Re: [gentoo-dev] RFC: security updates only? (security-1.0.ebuild)

[Karsten Schulz <kaschu@t800.ping.de>]

Am Samstag, 16. August 2003 17:56 Klavs Klavsen wrote:
> How about starting with putting the GLSA's in the tree?
> That would be step 1.

ack. Let us talk about the format! For future enhancements I suggest using an 
xml format (Marius?).

> After this, I agree it would be best to add a --security option.
>
> IMHO this should work, so emerge -u world --security (or -S - or is that
> too close to -s?) would look at all the upgrades suggested by the world
> - and then check against the glsa's and see if any of them have are
> mentioned here. The glsa's should be named after the package version
> that fixes this issue, that way it would be easy to check and upgrade if
> the currently installed is older.

after I learned from Paul, that I cannot use dynamically generated 
dependencies, I would second this suggestion.

Karsten


--
gentoo-dev@gentoo.org mailing list