[gentoo-commits] gentoo commit in xml/htdocs/proj/en/glep: glep-0057.html glep-0058.html glep-0059.html glep-0060.html glep-0061.html

[Robin H. Johnson (robbat2)]

robbat2     08/10/28 07:47:53

  Modified:             glep-0057.html glep-0059.html glep-0060.html
                        glep-0061.html
  Added:                glep-0058.html
  Log:
  Regen HTML.

Revision  Changes    Path
1.3                  xml/htdocs/proj/en/glep/glep-0057.html

file : http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/proj/en/glep/glep-0057.html?rev=1.3&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/proj/en/glep/glep-0057.html?rev=1.3&content-type=text/plain
diff : http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/proj/en/glep/glep-0057.html?r1=1.2&r2=1.3

Index: glep-0057.html
===================================================================
RCS file: /var/cvsroot/gentoo/xml/htdocs/proj/en/glep/glep-0057.html,v
retrieving revision 1.2
retrieving revision 1.3
diff -p -w -b -B -u -u -r1.2 -r1.3
--- glep-0057.html	22 Oct 2008 18:03:40 -0000	1.2
+++ glep-0057.html	28 Oct 2008 07:47:52 -0000	1.3
@@ -27,9 +27,9 @@
 </tr>
 <tr class="field"><th class="field-name">Title:</th><td class="field-body">Security of distribution of Gentoo software - Overview</td>
 </tr>
-<tr class="field"><th class="field-name">Version:</th><td class="field-body">1.1</td>
+<tr class="field"><th class="field-name">Version:</th><td class="field-body">1.2</td>
 </tr>
-<tr class="field"><th class="field-name">Last-Modified:</th><td class="field-body"><a class="reference external" href="http://www.gentoo.org/cgi-bin/viewcvs.cgi/xml/htdocs/proj/en/glep/glep-0057.txt?cvsroot=gentoo">2008/10/21 23:30:47</a></td>
+<tr class="field"><th class="field-name">Last-Modified:</th><td class="field-body"><a class="reference external" href="http://www.gentoo.org/cgi-bin/viewcvs.cgi/xml/htdocs/proj/en/glep/glep-0057.txt?cvsroot=gentoo">2008/10/28 07:45:07</a></td>
 </tr>
 <tr class="field"><th class="field-name">Author:</th><td class="field-body">Robin Hugh Johnson &lt;robbat2&#32;&#97;t&#32;gentoo.org&gt;</td>
 </tr>
@@ -43,6 +43,8 @@
 </tr>
 <tr class="field"><th class="field-name">Updated:</th><td class="field-body">May 2006, October 2006, Novemeber 2007, June 2008, July 2008, October 2008</td>
 </tr>
+<tr class="field"><th class="field-name">Post-History:</th><td class="field-body"></td>
+</tr>
 </tbody>
 </table>
 <hr />
@@ -165,10 +167,10 @@ Infrastructure.</li>
 mirrors (this includes both HTTP and rsync distribution).</li>
 </ul>
 </blockquote>
-<p>Both processes need their security improved. In [GLEPxx+2] we will discuss
+<p>Both processes need their security improved. In [#GLEPxx+2] we will discuss
 how to improve the security of the first process. The relatively
 speaking simpler process of file distribution will be described in
-[GLEPxx+1]. Since it can be implemented without having to change the
+[#GLEP58]. Since it can be implemented without having to change the
 workflow and behaviour of developers we hope to get it done in a
 reasonably short timeframe.</p>
 </div>
@@ -207,7 +209,7 @@ modifications to our development process
 fully authorized to provide materials for distribution. Partial
 protection can be gained by Portage and Infrastructure changes, but the
 real improvements needed are developer education and continued
-vigilance. This is further discussed in [GLEPxx+2].</p>
+vigilance. This is further discussed in [#GLEPxx+2].</p>
 <p>This security is still limited in scope - protection against compromised
 developers is very expensive, and even complex systems like peer review
 / multiple signatures can be broken by colluding developers. There are many
@@ -220,7 +222,7 @@ cannot be complete (as the User may be a
 that Gentoo infrastructure and the mirrors are not a weak point. This
 objective is actually much closer than it seems already - most of the
 work has been completed for other things!. This is further discussed in
-[GLEP58]. As this process has the most to gain in security, and the
+[#GLEP58]. As this process has the most to gain in security, and the
 most immediate impact, it should be implemented before or at the same
 time as any changes to process #1. Security at this layer is already
 available in the signed daily snapshots, but we can extend it to cover
@@ -378,7 +380,7 @@ Open Publication License, v1.0.</p>
 <div class="footer">
 <hr class="footer" />
 <a class="reference external" href="glep-0057.txt">View document source</a>.
-Generated on: 2008-10-22 18:02 UTC.
+Generated on: 2008-10-28 07:47 UTC.
 Generated by <a class="reference external" href="http://docutils.sourceforge.net/">Docutils</a> from <a class="reference external" href="http://docutils.sourceforge.net/rst.html">reStructuredText</a> source.
 
 </div>



1.3                  xml/htdocs/proj/en/glep/glep-0059.html

file : http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/proj/en/glep/glep-0059.html?rev=1.3&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/proj/en/glep/glep-0059.html?rev=1.3&content-type=text/plain
diff : http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/proj/en/glep/glep-0059.html?r1=1.2&r2=1.3

Index: glep-0059.html
===================================================================
RCS file: /var/cvsroot/gentoo/xml/htdocs/proj/en/glep/glep-0059.html,v
retrieving revision 1.2
retrieving revision 1.3
diff -p -w -b -B -u -u -r1.2 -r1.3
--- glep-0059.html	22 Oct 2008 18:03:40 -0000	1.2
+++ glep-0059.html	28 Oct 2008 07:47:52 -0000	1.3
@@ -27,9 +27,9 @@
 </tr>
 <tr class="field"><th class="field-name">Title:</th><td class="field-body">Manifest2 hash policies and security implications</td>
 </tr>
-<tr class="field"><th class="field-name">Version:</th><td class="field-body">1.2</td>
+<tr class="field"><th class="field-name">Version:</th><td class="field-body">1.3</td>
 </tr>
-<tr class="field"><th class="field-name">Last-Modified:</th><td class="field-body"><a class="reference external" href="http://www.gentoo.org/cgi-bin/viewcvs.cgi/xml/htdocs/proj/en/glep/glep-0059.txt?cvsroot=gentoo">2008/10/22 17:59:43</a></td>
+<tr class="field"><th class="field-name">Last-Modified:</th><td class="field-body"><a class="reference external" href="http://www.gentoo.org/cgi-bin/viewcvs.cgi/xml/htdocs/proj/en/glep/glep-0059.txt?cvsroot=gentoo">2008/10/28 07:45:44</a></td>
 </tr>
 <tr class="field"><th class="field-name">Author:</th><td class="field-body">Robin Hugh Johnson &lt;robbat2&#32;&#97;t&#32;gentoo.org&gt;,</td>
 </tr>
@@ -43,10 +43,12 @@
 </tr>
 <tr class="field"><th class="field-name">Created:</th><td class="field-body">October 2006</td>
 </tr>
-<tr class="field"><th class="field-name">Updated:</th><td class="field-body">November 2007, June 2008, July 2008</td>
+<tr class="field"><th class="field-name">Updated:</th><td class="field-body">November 2007, June 2008, July 2008, October 2008</td>
 </tr>
 <tr class="field"><th class="field-name">Updates:</th><td class="field-body">44</td>
 </tr>
+<tr class="field"><th class="field-name">Post-History:</th><td class="field-body"></td>
+</tr>
 </tbody>
 </table>
 <hr />
@@ -236,7 +238,7 @@ Open Publication License, v1.0.</p>
 <div class="footer">
 <hr class="footer" />
 <a class="reference external" href="glep-0059.txt">View document source</a>.
-Generated on: 2008-10-22 18:02 UTC.
+Generated on: 2008-10-28 07:47 UTC.
 Generated by <a class="reference external" href="http://docutils.sourceforge.net/">Docutils</a> from <a class="reference external" href="http://docutils.sourceforge.net/rst.html">reStructuredText</a> source.
 
