From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id D6C6E138334 for ; Fri, 3 Jan 2020 14:40:28 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 52964E0BBA; Fri, 3 Jan 2020 14:40:26 +0000 (UTC) Received: from smtp.gentoo.org (woodpecker.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id CAE3AE0B21 for ; Fri, 3 Jan 2020 14:40:25 +0000 (UTC) Received: from [192.168.178.24] (x4d06678e.dyn.telefonica.de [77.6.103.142]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: toralf@gentoo.org) by smtp.gentoo.org (Postfix) with ESMTPSA id 7311E34DEF5 for ; Fri, 3 Jan 2020 14:40:24 +0000 (UTC) Subject: Re: [gentoo-dev] Vanilla sources To: gentoo-dev@lists.gentoo.org References: <3197490.ugo6OjCCXa@daneel.sf-tec.de> <1794534.0xJHuh4lKC@crazyhorse> <19015309.XG3PSQ8cOu@daneel.sf-tec.de> <5537134e-0412-862d-e105-94c678229b46@gentoo.org> From: =?UTF-8?Q?Toralf_F=c3=b6rster?= Autocrypt: addr=toralf@gentoo.org; prefer-encrypt=mutual; keydata= mQENBFkkk3EBCAC86NQf0FQU51jotnOidwT8Qdy8BQWN4JvjlPz9AGK9GdKW2qf4vuoVVQh6 QV67zCo9uFj7tqA8ZwSaCgcFhKxyidD7o4S9cR2uVZHRa++EbNwqyaHAUQS2yN5MMUsQvSoF jdsQ9xBVgOgkWMVmQ4ztdGGdpMgksUps42+28OiCm9JnSirD36Ij44aSBnv0HuYe6RVFhvAC TZvSWmCT7wkIvtcNSd1w+6+93yafHgy9Nq4ssQByJApkLl3mQ9EEAhOP7IzEe8ngMd7tP1J+ R9rDVy1qsKICc9yLFymT3OGwnCMsvFbQHJTZBnt8nMp1eKJf92I98IeF0UmWyFQEfcKpABEB AAG0I1RvcmFsZiBGw7Zyc3RlciA8dG9yYWxmQGdlbnRvby5vcmc+iQFUBBMBCAA+AhsDBQsJ CAcCBhUICQoLAgQWAgMBAh4BAheAFiEE9Fss6CRzaFtvbcqtIyF9p5uIj0UFAls6jZ0FCQXZ HK8ACgkQIyF9p5uIj0WulAf+Mj9txJqBpgFKrlsLBNKtpj0Mjd0/t68DsbvD60nmVJesrVMD 7xE6HbYP5MxilDMQHITzXcxmOOfMT2J94nClhtV4YXfb5aIHaWRS/U6HvZzKheR9uG7RFmTi ZvX2Iz/f5ZdDjFfGoYZ+165SAfUqgUeWkJIW4/W0uv9Q/fo5TTkc3R9+1+UcR/r0EeiCdEj6 a6O3v5WOyUzT+J4z+Q48X088Qkf9npjPgTw/GlLT2rjU+6gb58pBEXc7szfrCIU4w86T8dfW ImxA7K5SmQjCtGk6wx7cDpFoUB4SZWPO8k0TXhSEFBCuVl7TwFPng4YsJSBSxvCFyT9nZXF9 OV9Mq7kBDQRZJJNxAQgA6ItIJ88i54lwLn25NreWYwc+J1k+wg6eRgzAtJebkhOY4rMYzyVz jq9D8HXavcGdT8S1xQLUZ/5afAvppW3fJmEcgu7pmWKmSrHEhV7Lx9VGuU9EToQhvruVcYLn v453He9kVOh/SDREndKzlsfBe+5+gV7YoF0Vxqa4+f4pOet+DjoM7wgAR0BAoPjQp5BkTJ/W 7g8y6fBAb418KD5NqGV0pCdmNKTFvnY4zB4gFpwBPBUUqrzjry4prBpEFvnfp15ZjoGlow0/ 4hxALFxL+d9IyHkwyw09P8F+jlVkEPeD2zwxB9dFrSIfawEL+Je6+krhgMWRGqME9inHRRgi 4QARAQABiQE2BBgBCAAgAhsMFiEE9Fss6CRzaFtvbcqtIyF9p5uIj0UFAlkkqXQACgkQIyF9 p5uIj0UJuQf+JQa2NfoG1iPct4gFW0YkzGqGa9Aa571aQAKNrzLqgGeRgluFwlzpZct2tgr3 jXhAv3Jhu7D7ungzO04zB1w7sX4HDze5DxbUpeb6qoO7ByWyaZVhWocvDrGruVo5titY5dEv YKaDtmMgUw7zwzeaRJ0VHQatnxe6n0lqZP4KV2ZLEEcqoz1p8ftAtnXY3wLdyWGOSuPsQXcy 4Uq7uFT9ou4KBGo0Lj3zOuBHHoOslMaat78hzPdwGP/b57NS7pNMnduIwaNsAy/RCNRWNW12 DxNSLNt6JnqTPCA1/esLHzsXzflWgtbY0W7wiO+YKhObreLc4jKLoNWfHk6xetCDsg== Message-ID: <2dd351b3-0f71-4960-ffde-2f5a99ab161d@gentoo.org> Date: Fri, 3 Jan 2020 15:40:11 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.3.1 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 In-Reply-To: <5537134e-0412-862d-e105-94c678229b46@gentoo.org> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="E0ubiXWI1UrgQtjQkjLMbFekvhRZGJuNi" X-Archives-Salt: 6b3b0204-bd6d-4ac0-9fd7-8d6987a41476 X-Archives-Hash: c20815f3d213d067629a3c5f46702e7d This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --E0ubiXWI1UrgQtjQkjLMbFekvhRZGJuNi Content-Type: multipart/mixed; boundary="ixEUckEOXmYQJhl9XieQ8O2Gl7nH6X4cI"; protected-headers="v1" From: =?UTF-8?Q?Toralf_F=c3=b6rster?= To: gentoo-dev@lists.gentoo.org Message-ID: <2dd351b3-0f71-4960-ffde-2f5a99ab161d@gentoo.org> Subject: Re: [gentoo-dev] Vanilla sources References: <3197490.ugo6OjCCXa@daneel.sf-tec.de> <1794534.0xJHuh4lKC@crazyhorse> <19015309.XG3PSQ8cOu@daneel.sf-tec.de> <5537134e-0412-862d-e105-94c678229b46@gentoo.org> In-Reply-To: <5537134e-0412-862d-e105-94c678229b46@gentoo.org> --ixEUckEOXmYQJhl9XieQ8O2Gl7nH6X4cI Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 1/3/20 3:37 PM, Michael Orlitzky wrote: > The gentoo-sources aren't 100% safe either, but the exploitable scenari= o > is less common thanks to fs.protected_{hardlinks,symlinks}=3D1. But this can be easily achieved w/o installing gentoo-sources, or? --=20 Toralf PGP 23217DA7 9B888F45 --ixEUckEOXmYQJhl9XieQ8O2Gl7nH6X4cI-- --E0ubiXWI1UrgQtjQkjLMbFekvhRZGJuNi Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEE9Fss6CRzaFtvbcqtIyF9p5uIj0UFAl4PUk4ACgkQIyF9p5uI j0WN/wf7BY1VXDs0Ze+BEk8Ev0r5rzRt8QRuz508FAeU6fTNyu/ubXQhL2Nw3nh8 yHdMUv+e3op19a6x+WEaR0/e6VXB6nsis8nRUNzhclCLK8IGZ0hCbipHWGRmB5iD ma0K6c5gRBOvboc4BljSfZoHtOejZkQCV9PxxRuN6O8zrwdqRu8xYZhHdHjGl66E HiTISv0XR/8lfMjBJOlILEDRijheY2NV+lkTUTQofo5/BY/7aBRPS6ITuEtuf1iV erQj90H4ZKIA4rCJxcB6omLEID1cqrzlI2danytUf4763WBqESKv3DzyJeplDfZk 45KQjIIWFIyo8HHISlpXbry5ajCXMw== =2vmI -----END PGP SIGNATURE----- --E0ubiXWI1UrgQtjQkjLMbFekvhRZGJuNi--