From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 5914 invoked by uid 1002); 15 Aug 2003 07:29:22 -0000 Mailing-List: contact gentoo-dev-help@gentoo.org; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@gentoo.org Received: (qmail 5588 invoked from network); 15 Aug 2003 07:29:22 -0000 Date: Fri, 15 Aug 2003 09:29:15 +0200 From: Marius Mauch To: gentoo-dev@gentoo.org Message-Id: <20030815092915.4d2278ca.genone@genone.de> In-Reply-To: <20030815090701.00005cf3.moixa@gmx.ch> References: <1060754363.3361.4.camel@amd.vsen.dk> <20030815073133.30d97b62.genone@genone.de> <20030815090701.00005cf3.moixa@gmx.ch> X-Mailer: Sylpheed version 0.9.4claws (GTK+ 1.2.10; i686-pc-linux-gnu) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Subject: Re: [gentoo-dev] security updates only? X-Archives-Salt: 70b82947-161c-4bc8-9dbb-86656f4fc6ef X-Archives-Hash: e852d0aee2d780fc8f2adfe6bf27c3ae On Fri, 15 Aug 2003 09:07:01 +0200 Tobias Sager wrote: > On 15.08.03 07:31 Marius Mauch wrote: > > > I wrote a small prototype for that, but it needs support from the > > GLSA guys as it is very difficult to get the GLSA from a script as > > they are only published at different mailing lists and the forums. > > Another issue is that my script works with XML versions of GLSA, so > > someone needs to convert the plaintext versions. > > Code, DTD and sample XML GLSA are available at > > http://gentoo.devel-net.org/glsa/ . > > Very nice. I like the idea of automagical security updates. > > It should be easy (and I could do it in .sh or .pl, but not .py; shall > I?) to write a script which converts the plain, unmodified GLSAs to > your parsable XML format. Yes, that's not the main problem. The major issue is that there is no HTTP or FTP server at the moment where I can grab the GLSA and I somehow don't like the idea of subscribing a script to mailing lists and posting the result on some unoffical server. Parsing the forum announcements is IMO not an option at all. I sent a mail to aliz about it but didn't get a reply yet :( > Then maybe a GLSA-portage category would be nice? (Or does this exist > already?) AFAIK portage knows nothing about GLSA stuff. It would be nice if the GLSA were distributed on emerge sync. Marius -- gentoo-dev@gentoo.org mailing list