Gentoo Archives: gentoo-dev

From: Ciaran McCreesh <ciaran.mccreesh@×××××××××××××.uk>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] Signing everything, for fun and for profit
Date: Fri, 19 May 2006 00:01:55
Message-Id: 20060519005414.6d252ec3@snowdrop.home
In Reply to: Re: [gentoo-dev] Signing everything, for fun and for profit by "Kevin F. Quinn"
1 On Fri, 19 May 2006 01:53:29 +0200 "Kevin F. Quinn"
2 <kevquinn@g.o> wrote:
3 | obviously header.txt and skel.* aren't important. scripts isn't too
4 | important either, although a manifest-style file in there wouldn't be
5 | difficult. licenses and metadata don't have any security impact so
6 | there's little point there, also.
7
8 metadata has security impact.
9
10 | do profiles present a security risk? Perhaps by masking/unmasking
11 | fixed/vulnerable versions of packages.
12
13 Or by using a bashrc, perhaps? Profiles most definitely do have
14 security impact.
15
16 --
17 Ciaran McCreesh
18 Mail : ciaran dot mccreesh at blueyonder.co.uk
19
20
21 --
22 gentoo-dev@g.o mailing list