diff options
Diffstat (limited to 'zarb-ml/mageia-dev/20100927/000290.html')
| -rw-r--r-- | zarb-ml/mageia-dev/20100927/000290.html | 123 |
1 files changed, 123 insertions, 0 deletions
diff --git a/zarb-ml/mageia-dev/20100927/000290.html b/zarb-ml/mageia-dev/20100927/000290.html new file mode 100644 index 000000000..099f35363 --- /dev/null +++ b/zarb-ml/mageia-dev/20100927/000290.html @@ -0,0 +1,123 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> +<HTML> + <HEAD> + <TITLE> [Mageia-dev] Will this work for a build system? + </TITLE> + <LINK REL="Index" HREF="index.html" > + <LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Will%20this%20work%20for%20a%20build%20system%3F&In-Reply-To=%3C4CA05FA5.1080508%40colin.guthr.ie%3E"> + <META NAME="robots" CONTENT="index,nofollow"> + <META http-equiv="Content-Type" content="text/html; charset=us-ascii"> + <LINK REL="Previous" HREF="000285.html"> + <LINK REL="Next" HREF="000300.html"> + </HEAD> + <BODY BGCOLOR="#ffffff"> + <H1>[Mageia-dev] Will this work for a build system?</H1> + <B>Colin Guthrie</B> + <A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Will%20this%20work%20for%20a%20build%20system%3F&In-Reply-To=%3C4CA05FA5.1080508%40colin.guthr.ie%3E" + TITLE="[Mageia-dev] Will this work for a build system?">mageia at colin.guthr.ie + </A><BR> + <I>Mon Sep 27 11:11:01 CEST 2010</I> + <P><UL> + <LI>Previous message: <A HREF="000285.html">[Mageia-dev] Will this work for a build system? +</A></li> + <LI>Next message: <A HREF="000300.html">[Mageia-dev] Better saying it. +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#290">[ date ]</a> + <a href="thread.html#290">[ thread ]</a> + <a href="subject.html#290">[ subject ]</a> + <a href="author.html#290">[ author ]</a> + </LI> + </UL> + <HR> +<!--beginarticle--> +<PRE>'Twas brillig, and P. Christeas at 27/09/10 08:00 did gyre and gimble: +><i> On Sunday 26 September 2010, herman wrote: +</I>>><i> BTW, I once calculated (test plus extrapolation) how long it would take +</I>>><i> to rebuild every package in Mandriva on a low end 2 GHz Celeron server +</I>>><i> that I had available and it came to about 80 days. +</I>><i> +</I>><i> I, frankly, don't care. +</I>><i> +</I>><i> See, that would be the final packaging for a release. In the meanwhile, we +</I>><i> could exchange our Cauldron packages in a less-secure constellation of build +</I>><i> machines. If we admit that cauldron rpms are just built by the packagers (but +</I>><i> also signed etc.), then we take a lot of load off the "release" build cluster. +</I> +I really don't like this. It really does not fit in with things. This +would mean that a release would actually require a full rebuild for a +start (this doesn't happen currently). + +And it also assumes that any security compromised package build by a +compromised cauldron user in no way impacts the package repository that +will ultimately be used to build the distro itself. + +Personally I want my cauldron packages to be just as secure as my +release packages. After all I visit web pages, enter online banking +details, connect to VPN and SSH etc. etc. all via cauldron install. + +I really do not thing that any security model should differentiate +between devel & release from a "required security level" perspective. + +Col + + + +-- + +Colin Guthrie +mageia(at)colin.guthr.ie +<A HREF="http://colin.guthr.ie/">http://colin.guthr.ie/</A> + +Day Job: + Tribalogic Limited [<A HREF="http://www.tribalogic.net/">http://www.tribalogic.net/</A>] +Open Source: + Mageia Contributor [<A HREF="http://www.mageia.org/">http://www.mageia.org/</A>] + PulseAudio Hacker [<A HREF="http://www.pulseaudio.org/">http://www.pulseaudio.org/</A>] + Trac Hacker [<A HREF="http://trac.edgewall.org/">http://trac.edgewall.org/</A>] +</PRE> + + + + + + + + + + + + + + + + + + + + + + + + + +<!--endarticle--> + <HR> + <P><UL> + <!--threads--> + <LI>Previous message: <A HREF="000285.html">[Mageia-dev] Will this work for a build system? +</A></li> + <LI>Next message: <A HREF="000300.html">[Mageia-dev] Better saying it. +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#290">[ date ]</a> + <a href="thread.html#290">[ thread ]</a> + <a href="subject.html#290">[ subject ]</a> + <a href="author.html#290">[ author ]</a> + </LI> + </UL> + +<hr> +<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev +mailing list</a><br> +</body></html> |