Re: [gentoo-dev] [Fwd: [gentoo-security] Trojan for Gentoo, part 2]

[Ciaran McCreesh]

On Sun, 7 Nov 2004 13:18:24 +0000 Chris Bainbridge
<chris.bainbridge@×××××.com> wrote:
| On Sun, 7 Nov 2004 12:32:27 +0000, Ciaran McCreesh
| <ciaranm@g.o> wrote:
| > Get your facts straight before starting off on that again. This "run
| > around like a headless chicken whenever someone says the word
| > 'security'" mentality is getting rather tedious.
| 
| I created bug #5902 (http://bugs.gentoo.org/show_bug.cgi?id=5902) on
| 2/8/2002. There are a lot of people cc'd on that bug, and the severity
| got upgraded to critical. Despite that the problem still exists over 2
| years later. Maybe you think that being concerned about such a
| fundamental security problem in gentoo is "running around like a
| headless chicken". I, however, disagree.

Read context. -fstack-protector == headless chicken. I didn't say that
eclass / ebuild signing was a bad idea. Heck, I've been signing ebuilds
for longer than most of the people on our 'security' team.

-- 
Ciaran McCreesh : Gentoo Developer (Vim, Fluxbox, Sparc, Mips)
Mail            : ciaranm at gentoo.org
Web             : http://dev.gentoo.org/~ciaranm