Gentoo Archives: gentoo-user

From: Mart Raudsepp <leio@g.o>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] What happened to glsa-check?
Date: Mon, 01 Apr 2019 13:24:13
Message-Id: 849add065eb16033b1c45d7b84df13de9c44ec87.camel@gentoo.org
In Reply to: Re: [gentoo-user] What happened to glsa-check? by Bill Kenworthy
1 Ühel kenal päeval, E, 01.04.2019 kell 20:41, kirjutas Bill Kenworthy:
2 > > Are there more than one version in use? And why?
3 >
4 > I would guess:
5 >
6 > 1. that the portage version is meant for the internal use of portage
7 > (hence why its "in an odd spot") and is divorced from the user
8 > package.
9 >
10 > 2. gentoolkit has the user version as "equery f gentoolkit" shows a
11 > /usr/bin/symlink.
12
13 The portage version is used for implementing the @security set, which I
14 believe is a dynamic set that pulls in packages that
15 "glsa-check -l affected" would report too.
16 It has a glsa-check too, as it was supposed to all be unified in there
17 eventually, but last I knew, that work has stalled and so there's
18 almost the same backend code for this both in portage and gentoolkit.
19
20 Use glsa-check from gentoolkit for manual calls and know that there is
21 a @security set available (but research how exactly it works before
22 relying on it for any security safety.
23
24
25 Mart