 </div>



1.3                  xml/htdocs/proj/en/glep/glep-0060.html

file : http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/proj/en/glep/glep-0060.html?rev=1.3&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/proj/en/glep/glep-0060.html?rev=1.3&content-type=text/plain
diff : http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/proj/en/glep/glep-0060.html?r1=1.2&r2=1.3

Index: glep-0060.html
===================================================================
RCS file: /var/cvsroot/gentoo/xml/htdocs/proj/en/glep/glep-0060.html,v
retrieving revision 1.2
retrieving revision 1.3
diff -p -w -b -B -u -u -r1.2 -r1.3
--- glep-0060.html	22 Oct 2008 18:03:40 -0000	1.2
+++ glep-0060.html	28 Oct 2008 07:47:52 -0000	1.3
@@ -27,9 +27,9 @@
 </tr>
 <tr class="field"><th class="field-name">Title:</th><td class="field-body">Manifest2 filetypes</td>
 </tr>
-<tr class="field"><th class="field-name">Version:</th><td class="field-body">1.2</td>
+<tr class="field"><th class="field-name">Version:</th><td class="field-body">1.3</td>
 </tr>
-<tr class="field"><th class="field-name">Last-Modified:</th><td class="field-body"><a class="reference external" href="http://www.gentoo.org/cgi-bin/viewcvs.cgi/xml/htdocs/proj/en/glep/glep-0060.txt?cvsroot=gentoo">2008/10/22 17:59:43</a></td>
+<tr class="field"><th class="field-name">Last-Modified:</th><td class="field-body"><a class="reference external" href="http://www.gentoo.org/cgi-bin/viewcvs.cgi/xml/htdocs/proj/en/glep/glep-0060.txt?cvsroot=gentoo">2008/10/28 07:46:51</a></td>
 </tr>
 <tr class="field"><th class="field-name">Author:</th><td class="field-body">Robin Hugh Johnson &lt;robbat2&#32;&#97;t&#32;gentoo.org&gt;</td>
 </tr>
@@ -43,91 +43,81 @@
 </tr>
 <tr class="field"><th class="field-name">Created:</th><td class="field-body">November 2007</td>
 </tr>
-<tr class="field"><th class="field-name">Updated:</th><td class="field-body">June 2008, July 2008</td>
+<tr class="field"><th class="field-name">Updated:</th><td class="field-body">June 2008, July 2008, October 2008</td>
 </tr>
 <tr class="field"><th class="field-name">Updates:</th><td class="field-body">44</td>
 </tr>
+<tr class="field"><th class="field-name">Post-History:</th><td class="field-body"></td>
+</tr>
 </tbody>
 </table>
 <hr />
 <div class="contents topic" id="contents">
 <p class="topic-title first">Contents</p>
 <ul class="simple">
-<li><a class="reference internal" href="#abstract" id="id16">Abstract</a></li>
-<li><a class="reference internal" href="#motivation" id="id17">Motivation</a></li>
-<li><a class="reference internal" href="#specification" id="id18">Specification</a><ul>
-<li><a class="reference internal" href="#general" id="id19">General</a></li>
-<li><a class="reference internal" href="#excluded-files" id="id20">Excluded files</a></li>
-<li><a class="reference internal" href="#existing-filetypes" id="id21">Existing filetypes:</a><ul>
-<li><a class="reference internal" href="#aux" id="id22">AUX</a></li>
-<li><a class="reference internal" href="#ebuild" id="id23">EBUILD</a></li>
-<li><a class="reference internal" href="#dist" id="id24">DIST</a></li>
-<li><a class="reference internal" href="#misc" id="id25">MISC</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#new-filetypes" id="id26">New filetypes:</a><ul>
-<li><a class="reference internal" href="#info-new-abstract" id="id27">_INFO (new, abstract)</a></li>
-<li><a class="reference internal" href="#crit-new-abstract" id="id28">_CRIT (new, abstract)</a></li>
-<li><a class="reference internal" href="#id9" id="id29">EBUILD</a></li>
-<li><a class="reference internal" href="#id10" id="id30">DIST</a></li>
-<li><a class="reference internal" href="#id11" id="id31">MISC</a></li>
-<li><a class="reference internal" href="#manifest-new" id="id32">MANIFEST (new)</a></li>
-<li><a class="reference internal" href="#eclass-new" id="id33">ECLASS (new)</a></li>
-<li><a class="reference internal" href="#data-new" id="id34">DATA (new)</a></li>
-<li><a class="reference internal" href="#exec-new" id="id35">EXEC (new)</a></li>
-<li><a class="reference internal" href="#unknown-new" id="id36">UNKNOWN (new)</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#on-bloat" id="id37">On Bloat</a></li>
-<li><a class="reference internal" href="#chosing-a-filetype" id="id38">Chosing a filetype</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#backwards-compatibility" id="id39">Backwards Compatibility</a></li>
-<li><a class="reference internal" href="#thanks-to" id="id40">Thanks to</a></li>
-<li><a class="reference internal" href="#references" id="id41">References</a></li>
-<li><a class="reference internal" href="#copyright" id="id42">Copyright</a></li>
+<li><a class="reference internal" href="#abstract" id="id4">Abstract</a></li>
+<li><a class="reference internal" href="#motivation" id="id5">Motivation</a></li>
+<li><a class="reference internal" href="#specification" id="id6">Specification</a><ul>
+<li><a class="reference internal" href="#general" id="id7">General</a></li>
+<li><a class="reference internal" href="#excluded-files" id="id8">Excluded files</a></li>
+<li><a class="reference internal" href="#existing-filetypes" id="id9">Existing filetypes:</a><ul>
+<li><a class="reference internal" href="#aux" id="id10">AUX</a></li>
+<li><a class="reference internal" href="#ebuild" id="id11">EBUILD</a></li>
+<li><a class="reference internal" href="#dist" id="id12">DIST</a></li>
+<li><a class="reference internal" href="#misc" id="id13">MISC</a></li>
+</ul>
+</li>
+<li><a class="reference internal" href="#new-filetypes" id="id14">New filetypes:</a><ul>
+<li><a class="reference internal" href="#info-new-abstract" id="id15">_INFO (new, abstract)</a></li>
+<li><a class="reference internal" href="#crit-new-abstract" id="id16">_CRIT (new, abstract)</a></li>
+<li><a class="reference internal" href="#id1" id="id17">EBUILD</a></li>
+<li><a class="reference internal" href="#id2" id="id18">DIST</a></li>
+<li><a class="reference internal" href="#id3" id="id19">MISC</a></li>
+<li><a class="reference internal" href="#manifest-new" id="id20">MANIFEST (new)</a></li>
+<li><a class="reference internal" href="#eclass-new" id="id21">ECLASS (new)</a></li>
+<li><a class="reference internal" href="#data-new" id="id22">DATA (new)</a></li>
+<li><a class="reference internal" href="#exec-new" id="id23">EXEC (new)</a></li>
+<li><a class="reference internal" href="#unknown-new" id="id24">UNKNOWN (new)</a></li>
+</ul>
+</li>
+<li><a class="reference internal" href="#on-bloat" id="id25">On Bloat</a></li>
+<li><a class="reference internal" href="#chosing-a-filetype" id="id26">Chosing a filetype</a></li>
+</ul>
+</li>
+<li><a class="reference internal" href="#backwards-compatibility" id="id27">Backwards Compatibility</a></li>
+<li><a class="reference internal" href="#thanks-to" id="id28">Thanks to</a></li>
+<li><a class="reference internal" href="#references" id="id29">References</a></li>
+<li><a class="reference internal" href="#copyright" id="id30">Copyright</a></li>
 </ul>
 </div>
 <div class="section" id="abstract">
-<h1><a class="toc-backref" href="#id16">Abstract</a></h1>
-<p>Clarification of the Manifest2 [GLEP44] specification, including new types to
+<h1><a class="toc-backref" href="#id4">Abstract</a></h1>
+<p>Clarification of the Manifest2 [#GLEP44] specification, including new types to
 help in the tree-signing specification.</p>
 </div>
 <div class="section" id="motivation">
-<h1><a class="toc-backref" href="#id17">Motivation</a></h1>
-<p>[GLEP44] was not entirely clear on the usage of filetype specifiers.
+<h1><a class="toc-backref" href="#id5">Motivation</a></h1>
+<p>[#GLEP44] was not entirely clear on the usage of filetype specifiers.
