Re: Re: ebuilds in XML

--===============46837370700480863==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature";
	boundary="=-X2TO4Qu1xQkbACOskZ3S"


--=-X2TO4Qu1xQkbACOskZ3S
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Mon, 2003-06-30 at 07:23, Jon Nall wrote:
> - the 'hook' for security updates is in my mind completely separate from
> portage. just a little daemon listening on a port should suffice, right?
> it can spawn whatever it likes when something tells it to. the other
> option is to add a server component to portage and let the portage
> engine be a daemon. i've considered this path before, but it would
> require pushing a good amount of the functionality of emerge into the
> portage module due to performance reasons.

Security for daemonizing or for ebuilds? =20

Having an external app that emerge could call to validate a build & dist
files would work alright as long as we lay out all the return vals cause
it would be more than just pass/fail. Based on the sigs and # of sigs
there could be at minim 3 results. fail, ok, good  or something like
that :P. I would like to see this integrated so that there was a flag
for the "security level". I mentioned on IRC that i would be fine with
starting to work on something external to portage to do this
verification. Also there's the dealing with pulling down a local set of
keys automagically which needs to be handled in emerge sync.. At least
the notification has to be there if you guys don't want it to
auto-update.=20

P.S. whats up with irc.freenode.net ?

--=-X2TO4Qu1xQkbACOskZ3S
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQA/AIND4rKvBkfUvb0RAl4bAJ9l9429myWv4X3zEC31Yo2BK6skPQCdHX6S
L1QRS3ep6XkJTZ2qVV33L2E=
=U/Hq
-----END PGP SIGNATURE-----

--=-X2TO4Qu1xQkbACOskZ3S--


--===============46837370700480863==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Zynot-pkgmgr mailing list
[email protected]
http://lists.zynot.org/mailman/listinfo/zynot-pkgmgr

--===============46837370700480863==--