| 1 |
On 12/17/2014 05:32 PM, Brian Dolbec wrote: |
| 2 |
> |
| 3 |
> Only code changes I see to portage, pkgcore (I know nothing about |
| 4 |
> paludis) are to look for the glsa's in the 2 possible locations. The |
| 5 |
> standalone glsa repo, failing that, backup to the gentoo tree. |
| 6 |
> |
| 7 |
|
| 8 |
Could we ship a GLSA overlay enabled by default, regardless of what we |
| 9 |
do with the main repo? Then for simplicity, we update the tools to check |
| 10 |
metadata/glsa in overlays as well. No need to special-case a fallback |
| 11 |
location. |
| 12 |
|
| 13 |
glsa-check would of course want to sync the GLSA repo before running. |
Archives