 This document serves to provide some of the internal logic used by
 Portage at the point of writing, as well as adding new types to cover
 the rest of the tree, for the purposes of tree-signing coverage.</p>
 </div>
 <div class="section" id="specification">
-<h1><a class="toc-backref" href="#id18">Specification</a></h1>
+<h1><a class="toc-backref" href="#id6">Specification</a></h1>
 <div class="section" id="general">
-<h2><a class="toc-backref" href="#id19">General</a></h2>
+<h2><a class="toc-backref" href="#id7">General</a></h2>
 <p>For any given directory with a Manifest file, every file located in that
 directory, or a sub-directory must be listed in that Manifest file,
 unless stated otherwise in the following sections. The Manifest file
 must not contain an entry for itself.</p>
 </div>
 <div class="section" id="excluded-files">
-<h2><a class="toc-backref" href="#id20">Excluded files</a></h2>
+<h2><a class="toc-backref" href="#id8">Excluded files</a></h2>
 <p>When generating or validating a Manifest, or commiting to a version
 control system, the package manager should endeavour to ignore files
 created by a version control system, backup files from text editors. A
-non-exhaustive list is suggested here: CVS/, .svn/, .bzr/, .git/, .hg/,
-.#*, <a href="#id1"><span class="problematic" id="id2">*</span></a>.rej, <a href="#id3"><span class="problematic" id="id4">*</span></a>.orig, <a href="#id5"><span class="problematic" id="id6">*</span></a>.bak, <a href="#id7"><span class="problematic" id="id8">*</span></a>~.</p>
-<div class="system-message" id="id1">
-<p class="system-message-title">System Message: WARNING/2 (<tt class="docutils">glep-0060.txt</tt>, line 37); <em><a href="#id2">backlink</a></em></p>
-Inline emphasis start-string without end-string.</div>
-<div class="system-message" id="id3">
-<p class="system-message-title">System Message: WARNING/2 (<tt class="docutils">glep-0060.txt</tt>, line 37); <em><a href="#id4">backlink</a></em></p>
-Inline emphasis start-string without end-string.</div>
-<div class="system-message" id="id5">
-<p class="system-message-title">System Message: WARNING/2 (<tt class="docutils">glep-0060.txt</tt>, line 37); <em><a href="#id6">backlink</a></em></p>
-Inline emphasis start-string without end-string.</div>
-<div class="system-message" id="id7">
-<p class="system-message-title">System Message: WARNING/2 (<tt class="docutils">glep-0060.txt</tt>, line 37); <em><a href="#id8">backlink</a></em></p>
-Inline emphasis start-string without end-string.</div>
+non-exhaustive list is suggested here: <tt class="docutils literal"><span class="pre">CVS/</span></tt>, <tt class="docutils literal"><span class="pre">.svn/</span></tt>, <tt class="docutils literal"><span class="pre">.bzr/</span></tt>,
+<tt class="docutils literal"><span class="pre">.git/</span></tt>, <tt class="docutils literal"><span class="pre">.hg/</span></tt>, <tt class="docutils literal"><span class="pre">.#*</span></tt>, <tt class="docutils literal"><span class="pre">*.rej</span></tt>, <tt class="docutils literal"><span class="pre">*.orig</span></tt>, <tt class="docutils literal"><span class="pre">*.bak</span></tt>, <tt class="docutils literal"><span class="pre">*~</span></tt>.</p>
 <p>Additionally, for a transitional Manifest1-&gt;Manifest2 system, old-style
 digest files located in a 'files/' directory, may be excluded from
 Manifest2 generation, or included with a type of MISC.</p>
@@ -136,9 +126,9 @@ during validation if the existence of a 
 security risk.</p>
 </div>
 <div class="section" id="existing-filetypes">
-<h2><a class="toc-backref" href="#id21">Existing filetypes:</a></h2>
+<h2><a class="toc-backref" href="#id9">Existing filetypes:</a></h2>
 <div class="section" id="aux">
-<h3><a class="toc-backref" href="#id22">AUX</a></h3>
+<h3><a class="toc-backref" href="#id10">AUX</a></h3>
 <ul class="simple">
 <li>The AUX type is used for all items under the 'files' subdirectory.</li>
 <li>They should be verified relative to $FILESDIR.</li>
@@ -150,7 +140,7 @@ modified or absent.</li>
 </ul>
 </div>
 <div class="section" id="ebuild">
-<h3><a class="toc-backref" href="#id23">EBUILD</a></h3>
+<h3><a class="toc-backref" href="#id11">EBUILD</a></h3>
 <ul class="simple">
 <li>The EBUILD type is used solely for files ending in .ebuild, or other
 suffixes as defined by the EAPI.</li>
@@ -160,7 +150,7 @@ treated as an error.</li>
 </ul>
 </div>
 <div class="section" id="dist">
-<h3><a class="toc-backref" href="#id24">DIST</a></h3>
+<h3><a class="toc-backref" href="#id12">DIST</a></h3>
 <ul class="simple">
 <li>The DIST type is used for distfiles</li>
 <li>They may be found directly via the $DISTDIR setting of the package
@@ -171,7 +161,7 @@ fetch or unpack).</li>
 </ul>
 </div>
 <div class="section" id="misc">
-<h3><a class="toc-backref" href="#id25">MISC</a></h3>
+<h3><a class="toc-backref" href="#id13">MISC</a></h3>
 <ul class="simple">
 <li>The MISC type covers all remaining files in a directory.</li>
 <li>MISC is intended to mark all content that was not used in
@@ -186,9 +176,9 @@ been deleted from the tree.</li>
 </div>
 </div>
 <div class="section" id="new-filetypes">
-<h2><a class="toc-backref" href="#id26">New filetypes:</a></h2>
+<h2><a class="toc-backref" href="#id14">New filetypes:</a></h2>
 <div class="section" id="info-new-abstract">
-<h3><a class="toc-backref" href="#id27">_INFO (new, abstract)</a></h3>
+<h3><a class="toc-backref" href="#id15">_INFO (new, abstract)</a></h3>
 <ul class="simple">
 <li>This is the functionality of the old AUX, but does not include the
 implicit 'files/' prefix in the path, and is verified relative to the
@@ -198,36 +188,36 @@ is not an error unless the package manag
 </ul>
 </div>
 <div class="section" id="crit-new-abstract">
-<h3><a class="toc-backref" href="#id28">_CRIT (new, abstract)</a></h3>
+<h3><a class="toc-backref" href="#id16">_CRIT (new, abstract)</a></h3>
 <ul class="simple">
 <li>_CRIT is based off the _INFO type.</li>
 <li>The modification or absence of a file listed as a _CRIT-derived type
 must be treated as an error.</li>
 </ul>
 </div>
-<div class="section" id="id9">
-<h3><a class="toc-backref" href="#id29">EBUILD</a></h3>
+<div class="section" id="id1">
+<h3><a class="toc-backref" href="#id17">EBUILD</a></h3>
 <ul class="simple">
 <li>Now derived from _CRIT.</li>
 <li>Otherwise unchanged.</li>
 </ul>
 </div>
-<div class="section" id="id10">
-<h3><a class="toc-backref" href="#id30">DIST</a></h3>
+<div class="section" id="id2">
+<h3><a class="toc-backref" href="#id18">DIST</a></h3>
 <ul class="simple">
 <li>Now derived from _CRIT.</li>
 <li>Otherwise unchanged.</li>
 </ul>
 </div>
-<div class="section" id="id11">
-<h3><a class="toc-backref" href="#id31">MISC</a></h3>
+<div class="section" id="id3">
+<h3><a class="toc-backref" href="#id19">MISC</a></h3>
 <ul class="simple">
 <li>Now derived from _INFO.</li>
 <li>Otherwise unchanged.</li>
 </ul>
 </div>
 <div class="section" id="manifest-new">
-<h3><a class="toc-backref" href="#id32">MANIFEST (new)</a></h3>
+<h3><a class="toc-backref" href="#id20">MANIFEST (new)</a></h3>
 <ul class="simple">
 <li>The MANIFEST type is explicitly to cover all nested Manifest files.</li>
 <li>During validation, this serves as an indicator that the package
@@ -241,7 +231,7 @@ Deletion of an entire category is not.</
 </ul>
 </div>
 <div class="section" id="eclass-new">
-<h3><a class="toc-backref" href="#id33">ECLASS (new)</a></h3>
+<h3><a class="toc-backref" href="#id21">ECLASS (new)</a></h3>
 <ul class="simple">
 <li>uses _CRIT.</li>
 <li>This type shall be used for all eclasses only.</li>
