| 1 |
I had a great time at this, i'm no gentoo dev but from the pictures the |
| 2 |
gentoo-meet-and-greet seemed to do well, too bad i couldnt have been |
| 3 |
there. I only went up the first day of the expo and i guess things got |
| 4 |
much better the later days. |
| 5 |
|
| 6 |
On Sun, 2005-02-20 at 19:14 -0500, Aron Griffis wrote: |
| 7 |
> Brian Harring wrote: [Sun Feb 20 2005, 05:33:40PM EST] |
| 8 |
> > Err... enforcement in terms of forcing devs to sign everything? |
| 9 |
> > That is only part of the pie. Take a _hard_ look at eclasses. |
| 10 |
> > Then, take an even _harder_ look at profile bashrc's, and what they |
| 11 |
> > technically are capable of, and the fact that all installations use |
| 12 |
> > a profile (atm, there isn't a common profile that all inherit from, |
| 13 |
> > but at some point it may occur). |
| 14 |
> |
| 15 |
> Oh yeah. I, um, forgot all that ;-) |
| 16 |
> |
| 17 |
> > So yeah. Assuming glep33 is greenlighted (a touch up will be posted |
| 18 |
> > in the next few days of it), eclass/elib signing I'll be handling. |
| 19 |
> > Profile signing is another beast that's needed, and help would be |
| 20 |
> > appreciated (as always, clean patches/discussion of how to do it |
| 21 |
> > properly/etc is always welcome). |
| 22 |
> > |
| 23 |
> > Beyond that, to save the portage devs sanity from people screaming |
| 24 |
> > "SHA1 is broken!" (it's not, just weakened), I'll be looking at |
| 25 |
> > centralizing, and making the digest code a bit more pluggable- |
| 26 |
> > basically do a handler setup, mapping a CHF to a function... |
| 27 |
> |
| 28 |
> Cool, thanks for the reminder/update on these issues. Regarding |
| 29 |
> profile signing... how about putting a (signed) manifest in each |
| 30 |
> directory under portage/profiles? Only stuff in the immediate |
| 31 |
> directory would be included, not the subdirs. |
| 32 |
> |
| 33 |
> Regards, |
| 34 |
> Aron |
| 35 |
> |
| 36 |
> -- |
| 37 |
> Aron Griffis |
| 38 |
> Gentoo Linux Developer |
| 39 |
> |
Archives