[gentoo-commits] gentoo commit in users/robbat2/tree-signing-gleps: 01-distribution-process-security

["Robin H. Johnson (robbat2)" <robbat2@gentoo.org>]

robbat2     08/07/01 07:08:20

  Modified:             01-distribution-process-security
  Log:
  Clarify spots where verification has failed and we must abort.

Revision  Changes    Path
1.12                 users/robbat2/tree-signing-gleps/01-distribution-process-security

file : http://sources.gentoo.org/viewcvs.py/gentoo/users/robbat2/tree-signing-gleps/01-distribution-process-security?rev=1.12&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo/users/robbat2/tree-signing-gleps/01-distribution-process-security?rev=1.12&content-type=text/plain
diff : http://sources.gentoo.org/viewcvs.py/gentoo/users/robbat2/tree-signing-gleps/01-distribution-process-security?r1=1.11&r2=1.12

Index: 01-distribution-process-security
===================================================================
RCS file: /var/cvsroot/gentoo/users/robbat2/tree-signing-gleps/01-distribution-process-security,v
retrieving revision 1.11
retrieving revision 1.12
diff -p -w -b -B -u -u -r1.11 -r1.12
--- 01-distribution-process-security	1 Jul 2008 07:06:53 -0000	1.11
+++ 01-distribution-process-security	1 Jul 2008 07:08:20 -0000	1.12
@@ -1,7 +1,7 @@
 GLEP: xx+1
 Title: Security of distribution of Gentoo software - Infrastructure to User distribution - MetaManifest
-Version: $Revision: 1.11 $
-Last-Modified: $Date: 2008/07/01 07:06:53 $
+Version: $Revision: 1.12 $
+Last-Modified: $Date: 2008/07/01 07:08:20 $
 Author: Robin Hugh Johnson <robbat2@gentoo.org>, 
 Status: Draft
 Type: Standards Track
@@ -139,7 +139,7 @@ filetypes may be ignored on missing is d
 1. Check the GnuPG signature on the MetaManifest against the keyring of
    automated Gentoo keys. See [GLEPxx+3] for full details regarding
    verification of GnuPG signatures. 
-1.1. Do not continue if the signature check fails.
+1.1. Abort if the signature check fails.
 
 2. For a verification of the tree following an rsync:
 2.1. Build a set 'ALL' of every file covered by the rsync. (exclude
@@ -151,7 +151,7 @@ filetypes may be ignored on missing is d
      COVERED sets.
 2.4. For each file in the UNCOVERED set, assign a Manifest2 filetype.
 2.5. If the filetype for any file in the UNCOVERED set requires a halt
-     on error, do so.
+     on error, abort and display a suitable error.
 2.6. Completed verification
 
 3. If checking at the installation of a package:



-- 
gentoo-commits@lists.gentoo.org mailing list