@@ -249,7 +239,7 @@ Deletion of an entire category is not.</
 </ul>
 </div>
 <div class="section" id="data-new">
-<h3><a class="toc-backref" href="#id34">DATA (new)</a></h3>
+<h3><a class="toc-backref" href="#id22">DATA (new)</a></h3>
 <ul class="simple">
 <li>uses _CRIT.</li>
 <li>The DATA type shall be used for all files that directly affect the
@@ -257,7 +247,7 @@ package manager, such as metadata/cache/
 </ul>
 </div>
 <div class="section" id="exec-new">
-<h3><a class="toc-backref" href="#id35">EXEC (new)</a></h3>
+<h3><a class="toc-backref" href="#id23">EXEC (new)</a></h3>
 <ul class="simple">
 <li>uses _CRIT.</li>
 <li>If the file gets sourced, executed, or causes a change (patches) in
@@ -268,7 +258,7 @@ repository for important files.</li>
 </ul>
 </div>
 <div class="section" id="unknown-new">
-<h3><a class="toc-backref" href="#id36">UNKNOWN (new)</a></h3>
+<h3><a class="toc-backref" href="#id24">UNKNOWN (new)</a></h3>
 <ul class="simple">
 <li>uses _CRIT.</li>
 <li>All other files that are not covered by another type should be
@@ -277,14 +267,14 @@ considered as 'UNKNOWN'.</li>
 </div>
 </div>
 <div class="section" id="on-bloat">
-<h2><a class="toc-backref" href="#id37">On Bloat</a></h2>
+<h2><a class="toc-backref" href="#id25">On Bloat</a></h2>
 <p>If repeated use of a common path prefix is considered a bloat problem, a
 Manifest file should be added inside the common directory, however this
 should not be done blindly, as bloat by inodes is more significant for
 the majority of use cases.</p>
 </div>
 <div class="section" id="chosing-a-filetype">
-<h2><a class="toc-backref" href="#id38">Chosing a filetype</a></h2>
+<h2><a class="toc-backref" href="#id26">Chosing a filetype</a></h2>
 <ol class="arabic">
 <li><dl class="first docutils">
 <dt>matches Manifest</dt>
@@ -293,22 +283,14 @@ the majority of use cases.</p>
 </dl>
 </li>
 <li><dl class="first docutils">
-<dt>matches <a href="#id12"><span class="problematic" id="id13">*</span></a>.ebuild</dt>
-<dd><div class="first system-message" id="id12">
-<p class="system-message-title">System Message: WARNING/2 (<tt class="docutils">glep-0060.txt</tt>, line 174); <em><a href="#id13">backlink</a></em></p>
-<p>Inline emphasis start-string without end-string.</p>
-</div>
-<p class="last">=&gt; EBUILD, stop.</p>
+<dt>matches <tt class="docutils literal"><span class="pre">*.ebuild</span></tt></dt>
+<dd><p class="first last">=&gt; EBUILD, stop.</p>
 </dd>
 </dl>
 </li>
 <li><dl class="first docutils">
-<dt>matches <a href="#id14"><span class="problematic" id="id15">*</span></a>.eclass</dt>
-<dd><div class="first system-message" id="id14">
-<p class="system-message-title">System Message: WARNING/2 (<tt class="docutils">glep-0060.txt</tt>, line 176); <em><a href="#id15">backlink</a></em></p>
-<p>Inline emphasis start-string without end-string.</p>
-</div>
-<p class="last">=&gt; ECLASS, stop.</p>
+<dt>matches <tt class="docutils literal"><span class="pre">*.eclass</span></tt></dt>
+<dd><p class="first last">=&gt; ECLASS, stop.</p>
 </dd>
 </dl>
 </li>
@@ -319,25 +301,25 @@ the majority of use cases.</p>
 </dl>
 </li>
 <li><dl class="first docutils">
-<dt>matches files/*</dt>
+<dt>matches <tt class="docutils literal"><span class="pre">files/*</span></tt></dt>
 <dd><p class="first last">=&gt; AUX, continue [see note].</p>
 </dd>
 </dl>
 </li>
 <li><dl class="first docutils">
-<dt>matches {<em>.sh,</em>.bashrc,*.patch,...}</dt>
+<dt>matches any of <tt class="docutils literal"><span class="pre">*.sh</span></tt>, <tt class="docutils literal"><span class="pre">*.bashrc</span></tt>, <tt class="docutils literal"><span class="pre">*.patch</span></tt>, ...</dt>
 <dd><p class="first last">=&gt; EXEC, stop.</p>
 </dd>
 </dl>
 </li>
 <li><dl class="first docutils">
-<dt>matches {metadata/cache/<em>,profiles/,package.</em>,use.mask*,...}</dt>
+<dt>matches any of <tt class="docutils literal"><span class="pre">metadata/cache/*</span></tt>, <tt class="docutils literal"><span class="pre">profiles/</span></tt>, <tt class="docutils literal"><span class="pre">package.*</span></tt>, <tt class="docutils literal"><span class="pre">use.mask*</span></tt>, ...</dt>
 <dd><p class="first last">=&gt; DATA, stop.</p>
 </dd>
 </dl>
 </li>
 <li><dl class="first docutils">
-<dt>matches {ChangeLog,metadata.xml,*.desc,...}</dt>
+<dt>matches any of <tt class="docutils literal"><span class="pre">ChangeLog</span></tt>, <tt class="docutils literal"><span class="pre">metadata.xml</span></tt>, <tt class="docutils literal"><span class="pre">*.desc</span></tt>, ...</dt>
 <dd><p class="first last">=&gt; MISC, stop.</p>
 </dd>
 </dl>
@@ -351,32 +333,32 @@ the majority of use cases.</p>
 </ol>
 <p>The logic behind 5, 6, 7 is ensuring that every item that by it's
 presence or absense may be dangerous should always be treated strictly.
-(Consider epatch given a directory of patches ${FILESDIR}/${PV}/, where
-it blindly includes them, or alternatively, the package.mask file or a
-profile being altered/missing).</p>
+(Consider epatch given a directory of patches <tt class="docutils literal"><span class="pre">${FILESDIR}/${PV}/</span></tt>,
+where it blindly includes them, or alternatively, the package.mask file
+or a profile being altered/missing).</p>
 <p>Note: The AUX entries should only be generated if we are generating a
 compatible Manifest that supports older versions of Portage. They should
 be generated along with the new type.</p>
 </div>
 </div>
 <div class="section" id="backwards-compatibility">
-<h1><a class="toc-backref" href="#id39">Backwards Compatibility</a></h1>
+<h1><a class="toc-backref" href="#id27">Backwards Compatibility</a></h1>
 <p>For generation of existing package Manifests, the AUX entries must
 continue to be present for the standard Portage deprecation cycle.
 The new entries may be included already in all Manifest files, as they
 will be ignored by older Portage versions. Over time, ECLASS, DATA,
 EXEC, UNKNOWN may replace the existing AUX type.</p>
-<p>The adoption of this proposal does also affect [GLEPxx+1] as part of
+<p>The adoption of this proposal does also affect [#GLEP58] as part of
 this GLEP series, however this GLEP was an offset of the research in
 that GLEP.</p>
 </div>
 <div class="section" id="thanks-to">
-<h1><a class="toc-backref" href="#id40">Thanks to</a></h1>
+<h1><a class="toc-backref" href="#id28">Thanks to</a></h1>
 <p>I'd like to thank the following people for input on this GLEP.
 - Marius Mauch (genone) &amp; Zac Medico (zmedico): Portage Manifest2</p>
 </div>
 <div class="section" id="references">
-<h1><a class="toc-backref" href="#id41">References</a></h1>
+<h1><a class="toc-backref" href="#id29">References</a></h1>
 <table class="docutils footnote" frame="void" id="glep44" rules="none">
 <colgroup><col class="label" /><col /></colgroup>
 <tbody valign="top">
@@ -386,7 +368,7 @@ that GLEP.</p>
 </table>
 </div>
 <div class="section" id="copyright">
-<h1><a class="toc-backref" href="#id42">Copyright</a></h1>
+<h1><a class="toc-backref" href="#id30">Copyright</a></h1>
 <p>Copyright (c) 2007 by Robin Hugh Johnson. This material may be
 distributed only subject to the terms and conditions set forth in the
 Open Publication License, v1.0.</p>
@@ -397,7 +379,7 @@ Open Publication License, v1.0.</p>
 <div class="footer">
 <hr class="footer" />
 <a class="reference external" href="glep-0060.txt">View document source</a>.
-Generated on: 2008-10-22 18:02 UTC.
+Generated on: 2008-10-28 07:47 UTC.
 Generated by <a class="reference external" href="http://docutils.sourceforge.net/">Docutils</a> from <a class="reference external" href="http://docutils.sourceforge.net/rst.html">reStructuredText</a> source.
 
