From: Ciaran McCreesh <ciaran.mccreesh@blueyonder.co.uk>
To: gentoo-dev@lists.gentoo.org
Subject: Re: [gentoo-dev] Signing everything, for fun and for profit
Date: Fri, 19 May 2006 00:54:14 +0100 [thread overview]
Message-ID: <20060519005414.6d252ec3@snowdrop.home> (raw)
In-Reply-To: <20060519015329.0fdeef6a@c1358217.kevquinn.com>
On Fri, 19 May 2006 01:53:29 +0200 "Kevin F. Quinn"
<kevquinn@gentoo.org> wrote:
| obviously header.txt and skel.* aren't important. scripts isn't too
| important either, although a manifest-style file in there wouldn't be
| difficult. licenses and metadata don't have any security impact so
| there's little point there, also.
metadata has security impact.
| do profiles present a security risk? Perhaps by masking/unmasking
| fixed/vulnerable versions of packages.
Or by using a bashrc, perhaps? Profiles most definitely do have
security impact.
--
Ciaran McCreesh
Mail : ciaran dot mccreesh at blueyonder.co.uk
--
gentoo-dev@gentoo.org mailing list
next prev parent reply other threads:[~2006-05-19 0:01 UTC|newest]
Thread overview: 38+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-05-18 21:45 [gentoo-dev] Signing everything, for fun and for profit Patrick Lauer
2006-05-18 23:53 ` Kevin F. Quinn
2006-05-18 23:54 ` Ciaran McCreesh [this message]
2006-05-19 4:26 ` Robin H. Johnson
2006-05-20 2:03 ` Ned Ludd
2006-05-20 13:03 ` Patrick Lauer
2006-05-20 13:21 ` Jan Kundrát
2006-05-20 20:47 ` Robin H. Johnson
2006-05-21 10:40 ` Paul de Vrieze
2006-05-19 9:46 ` Chris Bainbridge
2006-05-19 11:20 ` Patrick Lauer
2006-05-19 14:13 ` Chris Bainbridge
2006-05-19 14:39 ` Andrew Gaffney
2006-05-19 15:17 ` Chris Bainbridge
2006-05-19 15:26 ` John Myers
2006-05-19 16:10 ` Chris Bainbridge
2006-05-19 13:30 ` Thomas Cort
2006-05-20 6:30 ` Alin Nastac
2006-05-19 15:32 ` Chris Gianelloni
2006-05-19 15:35 ` Harald van Dijk
2006-05-19 15:26 ` Patrick Lauer
2006-05-19 16:06 ` Chris Bainbridge
2006-05-19 16:50 ` Marius Mauch
2006-05-19 17:04 ` Harald van Dijk
2006-05-19 16:28 ` [gentoo-dev] " Peter
2006-05-19 16:41 ` Chris Bainbridge
2006-05-19 16:51 ` Stephen Bennett
2006-05-19 17:26 ` Marius Mauch
2006-05-20 5:44 ` Lance Albertson
2006-05-19 17:45 ` [gentoo-dev] " Marius Mauch
2006-05-20 8:13 ` Thierry Carrez
2006-05-20 13:10 ` Patrick Lauer
2006-05-20 10:54 ` [gentoo-dev] " Peter
2006-05-20 14:37 ` Chris Bainbridge
2006-05-20 14:51 ` [gentoo-dev] " Peter
2006-05-21 11:31 ` Chris Bainbridge
2006-05-21 13:49 ` Francesco Riosa
2006-05-20 23:48 ` [gentoo-dev] " Robin H. Johnson
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20060519005414.6d252ec3@snowdrop.home \
--to=ciaran.mccreesh@blueyonder.co.uk \
--cc=gentoo-dev@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox