From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1JCejo-0006wT-Ku for garchives@archives.gentoo.org; Wed, 09 Jan 2008 17:29:12 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id C9640E0439; Wed, 9 Jan 2008 17:27:55 +0000 (UTC) Received: from mail.marples.name (rsm.demon.co.uk [80.177.111.50]) by pigeon.gentoo.org (Postfix) with ESMTP id 960F7E0439 for ; Wed, 9 Jan 2008 17:27:55 +0000 (UTC) Received: from [10.73.1.31] (uberlaptop.marples.name [10.73.1.31]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.marples.name (Postfix) with ESMTP id 3AC8119010A for ; Wed, 9 Jan 2008 17:27:54 +0000 (GMT) Subject: Re: [gentoo-dev] Re: Monthly Gentoo Council Reminder for January From: Roy Marples To: gentoo-dev@lists.gentoo.org In-Reply-To: <20080109170123.7a176c0a@snowcone> References: <20080101103002.083C4652C4@smtp.gentoo.org> <20080105043233.0935d2f8@snowcone> <61307.68.54.223.178.1199541823.squirrel@www.aei-tech.com> <20080106003356.46087fef@snowcone> <20080106233412.5875626f@snowcone> <1199829889.8108.12.camel@inertia.twi-31o2.org> <20080109021735.42cd3856@snowcone> <1199846287.8108.143.camel@inertia.twi-31o2.org> <20080109024125.3bfc9479@snowcone> <20080109024724.12bd71fc@snowcone> <1199847569.7893.6.camel@inertia.twi-31o2.org> <20080109144434.0c16695e@snowcone> <37083.192.168.2.159.1199892973.squirrel@www.aei-tech.com> <20080109154450.59bf52fd@snowcone> <20080109174940.83232kfqqlgpipls@www2.mailstation.de> <20080109170123.7a176c0a@snowcone> Content-Type: text/plain Date: Wed, 09 Jan 2008 17:27:52 +0000 Message-Id: <1199899672.43325.11.camel@localhost> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org Mime-Version: 1.0 X-Mailer: Evolution 2.12.3 FreeBSD GNOME Team Port Content-Transfer-Encoding: 7bit X-Archives-Salt: abe3d9e0-f78b-4213-85b9-a5f08e3c7080 X-Archives-Hash: d3a598ce02d26a497913846d39f8ea11 On Wed, 2008-01-09 at 17:01 +0000, Ciaran McCreesh wrote: > 3.5.5 was good enough to be keyworded stable at one point. Thus, it > can't be *that* bad. So what happens if a flaw is discovered in KDE 3.5.5 that allows root access? In your world you allow mips users to trivially install now flawed and insecure software, instead of having to add to /etc/portage/package.keywords or package.unmask Yes, this breaks their tree, but it's fixable from the users end as we can rest in the knowledge that mips users have acknowledged the security flaw by adding the package to the above mentioned files. Thanks Roy -- gentoo-dev@lists.gentoo.org mailing list