 </div>



1.3                  xml/htdocs/proj/en/glep/glep-0061.html

file : http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/proj/en/glep/glep-0061.html?rev=1.3&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/proj/en/glep/glep-0061.html?rev=1.3&content-type=text/plain
diff : http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/proj/en/glep/glep-0061.html?r1=1.2&r2=1.3

Index: glep-0061.html
===================================================================
RCS file: /var/cvsroot/gentoo/xml/htdocs/proj/en/glep/glep-0061.html,v
retrieving revision 1.2
retrieving revision 1.3
diff -p -w -b -B -u -u -r1.2 -r1.3
--- glep-0061.html	22 Oct 2008 18:03:40 -0000	1.2
+++ glep-0061.html	28 Oct 2008 07:47:52 -0000	1.3
@@ -27,9 +27,9 @@
 </tr>
 <tr class="field"><th class="field-name">Title:</th><td class="field-body">Manifest2 compression</td>
 </tr>
-<tr class="field"><th class="field-name">Version:</th><td class="field-body">1.1</td>
+<tr class="field"><th class="field-name">Version:</th><td class="field-body">1.2</td>
 </tr>
-<tr class="field"><th class="field-name">Last-Modified:</th><td class="field-body"><a class="reference external" href="http://www.gentoo.org/cgi-bin/viewcvs.cgi/xml/htdocs/proj/en/glep/glep-0061.txt?cvsroot=gentoo">2008/10/21 23:30:47</a></td>
+<tr class="field"><th class="field-name">Last-Modified:</th><td class="field-body"><a class="reference external" href="http://www.gentoo.org/cgi-bin/viewcvs.cgi/xml/htdocs/proj/en/glep/glep-0061.txt?cvsroot=gentoo">2008/10/28 07:45:56</a></td>
 </tr>
 <tr class="field"><th class="field-name">Author:</th><td class="field-body">Robin Hugh Johnson &lt;robbat2&#32;&#97;t&#32;gentoo.org&gt;</td>
 </tr>
@@ -43,8 +43,12 @@
 </tr>
 <tr class="field"><th class="field-name">Created:</th><td class="field-body">July 2008</td>
 </tr>
+<tr class="field"><th class="field-name">Updated:</th><td class="field-body">October 2008</td>
+</tr>
 <tr class="field"><th class="field-name">Updates:</th><td class="field-body">44</td>
 </tr>
+<tr class="field"><th class="field-name">Post-History:</th><td class="field-body"></td>
+</tr>
 </tbody>
 </table>
 <hr />
@@ -123,7 +127,7 @@ Open Publication License, v1.0.</p>
 <div class="footer">
 <hr class="footer" />
 <a class="reference external" href="glep-0061.txt">View document source</a>.
-Generated on: 2008-10-22 18:02 UTC.
+Generated on: 2008-10-28 07:47 UTC.
 Generated by <a class="reference external" href="http://docutils.sourceforge.net/">Docutils</a> from <a class="reference external" href="http://docutils.sourceforge.net/rst.html">reStructuredText</a> source.
 
 </div>



1.1                  xml/htdocs/proj/en/glep/glep-0058.html

file : http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/proj/en/glep/glep-0058.html?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/proj/en/glep/glep-0058.html?rev=1.1&content-type=text/plain

