diff options
Diffstat (limited to 'zarb-ml/mageia-dev/20100927/000296.html')
| -rw-r--r-- | zarb-ml/mageia-dev/20100927/000296.html | 88 |
1 files changed, 88 insertions, 0 deletions
diff --git a/zarb-ml/mageia-dev/20100927/000296.html b/zarb-ml/mageia-dev/20100927/000296.html new file mode 100644 index 000000000..ab751f7b4 --- /dev/null +++ b/zarb-ml/mageia-dev/20100927/000296.html @@ -0,0 +1,88 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> +<HTML> + <HEAD> + <TITLE> [Mageia-dev] Will this work for a build system? + </TITLE> + <LINK REL="Index" HREF="index.html" > + <LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Will%20this%20work%20for%20a%20build%20system%3F&In-Reply-To=%3C201009271307.05685.p_christ%40hol.gr%3E"> + <META NAME="robots" CONTENT="index,nofollow"> + <META http-equiv="Content-Type" content="text/html; charset=us-ascii"> + <LINK REL="Previous" HREF="000295.html"> + <LINK REL="Next" HREF="000299.html"> + </HEAD> + <BODY BGCOLOR="#ffffff"> + <H1>[Mageia-dev] Will this work for a build system?</H1> + <B>P. Christeas</B> + <A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Will%20this%20work%20for%20a%20build%20system%3F&In-Reply-To=%3C201009271307.05685.p_christ%40hol.gr%3E" + TITLE="[Mageia-dev] Will this work for a build system?">p_christ at hol.gr + </A><BR> + <I>Mon Sep 27 12:07:03 CEST 2010</I> + <P><UL> + <LI>Previous message: <A HREF="000295.html">[Mageia-dev] Will this work for a build system? +</A></li> + <LI>Next message: <A HREF="000299.html">[Mageia-dev] Will this work for a build system? +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#296">[ date ]</a> + <a href="thread.html#296">[ thread ]</a> + <a href="subject.html#296">[ subject ]</a> + <a href="author.html#296">[ author ]</a> + </LI> + </UL> + <HR> +<!--beginarticle--> +<PRE>On Monday 27 September 2010, Giuseppe Ghibò wrote: +><i> The secure +</I>><i> one would download the tarball automatically from the original +</I>><i> repositories: +</I>><i> +</I>><i> e.g.: suppose there is a package SPEC file containing: +</I>><i> +</I>><i> Source: <A HREF="http://blabla.com/openssh-5.5-1.tar.xz">http://blabla.com/openssh-5.5-1.tar.xz</A> +</I>><i> Source1: <A HREF="http://blabla.com/openssh-5.5.1.tar.sig">http://blabla.com/openssh-5.5.1.tar.sig</A> +</I>><i> +</I>><i> An automatic system would try to retrieve from the <A HREF="http://blabla.com/">http://blabla.com/</A> site +</I>><i> the packages +</I>><i> <A HREF="http://blabla.com/openssh-5.5-1.tar.xz,">http://blabla.com/openssh-5.5-1.tar.xz,</A> or if not exists +</I>><i> <A HREF="http://blabla.com/openssh-5.5-1.tar.bz2">http://blabla.com/openssh-5.5-1.tar.bz2</A> or +</I>><i> <A HREF="http://blabla.com/openssh-5.5-1.tar.gz">http://blabla.com/openssh-5.5-1.tar.gz</A> or +</I>><i> <A HREF="http://blabla.com/openssh-5.5-1.tar.">http://blabla.com/openssh-5.5-1.tar.</A> Then would retrieve the signature +</I>><i> <A HREF="http://blabla.com/openssh-5.5.1.tar.sig">http://blabla.com/openssh-5.5.1.tar.sig</A> and would check with the one from +</I>><i> the Database of signatures which has been already populated on the secure +</I>><i> system. If the signatures checking would match, then tarball would be +</I>><i> uploaded to the "secure" system svn and used for building instead of the +</I>><i> one from the contributor/package maintainer. +</I>><i> +</I>><i> [Of course the system would fail if the package maintainer has downloaded +</I>><i> the source tarball from the svn and not from a canonical repository, and to +</I>><i> be further secure this system would require also signing of Patches]. +</I>><i> +</I> +... or just use git, which ensures the source code integrity. + + +-- +Say NO to spam and viruses. Stop using Microsoft Windows! +</PRE> + + +<!--endarticle--> + <HR> + <P><UL> + <!--threads--> + <LI>Previous message: <A HREF="000295.html">[Mageia-dev] Will this work for a build system? +</A></li> + <LI>Next message: <A HREF="000299.html">[Mageia-dev] Will this work for a build system? +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#296">[ date ]</a> + <a href="thread.html#296">[ thread ]</a> + <a href="subject.html#296">[ subject ]</a> + <a href="author.html#296">[ author ]</a> + </LI> + </UL> + +<hr> +<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev +mailing list</a><br> +</body></html> |