From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1JhfZT-0000E1-Nm for garchives@archives.gentoo.org; Fri, 04 Apr 2008 06:38:43 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 74048E0659; Fri, 4 Apr 2008 06:38:42 +0000 (UTC) Received: from cicero1.cybercity.dk (cicero1.cybercity.dk [212.242.40.4]) by pigeon.gentoo.org (Postfix) with ESMTP id 47721E0659 for ; Fri, 4 Apr 2008 06:38:42 +0000 (UTC) Received: from shuttle.zlin.dk (port78.ds1-abs.adsl.cybercity.dk [212.242.227.17]) by cicero1.cybercity.dk (Postfix) with ESMTP id 797F2427C90 for ; Fri, 4 Apr 2008 08:38:41 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by shuttle.zlin.dk (Postfix) with ESMTP id 0CE0C104073 for ; Fri, 4 Apr 2008 06:38:41 +0000 (UTC) X-Virus-Scanned: amavisd-new at zlin.dk Received: from shuttle.zlin.dk ([127.0.0.1]) by localhost (shuttle.zlin.dk [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 17EnHXpFYtTw for ; Fri, 4 Apr 2008 06:38:39 +0000 (UTC) Received: from BA.zlin.dk (unknown [10.0.0.4]) by shuttle.zlin.dk (Postfix) with ESMTP id 6B924104032 for ; Fri, 4 Apr 2008 06:38:39 +0000 (UTC) From: Bo =?iso-8859-1?q?=D8rsted_Andresen?= To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] Monthly Gentoo Council Reminder for April Date: Fri, 4 Apr 2008 08:38:20 +0200 User-Agent: KMail/1.9.9 References: <20080401092610.EEF7467349@smtp.gentoo.org> <20080403134633.04f68a36@snowcone> <47F4D3CF.6010204@dev.gentooexperimental.org> In-Reply-To: <47F4D3CF.6010204@dev.gentooexperimental.org> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart3230266.dqzboJW4Am"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <200804040838.28577.zlin@gentoo.org> X-Archives-Salt: 091c2d45-38f2-4f3a-b902-c1e4569b2d95 X-Archives-Hash: 077ae97d7c38da102f582cce0259ebfd --nextPart3230266.dqzboJW4Am Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Thursday 03 April 2008 14:55:43 Patrick Lauer wrote: > >> But if you don't trust anyone there is no reason why you would even > >> try to interact with Gentoo. So at some point you will have to decide > >> to arbitrarily trust a few entities, be it devs or servers or > >> cryptographic keys ... > > > > Uh huh, which is what my original reply to Mike was all about. > > > > We're way ahead of you here... > > Or so you think. > > So now that you've tried to label me as a dimwit=20 I think you managed that quite well on your own. > we're past that stage and can now return to actually discussing the set of > issues and how to handle them, ja? The point of this subthread was that limiting developers' access to only th= e=20 parts of the tree they are going to work on accomplishes nothing from a=20 security point of view and only makes things harder when they occasionally= =20 need to do tree wide changes from any other point of view. There is no=20 technical solution that can "fix" that. =2D-=20 Bo Andresen Gentoo KDE Dev --nextPart3230266.dqzboJW4Am Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.7 (GNU/Linux) iD8DBQBH9czk8/kKEzmwNNoRAmx3AKDSuRUZUIH4oCiSN1+1Xh2+IP9l4wCgnwQp 10Ja4wqXaWD5m72Zy6C1jSo= =HquN -----END PGP SIGNATURE----- --nextPart3230266.dqzboJW4Am-- -- gentoo-dev@lists.gentoo.org mailing list