From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id A7E001382C5 for ; Fri, 22 May 2020 20:01:17 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id C5F76E092A; Fri, 22 May 2020 20:01:14 +0000 (UTC) Received: from mout02.posteo.de (mout02.posteo.de [185.67.36.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 7F816E0900 for ; Fri, 22 May 2020 20:01:14 +0000 (UTC) Received: from submission (posteo.de [89.146.220.130]) by mout02.posteo.de (Postfix) with ESMTPS id A60242400FB for ; Fri, 22 May 2020 22:01:12 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.net; s=2017; t=1590177672; bh=B+pnojqd07eAze1YAkbtsWAhnNX66Z4LPJ46uqncHPU=; h=Date:From:To:Subject:From; b=rXz5W/fM2lBzeypvw5g6TiQEFboMlWZrR/0mGAjaVTAsc4L1jwIkJrYD2Qs5FwjU/ x3CC/Tg7wa6xhTfraqjNzep5aXYS19bpjQ4gojRCCnS2u5uVAsKtL+rW6M/gfw48dd mMvM1z+P5L5g8/wEqvV2cnimQGmb/B4YeU3X6TX6jihvMVSdSSnMys/UpGLwwxNsVO g11ZwWEl3ID8WIxT+3p6/bBGeHLOAf6/Ikdjk5avbq0vwscjZlRJeD5KqCHRdLMGjL XAdSAPwXCHbzZfE00TSlxFRsOOzFliidfzazUl6N+BdXXGLt11jY3ykWhU522bnAeB UUZmoZei4wDsg== Received: from customer (localhost [127.0.0.1]) by submission (posteo.de) with ESMTPSA id 49THRq3Rydz9rxK for ; Fri, 22 May 2020 22:01:11 +0200 (CEST) Date: Fri, 22 May 2020 15:01:09 -0500 From: John Helmert III To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] [RFC] Anti-spam for goose Message-ID: <20200522200109.r5st3qz66xyrjbxo@jakeGentoo.nexus.local> References: <496f9d713dc1d890d8af717c77429faac20912e1.camel@gentoo.org> <20200523072022.5eb5e4e1@katipo2.lan> <20200522125303.496d111e@storm> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="ldgvsdiqijm65uh5" Content-Disposition: inline In-Reply-To: <20200522125303.496d111e@storm> X-Archives-Salt: 1a3d91a6-dcdc-48d8-aad2-ea80cc6e310f X-Archives-Hash: bf789c13558681f456fc509b6cd68f6c --ldgvsdiqijm65uh5 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Fri, May 22, 2020 at 12:53:03PM -0700, Brian Dolbec wrote: > We cannot exclude overlays which will have cat/pkg not in the main > gentoo repo. So, we should not excludea submission that includes a few > of these. To avoid this problem, even if imperfectly, it should be possible to track what repository a given package is installed from and then check its validity based on a list of valid packages for a given overlay. --ldgvsdiqijm65uh5 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAABCAAdFiEEOTM8ebe9hc1VwC5MgSvfy5dLV4MFAl7IL4IACgkQgSvfy5dL V4NGIwf/dhs067i69g0+6BWmw41QK6hl3L0FPnsbgHSbyJkc2nj1hCOsYVV1vtcB O+nbGqs10lUtvK0UMIA8WN6g/iwUBZHPJwUpCHTUL5p++pKOyJQQ/y10/7MYTIkY OMv02p1vshdxUvdbW50+XUr4OyH59haz7+idJRcDt/4CDvbaHV95GOLoqrDyywTo HI/PMxgGacMWUdJA2xG2WrG//mtEUHiQLcgWTo9rFKpnm6tlA66PMwlxxI84IYAU YPfSM1Y3yWli0/cnmA+cAsGzScT+QLMqVWHjOM1DWWZaFeUrtpInXsXrIj8JnZJd OOXvrRbp21F0VZnOzm1+0kDtx+ljfg== =BE8e -----END PGP SIGNATURE----- --ldgvsdiqijm65uh5--