Re: [gentoo-dev] security updates only?

[Karsten Schulz <kaschu@t800.ping.de>]

Am Samstag, 16. August 2003 02:20 schrieb Marius Mauch:
> Well, I already made a comment on bug 5835 and I also sent a mail to
> aliz a few weeks ago, no reply so far :(

Another guy, who should be contacted seems to be Nick Jones.
As one can read in the Gentoo Weekly Newsletter from January 27th, 2003
(<http://www.gentoo.org/news/en/gwn/20030127-newsletter.xml>)
GLSAs are going to be integrated into Portage.

I think, an integration of GLSAs needs two basic steps:
1. Make tracking security announcements easier (needs fixed formats, 
communication channels, a.s.o) - Marius did some work here.

2. Integrate the standardized GLSA information into Portage.

Step 2 is imho the critical one. It has to be done without changing too much 
in the Portage system. I don't believe, that it is a wise step to introduce 
new use flags or program options for emerge in this phase.
I wish to find a way to integrate the GLSA information in the current portage 
system without changing too much.

This minute, I wrote a mail to Daniel to get first hand information and to 
make sure, that any effort to bring this topic forward will go the right way.

Did anyone take a look at Marius DTD? Any comments on it?

Karsten








--
gentoo-dev@gentoo.org mailing list