Gentoo Archives: gentoo-dev

From: Kristian Fiskerstrand <k_f@g.o>
To: gentoo-dev@l.g.o
Subject: Kernel Security masks (was: Re: [gentoo-dev] qa last rites multiple packages)
Date: Wed, 07 Jan 2015 20:16:47
Message-Id: 54AD9424.9070200@gentoo.org
In Reply to: Re: [gentoo-dev] qa last rites multiple packages by Kristian Fiskerstrand
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA512
3
4 On 01/07/2015 07:48 PM, Kristian Fiskerstrand wrote:
5 > On 01/07/2015 07:22 PM, Mike Gilbert wrote:
6 >> On Wed, Jan 7, 2015 at 1:11 PM, William Hubbs
7 >> <williamh@g.o> wrote:
8
9 ...
10
11 >
12 >
13 > My two cents is that this is particularly true for kernel sources.
14 > For other applications GLSAs will take over the responsibility for
15 > the mask to ensure an upgrade path, however as we don't currently
16 > have a structured mechanism for kernels I support the mask
17 > personally.
18 >
19
20 Adding on to this. If we follow up from the earlier thread on kernel
21 series stabilization. Could it be an idea to keep package masks for
22 LTS branches of the kernel at least, but as a <= rather than specific
23 kernel versions. As such this could be updated when new bugs are
24 announced without clobbering the p.masks file going forwards?
25
26 - --
27 Kristian Fiskerstrand
28 Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net
29 fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
30 -----BEGIN PGP SIGNATURE-----
31
32 iQIcBAEBCgAGBQJUrZQcAAoJEPw7F94F4TagvT0P+wWHaz+//eOTehjbSEblJsSH
33 KsFxeUOpqJmuid82T2i5Ec1WtZZWG+KXh+I46zWgvyYMSKPi7/YC2S21vl9hhflX
34 HP7NXmvS2G9/Wi7JfVpNyxX4gMZI8Oksm0ZHg5PNr9sQmLWV56eTib4U7RdtODl5
35 T7CwZ/Rew8gyf9tTI7T6VNM7+inyMpjaFy3v0eD4EPkRw/ZB7tPWWLrDN0yN70Lw
36 w8cm0SPEXuuVB80OegAsf5+qSMvOGgC9b94WGbHTsgQ5v21GMFwki6hfLHyZSyfc
37 +dA/9LvWF1L9Og5uNXQqOzOOU5fa95+q5ZzzLwYUA9JwF+/RpHisvBDofCNtXx7X
38 0xKpn79pmkEsqhymzFxjxj9zYrUl3mmGudThQ0E6zn2giTTM2jqK/ygID4VognPW
39 C/ucIKQlcPuVzo7KaSBY8mE2UhMjccftcvsj09XPnsxrfVSSlfMaIHC6dLyJvbr2
40 K34+IVOIJ5FqhzlRtx1X7kWpqe3NY4Ryr5LInxMH/lmnFMjm5+keylZM+wMzlEn1
41 8xGFBiycXDQ3gfeQ4n+bVLQAf5rXXgF+iG03mRwrSXae360KP+IxJJDyazcNn3SH
42 VlIQ67o/05ES3HgZ/kirOosWIYQG47VD8ON2OVlfjz34P2G2fRWuJetMT6bLTMEc
43 cw+j/yn2gLYBhxR6EAyz
44 =27qK
45 -----END PGP SIGNATURE-----