Index: glep-0058.html
===================================================================
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
  <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
  <meta name="generator" content="Docutils 0.5: http://docutils.sourceforge.net/" />
  <title>GLEP 58 -- Security of distribution of Gentoo software - Infrastructure to User distribution - MetaManifest</title>
  <link rel="stylesheet" href="tools/glep.css" type="text/css" /></head>
<body bgcolor="white">
<table class="navigation" cellpadding="0" cellspacing="0"
       width="100%" border="0">
<tr><td class="navicon" width="150" height="35">
<a href="http://www.gentoo.org/" title="Gentoo Linux Home Page">
<img src="http://www.gentoo.org/images/gentoo-new.gif" alt="[Gentoo]"
 border="0" width="150" height="35" /></a></td>
<td class="textlinks" align="left">
[<b><a href="http://www.gentoo.org/">Gentoo Linux Home</a></b>]
[<b><a href="http://www.gentoo.org/proj/en/glep">GLEP Index</a></b>]
[<b><a href="http://www.gentoo.org/proj/en/glep/glep-0058.txt">GLEP Source</a></b>]
</td></tr></table>
<table class="rfc2822 docutils field-list" frame="void" rules="none">
<col class="field-name" />
<col class="field-body" />
<tbody valign="top">
<tr class="field"><th class="field-name">GLEP:</th><td class="field-body">58</td>
</tr>
<tr class="field"><th class="field-name">Title:</th><td class="field-body">Security of distribution of Gentoo software - Infrastructure to User distribution - MetaManifest</td>
</tr>
<tr class="field"><th class="field-name">Version:</th><td class="field-body">1.4</td>
</tr>
<tr class="field"><th class="field-name">Last-Modified:</th><td class="field-body"><a class="reference external" href="http://www.gentoo.org/cgi-bin/viewcvs.cgi/xml/htdocs/proj/en/glep/glep-0058.txt?cvsroot=gentoo">2008/10/28 07:45:27</a></td>
</tr>
<tr class="field"><th class="field-name">Author:</th><td class="field-body">Robin Hugh Johnson &lt;robbat2&#32;&#97;t&#32;gentoo.org&gt;,</td>
</tr>
<tr class="field"><th class="field-name">Status:</th><td class="field-body">Draft</td>
</tr>
<tr class="field"><th class="field-name">Type:</th><td class="field-body">Standards Track</td>
</tr>
<tr class="field"><th class="field-name">Content-Type:</th><td class="field-body"><a class="reference external" href="glep-0002.html">text/x-rst</a></td>
</tr>
<tr class="field"><th class="field-name">Requires:</th><td class="field-body"><a class="reference external" href="http://www.gentoo.org/proj/en/glepglep-0044.html">44</a> <a class="reference external" href="http://www.gentoo.org/proj/en/glepglep-0060.html">60</a></td>
</tr>
<tr class="field"><th class="field-name">Created:</th><td class="field-body">October 2006</td>
</tr>
<tr class="field"><th class="field-name">Updated:</th><td class="field-body">November 2007, June 2008, July 2008, October 2008</td>
</tr>
<tr class="field"><th class="field-name">Post-History:</th><td class="field-body"></td>
</tr>
</tbody>
</table>
<hr />
<div class="contents topic" id="contents">
<p class="topic-title first">Contents</p>
<ul class="simple">
<li><a class="reference internal" href="#abstract" id="id1">Abstract</a></li>
<li><a class="reference internal" href="#motivation" id="id2">Motivation</a></li>
<li><a class="reference internal" href="#specification" id="id3">Specification</a><ul>
<li><a class="reference internal" href="#procedure-for-creating-the-metamanifest-file" id="id4">Procedure for creating the MetaManifest file:</a></li>
<li><a class="reference internal" href="#verification-of-one-or-more-items-from-the-metamanifest" id="id5">Verification of one or more items from the MetaManifest:</a></li>
<li><a class="reference internal" href="#procedure-for-verifying-an-item-in-the-metamanifest" id="id6">Procedure for verifying an item in the MetaManifest:</a><ul>
<li><a class="reference internal" href="#notes" id="id7">Notes:</a></li>
</ul>
</li>
</ul>
</li>
<li><a class="reference internal" href="#implementation-notes" id="id8">Implementation Notes</a><ul>
<li><a class="reference internal" href="#metamanifest-and-the-new-manifest2-filetypes" id="id9">MetaManifest and the new Manifest2 filetypes</a></li>
<li><a class="reference internal" href="#timestamps-additional-distribution-of-metamanifest" id="id10">Timestamps &amp; Additional distribution of MetaManifest</a></li>
<li><a class="reference internal" href="#metamanifest-size-considerations" id="id11">MetaManifest size considerations</a></li>
</ul>
</li>
<li><a class="reference internal" href="#backwards-compatibility" id="id12">Backwards Compatibility</a></li>
<li><a class="reference internal" href="#thanks" id="id13">Thanks</a></li>
<li><a class="reference internal" href="#references" id="id14">References</a></li>
<li><a class="reference internal" href="#copyright" id="id15">Copyright</a></li>
</ul>
</div>
<div class="section" id="abstract">
<h1><a class="toc-backref" href="#id1">Abstract</a></h1>
<p>MetaManifest provides a means of verifiable distribution from Gentoo
Infrastructure to a user system, while data is conveyed over completely
untrusted networks and system, by extending the Manifest2 specification,
and adding a top-level Manifest file, with support for other nested
Manifests.</p>
</div>
<div class="section" id="motivation">
<h1><a class="toc-backref" href="#id2">Motivation</a></h1>
<p>As part of a comprehensive security plan, we need a way to prove that
something originating from Gentoo as an organization (read Gentoo-owned
hardware, run by infrastructure), has not been tampered with. This
allows the usage of third-party rsync mirrors, without worrying that
they have modified something critical (e.g. eclasses, which are still
unsigned).</p>
<p>Securing the untrusted distribution is one of the easier tasks in the
security plan - in short, all that is required is having a hash of every
item in the tree, and signing that hash to prove it came from Gentoo.</p>
<p>Ironically we have a hashed and signed distribution (it's just not used
by most users, due to it's drawbacks): Our tree snapshot tarballs have
hashes and signatures.</p>
<p>So now we want to add the same verification to our material that is
distributed by rsync. We already provide hashes of subsets of the tree -
our Manifests protect individual packages. However metadata, eclasses
and profiles are not protected at this time. The directories of
packages and distfiles are NOT covered by this, as they are not
distributed by rsync.</p>
