| 1 |
Whoohoo! :-) |
| 2 |
|
| 3 |
Thanks Kurt, |
| 4 |
- Chris |
| 5 |
|
| 6 |
|
| 7 |
On Fri, Nov 12, 2004 at 04:27:49PM +0000, Kurt Lieber wrote: |
| 8 |
> On Fri, Nov 12, 2004 at 10:47:11AM -0500 or thereabouts, Chris Frey wrote: |
| 9 |
> > I'm just curious if there is any plan to install Peter's patch. I haven't |
| 10 |
> > heard any explanations of why it won't work, since it only signs a checksum |
| 11 |
> > of the tarball, so shouldn't have any load or bandwidth drawbacks. |
| 12 |
> |
| 13 |
> This has already been discussed on the list. I made the original |
| 14 |
> suggestion regarding singning snapshots in the first place, so of course |
| 15 |
> I'm willing to implement the patch. |
| 16 |
> |
| 17 |
> I have the script on the main server right now -- it's just not in |
| 18 |
> production yet. I've got one or two small issues to iron out and then |
| 19 |
> it will be rolled out. At this point, nobody has written code to modify |
| 20 |
> emerge-webrsync to support the signed snapshots. Until that happens, |
| 21 |
> checking will be left to the user to perform manually. |
| 22 |
> |
| 23 |
> And, to answer the next question: Real Soon Now. |
| 24 |
> |
| 25 |
> --kurt |
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
-- |
| 30 |
gentoo-security@g.o mailing list |
Archives