Gentoo Archives: gentoo-dev

From: William Hubbs <williamh@g.o>
To: gentoo-dev@l.g.o
Cc: "Michał Górny" <mgorny@g.o>
Subject: Re: [gentoo-dev] [PATCH 1/2] git-r3.eclass: Update docs to discourage unsafe protocols
Date: Sun, 20 Aug 2017 18:05:43
Message-Id: 20170820180534.GA920@linux1.home
In Reply to: [gentoo-dev] [PATCH 1/2] git-r3.eclass: Update docs to discourage unsafe protocols by "Michał Górny"
1 On Sat, Aug 19, 2017 at 10:25:01AM +0200, Michał Górny wrote:
2 > ---
3 > eclass/git-r3.eclass | 14 +++++++++-----
4 > 1 file changed, 9 insertions(+), 5 deletions(-)
5 >
6 > diff --git a/eclass/git-r3.eclass b/eclass/git-r3.eclass
7 > index bc7d4d920299..42b586811368 100644
8 > --- a/eclass/git-r3.eclass
9 > +++ b/eclass/git-r3.eclass
10 > @@ -105,10 +105,14 @@ fi
11 > # @ECLASS-VARIABLE: EGIT_REPO_URI
12 > # @REQUIRED
13 > # @DESCRIPTION:
14 > -# URIs to the repository, e.g. git://foo, https://foo. If multiple URIs
15 > -# are provided, the eclass will consider them as fallback URIs to try
16 > -# if the first URI does not work. For supported URI syntaxes, read up
17 > -# the manpage for git-clone(1).
18 > +# URIs to the repository, e.g. https://foo. If multiple URIs are
19 > +# provided, the eclass will consider the remaining URIs as fallbacks
20 > +# to try if the first URI does not work. For supported URI syntaxes,
21 > +# read up the manpage for git-clone(1).
22
23 s/read up/read/
24
25 > +# URIs should be using https:// whenever possible. http:// and git://
26 > +# URIs are unsafe and their use (even if only as a fallback) makes
27 > +# MITM attacks possible.
28 > #
29 > # It can be overriden via env using ${PN}_LIVE_REPO variable.
30
31 s/overriden/overridden/
32
33 Thanks,
34
35 William

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies