Re: [gentoo-dev] Redux: 2004.1 will not include a secure portage.

[Grant Goodyear]

> Is it really that simple? And to fix it is so easy.. just keep a list of
> people allowed to modify each directory. Developers sign, users check.

We have a list of people allowed to modify each directory: every dev! 
That's by design, it is quite deliberate, and the reasons are both trust 
and efficiency.  That trust is one of the key things that makes working 
on Gentoo so much fun, and anything that would destroy that trust is not 
something that will be considered lightly.

My (admittedly very naive) view about this thread is that most people 
are unlikely to cause damage if it would be easy to trace the damage 
back to the individual, so our devs are not likely to be the main source 
of compromise.  Thus, using gpg to remove a remote compromise threat 
does seem quite reasonable to me.

All that said, this topic makes my brain hurt rather badly, so I'm 
leaving the details up to the security team who eat and breathe this stuff.

-g2boojum-