Re: [gentoo-dev] security updates only?

[Marius Mauch <genone@genone.de>]

On Fri, 15 Aug 2003 09:07:01 +0200
Tobias Sager <moixa@gmx.ch> wrote:

> On 15.08.03 07:31 Marius Mauch wrote:
> 
> > I wrote a small prototype for that, but it needs support from the
> > GLSA guys as it is very difficult to get the GLSA from a script as
> > they are only published at different mailing lists and the forums.
> > Another issue is that my script works with XML versions of GLSA, so
> > someone needs to convert the plaintext versions.
> > Code, DTD and sample XML GLSA are available at
> > http://gentoo.devel-net.org/glsa/ .
> 
> Very nice. I like the idea of automagical security updates.
>
> It should be easy (and I could do it in .sh or .pl, but not .py; shall
> I?) to write a script which converts the plain, unmodified GLSAs to
> your parsable XML format.

Yes, that's not the main problem. The major issue is that there is no
HTTP or FTP server at the moment where I can grab the GLSA and I somehow
don't like the idea of subscribing a script to mailing lists and posting
the result on some unoffical server. Parsing the forum announcements is
IMO not an option at all.
I sent a mail to aliz about it but didn't get a reply yet :(

> Then maybe a GLSA-portage category would be nice? (Or does this exist
> already?)

AFAIK portage knows nothing about GLSA stuff. It would be nice if the
GLSA were distributed on emerge sync.

Marius

--
gentoo-dev@gentoo.org mailing list