst |
33 |
-Requires: GLEP44, GLEP60 |
34 |
+Requires: 44, 60 |
35 |
Created: October 2006 |
36 |
Updated: November 2007, June 2008, July 2008, October 2008 |
37 |
-Post-History: ... |
38 |
+Post-History: |
39 |
|
40 |
======== |
41 |
Abstract |
42 |
@@ -90,10 +90,10 @@ Procedure for creating the MetaManifest |
43 |
packages, local |
44 |
2. If a directory contains a Manifest file, extract all relevant local |
45 |
files from it (presently: AUX, MISC, EBUILD; but should follow the |
46 |
- evolution of Manifest2 entry types per [GLEPxx+5]), and place them |
47 |
+ evolution of Manifest2 entry types per [#GLEP60]), and place them |
48 |
into the COVERED set. |
49 |
3. Recursively add every file in the directory to the ALL set, |
50 |
- pursusant to the exclusion list as mentioned in [GLEPxx+5]. |
51 |
+ pursusant to the exclusion list as mentioned in [#GLEP60]. |
52 |
|
53 |
4. Produce a new set, UNCOVERED, as the set-difference (ALL)-(COVERED). |
54 |
This is every item that is not covered by another Manifest, or part |
55 |
@@ -118,7 +118,7 @@ Procedure for creating the MetaManifest |
56 |
1. For the initial implementation, the same key as used for snapshot |
57 |
tarball signing is sufficient. |
58 |
2. For the future, the key used for fully automated signing by infra |
59 |
- should not be on the same keyring as developer keys. See [GLEPxx+3 |
60 |
+ should not be on the same keyring as developer keys. See [#GLEPxx+3 |
61 |
for further notes]. |
62 |
|
63 |
The above does not conflict the proposal contained in GLEP33, which |
64 |
@@ -152,10 +152,10 @@ Procedure for verifying an item in the M |
65 |
In the following, I've used term 'M2-verify' to note following the hash |
66 |
verification procedures as defined by the Manifest2 format - which |
67 |
compromise checking the file length, and that the hashes match. Which |
68 |
-filetypes may be ignored on missing is discussed in [GLEPxx+5]. |
69 |
+filetypes may be ignored on missing is discussed in [#GLEP60]. |
70 |
|
71 |
1. Check the GnuPG signature on the MetaManifest against the keyring of |
72 |
- automated Gentoo keys. See [GLEPxx+3] for full details regarding |
73 |
+ automated Gentoo keys. See [#GLEPxx+3] for full details regarding |
74 |
verification of GnuPG signatures. |
75 |
1. Abort if the signature check fails. |
76 |
|
77 |
@@ -211,7 +211,7 @@ users. |
78 |
-------------------------------------------- |
79 |
MetaManifest and the new Manifest2 filetypes |
80 |
-------------------------------------------- |
81 |
-While [GLEPxx+5] describes the addition of new filetypes, these are NOT |
82 |
+While [#GLEP60] describes the addition of new filetypes, these are NOT |
83 |
needed for implementation of the MetaManifest proposal. Without the new |
84 |
filetypes, all entries in the MetaManifest would be of type 'MISC'. |