Gentoo Archives: gentoo-dev

From: Karsten Schulz <kaschu@×××××××××.de>
To: Marius Mauch <genone@××××××.de>, gentoo-dev@g.o
Subject: Re: [gentoo-dev] security updates only?
Date: Sat, 16 Aug 2003 07:28:43
Message-Id: 200308160928.42107.kaschu@t800.ping.de
In Reply to: Re: [gentoo-dev] security updates only? by Marius Mauch
1 Am Samstag, 16. August 2003 02:20 schrieb Marius Mauch:
2 > Well, I already made a comment on bug 5835 and I also sent a mail to
3 > aliz a few weeks ago, no reply so far :(
4
5 Another guy, who should be contacted seems to be Nick Jones.
6 As one can read in the Gentoo Weekly Newsletter from January 27th, 2003
7 (<http://www.gentoo.org/news/en/gwn/20030127-newsletter.xml>)
8 GLSAs are going to be integrated into Portage.
9
10 I think, an integration of GLSAs needs two basic steps:
11 1. Make tracking security announcements easier (needs fixed formats,
12 communication channels, a.s.o) - Marius did some work here.
13
14 2. Integrate the standardized GLSA information into Portage.
15
16 Step 2 is imho the critical one. It has to be done without changing too much
17 in the Portage system. I don't believe, that it is a wise step to introduce
18 new use flags or program options for emerge in this phase.
19 I wish to find a way to integrate the GLSA information in the current portage
20 system without changing too much.
21
22 This minute, I wrote a mail to Daniel to get first hand information and to
23 make sure, that any effort to bring this topic forward will go the right way.
24
25 Did anyone take a look at Marius DTD? Any comments on it?
26
27 Karsten
28
29
30
31
32
33
34
35
36 --
37 gentoo-dev@g.o mailing list