From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.gentoo.org (smtp.gentoo.org [156.56.111.197]) by robin.gentoo.org (8.13.3/8.13.3) with ESMTP id j1LEN4HM026206 for ; Mon, 21 Feb 2005 14:23:04 GMT Received: from lakermmtao10.cox.net ([68.230.240.29]) by smtp.gentoo.org with esmtp (Exim 4.42) id 1D3ESm-0007I7-0k for gentoo-dev@robin.gentoo.org; Mon, 21 Feb 2005 14:23:04 +0000 Received: from jimboy ([68.9.97.23]) by lakermmtao10.cox.net (InterMail vM.6.01.04.00 201-2131-117-20041022) with ESMTP id <20050221142303.DGEK17761.lakermmtao10.cox.net@jimboy> for ; Mon, 21 Feb 2005 09:23:03 -0500 Subject: Re: [gentoo-dev] post-LWE 2005 From: James Dio To: gentoo-dev@robin.gentoo.org In-Reply-To: <20050221001427.GK25041@time.flatmonk.org> References: <200502182229.13405.vapier@gentoo.org> <20050220221406.GI25041@time.flatmonk.org> <20050220223340.GA3552@freedom.wit.com> <20050221001427.GK25041@time.flatmonk.org> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-A2jkrT4bhR4pLfYRRIuQ" Organization: PSUnit Technologies Date: Mon, 21 Feb 2005 09:23:47 -0500 Message-Id: <1108995827.28494.33.camel@jimboy> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@gentoo.org Reply-To: gentoo-dev@gentoo.org Mime-Version: 1.0 X-Mailer: Evolution 2.0.3 X-Archives-Salt: e21dddcd-cb12-4226-9f9b-250519653a18 X-Archives-Hash: 5c3e4f13f1ed82f617c98517463830c0 --=-A2jkrT4bhR4pLfYRRIuQ Content-Type: text/plain Content-Transfer-Encoding: quoted-printable I had a great time at this, i'm no gentoo dev but from the pictures the gentoo-meet-and-greet seemed to do well, too bad i couldnt have been there. I only went up the first day of the expo and i guess things got much better the later days. On Sun, 2005-02-20 at 19:14 -0500, Aron Griffis wrote: > Brian Harring wrote: [Sun Feb 20 2005, 05:33:40PM EST] > > Err... enforcement in terms of forcing devs to sign everything? > > That is only part of the pie. Take a _hard_ look at eclasses. > > Then, take an even _harder_ look at profile bashrc's, and what they > > technically are capable of, and the fact that all installations use > > a profile (atm, there isn't a common profile that all inherit from, > > but at some point it may occur). >=20 > Oh yeah. I, um, forgot all that ;-) >=20 > > So yeah. Assuming glep33 is greenlighted (a touch up will be posted > > in the next few days of it), eclass/elib signing I'll be handling. > > Profile signing is another beast that's needed, and help would be > > appreciated (as always, clean patches/discussion of how to do it > > properly/etc is always welcome). > >=20 > > Beyond that, to save the portage devs sanity from people screaming > > "SHA1 is broken!" (it's not, just weakened), I'll be looking at > > centralizing, and making the digest code a bit more pluggable- > > basically do a handler setup, mapping a CHF to a function...=20 >=20 > Cool, thanks for the reminder/update on these issues. Regarding > profile signing... how about putting a (signed) manifest in each > directory under portage/profiles? Only stuff in the immediate > directory would be included, not the subdirs. >=20 > Regards, > Aron >=20 > -- > Aron Griffis > Gentoo Linux Developer >=20 --=-A2jkrT4bhR4pLfYRRIuQ Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (GNU/Linux) iD8DBQBCGe7zcfNkh6erAh8RAsvbAJwIhSg+Ndxwa3R+0J8VVpXUTQqjKQCbBt/N PCql8dVCdTR1Abn4mk08ULE= =H3kg -----END PGP SIGNATURE----- --=-A2jkrT4bhR4pLfYRRIuQ-- -- gentoo-dev@gentoo.org mailing list