<p>This portion of the tree-signing work provides only the following
guarantee: A user can prove that the tree from the Gentoo infrastructure
has not been tampered with since leaving the Gentoo infrastructure.
No other guarantees, either implicit or explicit are made.</p>
<p>Additionally, distributing a set of the most recent MetaManifests from a
trusted source allows validation of trees that come from community
mirrors, and allows detection of all cases of malicious mirrors (either
by deliberate delay, replay [C08a, C08b] or alteration).</p>
</div>
<div class="section" id="specification">
<h1><a class="toc-backref" href="#id3">Specification</a></h1>
<p>For lack of a better name, the following solution should be known as the
MetaManifest. Those responsible for the name have already been sacked.</p>
<p>MetaManifest basically contains hashes of every file in the tree, either
directly or indirectly. The direct case applies to ANY file that does
not appear in an existing Manifest file (e.g. eclasses, Manifest files
themselves). The indirect case is covered by the CONTENTS of existing
Manifest files. If the Manifest itself is correct, we know that by
tracking the hash of the Manifest, we can be assured that the contents
are protected.</p>
<p>In the following, the MetaManifest file is a file named 'Manifest',
located at the root of a repository.</p>
<div class="section" id="procedure-for-creating-the-metamanifest-file">
<h2><a class="toc-backref" href="#id4">Procedure for creating the MetaManifest file:</a></h2>
<ol class="arabic simple">
<li>Start at the root of the Gentoo Portage tree (gentoo-x86, although
this procedure applies to overlays as well).</li>
<li>Initialize two unordered sets: COVERED, ALL.<ol class="arabic">
<li>'ALL' will contain every file in the tree.</li>
<li>'COVERED' will contain every file that is mentioned in an existing
Manifest2.</li>
</ol>
</li>
<li>Traverse the tree, depth-first.<ol class="arabic">
<li>At the top level only, ignore the following directories: distfiles,
packages, local</li>
<li>If a directory contains a Manifest file, extract all relevant local
files from it (presently: AUX, MISC, EBUILD; but should follow the
evolution of Manifest2 entry types per [#GLEP60]), and place them
into the COVERED set.</li>
<li>Recursively add every file in the directory to the ALL set,
pursusant to the exclusion list as mentioned in [#GLEP60].</li>
</ol>
</li>
<li>Produce a new set, UNCOVERED, as the set-difference (ALL)-(COVERED).
This is every item that is not covered by another Manifest, or part
of an exclusion list.</li>
<li>If an existing MetaManifest file is present, remove it.</li>
<li>For each file in UNCOVERED, assign a Manifest2 type, produce the
hashes, and add with the filetype to the MetaManifest file.</li>
<li>For unique identification of the MetaManifest, a header line should
be included, using the exact contents of the metadata/timestamp.x
file, so that a MetaManifest may be tied back to a tree as
distributed by the rsync mirror system. The string of
'metadata/timestamp.x' should be included to identify this revision
of MetaManifest generation. Eg:
&quot;Timestamp: metadata/timestamp.x: 1215722461 Thu Jul 10 20:41:01 2008 UTC&quot;
The package manager MUST not use the identifying string as a filename.</li>
<li>The MetaManifest must ultimately be GnuPG-signed.<ol class="arabic">
<li>For the initial implementation, the same key as used for snapshot
tarball signing is sufficient.</li>
<li>For the future, the key used for fully automated signing by infra
should not be on the same keyring as developer keys. See [#GLEPxx+3
for further notes].</li>
</ol>
</li>
</ol>
<p>The above does not conflict the proposal contained in GLEP33, which
restructure eclasses to include subdirectories and Manifest files, as
the Manifest rules above still provide indirect verification for all
files after the GLEP33 restructuring if it comes to pass.</p>
<p>If other Manifests are added (such as per-category, or protecting
versioned eclases), the size of the MetaManifest will be greatly
reduced, and this specification was written with such a possible future
addition in mind.</p>
<p>MetaManifest generation will take place as part of the existing process
by infrastructure that takes the contents of CVS and prepares it for
distribution via rsync, which includes generating metadata. In-tree
Manifest files are not checked at this point, as they are assumed to be
correct.</p>
</div>
<div class="section" id="verification-of-one-or-more-items-from-the-metamanifest">
<h2><a class="toc-backref" href="#id5">Verification of one or more items from the MetaManifest:</a></h2>
<p>There are two times that this may happen: firstly, immediately after the
rsync has completed - this has the advantage that the kernel file cache
is hot, and checking the entire tree can be accomplished quickly.
Secondly, the MetaManifest should be checked during installation of a
package.</p>
</div>
<div class="section" id="procedure-for-verifying-an-item-in-the-metamanifest">
<h2><a class="toc-backref" href="#id6">Procedure for verifying an item in the MetaManifest:</a></h2>
<p>In the following, I've used term 'M2-verify' to note following the hash
verification procedures as defined by the Manifest2 format - which
compromise checking the file length, and that the hashes match. Which
filetypes may be ignored on missing is discussed in [#GLEP60].</p>
<ol class="arabic simple">
<li>Check the GnuPG signature on the MetaManifest against the keyring of
automated Gentoo keys. See [#GLEPxx+3] for full details regarding
verification of GnuPG signatures.
1. Abort if the signature check fails.</li>
<li>Check the Timestamp header. If it is significently out of date
compared to the local clock or a trusted source, halt or require
manual intervention from the user.</li>
<li>For a verification of the tree following an rsync:<ol class="arabic">
<li>Build a set 'ALL' of every file covered by the rsync. (exclude
distfiles/, packages/, local/)</li>
<li>M2-verify every entry in the MetaManifest, descending into inferior
Manifests as needed. Place the relative path of every checked item
into a set 'COVERED'.</li>
<li>Construct the set 'UNCOVERED' by set-difference between the ALL and
COVERED sets.</li>
<li>For each file in the UNCOVERED set, assign a Manifest2 filetype.</li>
<li>If the filetype for any file in the UNCOVERED set requires a halt
on error, abort and display a suitable error.</li>
<li>Completed verification</li>
