From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 29192 invoked by uid 1002); 16 Aug 2003 07:28:43 -0000 Mailing-List: contact gentoo-dev-help@gentoo.org; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@gentoo.org Received: (qmail 13564 invoked from network); 16 Aug 2003 07:28:43 -0000 From: Karsten Schulz To: Marius Mauch , gentoo-dev@gentoo.org Date: Sat, 16 Aug 2003 09:28:42 +0200 User-Agent: KMail/1.5.2 References: <1060754363.3361.4.camel@amd.vsen.dk> <20030816015116.47c0c028.moixa@gmx.ch> <20030816022036.634e3dfb.genone@genone.de> In-Reply-To: <20030816022036.634e3dfb.genone@genone.de> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200308160928.42107.kaschu@t800.ping.de> Subject: Re: [gentoo-dev] security updates only? X-Archives-Salt: 1d8ae69b-c7f9-4839-9213-91bb13039dab X-Archives-Hash: c0b14844fed4e855551dfa96d0ae593e Am Samstag, 16. August 2003 02:20 schrieb Marius Mauch: > Well, I already made a comment on bug 5835 and I also sent a mail to > aliz a few weeks ago, no reply so far :( Another guy, who should be contacted seems to be Nick Jones. As one can read in the Gentoo Weekly Newsletter from January 27th, 2003 () GLSAs are going to be integrated into Portage. I think, an integration of GLSAs needs two basic steps: 1. Make tracking security announcements easier (needs fixed formats, communication channels, a.s.o) - Marius did some work here. 2. Integrate the standardized GLSA information into Portage. Step 2 is imho the critical one. It has to be done without changing too much in the Portage system. I don't believe, that it is a wise step to introduce new use flags or program options for emerge in this phase. I wish to find a way to integrate the GLSA information in the current portage system without changing too much. This minute, I wrote a mail to Daniel to get first hand information and to make sure, that any effort to bring this topic forward will go the right way. Did anyone take a look at Marius DTD? Any comments on it? Karsten -- gentoo-dev@gentoo.org mailing list