</ol>
</li>
<li>If checking at the installation of a package:<ol class="arabic">
<li>M2-verify the entry in MetaManifest for the Manifest</li>
<li>M2-verify all relevant metadata/ contents if metadata/ is being
used in any way (optionally done before dependancy checking).</li>
<li>M2-verifying the contents of the Manifest.</li>
<li>Perform M2-verification of all eclasses and profiles used (both
directly and indirectly) by the ebuild.</li>
</ol>
</li>
</ol>
<div class="section" id="notes">
<h3><a class="toc-backref" href="#id7">Notes:</a></h3>
<ol class="arabic simple">
<li>For initial implementations, it is acceptable to check EVERY item in
the eclass and profiles directory, rather than tracking the exact
files used by every eclass (see note #2). Later implementations
should strive to only verify individual eclasses and profiles as
needed.</li>
<li>Tracking of exact files is of specific significance to the libtool
eclass, as it stores patches under eclass/ELT-patches, and as such
that would not be picked up by any tracing of the inherit function.
This may be alleviated by a later eclass and ebuild variable that
explicitly declares what files from the tree are used by a package.</li>
</ol>
</div>
</div>
</div>
<div class="section" id="implementation-notes">
<h1><a class="toc-backref" href="#id8">Implementation Notes</a></h1>
<p>For this portion of the tree-signing work, no actions are required of
the individual Gentoo developers. They will continue to develop and
commit as they do presently, and the MetaManifest is added by
Infrastructure during the tree generation process, and distributed to
users.</p>
<div class="section" id="metamanifest-and-the-new-manifest2-filetypes">
<h2><a class="toc-backref" href="#id9">MetaManifest and the new Manifest2 filetypes</a></h2>
<p>While [#GLEP60] describes the addition of new filetypes, these are NOT
needed for implementation of the MetaManifest proposal. Without the new
filetypes, all entries in the MetaManifest would be of type 'MISC'.</p>
</div>
<div class="section" id="timestamps-additional-distribution-of-metamanifest">
<h2><a class="toc-backref" href="#id10">Timestamps &amp; Additional distribution of MetaManifest</a></h2>
<p>As discussed by [C08a,C08b], malicious third-party mirrors may use the
principles of exclusion and replay to deny an update to clients, while
at the same time recording the identity of clients to attack.</p>
<p>This should be guarded against by including a timestamp in the header of
the MetaManifest, as well as distributing the latest MetaManifests by a
trusted channel.</p>
<p>On all rsync mirrors directly maintained by the Gentoo infrastructure,
and not on community mirrors, there should be a new module
'gentoo-portage-metamanifests'. Within this module, all MetaManifests
for a recent time frame (eg one week) should be kept, named as
&quot;MetaManifest.$TS&quot;, where $TS is the timestamp from inside the file.
The most recent MetaManifest should always be symlinked as
MetaManifest.current. The possibility of serving the recent
MetaManifests via HTTPS should also be explored to mitigate MitM
attacks.</p>
<p>The package manager should obtain MetaManifest.current and use it to
decide is the tree is too out of date per operation #2 of the
verification process. The decision about freshness should be a
user-configuration setting, with the ability to override.</p>
</div>
<div class="section" id="metamanifest-size-considerations">
<h2><a class="toc-backref" href="#id11">MetaManifest size considerations</a></h2>
<p>With only two levels of Manifests (per-package and top-level), every
rsync will cause a lot of traffic transfering the modified top-level
MetaManifest. To reduce this, per-category Manifests are strongly
recommended. Alternatively, if the distribution method efficently
handles small patch-like changes in an existing file, using an
uncompressed MetaManifest may be acceptable (this would primarily be
distributed version control systems). Other suggestions in reducing this
traffic are welcomed.</p>
</div>
</div>
<div class="section" id="backwards-compatibility">
<h1><a class="toc-backref" href="#id12">Backwards Compatibility</a></h1>
<ul class="simple">
<li>There are no backwards compatibility issues, as old versions of
Portage do not look for a Manifest file at the top level of the tree.</li>
<li>Manifest2-aware versions of Portage ignore all entries that they are
not certain how to handle. Enabling headers and PGP signing to be
conducted easily.</li>
</ul>
</div>
<div class="section" id="thanks">
<h1><a class="toc-backref" href="#id13">Thanks</a></h1>
<p>I'd like to thank the following people for input on this GLEP.</p>
<ul class="simple">
<li>Patrick Lauer (patrick): Prodding me to get all of the tree-signing
work finished, and helping to edit.</li>
<li>Ciaran McCreesh (ciaranm): Paludis Manifest2</li>
<li>Brian Harring (ferringb): pkgcore Manifest2</li>
<li>Marius Mauch (genone) &amp; Zac Medico (zmedico): Portage Manifest2</li>
<li>Ned Ludd (solar) - Security concept review</li>
</ul>
</div>
<div class="section" id="references">
<h1><a class="toc-backref" href="#id14">References</a></h1>
<dl class="docutils">
<dt>[C08a] Cappos, J et al. (2008). &quot;Package Management Security&quot;.</dt>
<dd>University of Arizona Technical Report TR08-02. Available online
from: <a class="reference external" href="ftp://ftp.cs.arizona.edu/reports/2008/TR08-02.pdf">ftp://ftp.cs.arizona.edu/reports/2008/TR08-02.pdf</a></dd>
<dt>[C08b] Cappos, J et al. (2008). &quot;Attacks on Package Managers&quot;</dt>
<dd>Available online at:
<a class="reference external" href="http://www.cs.arizona.edu/people/justin/packagemanagersecurity/">http://www.cs.arizona.edu/people/justin/packagemanagersecurity/</a></dd>
</dl>
</div>
<div class="section" id="copyright">
<h1><a class="toc-backref" href="#id15">Copyright</a></h1>
<p>Copyright (c) 2006 by Robin Hugh Johnson. This material may be
distributed only subject to the terms and conditions set forth in the
Open Publication License, v1.0.</p>
<p>vim: tw=72 ts=2 expandtab:</p>
</div>

</div>
<div class="footer">
<hr class="footer" />
<a class="reference external" href="glep-0058.txt">View document source</a>.
Generated on: 2008-10-28 07:47 UTC.
Generated by <a class="reference external" href="http://docutils.sourceforge.net/">Docutils</a> from <a class="reference external" href="http://docutils.sourceforge.net/rst.html">reStructuredText</a> source.

</div>
</body>
</html>